By Jackson Godwin. Cybersecurity

I Looked at the Permissions Again
After removing the extension, I went back to its permission settings.
This time, I read every line carefully.
The extension had permission to:
- Read and change data on websites I visited.
- Access my browsing activity.
- Communicate with external websites.
- Display notifications.
- Modify browser settings.
When I first installed it, I had clicked Allow without thinking.
Now I realised how much access I had actually granted.
It Didn’t Need That Much Access
The extension claimed it was only designed to organise browser tabs.
So I asked myself a simple question.
Why would a tab manager need permission to read data on every website I visited?
It didn’t make sense.
That was the first major warning sign I had ignored.
Legitimate browser extensions often require permissions to perform their intended functions, but it’s worth questioning whether the requested access is proportional to what the extension claims to do.
The Extension Was Quietly Collecting Data
After researching the extension online, I discovered other users had raised privacy concerns.
Some reported that the extension collected information such as:
- Browsing history.
- Search activity.
- Website visits.
- Basic browser information.
Exactly what an extension collects depends on its design and permissions.
Not every extension with broad permissions is malicious.
However, excessive data collection can create privacy risks if users aren’t aware of what they’ve agreed to.
The Positive Reviews Didn’t Tell the Whole Story
When I looked again at the extension’s reviews, I noticed something interesting.
The most recent reviews were very different from the older ones.
Many users complained that after a recent update:
- More permissions were requested.
- Browser performance became slower.
- Advertisements appeared unexpectedly.
- Privacy concerns increased.
It seemed the extension had changed over time.
An extension that begins as trustworthy may later receive updates that introduce new features—or new risks.
That’s why it’s worth paying attention after updates, not just during installation.
Free Doesn’t Always Mean Safe
The extension was completely free.
At first, I assumed that was a good thing.
Later, I asked myself another question.
If millions of people used it for free…
How was it making money?
Some developers earn revenue through legitimate methods, such as premium versions or optional subscriptions.
Others may rely on advertising or data collection.
Understanding an extension’s business model can help you decide whether you’re comfortable with how your information may be used.
One Click Gave It Too Much Trust
The biggest mistake wasn’t installing the extension.
It was granting permissions without reading them.
Modern browsers ask users to approve access for a reason.
Those permission requests are an opportunity to decide whether the extension truly needs the access it’s requesting.
I skipped that step.
Fortunately, I caught the problem before any serious consequences occurred.
Convenience Can Hide Risk
The extension genuinely improved my productivity.
That’s what made it dangerous.
It solved a real problem.
It worked well.
It looked professional.
Those positive experiences made it easier to overlook the privacy implications.
Cybercriminals and unethical developers often understand that people are willing to trade a little privacy for convenience—especially when the tool appears useful.
The Lesson Was Bigger Than One Extension
After removing the extension, I reviewed every browser extension I had installed.
Some had permissions I no longer needed.
Others hadn’t been updated for years.
A few weren’t even being used anymore.
I removed several of them.
That simple review made my browser cleaner, faster, and easier to manage.
In the final part of this article, I’ll explain the biggest warning signs of risky browser extensions, share practical tips for choosing safer extensions, and reveal the simple rule I now follow before clicking “Add to Browser.”
Continue Reading: The Browser Extension That Spied on Me (Part 3)
.







