How to Block Browser Extensions

Some browser extensions might interfere with your ability to enforce a content filter. Learning how to block these extension is an important step.

Tech Lockdown Team

Updated April 4, 2025

If you’re trying to prevent yourself from bypassing a content filter on your browser, then you might have tried researching how to block an extension. Fortunately, it is possible to block specific extensions that you definitely don’t want installed, plus block the extension store on your browser.

It is possible to block a browser extension in such a way that the option to install it is completely disabled:

However, the process for blocking a browser extension this way is not easy to find online. Most articles or guides that you might find want you to use the Group Policy editor (for Windows) or full device management (for Mac). Fortunately, there is a much easier way to do this on both Windows and Mac devices.

But first, you should choose what approach to use when blocking extensions.

Choosing an Approach to Block Browser Extensions

Do you need all but a selected few browser extensions to be blocked, or do specific ones need to be blocked instead?

If you need to choose a limited number of browser extensions to allow and block all non-approved extensions, then you'll need to use the default-deny approach. This is the most secure approach, and if you only use a few browser extensions (or none at all), we strongly recommend choosing a method that supports this approach.

However, if you need a handful of browser extensions to be blocked, you can use the default-allowed approach instead.

We prefer the default-deny approach since maintaining a short list of allowed extensions is much easier than constantly updating a list of out-of-date blocked extensions.

The simplest way to block browser extensions is to block the extension store. You could choose to either block the web store entirely (to prevent any new extension from being installed) or block specific store pages (to prevent specific extensions from being installed). This works well on both Mac and Windows computers.

Getting Extension Information

After choosing the right approach, you'll need to gather some information about the browser extensions you want to block, such as the URL and extension ID.

Depending on which browser you're using, you might need to consider different IDs depending on which browser extensions web stores are compatible with. Each browser has its own web store, and extension IDs are different across each store:

Google Chrome: Chrome Web Store (https://chromewebstore.google.com)
Microsoft Edge: Edge Web Store (https://microsoftedge.microsoft.com)
Firefox: Firefox Add-on Store (about:addons)

Visit your browser's extension store and find your extension. I would strongly recommend making a list of each extension's store page URL.

I would recommend saving the entire URL, but what we're really interested in is the extension ID near the end of the URL.

Take a look at the URL. At the very end of the long address, you should see a forward slash followed by a long string of letters. This string of letters is the extension ID.

Note

If you have multiple browser extensions, I'd strongly recommend creating a list of the browser URLs or extension IDS.

Get FireFox Add-on ID

Firefox requires more work to find the exact extension ID.

It's a bit tricky to find the extension ID for a browser plugin that isn't already installed, but you could use a tool like this one to view and copy the ID you'll need.

After installing the extension, you can visit Mozilla's addons page and find a specific browser extension...

Then open the tool to see the ID:

Block Browser Extensions on Mac

There are two main ways that you can block browser extensions on a Mac computer:

Either you can block the extensions store and/or filter individual store pages on the extensions store.
Or, you could use Device Configuration Files to set a blocklist or allowlist of browser extensions.

Of the two options, it's easiest and fastest to block store pages by URL. However, you have significantly more control over which extensions are both blocked and allowed if you use Device Configuration Files instead.

Device Configuration Files can be set to use the default-deny approach and create an allowlist of extensions while blocking all others. For example, you could allow a useful extension and download it freely:

But any other browser extension or plugin would be disabled and blocked:

Device Configuration profiles are compatible with most macOS devices. Tech Lockdown members can access our dedicated Device Config Generator for Mac and use our Extension Manager.

Block Extensions on Windows

Windows computers can also block browser extensions in two main ways:

Either you can block the extensions store and/or filter individual store pages on the extensions store.
Or, you could use the Registry to modify Browser Policies directly and block extensions that way.

Of the two options, blocking the web store URL is the fastest and easiest way.

Browser policies are hidden settings that can be edited using specialized tools, like the Registry Editor, or by using specific commands in Command Prompt. I'd only recommend choosing this method if you're an advanced Windows user, as it's easy to make mistakes that are very difficult to troubleshoot.

How to Use the Registry to Block Extensions on Windows

Some of us might prefer to modify the Registry visually without using the command line.

Keep in mind that modifying the Registry without knowing what you're doing can be dangerous. I would strongly recommend that you make a backup before continuing.

First, search for Registry in the Start Menu, and accept the User Account Control prompt:

You should see a screen that looks like this:

From here, navigate to HKEY_LOCAL_MACHINE > Policies:

If you've never done this before, you will probably have to create a Google entry. To do this, right-click on Policies and choose New > Key.

Name this new key Google:

Under Google, create another key named Chrome. Under Chrome, add one called ExtensionInstallBlocklist:

The final path should be Computer \ HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Google \ Chrome \ ExtensionInstallBlocklist. You can check this towards the top of the Registry Editor:

On the ExtensionInstallBlocklist entry you just created, then right-click and choose New > String Value:

Name this new String Value "1":

Double-click on this value and enter your first extension ID under Value data:

Click OK when you're done.

Perfect! The final product should look like this:

If you want to add more extensions to this blocklist, right-click on ExtensionInstallForcelist again, choose New > String Value, then set this new value's name to "2". If you had three extensions that you wanted to the blocklist, it might look like this:

How to add Extensions to Blocklist using Command Prompt

The Command Prompt can be used to modify your browser's policies directly. It does this by modifying the Registry with commands instead of using a GUI.

Keep in mind that modifying the Registry without knowing what you're doing can be dangerous. I would strongly recommend that you make a backup before continuing.

You should have the extension ID(s) of the browser extensions you want to block first.

Open Command Prompt as an Administrator.

In order to create a blocklist, you'll first need to create a directory in the Registry first called the ExtensionInstallBlocklist.

To create the directory, copy/paste this command into Command Prompt (make sure that you are running as an Administrator):

For Google Chrome, use this command:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist"

For Microsoft Edge, use this command:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist"

After you've created this directory in the Registry, you can start adding entries to start building your Forcelist.

To add an entry, you'll need to use a command to add a String Value within the ExtensionInstallForcelist; before you try to run this command in Command Prompt, take a look at it:

For Google Chrome, look at this command:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist" /v "1" /t REG_SZ /d "pganeibhckoanndahmnfggfoeofncnii"

For Microsoft Edge, look at this command:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist" /v "1" /t REG_SZ /d "pganeibhckoanndahmnfggfoeofncnii"

You'll see that the command starts going to the ExtensionInstallBlocklist directory first. Next, it creates a new String value with the title "1", then you might recognize the extension ID near the end for Cold Turkey: "pganeibhckoanndahmnfggfoeofncnii".

If you want to change which extension is blocked, just take the extension ID you've copied earlier and replace Cold Turkey's value with your own.

If you want to add additional extensions to your blocklist, you can, but just make sure that you change the name to "2" for the second entry, "3" for the third entry, and so on.

For example, if you also wanted to add Google translate:

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist" /v "2" /t REG_SZ /d "aapbdbdomjkkjkaonfhkkikfgjllcleb"

(and for Edge)

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist" /v "2" /t REG_SZ /d "aapbdbdomjkkjkaonfhkkikfgjllcleb"

Notice the "2" and the changed extension ID in the above command.

Frequently Asked Questions

What Are Web Browser Policies?

You are probably familiar with the Settings page on Chrome:

Your browser also has hidden settings (called Policies) that you can’t change from this menu. One of these policies is called the ‘ExtensionInstallBlocklist.’ If an extension's ID is added to this list, then your browser will block it from being downloaded.

You can view current policies enabled for your browser by visiting the links below:

For Google Chrome: chrome://policy.
For Microsoft Edge: edge://policy.
For Firefox: about:policies.

Here's what these pages should look like (my browser has no policies currently active):

What is an Extension ID?

The extension ID is how your browser knows which extension to install. To find a browser extension's ID, go to its store page and look for the string of letters:

Does blocking an extension uninstall it?

Yes. If you add an extension to your blocklist, it should be uninstalled next time you restart your browser.

How do I remove an extension I’ve enforced?

If you need to remove an entry, the easiest way is to delete the ExtensionInstallForcelist entry in either the Registry (for Windows) or remove the Device Configuration File you've installed (for Mac).

For Windows, open Command Prompt as administrator and enter the following command for Chrome:

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist" /v 1 /f

Here's the command for Edge:

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist" /v 1 /f

For Mac, open Terminal and enter the following command for Chrome:

defaults delete com.google.Chrome ExtensionInstallBlocklist

For Edge, use this command:

defaults delete com.microsoft.Edge ExtensionInstallBlocklist

Restart your browsers in order for the changes to take effect.