Disable browser extension automatic updates

By default, browser extensions update to the latest version automatically. However, this is not always desirable, for example, if testing or investigations are being carried out in a specific version.

There are two recommended methods that can be used in Chrome, Edge, and Firefox to safely disable the automatic update of extensions by the browser:

• Sideload an extension – Sideloading allows you to install an extension without using a default common installer. It gives an individual user more control over their extensions, so is often used by developers and testers.
• Local Group Policy – This method allows rules for extensions to be applied to specific groups of users inside an organization. The rules determine how extensions can be managed, and who can make changes. Using a Local Group Policy is the recommended method for controlling automatic updates for your whole organization.

Sideload an extension

Sideloading an extension involves manually installing a specific version of an extension. If you use this method, the browser cannot automatically update the extension to another version, or make any changes to it.

See the following browser-specific sections:

• Chrome
• Edge
• Firefox

Chrome

1. In a Chrome browser, click the Customise and control Google Chrome icon , then select More tools > Extensions, or open a new tab and enter chrome://extensions.

2. Enable Developer mode (A), and click Load unpacked (B).

   

   The Select the extension directory file browser opens.

3. Browse to the required file and click OK to install the extension.

Edge

1. In an Edge browser, click the Settings and more icon , then select Extensions > Manage extensions, or open a new tab and enter edge://extensions.

2. Enable Developer mode (A), and click Load unpacked (B).

   

   The Select the extension directory file browser opens.

3. Browse to the required file and click OK to install the extension.

Local Group Policy

A Local Group Policy uses rules to control settings for larger groups of users across your organization. You can create Group Policy rules to prevent automatic browser updates in a domain controller or on your local machine, using custom JSON data options that have been defined for each browser.

Before carrying out the browser-specific steps below, you must do the following:

1. Download and install the Group Policy templates for each browser, available through these links:
   • Chrome – Set policies
   • Edge – Configure Microsoft Edge policy settings on Windows devices
   • Firefox – Customizing Firefox Using Group Policy (Windows)

2. Fetch the relevant browser extension ID. The ID is displayed in the extension manager of your browser as shown in this example from Chrome, where the extension ID is koibfinjpefmmdmmdiicglmhefhjjlhn:

   

See the following browser-specific sections:

• Chrome
• Edge
• Firefox

Chrome

Use the following JSON data (this is based on examples in the official Chrome extension configuration documentation), substituting your extension ID and a suitable invalid URL for the placeholders:

{"Your extension ID":
    {
    "installation_mode":"normal_installed",
    "update_url":"Any invalid address",
    "override_update_url":true
    }
}

The override_update_url option is set to true, which forces the browser to look at update_url. This has an invalid http address, therefore no update is downloaded.

1. Open the Local Group Policy Editor.

2. Go to User Configuration > Administrative Templates > Google > Google Chrome > Extensions, and double-click Extension management settings.

   The Extension management settings window opens.

3. Select Enabled, and paste the JSON data with your chosen extension ID into the Options field. This must be entered as a single line with no line breaks. This example is for the scenario where the extension ID is koibfinjpefmmdmmdiicglmhefhjjlhn, and the invalid address is https://localhost:

   Copy

   {"koibfinjpefmmdmmdiicglmhefhjjlhn":{"installation_mode":"normal_installed","update_url":"https://localhost","override_update_url":true}}

4. Optionally, you can also paste the JSON data into the Comment field for reference, and include any other appropriate comments.

5. Click Apply, then OK to update the Group Policy settings for the Chrome browser extension.

   

Edge

Use the following JSON data (this is based on examples in the official Edge extension configuration documentation), substituting your extension ID and a suitable invalid URL for the placeholders:

{"Your extension ID":
    {
    "installation_mode":"normal_installed",
    "update_url":"Any invalid address",
    "override_update_url":true
    }
}

The override_update_url option is set to true, which forces the browser to look at update_url. This has an invalid http address, therefore no update is downloaded.

1. Open the Local Group Policy Editor.

2. Go to User Configuration > Administrative Templates > Microsoft Edge > Extensions, and double-click Configure extension management settings.

   The Configure extension management settings window opens.

3. Select Enabled, and paste the JSON data with your chosen extension ID into the Options field. This must be entered as a single line with no line breaks. This example is for the scenario where the extension ID is alphbcchbekpcafaknckinfpapdaiiol, and the invalid address is https://localhost:

   Copy

   {"alphbcchbekpcafaknckinfpapdaiiol":{"installation_mode":"normal_installed","update_url":"https://localhost","override_update_url":true}}

4. Optionally, you can also paste the JSON data into the Comment field for reference, and include any other appropriate comments.

5. Click Apply, then OK to update the Group Policy settings for the Edge browser extension.

{"Your extension ID":
    {
    "installation_mode":"normal_installed",
    "install_url":"Any invalid address",
    "updates_disabled":true
    }
}

Additional information

See also the following browser-specific information:

• Chrome – An administration console allows you to define a specific setup for extensions for your organization. For more information about managing extensions for the Chrome browser, see Managing Extensions in Your Enterprise.

• Microsoft Edge – A self-host guide provides guidance for building packages and deploying them in your organization.