Protect: verify extensions for security

Add-ons (or extensions) are browser-embedded mini-programs that allow you to expand your browser's functionality. Some extensions are useful, while other may be malicious. For this reason, Yandex.Browser disables extensions from unverified sources and regularly checks installed extensions for fakes.

Disabling extensions from untrusted sources

Restriction. Extensions are only checked in Windows.

Some developers create extensions that distribute malware or show users pop-up ads, flashing banners, and other intrusive advertising. This is why Yandex.Browser only allows you to install extensions from the Chrome Web Store and Opera Add-ons app stores where all extensions are checked for security.

If you install an extension from another website, the browser will disable it immediately after installation and inform you of this. If this is a trusted source, you can enable the extension for one session by clicking the Enable link in the bottom left corner of the dialog window:

Note. If you don't want to enable the extension every time you launch the browser, contact the developers of the extension and ask them to publish it in the Chrome Web Store or Opera Add-ons. If you have created your own extension, publish it in the online store, and then install it from there.

Enable extensions in settings

You can re-enable an extension you previously blocked in the browser settings:

  1. Click the icon  Extensions.
  2. Click On for the extension you need.

If the browser disables an extension that you developed

Try to solve the problem in one of the following ways:

  • Universal. If you're developing an extension, use the Yandex.Browser beta-version, which does not verify extensions.
  • For extensions that aren't posted in the Chrome Web Store or Opera Add-ons. If your extension is not included in these stores, enable it every time you launch your browser using either the dialog window or browser settings.
  • For extensions from the Chrome Web Store or Opera Add-ons. If your extension is included in the Opera or Chrome catalog, enter the correct update URL in the update_url field of the manifest.json file. Here are the update URLs for each of the catalogs:
    Catalog nameLink for updating extensions
    Chrome catalog
    Opera catalog

Verifying authenticity of an extension

Sometimes attackers try to replace the files in installed extensions with advertising files or malicious code. To protect you from this type of deception, the browser periodically verifies the authenticity of extensions.

If an extension does not pass verification, the browser disables it and displays a warning:

If you have no use for the suspicious extension, click Remove all.

If you need the extension, click Reinstall all to restore the original version of it.

If you close the window by clicking outside of it, the extension remains disabled.

Note. You may see a similar message if the extension was deleted from the internet store.

If the extension you are developing fails authentication

Try to solve the problem in one of the following ways:

  • Use the browser's beta-version . The Yandex.Browser beta version does not check extensions.
  • Check the extension's version. Make sure that the user's version of the extension matches the version that you get when you click on the link in the update_url field in the manifest.json file.
  • Clear the update_url field. That way the authenticity of your extension will not be checked.

Disable extension verification

Attention! If you don't want to check extensions, you need to completely disable your shield against malicious software and websites in your browser. We do not recommend this.

To disable malware protection

  1. Click the icon  Settings.

  2. In the lower part of the Settings page, click the Show advanced settings button.

  3. In the Privacy section, disable the Protect from malicious websites and software option.
  4. Restart the browser to apply the changes.
check extensions authenticity
disabling dangerous extensions
blocking fake extensions