Next time you open your favorite browser, ask yourself: Who can see what I’m doing? If that question gives you pause, it’s probably time to review your browser extensions. After all, you probably use a browser for tasks that involve personal and private information, like online banking, shopping, or submitting your tax forms. Here’s the bad news: It’s incredibly easy to leak your private information via shady browser extensions, and they’re everywhere.
In January 2026, cybersecurity firm LayerX uncovered 17 malicious extensions on Firefox, Chrome, and Edge. Before that, free proxy and VPN extensions were found to be stealing AI chat logs from users in December. These extensions were installed hundreds of thousands—to even millions—of times. That’s a lot of covert surveillance! This isn’t a new problem, either. Malicious browser extensions have been an issue for years.
Below, I’ll explain how criminals extract personal data using browser extensions, how to identify legitimate extensions, and how to manage the ones currently on your browser.
Wait, Browser Extensions Are Dangerous?
Browser add-ons and extensions are apps that run in the background while you browse. You probably downloaded them because they perform useful tasks to help you navigate the web, but depending on the browser you use and the permissions you’ve given to the extension, the company that owns the app can potentially see everything you see on a website. This can include the information you put in web forms, like your name, social security number, or bank account details. The information can then be packaged and sold on the dark web or used for blackmail or social engineering scams.
The tricky thing is that malicious extensions don’t always start out that way. Security researchers have noted many instances of good apps going bad. This could be from hackers hijacking an old extension or because the program simply remained dormant before being activated.
Which Browser Extensions Are Safe to Keep?
I recommend only installing apps for services you already use from companies you trust. For example, Gmail has a browser extension. Privacy and security apps like authenticators, password managers, and VPNs are typically available as browser extensions. There are also helpful extensions with AI tie-ins, like Grammarly, a grammar and spelling-checking app. Adblocking software is almost exclusively offered as browser extensions.
All the major browsers support extensions on desktop, while Safari also supports them on iPhone and iPad, and Firefox allows them on Android devices. No matter which browser you choose, it’s a good idea to periodically delete the extensions you rarely use and turn off extensions that don’t need to always run in the background. Below are step-by-step instructions for adding and removing extensions for Chrome, Edge, Firefox, and Safari.
How to Remove Chrome and Edge Extensions
Chrome extensions added from the Chrome Web Store can be managed from the right-hand corner of the browser’s toolbar. For any extension you previously pinned to the browser, just right-click its icon and choose Remove from Chrome. Otherwise, click the icon that looks like a puzzle piece, open the three-dot menu next to the extension, and choose Remove from Chrome.
(Credit: Google/PCMag)
If it doesn’t appear in this menu, click Manage Extensions to see all your add-ons. From here, you can click Details to view information on a specific extension, use the switch to temporarily disable it, or hit Remove to delete it.
(Credit: Google/PCMag)
Microsoft has its own Edge Add-ons in the Microsoft Store. However, since Edge is based on Chromium, it is compatible with extensions from the Chrome Web Store. You can also manage add-ons in much the same way.
How to Remove Firefox Extensions
In Firefox, you can add extensions to the toolbar from the Firefox Browser Add-Ons site. Right-click on its toolbar icon to manage the extension. From the pop-up menu, select Remove Extension to uninstall it from Firefox. Otherwise, open the puzzle-piece icon, right-click the extension, and choose Remove Extension.
Recommended by Our Editors
(Credit: Mozilla/PCMag)
To see all your extensions, click the hamburger icon in the upper right and select Add-ons and themes or click the Extensions icon and choose Manage Extensions. You can disable an extension by turning off its switch or click the three-dot icon and choose Remove to uninstall it completely.
(Credit: Mozilla/PCMag)
Firefox also supports extensions on Android devices. You can manage your extensions in the app by clicking the three-dot icon and selecting Add-ons > Add-ons Manager. Select the extension, then turn off the switch to disable it or tap Remove button to uninstall it completely.
(Credit: Mozilla/PCMag)
How to Add and Remove Safari Extensions
(Credit: Apple/PCMag)
When you install an extension in Safari from Safari > Safari Extensions or the App Store, it downloads a separate app to your device. To manage your extensions, click Safari > Preferences, then select the Extensions tab. Uncheck a listing to temporarily disable an extension. If you want to uninstall an extension, select it and then click Uninstall. You will also need to delete its underlying applications to fully uninstall the extension; a message should appear prompting you to do this.
(Credit: Apple/PCMag)
Extension usage is extremely limited on mobile devices. To see if you have any, go to Settings > Safari > Extensions and tap the More Extensions link. When you install an extension, it adds an app to your Home screen. To manage your extensions, tap the AA icon in the browser and select Manage Extensions. You can turn off the switch for the extension you want to disable. To uninstall an extension entirely, you need to delete its associated app.
(Credit: Apple/PCMag)
Use Smart Internet Hygiene
Managing browser extensions is a task you can add to your household’s cybersecurity checklist. While you’re focusing on security, take a look at your browser’s privacy settings, too. There may be some features or tools you can enable or disable to exercise more control over access to your personal data. For a roundup of PCMag’s recommended online safety apps, check out the privacy and security toolkit.
About Our Experts
Lance Whitney
Contributor
Experience
I’ve been working for PCMag since early 2016 writing tutorials, how-to pieces, and other articles on consumer technology. Beyond PCMag, I’ve written news stories and tutorials for a variety of other websites and publications, including CNET, ZDNet, TechRepublic, Macworld, PC World, Time, US News & World Report, and AARP Magazine. I spent seven years writing breaking news for CNET as one of the site’s East Coast reporters. I’ve also written two books for Wiley & Sons—Windows 8: Five Minutes at a Time and Teach Yourself Visually LinkedIn.
I’ve used Windows, Office, and other Microsoft products for years so I’m well versed in that world. I also know the Mac quite well. I’m always working with iOS, iPadOS, watchOS, and Android on my various mobile devices. And these days, I write a lot about AI, so that’s become another key area for me.
My wife always jokes about all the tech products we have around the house, but I manage to put them to good use for my articles. I like Lenovo computers, so I own a couple of Lenovo desktops and several laptops. I have three MacBooks and a Mac mini. For my mobile life and work, I use an iPhone 16 Pro, iPad Pro, and iPad mini as well as an Apple Watch. But since I write about Android, I own several Android phones and tablets. Like any tech person, I have a cabinet full of cables, wires, and assorted mysterious gadgets. And when it’s time to take a break from writing, I have an old Xbox 360 and Nintendo Wii, both of which I use for exercise and fitness games.
Read Full Bio
Kim Key
Senior Writer, Security
Experience
I review privacy tools like hardware security keys, password managers, private messaging apps, and ad-blocking software. I also report on online scams and offer advice to families and individuals about staying safe on the internet. Before joining PCMag, I wrote about tech and video games for CNN, Fanbyte, Mashable, The New York Times, and TechRadar. I also worked at CNN International, where I did field producing and reporting on sports that are popular with worldwide audiences.
In addition to the categories below, I exclusively cover ad blockers, authenticator apps, hardware security keys, and private messaging apps.
Read Full Bio
