Read from published manifests

What extensions are allowed to reach

Chrome grants an extension its permissions once, at install, in a one-line warning it never shows again. These pages say what each permission actually allows, and which of the catalogued extensions ask for it.

Holding a permission is not wrongdoing — a password manager genuinely needs every site. What matters is whether the access matches the purpose.

• Chrome extensions that can read every website you visit

  This is the broadest permission Chrome grants. An extension holding it can read and alter the contents of any page you open — your bank, your inbox, your company's internal tools — without asking again.

  168 catalogued extensions · 374,748,000 installs behind it

• Chrome extensions that can read your cookies

  Session cookies are often enough to enter an account without ever knowing the password. An extension that can read them can, in principle, act as you.

  107 catalogued extensions · 413,808,000 installs behind it

• Chrome extensions that talk to programs on your computer

  This reaches outside Chrome's sandbox to a companion application installed on your machine. Whatever that program can do, the extension can ask it to do.

  32 catalogued extensions · 366,773,000 installs behind it

• Chrome extensions using the debugger API

  The debugger protocol sits below the normal permission model. It can observe and modify essentially anything in the browser, including keystrokes as they are typed.

  19 catalogued extensions · 708,000 installs behind it

• Chrome extensions that can disable your other extensions

  This permission lets one extension list, disable or remove the others — including ones you installed to protect yourself.

  12 catalogued extensions · 1,760,000 installs behind it

• Chrome extensions that can read your clipboard

  People copy passwords, recovery phrases and account numbers. An extension with this permission can read whatever you copied last.

  10 catalogued extensions · 514,000 installs behind it

• Chrome extensions that can read your browsing history

  Your full history is a detailed record of your interests, health concerns, job hunting and finances. Extensions with this permission can read all of it, and delete it.

  7 catalogued extensions · 221,000 installs behind it

• Chrome extensions that can control your network proxy

  Changing the proxy routes your entire browsing through a server of the extension's choosing.

  7 catalogued extensions · 551,000 installs behind it