Browser Extensions
REV. 2026–08
READ TIME 5 MIN
Every extension is a piece of code with broad access to what you see and type. Where a setting can do the job instead of an extension, prefer the setting — keep the list deliberately short.
"Install as few extensions as possible. A minimal, well-audited set beats a long list of unaudited convenience tools."
STEP-BY-STEP CONFIGURATION
Every browser's privacy settings live in a different place. Pick yours below.
about:preferences#privacy
Action: select "Strict" (instead of Standard or Custom). Why: blocks most trackers and enables Firefox's fingerprinting protection automatically.
On the same about:preferences#privacy page, scroll to "Firefox Data Collection and Use" and uncheck all four boxes: technical/interaction data, personalized extension recommendations, study installs, and backlogged crash reports.
about:preferences#general
Action: scroll to "Network Settings," click Settings, and enable DNS over HTTPS — pick NextDNS if you also want ad/tracker blocking at the DNS level, or Cloudflare for a simpler option.
+ Advanced: Certificate Authorities
Advanced — only for users comfortable editing low-level browser settings.
Scroll to "Certificates" on the privacy page, click View Certificates → Authorities. Consider removing certificate authorities you don't trust (this guide flags TrustCor and Chinese government-linked CAs specifically).
Block telemetry.mozilla.org at the DNS level through your router or a DNS filtering service, as an extra layer beyond the in-browser toggles.
INSTALL A MINIMAL SET OF PRIVACY EXTENSIONS
uBlock Origin — top pick across every source consulted
Blocks ads and trackers, and is widely regarded as the most effective and best-maintained blocker available.
- Go to the extension store for your browser (Firefox Add-ons, Chrome Web Store, or Brave/Edge's respective stores).
- Search for "uBlock Origin" and confirm the developer listed is Raymond Hill, also known as gorhill. Do not install look-alikes such as "uBlock" (no "Origin") or "uBlock Pro," and note that it has no connection to the website "ublock.org."
- Click Install/Add to Browser.
- If you're on Chrome specifically: Google disabled the original uBlock Origin for most Chrome users in 2025 as part of the Manifest V3 changes. Install uBlock Origin Lite instead (also by Raymond Hill) if the full version isn't available to you. Firefox and Firefox-based browsers like LibreWolf still support the full, more capable version.
- If you use Mullvad Browser, you can skip this step: uBlock Origin comes built in.
Privacy Badger (by the Electronic Frontier Foundation)
Learns which trackers are following you across sites and blocks them, with almost no configuration needed.
- Search your browser's extension store for "Privacy Badger" and confirm the publisher is the EFF (Electronic Frontier Foundation).
- Install it and leave it running in the background; it needs no setup.
Note it currently doesn't work on Safari (macOS or iOS), though the EFF was working on Safari support as of June 2025.
Decentraleyes
Serves common website code libraries locally instead of letting your browser fetch them from Google or other third-party servers, which reduces one common way sites can track you across the web.
- Search your browser's extension store for "Decentraleyes" and install it.
- No configuration is required after installation.
Facebook Container (Firefox and LibreWolf only)
Isolates Facebook in its own contained tab so it can't track your activity on other websites you visit.
- Search Firefox Add-ons for "Facebook Container" (made by Mozilla) and install it.
- After installation, any Facebook tab automatically opens in an isolated container; no further setup needed.
Disable HTML5 Autoplay
Stops videos on websites from automatically starting with sound.
- Search your extension store for "Disable HTML5 Autoplay" and install it.
- Optionally review its settings to allowlist specific sites where you do want autoplay.
EXTENSION RISK & UTILITY MATRIX
| EXTENSION | PRIVACY BENEFIT | SECURITY RISK | REQUIRED? |
|---|---|---|---|
| uBlock Origin | ★★★★★ Blocks most trackers | ★☆☆☆☆ Low risk (well-audited) | Essential |
| Privacy Badger | ★★★★☆ Blocks unknown trackers | ★☆☆☆☆ Low risk (EFF) | Recommended |
| Decentraleyes | ★★★☆☆ Reduces CDN tracking | ★☆☆☆☆ Low risk | Optional |
| Facebook Container | ★★★★☆ Isolates Facebook | ★☆☆☆☆ Low risk | If you use Facebook |
| NoScript | ★★★★★ Blocks all scripts | ★★☆☆☆ Breaks many sites | Advanced only |
| TamperMonkey | ☆☆☆☆☆ (User scripts) | ★★★★★ HIGH RISK | Avoid unless expert |
| Paywall bypass | ☆☆☆☆☆ (Access only) | ★★☆☆☆ May violate ToS | Optional |
| HTTPS Everywhere | ★★☆☆☆ (Mostly redundant) | ★☆☆☆☆ Low risk | No longer needed |
CHECKPOINT
Red Flags — When to Avoid an Extension
Never install an extension that shows one of these signs. Click each to see why it matters.
Asks for "Read and change all your data on websites you visit" for no clear reason
Legitimate ad/tracker blockers need this permission to work. A note-taking app, theme, or unrelated utility asking for it has no good reason to — that's the warning sign.
Has few users but many glowing reviews
Fake or paid reviews are a common way to disguise a rushed or malicious extension launch. A low install count with a wall of five-star reviews rarely adds up naturally.
Was recently bought by an unknown company
A well-regarded extension can turn hostile overnight after an acquisition. Check the changelog and reviews around the sale date before trusting an update from a new owner.
Hasn't been updated in over a year
Unmaintained extensions accumulate unpatched security holes as browsers change their APIs underneath them.
Comes from a third-party website, not the official store
Store review processes catch obvious malware before it reaches you. A sideloaded file skips that check entirely.
Has a name that mimics a popular extension
E.g. "uBlock" vs "uBlock Origin." Copycats piggyback on a trusted name's search ranking to catch users who don't check the developer.