Browser extensions for privacy range from actively useful to deprecated to outright counterproductive. Four extensions are worth knowing; one you have seen recommended everywhere was deprecated in 2022 and should be removed. The current state as of 2026, and what none of them can fix, is below.
uBlock Origin: The Best Tracker and Ad Blocker — With a Chrome Warning
uBlock Origin by Raymond Hill is the most effective free content blocker available. On Firefox, it runs with full MV2 capabilities: it intercepts network requests at the browser level, blocks known tracking and advertising domains before content loads, and updates filter lists automatically. The combination of EasyList, EasyPrivacy, and uBlock's own filter lists blocks the substantial majority of third-party tracking.
The Chrome situation in 2026: Google migrated Chrome extensions to Manifest V3 (MV3) in 2024. MV3 replaced the webRequest API with a more restricted declarativeNetRequest API. uBlock Origin Lite, the MV3-compatible version for Chrome, uses static blocking rules that are less flexible than uBlock Origin's dynamic filtering. It blocks significantly fewer requests, cannot run custom user scripts, and cannot update filter lists as frequently. Some categories of tracking that uBlock Origin (MV2) blocks are not covered by uBlock Origin Lite.
On Firefox, install uBlock Origin (not Lite). On Chrome, install uBlock Origin Lite and accept the reduced coverage, or switch to Firefox for browsing where privacy matters. Edge and Brave also support uBlock Origin in full MV2 mode through their extension systems.
Recommended filter lists beyond defaults: in uBlock Origin's dashboard, enable AdGuard Privacy, AdGuard Tracking Protection, and Fanboy's Social Blocking List under the Privacy and Annoyances sections.
Privacy Badger: Learning-Based Tracker Detection
Privacy Badger is a free browser extension developed by the Electronic Frontier Foundation. Unlike uBlock Origin, it does not rely on blocklists. Instead, it watches for third-party domains that appear to track you across multiple unrelated sites by setting cookies or using fingerprinting, and adds them to its block list based on observed behavior.
The practical advantage: Privacy Badger catches trackers that blocklist maintainers have not yet catalogued. A new tracking domain deployed by an advertising company takes time to appear in curated lists; Privacy Badger detects it behaviorally.
The limitation: because Privacy Badger starts from a clean state and learns over time, it provides weaker blocking in the first days of use. It also makes decisions based on heuristics, which can occasionally result in false positives (blocking a legitimate resource) or false negatives (not blocking a tracker it has not seen enough times yet).
Privacy Badger is available for Chrome, Firefox, Edge, and Opera. Running both Privacy Badger and uBlock Origin is a common setup for users who want breadth (uBlock's lists) and adaptability (Privacy Badger's learning).
Cookie AutoDelete: Limit Persistent Tracking
Cookie AutoDelete removes cookies from closed tabs automatically. When you navigate away from a site and close its tab, Cookie AutoDelete deletes all cookies set by that site. This prevents sites you visit occasionally from maintaining a tracking profile across multiple visits spread over weeks or months.
Configuration options: you can whitelist specific sites to retain their cookies (banks, email providers, any site where you want to stay logged in). For whitelisted sites, cookies are preserved as normal. For all other sites, cookies are wiped on tab close.
The trade-off is session persistence. Without whitelisting a site, you log out every time you close the tab. For shopping, news, and social sites you visit once and leave, cookie deletion is pure benefit. For any site you use regularly, you spend time re-authenticating. A realistic setup: whitelist your primary email, banking, and frequently-used services; let everything else be cleared.
HTTPS Everywhere: Deprecated — Remove It
HTTPS Everywhere was a browser extension developed by the EFF and Tor Project that automatically redirected HTTP website requests to HTTPS when an HTTPS version existed. It solved a real problem in 2010-2019 when a significant portion of web traffic was unencrypted.
The EFF deprecated HTTPS Everywhere in January 2023. As of 2026, over 95% of web pages load over HTTPS by default, and all major browsers include HTTPS upgrading natively.
Chrome: Settings → Privacy and security → Security → Enable "Always use secure connections". This automatically upgrades all HTTP requests to HTTPS and shows a warning when HTTPS is unavailable.
Firefox: Settings → Privacy and Security → HTTPS-Only Mode → Enable in all windows. Firefox will block HTTP connections and offer an override for sites that genuinely have no HTTPS version.
If HTTPS Everywhere is still installed, remove it. It receives no updates and its functionality is fully replaced by browser-native features that are better maintained and have no extension permission footprint.
What Extensions Cannot Protect Against
ISP-level monitoring. Your ISP sees which IP addresses you connect to and can infer site visits even when you use HTTPS and block third-party trackers. Extensions operate after your request leaves the browser. They cannot encrypt DNS queries or hide your connection destinations. See our guide to free private DNS services and private browsing without a VPN for network-level options.
Browser fingerprinting. Your browser's combination of screen resolution, installed fonts, system language, GPU information, and dozens of other signals creates a unique identifier that persists across sessions even without cookies. uBlock Origin reduces fingerprinting surface by blocking some fingerprinting scripts, but it cannot randomize the underlying signals. Brave's built-in fingerprint randomization and Firefox with privacy.resistFingerprinting enabled are more complete solutions.
First-party tracking. When you are logged into Google Search, Google logs your queries regardless of what extensions you use. Extensions block third-party tracking (other sites loading Google's tracker). They cannot block Google from recording activity on Google's own properties. Using DuckDuckGo or Kagi for search eliminates this.
Free breach monitoring catches the downstream consequence of tracking failures — when your data appears in breach databases after a service you used is compromised.
Honest Caveat
No extension setup provides complete tracking protection. The combination of uBlock Origin (Firefox), Privacy Badger, and Cookie AutoDelete significantly reduces your exposure to advertising networks and cross-site tracking. Against determined fingerprinting, first-party tracking, or ISP monitoring, extensions are insufficient on their own. Layer them with DNS privacy, a VPN for untrusted networks, and a search engine that does not build user profiles. Start with what you will actually maintain — an active uBlock Origin installation is more effective than a neglected multi-extension setup with expired filter lists.
Frequently Asked Questions
Will uBlock Origin stop working on Chrome in 2025?
The MV3 (Manifest V3) transition in Chrome has reduced uBlock Origin\
What is the difference between Privacy Badger and uBlock Origin?
uBlock Origin uses manually curated blocklists, databases of known tracking domains maintained by community contributors. It blocks whatever is on those lists immediately. Privacy Badger uses a machine-learning approach: it starts with minimal blocking and learns which domains track you across multiple sites, adding them to its block list over time based on behavior. Privacy Badger is developed by the Electronic Frontier Foundation. In practice, uBlock Origin with good filter lists blocks more trackers out of the box; Privacy Badger catches some that aren\
Is HTTPS Everywhere still useful in 2026?
No. HTTPS Everywhere, developed by the EFF and Tor Project, was deprecated in 2022. Its function was to redirect HTTP connections to HTTPS equivalents. In 2026, 95%+ of web traffic is already HTTPS, and all major browsers now include built-in HTTPS-first or HTTPS-only modes that accomplish the same thing. The EFF recommends removing HTTPS Everywhere and using your browser\
Does Cookie AutoDelete actually improve privacy?
Cookie AutoDelete removes cookies from sites after you close their tabs. This disrupts tracking that relies on persistent cookies stored across sessions. It does not affect: first-party tracking within a session, fingerprinting, or cookies set by sites you currently have open. It is most useful for preventing sites you visit occasionally from maintaining a long-term tracking profile. For sites you visit regularly (Google, Amazon, your bank), you will need to re-login frequently since those sites\
Can browser extensions themselves be privacy risks?
Yes. Browser extensions often request broad permissions — access to all sites, read and change data on all pages, browsing history. Extensions developed by privacy-focused nonprofits (EFF, Proton) or audited open-source projects (uBlock Origin, Privacy Badger) are lower risk. Extensions developed by unknown publishers, acquired by advertising companies, or requesting excessive permissions are higher risk. Hola VPN and similar free VPN extensions have historically been operated as botnets using users\