Are your browser extensions stealing your data?
Learn how to keep yourself and your business safe as you surf the web
Chrome, Firefox, Safari, or Edge: we all have a favorite web browser.
No matter which browser you choose, you’ll find it offers thousands of downloadable browser extensions promising to add functionality and make your life easier.
But not all browser extensions are as harmless as they seem. Some may be collecting more data than you realize—and sometimes even selling it.
What is a browser extension?
A browser extension is a small piece of software you can install to enhance your browser’s capabilities. Extensions can help you:
- Proofread emails and documents
- Take and edit screenshots
- Save articles to read later
- Block ads or track website analytics
- Shorten URLs, autofill passwords, and much more
While most extensions are designed to improve your online experience, some come with hidden risks.
The dangers of browser extensions
Many people assume that any software offered in a store run by the browser they trust must, by association, be trustworthy, too. Unfortunately, this can be far from the case.
A 2024 study by Georgia Tech found that thousands of browser extensions extract sensitive user data—often without disclosing this in their privacy policies or web store descriptions. Researchers analyzed over 100,000 extensions and identified over 3,000 that automatically collect user-specific data, affecting millions of users. Over 200 of these extensions were found to directly extract sensitive data from webpages—including emails, social media profiles, and financial details—without user consent. [1]
Even when data collection is legitimate, the study warns that storing user data on third-party servers introduces privacy risks, such as data breaches or unauthorized data sharing.
Beyond privacy concerns, extensions can also slow down your browser’s performance or create security vulnerabilities if not properly maintained.
Learn more:
How often should you change your passwords?
What type of data can extensions collect?
Depending on their permissions, some browser extensions may have access to:
- Login credentials (usernames and passwords)
- Financial data (credit card numbers and banking details)
- Personal information (name, email, phone number)
- Browsing history (websites visited, search queries, and clicks)
- Clipboard data (anything you copy and paste)
Our advice to keep your browser safe
First and foremost, not all browser extensions are harmful—only a small percentage collect more information than they should.
But when it comes to cyber security, it’s always better to be safe than sorry.
When thinking about adding a new browser extension, here are some best practices for safe browsing:
- Read the reviews
- Check the developer information
- Review the privacy policy
- Only download from official stores
When in doubt, always download your extensions through reputable stores. These would include:
- Google Web Store for Chrome
- Apple App Store for Safari
- Microsoft Store for Edge
If you’re uncomfortable with the level of access a browser extension requires or are unsure why it requires that level of access, don’t install the extension. Prioritizing security over convenience helps protect your data and keeps your browsing experience safe.
Keep your browsers and your business safe and secure
As part of our Managed IT services, we’ll keep your computer software up to date and secure at all times. And if you have any questions about browser extension security, our comprehensive remote and onsite support team is always here to help you.
Contact us today to learn more.