Extensions installed outside the add-on store

An unlisted extension is distributed directly by its author instead of appearing in the public listings on addons.mozilla.org. It may be supplied through a website, download link, or .xpi file.

Unlisted and unsigned describe different properties. An unlisted extension can be signed. Waterfox also supports unsigned extensions, including compatible legacy add-ons.

Check the source and permissions

Use the author’s official website or repository, and check who maintains the extension. Review the requested permissions before confirming installation. Access to website data can allow an extension to read or change pages you visit; broader permissions can grant access to additional browser information.

An installation request from a website should be a request you intended to make. If an unfamiliar site unexpectedly asks to install an extension, cancel the prompt and check what you were trying to do.

Understand updates

An extension distributed directly may obtain updates from its author’s server. The author can change its code in later releases. Keep track of where you installed it from and check the project’s release notes when its behavior changes.

Waterfox may ask you to approve additional permissions after an update. Review that access before accepting it.

Keep control of installed extensions

Open about:addons and select Extensions to review, disable, or remove installed extensions. Remove extensions you no longer use, and disable an extension if you want to check whether it is causing a problem.

See Manage extensions and themes in Waterfox for installation and management steps, and Manage Waterfox extensions in Private Browsing for private-window access.