How to Test a Chrome Extension Before Trusting It With Your Data

Before you let an extension near your email, bank or work accounts, give it a short trial. Twenty minutes of checking catches most extensions you shouldn't trust.

1. Research before installing

• Developer: is there a named person or company, a website and a way to contact them?
• Privacy practices: on the Web Store listing, check what data the developer says it collects and whether it's sold.
• Permissions: the listing shows what the extension can access. Does it match what it does? See what permissions mean.
• Reviews and update date: read the newest reviews, not just the rating, and check that it's been updated recently.

2. Install it in a test profile

Create a separate Chrome profile with no accounts signed in (click your profile picture → Add, then continue without an account). Install the extension there first. If it misbehaves, it can't see your real cookies, passwords or history.

3. Watch what it does

1. In the test profile, go to chrome://extensions and turn on Developer mode.
2. Click the extension's service worker link to open its DevTools, then the Network tab.
3. Browse a few ordinary sites and use the extension's features.

Look at where requests go. Its own server for settings or updates is normal. Sending page addresses to analytics or data companies as you browse is a reason to walk away. Also open a page's own DevTools and check for scripts or ads the extension adds.

4. Check what it changes

• Did your search engine or new tab page change?
• Do links on pages now go through unfamiliar addresses?
• Are there new pop-ups, notifications or ads?

5. Move it over, with limits

If it passes, install it in your main profile and limit it:

• Set Site access to On click or On specific sites on its Details page.
• Leave Allow in Incognito off.
• Keep it away from sensitive sites if it doesn't need them.

6. Keep an eye on it

Trust can change. If an update asks for new permissions, Chrome turns the extension off until you accept, so stop and ask why. Ownership changes and sudden bad reviews are also signs to check again. See how to tell if an extension is spying on you.