How to revoke Chrome extension permissions
Chrome extensions can be useful, but many request broad access to browsing data, tabs, and site content.
If an extension no longer needs that level of access, you can remove or reduce its permissions in a few minutes.
This guide explains how Chrome permission controls work, where to change them, and how to verify that an extension no longer has unnecessary access.
What Chrome extension permissions actually control
Chrome extension permissions define what an extension can read, modify, or monitor inside the browser.
Common examples include access to specific websites, all sites, browsing history, downloads, clipboard data, and tab information.
Permissions are not the same as installing an extension.
An extension may be installed but still limited to very narrow access, especially if you change site access settings or review optional permissions in Chrome’s extension manager.
- Site access: Controls which websites an extension can read or change.
- Browser features: May include history, tabs, downloads, notifications, or bookmarks.
- Optional permissions: Some extensions request additional access only when a feature is used.
How to revoke Chrome extension permissions in Chrome
The exact path depends on what you want to change.
You can remove an extension entirely, reduce its website access, or disable specific optional permissions if Chrome offers that option.
1. Open the Extensions page
In Chrome, open the menu and go to Extensions, then select Manage Extensions.
You can also enter chrome://extensions directly in the address bar.
2. Find the extension you want to adjust
Review the list of installed extensions and identify the one you want to restrict.
Check the extension name, description, and publisher to make sure you are editing the correct tool.
3. Open the extension details
Select Details to view the extension’s permission list, site access settings, and any controls available for limiting access.
4. Change site access
Under Site access, choose a narrower option if available.
Chrome usually offers one of these choices:
- On all sites — broadest access
- On specific sites — limited access to selected domains
- On click — extension runs only when manually activated
If your goal is to revoke Chrome extension permissions without uninstalling the extension, moving from “On all sites” to “On click” or specific domains is often the most effective change.
5. Remove the extension if you no longer trust it
If the extension is unnecessary, outdated, or from a developer you no longer trust, select Remove.
This fully revokes its permissions by uninstalling it from Chrome.
How to revoke permissions for a single website only
Sometimes an extension should remain installed, but you want to stop it from accessing a particular site.
This is useful for password managers, coupon tools, shopping assistants, and productivity add-ons.
Open the extension’s details page and review Site access.
If Chrome shows a list of allowed sites, remove the specific domain.
If the extension is set to operate on all sites, switch it to a more restrictive mode.
For many privacy-focused users, this is the best balance between convenience and least-privilege access.
How to check optional permissions
Some Chrome extensions request extra access only after installation.
These are often called optional permissions, and they may appear when you enable a feature inside the extension.
To review them, open the extension’s Details page and look for permission-related settings.
If Chrome displays a prompt asking to approve new access, you can deny it and keep the extension limited to its original scope.
- Look for new requests after updates.
- Read the permission prompt carefully before approving.
- Disable features that depend on access you do not want to grant.
How to revoke extension permissions across your Google Account
Chrome extension permissions are mostly local to the browser, but your Google Account can still be involved if you use Chrome sync.
If extensions sync across devices, changing settings on one device may not fully protect every browser profile.
To reduce risk, review extensions on each synced device and confirm that Chrome sync is not reintroducing the same add-on elsewhere.
If needed, turn off sync for extensions or remove the extension from every profile where it appears.
How to tell if an extension still has access
After changing permissions, test the extension in practice.
Visit a site that was previously included and see whether the extension still activates.
If it does, revisit the site access settings or remove the extension entirely.
You can also open Chrome’s extension details and verify the current access mode.
For added assurance, check whether the extension icon shows a site-specific activation state or whether Chrome still lists the extension under allowed access for certain domains.
Signs the permission change worked
- The extension no longer appears active on restricted sites.
- Chrome no longer requests broad access for the extension.
- The extension only works when you click it or manually enable it.
When you should uninstall instead of revoking permissions
Permission reduction is useful, but it is not always enough.
If an extension is abandoned, behaves unexpectedly, has poor reviews, or requests access that does not match its purpose, removal is the safer option.
Consider uninstalling if the extension:
- Requests access to all websites without a clear reason.
- Has not been updated for a long time.
- Tracks browsing behavior beyond what you expected.
- Shows suspicious pop-ups or redirects.
Best practices for Chrome extension privacy
Good permission hygiene reduces browser risk and protects sensitive data.
The easiest way to stay secure is to keep the number of installed extensions low and review access regularly.
- Install only extensions from reputable developers.
- Prefer extensions with narrow, clearly explained permissions.
- Review permissions after every update.
- Remove extensions you no longer use.
- Use separate Chrome profiles for work, personal, and testing tasks.
Browser vendors such as Google regularly update Chrome’s security model, but extension permissions still deserve active review because every installed add-on expands your attack surface.
A careful permission check takes only a few minutes and can significantly reduce privacy exposure.
Common Chrome permission settings to review
If you are auditing extensions, pay close attention to the following settings in Chrome’s extension details page:
- Read and change data on all websites
- Read browsing history
- Access tabs
- Manage downloads
- Access clipboard data
- Run in incognito
These permissions are not always dangerous, but they should match the extension’s stated purpose.
A weather extension does not need broad browsing access, and a simple calculator should not need clipboard or history permissions.
What to do if Chrome does not show a revoke button
Chrome does not always label actions as “revoke.” Instead, you usually change the permission mode, disable the extension, or uninstall it.
If the extension has no visible way to narrow access, removal is the cleanest way to revoke its permissions.
If you are managing a work device, your browser may also be controlled by an administrator.
In that case, some extensions or permission settings may be locked by policy, and you may need to contact IT support.