# Browser and extension security: reduce the code surrounding every privileged session

Source: https://www.web3sec.news/blog/browser-extension-security-runbook
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Record extension identities, publishers and effective permissions.
- [ ] Use a minimal sensitive-administration profile.
- [ ] Review browser synchronization and personal-account mixing.
- [ ] Test permission approval and unwanted reinstallation.
- [ ] Revoke potentially exposed sessions from a clean environment.

## References
- [Chrome: declare extension permissions](https://developer.chrome.com/docs/extensions/develop/concepts/declare-permissions)
- [Google Chrome: install and manage extensions](https://support.google.com/chrome/answer/2664769)