diff --git a/CMakeLists.txt b/CMakeLists.txt
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -30,6 +30,7 @@
     Notifications
     Runner
     Activities
+    FileMetaData
 )
 
 add_definitions(-DQT_NO_NARROWING_CONVERSIONS_IN_CONNECT)
diff --git a/extension/_locales/en/messages.json b/extension/_locales/en/messages.json
--- a/extension/_locales/en/messages.json
+++ b/extension/_locales/en/messages.json
@@ -63,6 +63,13 @@
         "description": "Title for Downloads plugin",
         "message": "Show downloads in notification area"
     },
+    "options_plugin_downloads_saveOriginUrl": {
+        "description": "Option for saving download source URL in file metadata",
+        "message": "Save URL a file was downloaded from in the file's attributes"
+    },
+    "options_plugin_downloads_saveOriginUrl_description": {
+        "message": "Note: The URL may contain sensitive information that could be disclosed when the file is accessible by or shared with others"
+    },
 
     "options_plugin_tabsrunner_title": {
         "description": "Title for Browser Tabs KRunner plugin",
diff --git a/extension/constants.js b/extension/constants.js
--- a/extension/constants.js
+++ b/extension/constants.js
@@ -27,7 +27,8 @@
         enabled: true
     },
     downloads: {
-        enabled: true
+        enabled: true,
+        saveOriginUrl: false
     },
     tabsrunner: {
         enabled: true
diff --git a/extension/extension-downloads.js b/extension/extension-downloads.js
--- a/extension/extension-downloads.js
+++ b/extension/extension-downloads.js
@@ -62,7 +62,7 @@
 
 // only forward certain download properties back to our host
 var whitelistedDownloadProperties = [
-    "id", "url", "finalUrl", "filename", "mime", "startTime", "estimatedEndTime", "totalBytes", "bytesReceived", "state", "error", /*"canResume"*/, "paused"
+    "id", "url", "finalUrl", "filename", "mime", "startTime", "estimatedEndTime", "totalBytes", "bytesReceived", "state", "error", /*"canResume"*/, "paused", "incognito"
 ];
 
 function createDownload(download) {
diff --git a/extension/options.html b/extension/options.html
--- a/extension/options.html
+++ b/extension/options.html
@@ -60,6 +60,12 @@
             </label>
             <p></p>
         </li>
+        <li class="dependent" data-requires-extension="downloads" data-requires-extension-version-minimum="2">
+            <label>
+                <input type="checkbox" data-extension="downloads" data-settings-key="saveOriginUrl" data-depends-extension="downloads" data-depends-settings-key="enabled" data-depends-settings-value="TRUE"> <span data-i18n="options_plugin_downloads_saveOriginUrl">I18N</span>
+            </label>
+            <p data-i18n="options_plugin_downloads_saveOriginUrl_description" data-i18n-html="true">I18N</p>
+        </li>
         <li>
             <label>
                 <input type="checkbox" data-extension="tabsrunner" data-settings-key="enabled"> <span data-i18n="options_plugin_tabsrunner_title">I18N</span>
diff --git a/host/CMakeLists.txt b/host/CMakeLists.txt
--- a/host/CMakeLists.txt
+++ b/host/CMakeLists.txt
@@ -27,6 +27,7 @@
     KF5::Crash
     KF5::I18n
     KF5::KIOCore
+    KF5::FileMetaData
 )
 
 install(TARGETS plasma-browser-integration-host ${KDE_INSTALL_TARGETS_DEFAULT_ARGS})
diff --git a/host/downloadjob.h b/host/downloadjob.h
--- a/host/downloadjob.h
+++ b/host/downloadjob.h
@@ -72,4 +72,7 @@
 
     QString m_mimeType;
 
+    // In doubt, assume incognito
+    bool m_incognito = true;
+
 };
diff --git a/host/downloadjob.cpp b/host/downloadjob.cpp
--- a/host/downloadjob.cpp
+++ b/host/downloadjob.cpp
@@ -27,6 +27,7 @@
 #include <QDateTime>
 #include <QJsonObject>
 
+#include <KFileMetaData/UserMetaData>
 #include <KLocalizedString>
 
 #include <KIO/Global>
@@ -114,6 +115,11 @@
         m_mimeType = it->toString();
     }
 
+    it = payload.constFind(QStringLiteral("incognito"));
+    if (it != end) {
+        m_incognito = it->toBool();
+    }
+
     it = payload.constFind(QStringLiteral("totalBytes"));
     if (it != end) {
         const qlonglong totalAmount = it->toDouble();
@@ -230,6 +236,25 @@
         if (state == QLatin1String("complete")) {
             setError(KJob::NoError);
             setProcessedAmount(KJob::Files, 1);
+
+            // Write origin url into extended file attributes
+            if (!m_incognito
+                // Blob URLs are dynamically created through JavaScript and cannot be accessed from the outside
+                && m_finalUrl.scheme() != QLatin1String("blob")) {
+
+                const QJsonObject settings = Settings::self().settingsForPlugin(QStringLiteral("downloads"));
+
+                const bool saveOriginUrl = settings.value(QStringLiteral("saveOriginUrl")).toBool();
+                if (saveOriginUrl) {
+                    KFileMetaData::UserMetaData md(m_fileName);
+
+                    QUrl url = m_finalUrl;
+                    url.setPassword(QString());
+
+                    md.setOriginUrl(url);
+                }
+            }
+
             emitResult();
             return;
         }
diff --git a/host/downloadplugin.cpp b/host/downloadplugin.cpp
--- a/host/downloadplugin.cpp
+++ b/host/downloadplugin.cpp
@@ -30,7 +30,7 @@
 #include <KJobTrackerInterface>
 
 DownloadPlugin::DownloadPlugin(QObject* parent) :
-    AbstractBrowserPlugin(QStringLiteral("downloads"), 1, parent)
+    AbstractBrowserPlugin(QStringLiteral("downloads"), 2, parent)
 {
 }