How to Check If a Chrome Extension Is Safe
7 min read · Updated 8/20/2026
A practical checklist for judging an extension before you install it: permissions, publisher, review patterns, update history and ownership changes.
Read the permissions first
The store lists what an extension can do. "Read and change all your data on all websites" is the broadest grant there is. Ask whether the extension's stated purpose actually requires it: a screenshot tool needs the current tab, not every site permanently.
Check the publisher
Look for a real website, a privacy policy and other extensions from the same developer. An anonymous publisher with one extension and a million users deserves scepticism.
Read the review pattern, not the score
A wall of five-star, one-line reviews posted in the same week is a purchased pattern. Sort by most recent and look for a sudden collapse in rating — that usually marks a change in behaviour or ownership.
Look at the update history
An extension untouched for two years is a liability: browser APIs change, and unmaintained code accumulates vulnerabilities. Frequent, described updates are a good sign.
Watch for ownership changes
The most common way a trusted extension turns malicious is being sold. If an extension you have used for years suddenly requests new permissions or shows unexpected ads, remove it and check recent reviews.
After installing
Open chrome://extensions periodically and remove what you no longer use. The safest extension is the one you did not install.
Related extensions
uBlock Origin
Privacy & SecurityEfficient, open-source content and ad blocker.
Bitwarden
Privacy & SecurityOpen-source password manager with autofill.
Privacy Badger
Privacy & SecurityLearns and blocks invisible trackers automatically.
Frequently asked questions
How do I know if a Chrome extension is safe?
Check four things: the permissions it requests, whether the publisher is identifiable, the pattern of recent reviews, and when it was last updated. An abandoned extension with broad permissions is the biggest risk.
What extension permissions should worry me?
"Read and change all your data on all websites" is the one to question. It is legitimate for grammar, AI and ad-blocking tools, but never for a simple calculator, theme or wallpaper extension.
Can a safe extension become unsafe later?
Yes. Extensions are sometimes sold and updated with tracking or ad injection. Re-check any extension whose ownership, name or review pattern suddenly changes.