💻Coming to SF Tech Week?We went through all 300 events so you don't have to. Here is where we will be.Read the guide
💻Coming to SF Tech Week?300 events, one guide.
Read the guide
Extension Disablement

Pause your browser extensions on banking sites, automatically

Haven's extension disablement pauses your other browser extensions while you're on a sensitive site, so nothing else running in your browser can read what you type. Your password manager keeps working. When you leave, Haven restores everything automatically. It's on by default, and you can turn it off in settings.

4.8 on the Chrome Web Store, 59 ratings

Last updated September 2026

Protected site: chase.com
1
1PasswordActive
G
GrammarlyActivePaused
A
AdBlock PlusActivePaused
H
HoneyActivePaused
Extensions restored when you leave this site

Why extensions are a risk

Extensions see everything on your screen.

Most browser extensions can read and change the pages you visit, including login forms. That access is harmless until an extension changes hands or ships a bad update.

It happens at scale. In February 2026, SecurityWeek reported more than 300 Chrome extensions leaking or stealing user data, with over 37 million combined downloads. In January 2026, Socket found five extensions posing as Workday and NetSuite tools that stole login tokens to take over accounts. And in July 2025, Koi Security found 18 extensions that had been safe for years until an update turned them malicious, reaching over 2.3 million Chrome and Edge users.

Extensions Can Read Your Passwords

Browser extensions can access form fields, intercept credentials, and read everything on the page.

Extensions Can Modify Transactions

Malicious extensions can alter bank transfers, change account numbers, and inject fake forms.

Extensions Can Steal OTPs

One-time passwords and 2FA codes can be intercepted by compromised extensions in real-time.

Harmful Updates Can Arrive Silently

An extension can change after you install it. Updates install automatically, usually with no notice that anything changed.

How it works

What happens when you visit your bank.

Haven pauses your other extensions for the length of the visit, then puts them back. You don't have to do anything at any step.

  1. Open a protected site

    Go to your bank, brokerage, or payment site as you normally would. Haven recognizes it as one of the 200+ financial sites it protects.

    • Password manager
    • Ad blocker
    • Coupon tool
    • AI sidebar

  2. Haven pauses your other extensions

    Ad blockers, coupon tools, writing assistants, and AI sidebars stop running for this visit, so they can't read the page or what you type.

    • Password manager
    • Ad blocker, paused
    • Coupon tool, paused
    • AI sidebar, paused

  3. Sign in and bank as usual

    Your password manager keeps working, so autofill still fills in your login. Nothing else about the site changes.

    • Password manager
    • Ad blocker, paused
    • Coupon tool, paused
    • AI sidebar, paused

  4. Leave, and they come back

    Close the tab or move to another site, and Haven restores every extension it paused. There's nothing to switch back on.

    • Password manager
    • Ad blocker
    • Coupon tool
    • AI sidebar

You're in control

Not for you? Turn it off.

Extension disablement is on by default because it meaningfully reduces your exposure on sensitive sites. But if it conflicts with your workflow, you can turn it off in Haven settings at any time.

How to turn off extension disablement

Open Haven → Settings → toggle off "Disable extensions on protected sites." Your extensions will stay active on all sites going forward.

Answers to Your Questions

Get answers to commonly asked questions about extension disablement.

Contact us
An extension with permission to read and change data on the sites you visit can read what a page shows and what you type into it, including login fields. Most extensions never misuse that access, but an extension can change hands or receive a malicious update after you install it. Pausing extensions on banking sites removes that access while it matters most.
On a protected site, Haven pauses your other browser extensions, including ad blockers, shopping and coupon tools, writing assistants, and AI sidebars. Your password manager keeps working so you can still sign in.
Yes. Haven leaves your password manager running on protected sites, so autofill works as usual while your other extensions are paused.
Haven protects more than 200 banking and financial sites out of the box. If a site you use isn't covered, you can request it at starthaven.com/request-a-bank.
As soon as you leave the protected site, Haven restores every extension it paused. You don't need to do anything.
Partly. Chrome lets you limit each extension to specific sites or to run only when clicked, and incognito windows run without extensions by default. Both are manual and set one extension at a time. Haven applies the pause automatically across every protected site and restores your extensions when you leave.
Open Haven, go to Settings, and switch off "Disable extensions on protected sites." Your extensions will then stay active everywhere, and Haven's other protections keep running.
Yes. Extension disablement is included in Haven, which is free for individual use.