Audit and lock down the extensions in every browser you use

This guide walks you through every browser on your computers and phone, removing the extensions you don't need and limiting what the rest can see.

Why bother

Many extensions hold the permission Chrome describes as "Read and change all your data on all websites", which includes your bank and email. Extensions update silently, so if one is sold or its developer is phished, the next update can come from someone else. In February 2026 QuickLens changed owner and two weeks later began loading code from a remote server. In December 2024 a phished Cyberhaven developer account pushed an update that stole login cookies. Users weren't asked either time. Fewer extensions with less reach means less exposed by any one sale or hack.

Before you start

• Time: about 5 minutes per browser.
• What you need: every computer, phone and tablet you browse on, and a list of the browsers on each, including ones you rarely open.
• Checked on: vendor help pages in October 2026 for current Chrome, Edge and Firefox (desktop and Android), Safari on macOS 12 to macOS 27, iOS and iPadOS 18 and later, and Samsung Internet. Labels can shift between versions.
• Work devices: if your employer manages the browser, ask IT before removing anything they installed.

Steps

1 Make a list of every browser and profile

1. On each computer, look at the apps you have installed: Chrome, Edge, Firefox, Safari, Brave, Opera and so on.
2. In Chrome and Edge, click your profile picture at the top right. Each profile has its own extensions.
3. On your phone, note which browsers you have. Chrome on iPhone and Android phones does not run extensions, so you can skip it. Firefox for Android, Microsoft Edge for Android, Samsung Internet and Safari on iPhone and iPad all can.

You should now have a short list, such as "laptop: Chrome (2 profiles), Firefox; phone: Safari".

2 Chrome on a computer: run Safety Check and remove what you don't need

1. Click the three dots ⋮ at the top right, then Settings > Privacy and security. Under Safety Check, click Go to Safety Check.
2. If it lists extensions under potentially harmful extensions, or extensions that are no longer in the Chrome Web Store, click Review and remove them. An extension flagged as malware is turned off automatically but is not deleted until you remove it.
3. Now open the full list. Type this into the address bar and press Enter:

chrome://extensions

1. For each extension, ask: have I used this in the last month, and do I know who makes it? If not, click Remove, then Remove again to confirm. Question coupon finders, dark-mode switchers, screenshot tools, PDF converters and "free VPN" extensions first: they often have access to every site.
2. If you only want to test whether you'd miss one, flip its toggle off instead. It stops running but stays installed.

You should see a shorter list, with paused ones greyed out.