I’m often asked which security add-ons I’d recommend for new Firefox users. This article exists so I don’t have to say the same thins every time and can instead refer everyone to it.
- Cookie AutoDelete is a replacement for the classic cookie management add-ons like Cookie Monster. Because FFQ does not allow its Web Extensions-based add-ons to access the built-in browser cookie controls, Cookie AutoDelete instead allows you to automatically delete cookies from all domains that are not on your white-list. One major advantage over classic cookie controls is that cookies are only deleted after you leave the site, rather than rejected outright, allowing easier access to websites that refuse to load unless you accept their cookies.
- NoScript prevents execution of most dynamic contents on the web, malicious or not, and allows you to selectively white-list domains whose scripts you trust. While it breaks some sites, it’s beyond me how people risk surfing online without it or an equivalent.
- uBlock Origin is a pattern-based ad-blocker that is much faster and more lightweight than AdBlock. Like AdBlock, it comes with a constantly-updated global list of spam and banner domains and blocking rules, which catches the majority of ads on the net and can be supplemented by custom blocking rules.
- uMatrix is a replacement for the classic RequestPolicy, which allows you to precisely control which cross-site requests are being made by your browser. Unlike RP, uMatrix allows requests across subdomains of the same domain and loading images and fonts by default, so it doesn't break as many websites. Also, since it is developed by the same person as uBlock Origin, the two add-ons are fully compatible with each other.
- Context Search is more of a quality-of-life improvement than a security requirement, but a much needed one, given how FFQ no longer allows you to just select some text on a webpage and look for it in a search engine of your choice from the context menu.
- Feedbro is for those prehistoric folks like me who still prefer straightforward RSS/Atom feeds to Google and Facebook controlling what we see and read on the net. As of Firefox 64.0, Mozilla decided that we no longer need this technology, but thankfully there are add-ons to fix that.