Higgsfield's new tool lets you "steal" and remake web images

Higgsfield AI just launched a new tool called "Steal" that lets users literally hover over any image on the web and recreate it with their own face.

The startup, which previously made waves with its ultra-realistic "Soul" image generator and Veo 3 video integration, is ditching the traditional prompt box entirely.

Hover, click, and take the look

STEAL stands for Style Trace Extraction & Adaptive Layer. Instead of saving an image, opening an AI app, and painstakingly writing prompts to match lighting and pose, the tool does it directly in the browser.

Users hover over any photo on the internet, hit "Recreate," and the AI extracts the exact pose, lighting, and wardrobe, then swaps in the user's likeness using a feature called Soul ID.

Higgsfield promoted the launch aggressively on X, proclaiming that when they say recreate anything from anywhere on the web, they mean anything. One creator testing the tool noted it copies any look in complete and full detail.

The security and copyright red flags

While the tech looks seamless in demos, how you install it has already raised serious alarms.

As reported by BGR, the extension isn't available in the official Chrome Web Store. Instead, users have to manually download it from Higgsfield's website and enable Chrome's "Developer mode" to load it unpacked.

That installation path sidesteps Google's standard security checks. It leaves users blind to what permissions the extension demands, though it inevitably has visibility into what sites you visit while active.

Layer that on top of rampant copyright concerns and watermark-free deepfake potential, and backlash was immediate.

Why it matters

Higgsfield's latest move is a masterclass in provocative marketing, but it sits on very thin ice.

For creators and social media power users, the value is obvious: zero prompt engineering required to replicate trending aesthetics, studio lighting, or complex poses. It lowers the barrier to high-end personal branding to a single click.

However, we believe the risks far outweigh the novelty right now. Bypassing Chrome's Web Store to force manual developer-mode installation is a massive security compromise. You simply shouldn't grant unverified extensions access to your everyday browser environment.

Industry-wide, this highlights how far some AI challenger brands are willing to go to steal attention from giants like OpenAI and Google. By blatantly weaponizing the idea of copying other people's creative work, Higgsfield might win quick virality, but it's practically begging for regulatory scrutiny and platform bans.