Top security web browser plugins

Plugins that you should have installed to browse internet safely. Of course you don't need to install them all. One java script blocker and one ad blocker and one privacy/tracker blocker is enough. On the list you can find best plugins for Chrome/Firefox/Opera. It is also good to have VirusTotal plugin installed to scan files before download.


  • HTTPS Everywhere icon

    HTTPS Everywhere

    Free Windows Linux Android Android Tablet BSD ... Vivaldi Browser Chrome Yandex.Browser Opera Chromium Firefox Website

    HTTPS Everywhere is a browser extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites.

    Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site.

    The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.

    HTTPS Everywhere can protect you only when you're using sites that support HTTPS and for which HTTPS Everywhere includes rules.

     

  • uBlock Origin icon

    uBlock Origin

    Free Mac OS X Windows Linux Microsoft Edge Vivaldi Browser ... Chrome Safari Pale Moon Opera Chromium Firefox Website

    A wide-spectrum efficient blocker. Which block ads, trackers and malware sites. Supports Chromium, Chrome, Edge, Firefox, Opera, Safari, Thunderbird. Fast and lean, and as of 2017 still being actively improved. Forked from Small uBlock iconuBlock

    More than 12 million users. Including 3.8+ millions users on Firefox and 8.9+ millions users on Chrome

    uBlock Origin has received praise from technology websites, and is reported to be much less memory-intensive than other extensions

    Manifesto
    • The user decides what web content is acceptable or not in their browser.
    • The uBlock Origin project does not support Adblock Plus' "Acceptable Ads Manifesto", because the "Acceptable Ads" marketing campaign is really the business plan of a for-profit entity.
    • Users are best placed to know what is or is not acceptable to them. uBlock Origin's sole purpose is to give users the means to enforce their own choices.

     

  • Ghostery icon

    Ghostery

    Free Mac OS X Windows Linux Android iPhone ... Android Tablet iPad Microsoft Edge Vivaldi Browser Chrome Safari Yandex.Browser Opera Firefox Website

    Ghostery sees the invisible web - tags, web bugs, pixels and beacons. Ghostery tracks the trackers and gives you a roll-call of the ad networks, behavioral data providers, web publishers, and other companies interested in your activity.
    After showing you who's tracking you, Ghostery also gives you a chance to learn more about each company it identifies. How they describe themselves, a link to their privacy policies, and a sampling of pages where we've found them are just a click away.
    Ghostery allows you to block scripts from companies that you don't trust, delete local shared objects, and even block images and
    iframes. Ghostery puts your web privacy back in your hands. Ghostery has different builds for the different browsers.

     

  • Privacy Badger icon

    Privacy Badger

    Free Mac OS X Windows Linux Chrome Firefox Website

    Privacy Badger is a browser-add on tool that analyzes sites to detect and disallow content that tracks you in an objectionable, non-consensual manner. When you visit websites, your copy of Privacy Badger keeps note of the "third party" domains that embed images, scripts and advertising in the pages you visit. If a third party server appears to be tracking you without permission, by using uniquely identifying cookies to collect a record of the pages you visit across multiple sites, Privacy Badger will automatically disallow content from that third party tracker. In some cases a third-party domain provides some important aspect of a page's functionality, such as embedded maps, images, or fonts. In those cases Privacy Badger will allow connections to the third party but will screen out its tracking cookies.

     

  • NoScript icon

    NoScript

    Free Mac OS X Windows Linux BSD SeaMonkey ... Firefox Website

    The NoScript Firefox extension provides extra protection for Firefox, Seamonkey and other mozilla-based browsers: this free, open source add-on allows JavaScript, Java, Flash and other plugins to be executed only by trusted web sites of your choice (e.g. your online bank).

    NoScript also provides the most powerful anti-XSS and anti-Clickjacking protection ever available in a browser.

    NoScript's unique whitelist based pre-emptive script blocking approach prevents exploitation of security vulnerabilities (known and even not known yet!) with no loss of functionality...

    You can enable JavaScript, Java and plugin execution for sites you trust with a simple left-click on the NoScript status bar icon (look at the picture), or using the contextual menu, for easier operation in popup statusbar-less windows.
    Watch the "Block scripts in Firefox" video by cnet.

    For Android:
    NoScript Anywhere (NSA) is the nickname for the next major iteration of the NoScript security add-on (NoScript 3.x), whose guts have been turned upside down in order to match Mozilla's Electrolysis multiprocessing architecture and implement a porting for Firefox Mobile, available on Android smartphones and tablets.

    This open source (GPL) effort has started in the very beginning of 2011, and has been partially funded by the NLnet Foundation.

    NoScript 3 alpha, available on Firefox 4 Mobile for the Android and Maemo operating systems, offers all the the major security features of "classic" NoScript:

    • Easy per-site active content permissions management.
    • The first and most powerful anti-XSS (cross-site scripting) filter available in a web browser.
    • ClearClick, the one and only effective client-side protection against Clickjackings available on the client side.*
    • ABE (App Boundaries Enforcer), a true webapp firewall inside your mobile browser to protect your router and web applications against CSRF and DNS rebinding attacks.**

     

  • ScriptSafe icon

    ScriptSafe

    Free Mac OS X Windows Linux Chrome Website

    A simple extension that brings some of Small NoScript iconNoScript 's functionality to Chrome while emphasizing simplicity and intuitiveness (no affiliation to NoScript or NotScripts). Formerly known as ScriptNo

     

  • uMatrix icon

    uMatrix

    Free Mac OS X Windows Linux Chrome Opera ... Chromium Firefox Website

    Point & click to forbid/allow any class of requests made by your browser. Use it to block scripts, iframes, ads, facebook, etc.
    uMatrix: A point-and-click matrix-based firewall, with many privacy-enhancing tools.

    uMatrix put you in full control of where your browser is allowed to connect, what type of data it is allowed to download, and what it is allowed to execute. Nobody else decides for you: You choose. You are in full control of your privacy.

    Out of the box, uMatrix works in relax block-all/allow-exceptionally mode, meaning web sites which require 3rd-party scripts are likely to be "broken". With two clicks, uMatrix can be set to work in allow-all/block-exceptionally mode, which generally will not break web sites.

    Regarding the myth that "Chromium-based browsers can't reliably block JavaScript", see: https://github.com/gorhill/httpswitchboard/wiki/Blocking-javascript-execution-reliably-in-Chromium-based-browsers .

    • See ALL the remote connections, failed or attempted, depending on whether they were blocked or allowed (you decide).

    • A single-click to whitelist/blacklist one or multiple classes of requests according to the destination and type of data (a blocked request will NEVER leave your browser).

    • Efficient blacklisting: cookies won't leave your browser, JavaScript won't execute, plugins won't play, tracking pixels won't download, etc.

    • You do not have to solely rely on just one particular curated blacklist (arguably with many missing entries) outside which nothing else can be blocked: You are in full control.

    • Ease of use: uMatrix lets you easily whitelist/blacklist net requests which originate from within a web page according to a point-and-click matrix:

    • domain names (left column)
    • from very specific
    • to very generic
    • type of requests (top row)
    • cookies
    • CSS-related resources (stylesheets and web fonts)
    • images
    • plugins
    • scripts
    • XHR (requests made by scripts)
    • frames
    • others

     

  • VTchromizer icon

    VTchromizer

    Free Mac OS X Windows Linux Android iPhone ... Chrome OS Android Tablet BSD iPad Chrome Website

    Right-click on any link and scan the target with VirusTotal, free and easy.

    Virustotal is a service that analyzes suspicious files and URLs and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. It is not a substitute for antivirus or security products, but provides a valuable second opinion on a given file or web site. It is completely free and integrates over 40 antivirus solutions and more than 20 URL scanning tools.

    Have you received a suspicious link in your email inbox? Do you think the site you are currently viewing is a phishing attempt or some other fraud? Ask VirusTotal with just two mouse clicks and avoid infections and other unwanted outcomes.

     

  • VTzilla icon

    VTzilla

    Free Mac OS X Windows Linux Website

    VTzilla is a Mozilla Firefox browser plugin that simplifies the process of scanning Internet resources with Small VirusTotal iconVirusTotal.

    It allows you to download files directly with VirusTotal's web application prior to storing them in your PC. Moreover, it will not only scan files, but also URLs.

    The scanning options are embedded in Firefox's context menu and download dialog, making the analysis process as easy as clicking a single button.

    Both VirusTotal and Rotarua Limited are owned by Google.

     

  • User-Agent Switcher icon

    User-Agent Switcher

    Free Mac OS X Windows Linux Android iPhone ... Chrome OS Android Tablet BSD iPad Chrome Website

    User-Agent Switcher is a quick and easy way to switch between user-agents.

    Just right click on any page and select your user-agent.
    This Chrome extension adds a toolbar button and a menu to switch between user-agents.
    Browse with our predefined user-agents or add your own user-agents.
    Changing User-Agent allows you to mimic, spoof or fake other browsers, devices or search engine spiders.
    The extension does not render web pages in the same way as the selected one. User-Agent Switcher is primarily for developers who want to test how a page responds to different browsers. User-Agent switcher may also be used to reach certain pages that allows a particular browser.
    You can change User-Agent back to default when you are done.
    This extension also changes the javascript based "navigator userAgent"
    Includes presets for iOS (iPhone, iPad), Android, Windows Mobile Phone (Nokia Lumia) and browsers like Chrome, Internet Explorer, Microsoft Edge, Firefox, Safari and Opera etc.
    Add your own User-Agents if you don´t find anything that suits your needs.

     

  • Random User-Agent icon

    Random User-Agent

    Free Mac OS X Windows Linux Android iPhone ... Chrome OS Android Tablet BSD iPad Chrome Website

    Automatically change the user agent after specified period of time to a randomly selected one, thus hiding your real user agent.

    User agent - a string that is sent along to any website you visit. This is a sort of "fingerprint" your browser leaves behind which contains:

    • The name and version of your browser;
    • The name of the operating system (Mac, Windows, Linux, etc.) and its version;
    • Information about some of the plugins installed on the browser;
    • Other information that identifies and exposes you.

    This extension has been created to stop data leakage. It automatically replaces user agent strings after a specified period of time with a randomly selected one. User agent strings can also be set manually. The extension is incredibly lightweight, using very few resources. User agent randomization can be customized by the user (what browsers and OS are spoofed, etc.). Exceptions list available with option of wildcards. Protects against JavaScript exploits to hide your identity and protect your anonymity.

     

  • Decentraleyes icon

    Decentraleyes

    Free Mac OS X Windows Linux Android Android Tablet ... Chrome Opera Chromium Firefox Website

    Websites have increasingly begun to rely much more on large third-parties for content delivery. Canceling requests for ads or trackers is usually without issue, however blocking actual content, not unexpectedly, breaks pages. The aim of this add-on is to cut-out the middleman by providing lightning speed delivery of local (bundled) files to improve online privacy.

    • Protects privacy by evading large delivery networks that claim to offer free services.
    • Complements regular blockers such as uBlock Origin (recommended), Adblock Plus, et al.
    • Works directly out of the box; absolutely no prior configuration required.

    Decentraleyes is no silver bullet, but it does prevent a lot of websites from making you send these kinds of requests. Ultimately, you can make Decentraleyes block requests for missing CDN resources, too.

    > Simpler introduction: https://github.com/Synzvato/decentraleyes/wiki/Simple-Introduction

    Am I Protected?

    The following testing utility shows you if you are properly protected. It's the recommended and, probably, fastest way to see if this add-on is installed, enabled, and correctly configured.

    > Full link to testing utility: https://decentraleyes.org/test

    Frequently Asked Questions

    > Full link to FAQ: https://github.com/Synzvato/decentraleyes/wiki/Frequently-Asked-Questions

    Technical Information

    • Supported Networks: Google Hosted Libraries, Microsoft Ajax CDN, CDNJS (Cloudflare), jQuery CDN (MaxCDN), jsDelivr (MaxCDN), Yandex CDN, Baidu CDN, Sina Public Resources, and UpYun Libraries.

    • Bundled Resources: AngularJS, Backbone.js, Dojo, Ember.js, Ext Core, jQuery, jQuery UI, Modernizr, MooTools, Prototype, Scriptaculous, SWFObject, Underscore.js, and Web Font Loader.