Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteIf you suspect a browser extension or web session has been compromised, first disable or remove the extension, then separately secure affected accounts: removing an add-on does not necessarily end website sessions or revoke tokens. If you need evidence for a workplace investigation, record extension details before removal when it is safe to do so.
What to do first
- Restrict or remove the extension. In Chrome, open ⋮ > Extensions > Manage extensions. You can turn an extension off, remove it, or limit its site access to when you click it or to specific sites. See Google’s instructions for managing Chrome extensions. Other browsers have their own extension-management controls.
- Capture details before removal if an investigation requires them. Note the extension name, browser and version, extension ID if visible, requested permissions, installation or update timing, and symptoms. On a personal device, prioritize containment if collecting these details would delay it. In an organization, follow incident-response procedures so relevant evidence is preserved.
- Secure affected accounts separately. From a device you trust, use each affected service’s security settings to terminate active sessions and revoke access or refresh tokens where available. Change passwords from that clean device if you suspect credentials were exposed, and enable multifactor authentication if the service supports it. Controls differ by service.
- Check for broader device problems if the issue continues. Persistent changes, modified pages, or loss of browser control can point beyond one add-on. Microsoft describes those as unwanted-software behaviors and recommends removing suspicious apps and browser add-ons and enabling antivirus protection. Chrome also advises scanning for malware if a suspicious program appears to be changing extension files; see Chrome’s guidance on unwanted ads, pop-ups and malware and Microsoft’s unwanted-software guidance.
- Review connected apps and OAuth permissions. An extension’s removal does not revoke a separate consent granted to an application. Check the affected account’s connected-app or consent settings; organizations should also review sign-in and audit activity. Microsoft’s consent-phishing guidance describes investigating suspicious app permissions and auditing granted consent.
How to tell whether an extension deserves investigation
No single clue proves an extension is malicious. A familiar name, official-looking store listing, positive reviews, or normal visible behavior is not proof of safety. Examine whether the publisher is verifiable, what permissions the extension requests, whether its version or behavior changed, and whether its access makes sense for its stated purpose.
As an Amazon Associate I earn from qualifying purchases.
Review access and changes
Permissions that allow an extension to read or change data on websites deserve particular scrutiny when they exceed what its function appears to require. Compare the requested access with the extension’s stated purpose, and consider whether it began behaving differently after an installation or update. A mismatch is a reason to investigate, not conclusive evidence of compromise.
Do not rely on visible symptoms
Extensions can collect information without showing an obvious warning or breaking the browser. In a report dated March 5, 2026, Microsoft Security described a Chrome and Edge extension that collected visited URLs and portions of AI chats, stored identifiers and queued telemetry locally, then periodically sent data over HTTPS. That is a documented incident, not evidence of how common such behavior is.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
In a separate report dated June 29, 2026, Microsoft Threat Intelligence described “Search for perplexity ai” (extension ID flkebkiofojicogddingbdmcmkpbplcd, version 2.2), which routed search queries and typed suggestions through attacker-controlled infrastructure. Microsoft said it was taken down after responsible disclosure, but its analysis did not definitively confirm credential theft. These cases show why branding and store presence alone cannot establish safety; their specific indicators should not be assumed to apply to other extensions.
Can an extension steal cookies or keep a web session open?
Potentially, depending on the extension’s access and the browser and service protections involved. The National Institute of Standards and Technology (NIST) describes browser cookies as the predominant mechanism for creating and tracking sessions and as short-term session secrets. It also notes that access and associated refresh tokens can remain valid long after an authentication session ends. Therefore, deleting an extension does not itself prove that a website session or token has been invalidated.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
NIST’s SP 800-63B says: “Sessions SHOULD provide a readily accessible mechanism for subscribers to terminate (i.e., log off) their session when their interaction is complete.” For a suspected compromise, use the service’s security controls to sign out active sessions and revoke tokens or connected-app access where those controls exist. If the service does not make a particular control clear, consult its account-security help rather than assuming that changing a password ended every session.
When the signs point to the device, not just the extension
Investigate the device for unwanted software if pages are being altered, settings keep changing, the browser is difficult to control, or the problem remains after disabling the suspect extension. Chrome specifically warns that a suspicious program may be changing extension files. Run an antivirus or anti-malware scan using protection you trust, remove suspicious applications, and keep browser and security software updated. If this is a work device, contact IT or security staff before making changes that could erase evidence or disrupt response procedures.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What organizations should investigate
For a managed fleet, identify affected users and devices before making a broad removal decision. Inventory extensions, versions, enabled status, requested permissions, and installation scope; then apply the organization’s allow or block policy. Microsoft Defender Vulnerability Management documents extension assessment for Windows devices running Edge, Chrome, or Firefox, with fields including users, devices, versions, enabled status, requested permissions, and associated permission-risk information. Its documented coverage is Windows-only, and Microsoft notes that permission risk is subjective: organizations need to set their own risk tolerance. Details are in Microsoft’s browser extension assessment documentation.
NSA guidance recommends assessing the impact of preventing unauthorized extension installation, removing unnecessary extensions, and using allowlisting where supported. It also discusses browser isolation as an additional defensive layer. The guidance, Steps to Secure Web Browsing, dates to May 2018; treat its named product and operating-system examples as historical rather than current product recommendations.
Quick Recap
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →
