4 Firefox extensions to install now

The right extensions can greatly enhance your browser's capabilities, but it's important to choose carefully.
314 readers like this.
red panda

Mathias Appel via Flickr. Public Domain. Modified by Jen Wike Huger.

As I mentioned in my original article on Firefox extensions, the web browser has become a critical component of the computing experience for many users. Modern browsers have evolved into powerful and extensible platforms, and extensions can add or modify their functionality. Extensions for Firefox are built using the WebExtensions API, a cross-browser development system.

In the first article, I asked readers: "Which extensions should you install?" To reiterate, that decision largely comes down to how you use your browser, your views on privacy, how much you trust extension developers, and other personal preferences. Since that article was published, one extension I recommended (Xmarks) has been discontinued. Additionally, that article received a ton of feedback that has been taken into account for this update.

Once again, I'd like to point out that browser extensions often require the ability to read and/or change everything on the web pages you visit. You should consider the ramifications of this very carefully. If an extension has modify access to all the web pages you visit, it could act as a keylogger, intercept credit card information, track you online, insert advertisements, and perform a variety of other nefarious activities. That doesn't mean every extension will surreptitiously do these things, but you should carefully consider the installation source, the permissions involved, your risk profile, and other factors before you install any extension. Keep in mind you can use profiles to manage how an extension impacts your attack surface—for example, using a dedicated profile with no extensions to perform tasks such as online banking.

With that in mind, here are four open source Firefox extensions you may want to consider.

uBlock Origin

ublock origin ad blocker screenshot

My first recommendation remains unchanged. uBlock Origin is a fast, low memory, wide-spectrum blocker that allows you to not only block ads but also enforce your own content filtering. The default behavior of uBlock Origin is to block ads, trackers, and malware sites using multiple, predefined filter lists. From there it allows you to arbitrarily add lists and rules, or even lock down to a default-deny mode. Despite being powerful, the extension has proven to be efficient and performant. It continues to be updated regularly and is one of the best options available for this functionality.

Privacy Badger

privacy badger ad blocker

My second recommendation also remains unchanged. If anything, privacy has been brought even more to the forefront since my previous article, making this extension an easy recommendation. As the name indicates, Privacy Badger is a privacy-focused extension that blocks ads and other third-party trackers. It's a project of the Electronic Freedom Foundation, which says:

"Privacy Badger was born out of our desire to be able to recommend a single extension that would automatically analyze and block any tracker or ad that violated the principle of user consent; which could function well without any settings, knowledge, or configuration by the user; which is produced by an organization that is unambiguously working for its users rather than for advertisers; and which uses algorithmic methods to decide what is and isn't tracking."

Why is Privacy Badger on this list when the previous item may seem similar? A couple reasons. The first is that it fundamentally works differently than uBlock Origin. The second is that a practice of defense in depth is a sound policy to follow. Speaking of defense in depth, the EFF also maintains HTTPS Everywhere to automatically ensure https is used for many major websites. When you're installing Privacy Badger, you may want to consider HTTPS Everywhere as well.

In case you were starting to think this article was simply going to be a rehash of the last one, here's where my recommendations diverge.



When recommending LastPass in the previous article, I mentioned it was likely going to be a controversial selection. That certainly proved true. Whether you should use a password manager at all—and if you do, whether you should choose one that has a browser plugin—is a hotly debated topic, and the answer very much depends on your personal risk profile. I asserted that most casual computer users should use one because it's much better than the most common alternative: using the same weak password everywhere. I still believe that.

Bitwarden has really matured since the last time I checked it out. Like LastPass, it is user-friendly, supports two-factor authentication, and is reasonably secure. Unlike LastPass, it is open source. It can be used with or without the browser plugin and supports importing from other solutions including LastPass. The core functionality is completely free, and there is a premium version that is $10/year.



Vimium is another open source extension that provides Firefox keyboard shortcuts for navigation and control in the spirit of Vim. They call it "The Hacker's Browser." Modifier keys are specified as <c-x>, <m-x>, and <a-x> for Ctrl+x, Meta+x, and Alt+x, respectively, and the defaults can be easily customized. Once you have Vimium installed, you can see this list of key bindings at any time by typing ?. Note that if you prefer Emacs, there are also a couple of extensions for those keybindings as well. Either way, I think keyboard shortcuts are an underutilized productivity booster.

Bonus: Grammarly

Not everyone is lucky enough to write a column on Opensource.com—although you should seriously consider writing for the site; if you have questions, are interested, or would like a mentor, reach out and let's chat. But even without a column to write, proper grammar is beneficial in a large variety of situations. Enter Grammarly. This extension is not open source, unfortunately, but it does make sure everything you type is clear, effective, and mistake-free. It does this by scanning your text for common and complex grammatical mistakes, spanning everything from subject-verb agreement to article use to modifier placement. Basic functionality is free, with a premium version with additional checks available for a monthly charge. I used it for this article and it caught multiple errors that my proofreading didn't.

Again, Grammarly is the only extension included on this list that is not open source, so if you know of a similar high-quality open source replacement, let us know in the comments.

These extensions are ones I've found useful and recommend to others. Let me know in the comments what you think of the updated recommendations.

User profile image.
Jeremy Garcia is the founder of LinuxQuestions.org  and an ardent but realistic open source advocate. Follow Jeremy on Twitter: @linuxquestions


I'm confused about the privacy recommendations then including Grammarly. Grammarly is able to send back all text typed back to their servers where the Terms of Use say they can use it just about however they want.

To be fair, I pointed out the repercussions multiple times, and noted that everyone has a different risk profile and tolerance level for this kind of thing. I even suggested using dedicated profiles in some cases. The ToS is, sadly, pretty standard these days. Why they don't get more push-back in general is what's confusing to me. Also note that Grammarly can be used 100% plugin free, which is how I used it for this article.

In reply to by snekul (not verified)

Looks like you need a better proofreader or an even better version of Grammarly....

"Not everyone is lucky enough to write a column on Opensource.com column—"

The double use of the word "column" is a dead giveaway. One that I would think a grammar analytic software should be able to catch.

That error actually wasn't in the article as submitted, but was added during the editing process.

In reply to by Thom (not verified)

My English teacher would hate grammerly. I am also convinced it makes mistakes especially with commas. But I use it anyway because I am worse off otherwise.

Badger is better than lastpass. You didn't really state why.......

Sorry I meant bitwarden not badger.

Thanks for the info on ff exts. I've been using Privacy Badger, HTTPS Everywhere for sometime, so thanks for the heads up on all the others!

Instead of Grammarly you could install LanguageTool, languagetool.org
The code is open-source, the online checking service is free but limited in size (can be upgraded), there are open-source extensions available also for Word, LibreOffice, Google Docs.
And it supports many languages.

Grammerly is not bad. Pity they didn't allow for the fact that not everyone lives in America. The number of time it pulls me up because the colour of my colour is wrong

If you go to Grammarly, my Grammarly, Profile, Language Preferences you can choose between Australian, American, British and Canadian English

In reply to by Peter Burling

I'm surprised no one has mentioned NoScript yet. Every time I install Firefox, the first extension that I add is NoScript. The second is AdBlock Plus. Everything after that is gravy. :)

passbolt is better than bitwarden. Bitwarden is C# and MSSQL. hardly open source friendly technologies.

I always run NOScript, HTTPS Everywhere, Ghostery, and Kee (formerly KeeFox).
I really wish PDFIt still worked. It made saving web pages as PDFs quick & easy!

Exactly the extensions I use! Happy to see I'm notnthe only one considering Bitwarden the best alternative of password managers (especially because it's open source) and Vimium the best alternative in browser-vim experience (I also tested vim-vixen and tridactyl but there aren't quite as good)

Glad to see I am inline with recommendations on uBlock Origin and Privacy Badger. I think they are both must-have to greatly enhance browser experience and privacy. Privacy Badger requires regular checks though, if like me you do not wish to contact google analytics or gravatar almost every time I browse a website (!)
Worth mentioning too is 'Cookie AutoDelete', which does a great job at cleaning up by default and provides easy one-click whitelisting.
Recently I also installed 'Disable JavaScript', that comes handy for Websites attempting to force you to disable your ad blocker through JS code... not that I usually stay long on those websites.

Creative Commons LicenseThis work is licensed under a Creative Commons Attribution-Share Alike 4.0 International License.