Tips for assessing the safety of an extension

Revision Information
  • Revision id: 156224
  • Created:
  • Creator: sdevaney
  • Comment: updated with a new link
  • Reviewed: Yes
  • Reviewed:
  • Reviewed by: sdevaney
  • Is approved? Yes
  • Is current revision? No
  • Ready for localization: Yes
  • Readied for localization:
  • Readied for localization by: sdevaney
Revision Source
Revision Content

When you install an extension, you may see a message asking for permission to access data or use features in your browser.

permissions request

When a developer submits an extension to (AMO), it’s scanned for a set of common issues. It may also be subject to human review. But neither of these processes guarantee that an extension is absolutely 100% safe.

With permissions messages, you can see what data and features an extension wants to access, so you can make more informed choices about the software you’re considering.

If you’re unclear how to make a decision about an extension’s safety, here are a few questions to ask yourself:

Is the extension from a brand or developer I trust?

Most extensions, however, are written by individual developers who aren't well-known. So you might therefore want to ask:

Is the developer’s website, their blog, or social media activity consistent with the features of the extension?

Also consider:

How many other users have installed this extension? Does it have a good star rating and positive reviews?

If the extension doesn't have many reviews or you're still not reassured, then consider:

Are the permissions requests consistent with the features of the extension?

For example, if the extension is requesting access to your location, is there a location feature included in the description of the extension? In some cases, though, it may not be obvious how certain permissions relate to a feature of the extension, so you should ask:

Does the extension’s description on (AMO) include an explanation of why the extension is requesting these permissions? Is the explanation consistent with the features of the extension?

(If you'd like more information about every potential permission request you may encounter, please see Permission request messages for Firefox extensions.)

For an even deeper analysis:

Does the extension have a privacy policy? Am I comfortable with the collection and processing of my data under the terms of the policy?

After probing these questions, you'll hopefully be satisfied that the extension is requesting an appropriate set of permissions.

While the vast majority of extension developers aren't interested in stealing your personal information or doing anything nefarious, you should be aware there are occassional bad actors. Always heed caution when installing extensions or any third party software.