How to make sure your browser extensions are secure

Browser extensions can be very useful, it covers gaps in functionality, adds new features and options, and generally makes your life more comfortable on the net.

At the same time, they can pose serious security risks; many require you to view everything you see online, some change key settings in your browser, and can work and communicate with developers (or advertisers or other parties). in the background without your knowledge.

We don’t want to discourage you from using your favorite extensions, but you should definitely make sure that the ones you’re using are safe.

First, all the usual rules apply: Keep your computer and its applications up to date. Perform regular malware scans. This will go a long way in minimizing the risk posed by potentially long expansions. Beyond these tips, here’s how to audit.

See the threats early

Identifying a bad browser extension is not an exact science, but there are some general guidelines to follow. Always do your research before installing an add-on – check other users’ opinions and online reviews, if any. See when the extension was last updated, as tools that are actually old and outdated may be more secure than newer ones, and certainly look for instructions indicating that the add-on has changed manually recently.

It’s important to make sure the extensions you install come from official repositories, e.g. Chrome Web Store or Firefox browser add-ons portal. The software you are installing gives you a level of certainty that it is legitimate and safe, so go with the extensions you will find elsewhere.

We’re not saying that new add-ons without a review from unknown developers are bad, but you should be careful with that. Can you find something about the company or the person behind the tool? Is it clear how the extension is funded, or is it a passion project? What clues can you get, for example, from the website linked to the extension list page?

Double-check the permissions required by an add-on. In some cases (Firefox), they will be listed on the extension page of the website; in others (Chrome), you won’t see them until the software is installed. Wait for permission requests that seem reasonable or rare considering what the add-on should do.

How to check Chrome extensions

To see the extensions you have installed in Chrome, click on the three dots (top right) and select More tools and Extensions. Click Details to reveal more information about it next to any extensions, including the permissions of the browser to run and how much disk space it takes up.