Chrome prepares to ax silent extensions

A coming version of Google Chrome on Windows is going to prevent extensions that don't come from the official Chrome store from quietly installing without your say-so.

Starting in Chrome 25, currently-installed third-party extensions are going to be deactivated until you reactivate them. Google

In a move sure to annoy businesses and other groups that bundle browser extensions as part of their main toolset, Google is tightening extension security in Chrome for Windows.

The company announced on Friday two new features in Chrome 25 that will make it harder for third-parties to force-install extensions.

Chrome Product Manager Peter Ludwig wrote that Google decided to clamp down on third-party extensions because the policy had been "widely abused" to silently install extensions, "without proper acknowledgment from users."

All new third-party extensions will be disabled by default, Ludwig said. Once installed, a box will open warning you that the extension has installed and give you the option to activate it.

Also in Chrome 25, third-party extensions will be forced to announce themselves to users. Google

The second change will deactivate all third-party extensions currently installed, and open a prompt to make it easier to reactivate them. After that, you'll have to go through the Extensions management screen to do so.

These changes pull Chrome in line with changes that Mozilla made to Firefox's add-on management policies. If Chrome's implementation resembles Firefox's, then the third-parties, such as security suite vendors or businesses, will still be able to get their extensions installed. It will just take an extra click from the end user.

Featured Video

Why do so many of us still buy cars with off-road abilities?

Cities are full of cars like the Subaru XV that can drive off-road but will never see any challenging terrain. What drives us to buy cars with these abilities when we don't really need them most of the time?

by Drew Stearne