It is common knowledge that Google Chrome extensions installed from the extension store may not always be secure. 24 Channels has prepared a few simple ways to protect your browser from suspicious add-ons.

Prevent a malicious Chrome extension from being installed

1. Use the Chrome Web Store

The safest way is to use the Chrome Web Store, which is the safest place to install Chrome extensions. According to Chome Stats, there are more than 125,000 extensions and web apps in the Chrome Web Store. If you’re looking for a password manager or creative extension, you’ll probably find something suitable.

• Main disadvantage The reason to use the Chrome Web Store is that it has questionable extensions that you should not install anyway. Therefore, you should still check the reliability of the extension before installing it.
• Advantage The thing is, if you accidentally download a malicious Chrome extension and Google removes it, you will receive a notification and the extension will be disabled on your computer.

2. Learn developer

Verify the legitimacy of the developer before installing an extension. To distinguish a professional developer, check if he has a full website or public profile.

The only downside is that some developers make extensions malicious months or years after they are released or realize that accounts have been hijacked and malicious code has been added to them. Trust your instincts and use a different browser extension if something goes wrong.

3. Make sure the extension is updated regularly

Before installing an extension, make sure it is updated regularly. If an extension is out of date, it is less secure than modern extensions. There’s no point in using an extension that contains vulnerabilities that could put you at risk while browsing the web.

4. Check reviews

Comments are your best friends! Checking reviews from people who have used the browser extension will help you form an opinion about the service based on other people’s experiences. You can also evaluate the average user experience and whether the Chrome extension is safe or not.

If a lot of reviews are negative, look for a similar extension with more positive reviews.

5. Run antivirus scans regularly

With reliable antivirus software, you can monitor everything that enters your browser. Known malicious Chrome extensions, potentially unwanted programs, and unknown but definitely malicious network or internal activity will be detected by a reputable antivirus program like Bitdefender or Malwarebytes.

But antivirus software can’t do much to protect you online, and viruses in Chrome always try to stay undetected for as long as possible. To avoid overloading the browser with an excessive number of extensions, install only what you really need.

6. Use Chrome Enhanced Safe Browsing

You can use Chrome Safe Browsing Advanced to protect yourself from malicious browser extensions. Enhanced Safe Browsing is a powerful browsing mode that essentially acts as a browser antivirus and protects you from dangerous downloads, extensions, and websites.

• You can enable Enhanced Safe Browsing in Chrome by going to your Google Account settings under Security > Manage Enhanced Safe Browsing > Enhanced Safe Browsing.

Here’s how to spot a dangerous Chrome extension

Especially if you are interested in technology, you can take your digital security into your own hands by researching the Chrome extensions you use. Methods like checking extension permissions, checking network traces, and using Chrome’s extension resource viewer are good places to start.

1. Check your extensions on CRXcavator

CRXcavator evaluates Firefox, Edge and Chrome extensions and calculates their risk rating based on factors such as weak security policies and excessive permissions. By searching for an extension with CRXcavator (or entering the extension ID, which is a string of letters or numbers from the URL), you can view the extension report and make an informed decision about whether to download it.

2. Consider Chrome extension permissions

CRXcavator provides excellent information about the reliability of Google Chrome extensions, but is only useful in context. Once you know what permissions a web browser requests, you should consider whether it actually needs them. Despite the risks, a password-managed Chrome extension will require permission to access web page content and fill out forms. The same permissions would be unreasonable for an extension that monitors the weather.

3. View network trace in Developer Tools

You can get information about whether a Google Chrome extension is malicious by monitoring its network activity. You can get more information about your network activity by importing a network trace file through your browser.

4. Use Chrome Extension Resource Viewer

You can get the best idea of ​​what your browser extension does by analyzing the source code generated with the Chrome Extension Source Viewer. Analyzing source code is certainly difficult, but your chances of success will increase if you understand how browser extensions are created.

Chrome extensions are a great convenience because they can make your web experience much easier, but it’s important to make sure that the Chrome extensions you install are safe to use.