Browser Extension Security
Browser extensions can read everything you do online — passwords, banking, emails, private messages. Most people have extensions they don't need from developers they don't trust. Time for an audit.
Our Top 4 VPN Picks
Chosen after real-world testing across speed, privacy, and streaming. Each ranking is independent — we buy every VPN at retail and test it ourselves.
Fastest speeds, audited no-logs, 6000+ servers
Unlimited devices, CleanWeb blocker, 100+ countries
Swiss privacy laws, open-source, free tier
Lifetime plans, 10 devices, ad blocker
We earn a commission when you click “Get” buttons, at no extra cost to you. Read our affiliate disclosure
Extensions We Trust
uBlock Origin
High TrustAd/tracker blocking
Open-source, widely audited, by a trusted solo developer (Raymond Hill). The gold standard.
Bitwarden
High TrustPassword auto-fill
Open-source, audited, from a reputable company. Only accesses password fields.
HTTPS Everywhere
High TrustForce HTTPS
By EFF. Now redundant in most browsers but not harmful.
Privacy Badger
High TrustTracker blocking
By EFF. Open-source, learns tracking patterns automatically.
NordVPN / FastestVPN extension
High TrustVPN proxy + WebRTC leak prevention
From reputable VPN providers. Also blocks WebRTC leaks.
Extensions to Be Cautious About
Free VPN extensions
High RiskMost free VPN extensions log and sell your browsing data. They have full access to all your web traffic.
Screenshot/screen recording
High RiskCan capture sensitive content including passwords, banking info, and private messages.
Coupon finders (Honey, etc.)
Medium RiskTrack all your shopping behavior. Inject affiliate codes. May modify web pages.
Grammar checkers
Medium RiskRead everything you type — emails, passwords, private messages. Only use trusted ones (Grammarly is established but reads all content).
Theme/customization extensions
Medium RiskOften request unnecessary permissions. Many have been caught injecting ads or tracking.
Unknown productivity tools
High RiskSmall developer, unclear privacy policy, broad permissions. High risk of data collection or malware.
Extension Audit Checklist (5 Minutes)
- 1. Open your extension manager (chrome://extensions or about:addons)
- 2. For each extension, ask: "Have I used this in the last month?" — Remove if no
- 3. Check permissions — does it need "Read and change all data"? Only essential extensions should have this
- 4. Check developer — is it a known company or individual? Unknown = higher risk
- 5. Check last update date — extensions not updated in 1+ year may be abandoned
- 6. Target: 3-5 extensions maximum (password manager, ad blocker, VPN)
Frequently asked
Frequently Asked Questions
Keep reading