In 2024, Google reported that less than 1% of Chrome Web Store installations contained malware.
Extensions are small software programs that enhance your browser experience. They let users customize the behavior and functionality of Chrome to suit their own requirements or preferences.
However, extensions carry certain risks, just like any other program. Due to their ability to access private data, browser extensions have long been a cause of uncertainty.
Depending on the rights you provide, they might be able to view the data entering or leaving your web browser.
“In 2024, less than one percent of all installs from the Chrome Web Store were found to include malware. We’re proud of this record and yet some bad extensions still get through, which is why we also monitor published extensions”, claims Benjamin Ackerman, Anunoy Ghosh, and David Warren, Chrome Security Team.
Scan Your Business Email Inbox to Find Advanced Email Threats - Try AI-Powered Free Threat Scan
Overview of the Extensions Installed
Any extensions you may have installed that could be a security concern are flagged at the top of the extensions page (chrome://extensions). The panel consists of:
- Extensions suspected of including malware
- Extensions that violate Chrome Web Store policies
- Extensions that have been unpublished by a developer, which might indicate that an extension is no longer supported
- Extensions that aren’t from the Chrome Web Store
- Extensions that haven’t published what they do with the data they collect and other privacy practices
Also, when Chrome’s Safety Check has suggestions, you’ll be notified, or you can run Safety Check to check independently. To access the related shortcut, type “run safety check” into Chrome’s address bar and choose “Go to Chrome safety check.”
Stages of Verification to Ensure an Extension is Secure
In this stage, Chrome’s machine-learning algorithms scan each extension for potential violations or unusual activity.
A staff member reviews each extension’s pictures, descriptions, and public policies. The code is then reviewed further and more comprehensively.
“This review process weeds out the overwhelming majority of bad extensions before they even get published,” the Chrome Security Team said.
“We also work closely with trusted security researchers outside of Google and even pay researchers who report possible threats to Chrome users through our Developer Data Protection Rewards Program.”
If the team determines that an extension poses a serious risk to Chrome users, it is promptly removed from the Chrome Web Store and deactivated on all installed browsers.
Ways to Determine if Installing an Extension is Safe:
- The Chrome team bestows verified and featured badges to extensions.
- Ratings and reviews from our users.
- Information about the developer.
- Privacy practices, including information about how an extension handles your data.
Google’s greatest security level for Chrome is the Enhanced protection option of Safe Browsing. To enable this, choose “Enhanced” from the Chrome Safe Browsing settings page (chrome://settings/security).
This mode offers additional capabilities specifically designed to protect you from potentially harmful extensions and the greatest security against malware and phishing.
Free Webinar! 3 Security Trends to Maximize MSP Growth -> Register For Free