Symptoms
- Extension requests permission to 'read and change all your data on websites you visit'
- Uncertainty about whether an installed extension is trustworthy
- Wanting to audit extensions after hearing about a malicious one in the news
- Browser feels slower with many extensions installed
Likely causes
- CommonExtension genuinely needs broad access for its core functionAd blockers, password managers, and similar tools often legitimately need to read page content to work.
- PossibleExtension requests more access than its function requiresSome extensions over-request permissions beyond what they actually need.
- Less commonExtension ownership changed and now behaves differentlyLegitimate extensions are occasionally sold to new owners who add tracking or malicious code in an update.
What to do
- Open your browser's extensions page and review the permissions each one currently has.
- Remove any extension you no longer actively use, regardless of how safe it seems.
- Check the developer name and recent reviews for each extension you're unsure about.
- Look at the extension's update history for a sudden change in ownership or a permissions increase.
- Keep only extensions from well-known, reputable developers when the permission request is broad.
- Restart the browser after removing anything to confirm it's fully gone.
- Periodically repeat this review, especially after installing new extensions.
When to call a pro
If you suspect a specific extension is actively malicious and stealing data, remove it immediately and change any passwords you entered while it was active.
Safety
Generally low risk
Generally low risk for a careful person. Stop if anything looks different from what this guide describes.