The Best Firefox Security Add-Ons

[humble3d]

The Best Firefox Security Add-Ons

By Martin Brinkmann on May 1, 2011 in Firefox

One of the biggest features and strength of the Firefox web browser is its extensions engine and the support it receives from the Firefox community. Users find thousands of different add-ons for virtually any purpose in the official extensions gallery over at Mozilla. Mozilla tries its best to promote popular and interesting add-ons, but the sheer amount makes that attempt more or less futile.



The best Firefox security add-ons is a guide for Firefox users who want to improve their web browser's security and protection from attacks on today's Internet. That does not necessarily mean that you need to install all of the add-ons to protect your browser from malicious attacks, as some may only be useful if you visit specific websites or types of sites regularly.

The list concentrates on security related add-ons, not privacy related. Only extensions that are compatible with at least Firefox 4 have been included in the list.
My Extensions

Those are extensions that I use on my private PC. I thought it would be a great way to start with a selection of add-ons that I personally use all the time, and list the remaining extensions in the second part of the article.

NoScript - Most malware and attacks are script based on the Internet. If a script cannot run, it cannot attack your computer. NoScript does exactly that. It blocks all scripts from running on all pages and websites on the Internet. You can whitelist scripts for a session or permanently if you trust a website.

A must-have extension and one of the main reasons that I'm still using the Firefox web browser and not another browser.

Alternative: YesScript, which allows all scripts and gives you the option to disable select ones.



LastPass Password Manager - LastPass is a password manager which makes the add-on security related. It stores the passwords online which means that you can access them from any PC that LastPass is installed on provided that you have an Internet connection on that PC. It features a secure password generator, form filler and note taking along with the usual options like automatically logging you in on websites or an on screen keyboard.

The company recently created a tool called LastPass Security Challenge which goes through your stored passwords to rate them individually and overall.


Firefox Security Add-Ons

BrowserProtect - Protects your web browser's settings and preferences from being tampered with. Some programs that you install on your computer change Firefox settings either automatically or if you do not pay attention to the installation dialog. Browser Protect for Firefox shields the browser by monitoring the browser configuration. It is for instance effective against homepage hijacking or search engine provider changes.



HTTPS Finder - It is always safer to use https when available, as it protects the information from network snooping and other possible attack forms. HTTPS Finder informs you if a website supports HTTPS, with an option to automatically switch to the HTTPS protocol. A similar feature is provided by NoScript.

Master Password+ - Passwords stored in Firefox's default password manager are not secured at all by default. Anyone with access to the computer can access both usernames and passwords for all sites. The Master Password is a way to protect the password list in Firefox. Master Password+ improves that feature, for instance by prompting for the master password on browser startup or locking up the browser window if the master password is not supplied.

Whois Lookup - It sometimes pays to know who owns and administrates a website. This is done with a Whois Lookup, which you can do manually on many whois related sites on the Internet, or semi-automatically with the Firefox extension Whois Lookup.



Host Permissions - Allows you to disable permissions for individual hosts. Permissions include images, redirects, plug-ins, JavaScript and frames).



Alternative: Bookmark Permissions, does the same, only for bookmarks.

FEBE - Firefox Environment Backup Extension allows you to backup Firefox data, including extensions, themes, preferences, passwords and cookies regularly. I personally prefer MozBackup for this, but this extension is a solid alternative.

Perspectives - Aids Firefox users securely identify Internet servers by verifying certificates using a collection of Network Notaries.



NoRedirect - Gives you back the control over HTTP redirects. Many ISPs these days redirect you to their own search page if you mistype a web address in a browser. NoRedirect in addition offers previews for shortened urls and stops the redirection of smart error pages and more.



Dr. Web Anti-Virus Link Checker - Send files that you want to download with an online virus scanner before you do so. This can be done without downloading the file first to your computer.

Alternative: VTZilla (Caution: Not hosted on Mozilla.org) that sends files to Virus Total where they are checked against 40 different antivirus engines.

Web of Trust - Displays rating symbols for websites that you visit. Ratings include trustworthiness, vendor reliability, privacy and child safety.



Alternative: LinkExtend - Uses eight safety services instead of just one to rate links before you visit the web sites.

Search Engine Security - Changes the referrer when visiting web pages from search engines to protect against some forms of malicious redirects.
Closing Words

Firefox users can improve the security of the web browser significantly with add-ons. Many add additional layers of protection to the browser, which can keep you safe, or at least safer, on the Internet.

VIEW SOURCES AND IMAGES VIA THE LINK BELOW:

_http://www.ghacks.net/2011/05/01/the-best-firefox-security-add-ons/?

[stargate]

I don't like the way the add-ons require you to sign away your like before you can install them.  I skip those no matter how good they seem.

[BamSec1]

On 2/14/2018 at 2:32 AM, stargate said:

I don't like the way the add-ons require you to sign away your like before you can install them.

I never noticed this. Having 35 of them of which 32 are always enabled.

[Bad Karma]

5 hours ago, BamSec1 said:

I never noticed this. Having 35 of them of which 32 are always enabled.

You beat me with the number of addons : only 18. Even if I add userscripts, it only gives me 10 extra. You still beat me.

Nevertheless, I concurr to BamSec1. No registration needed

[stargate]

We must be looking at different pages then, because most of the add-on when you press "install" a little window drops down in the upper left corner of of the page that seems different for each add-on, but generally wants you to agree to a bunch of access to your computer.  You have to agree or you can cancel.  Some require access to everything on your computer(and some the right to change things on it.) some just a little less. (Try it)  I'm using Firefox 56. 64 bit, maybe it's just me, but I know not so long ago this didn't happen.

[Bad Karma]

The only moment I get one dialog box is when I install userscripts otherwise nothing of what you describe.

This becomes a topic for tech help. Please post there. But are you sure it's on a pc and not a smartphone or a tablet.

If you post in tech help, one or several screen captures would be welcome.

[BamSec1]

Is it this you mean?

If yes, well it's totally legitimate, here's why ...

1. A plugin which controls the bookmarks cannot work if it has no access to ALL your bookmarks, thus for all sites.
2. It needs to see if a bookmark already exists,
3. If it doesn't, the plugin asks you if you want to add it
4. If it exists, it asks you if you want to edit it
5. And finally, you might want to copy/paste the bookmark and for that it needs to copy it to the clipboard.

Hope this clarifies why some plugins pop-up this little windows. Some do, some don't. I had very few.

BTW ... all programs we use, whether they are installed or portables, all have access to our PC ... best example is our Anti-Virus program.

[batman4ever]

I just installed a new system, definitely will try lastpass and noscript.