3 Extensions

Introduction

Here, suggested extensions for Firefox-based browsers for desktop and Android are listed. My Settings and Remarks columns contain my settings file and remarks such as what my settings do and what extensions are replaced by that extension.

For Android, if an extension is shown as un available, click Desktop site and ensure the link starts with https://addons.mozilla.org/en-US/firefox instead of https://addons.mozilla.org/en-US/android (en-US may be replaced with other languages), then the Add to Firefox button may become clickable. Those need this will be labeled Android (Desktop) below. However, Firefox for Android lacks many APIs needed by some extensions. Thus, being able to be added doesn't imply being able to function.

Security

According to arkenfox wiki 4.1 Extensions,

We recommend keeping extensions to a minimum: they have privileged access within your browser, require you to trust the developer, can make you stand out, and weaken site isolation. For those interested, here is an ongoing series on the basics of browser extension security by Wladimir Palant.

The following extensions or functionalities of extensions should not be used:

• Privacy Badger: It sends Do Not Track (DNT) HTTP header and is redundant with Enhanced Tracking Protection (ETP) Strict mode and uBlock Origin. Refer to Do Not Track (DNT) and Global Privacy Control (GPC) section for more information.
• Cookie or supercookie-related ones that don't work well with Total Cookie Protection (TCP) / dynamic First Party Isolation (dFPI), State Partitioning, or Multi-Account Containers (if you use it), such as Cookie AutoDelete: I recommend using Cookie Manager instead. Refer to Cookie Manager in Optional section and Cookies and Supercookies section for more information.
• uMatrix: It is no longer maintained and redundant with uBlock Origin and Header Editor. Refer to uBlock Origin section and Header Editor in Optional section for more information.
• Ghostery – Privacy Ad Blocker, Disconnect, AdGuard AdBlocker, and other advertising, trackers, and/or pop-ups blockers: They are redundant with Enhanced Tracking Protection (ETP) Strict mode and uBlock Origin.
• Fingerprinting protection ones: Refer to Fingerprint section for why.
• LocalCDN, Decentraleyes, and other Content Delivery Network (CDN) emulation ones: They may break some sites and may be fingerprinted according to cypherpunks, a Tor Project developer.
• Ones with security vulnerability. Refer to Extension-Security-Basics by Wladimir Palant for more information.

Regarding Content-Security-Policy (CSP) headers confliction among extensions that you may see from some sources, the bug has been resolved. Refer to Bug 1462989, Bug 1477696, and CanvasBlocker issue 214 for more information.

uBlock Origin

uBlock Origin is a must.

Name	Source Code	Desktop	Android	My Settings and Remarks	Self Description
uBlock Origin	GitHub	Desktop	Android	My settings is my-ublock-backup.txt, which uses dynamic filtering of third-party iframe tags enhanced easy mode to avoid site breaking, Block Page Visibility to allow background audio/vedio playback, combinedfox filters - quick fixes (quick-fixes.txt), combinedfox filters - social media (social-media.txt), and more. A lot of lists including some large and complex lists are used in it, which may slow down site loading for devices with limited resources. Try to disable some lists if you encounter performance issue. For people with higher threat model, consider higher blocking mode of uBlock Origin but expect some site breakings. Refer to uBlock Origin wiki for more information.	Finally, an efficient wide-spectrum content blocker. Easy on CPU and memory.

A related project of mine is combinedfox-all-in-one-filterlist, which combines the lists used above and is designed for situations where using single list is the only option or more convenient, such as Content Filtering of Brave for Android to not add lists one by one manually. For situations where multiple lists can be used, imported, and exported easily, such as uBlock Origin extension, using the original lists is recommended.

Optional

Name	Source Code	Desktop	Android	My Settings and Remarks	Self Description
Bitwarden Password Manager	GitHub	Desktop	No need on Android. Use native app from F-Droid or Google Play Store instead.	Do not use the browsers' built-in password managers. They are not as secure as dedicated password managers. I recommend those recommended by Privacy Guides.	At home, at work, or on the go, Bitwarden easily secures all your passwords, passkeys, and sensitive information.
ClearURLs	GitHub	Desktop	Android		Removes tracking elements from URLs.
Cookie Manager	GitHub	Desktop	Android	You may turn off the Open the Cookie Manager when the extension starts up, which is on by default. Supported features: Viewing all cookies Querying cookies by any combination of url, domain, path, cookie content (name/value), httpOnly/secure/sameSite/session flags, expiration time range. Recognizes cookie jars (default, private browsing mode, container tabs aka userContext). Allows you to remove individual cookies, or all matching cookies with one click. Supports Firefox for Android (Fenix) Supports the TOR Browser (and first-party domain cookies) Supports partitioned cookies (known as State Partitioning or Total Cookie Protection) Add cookies Edit cookies Import / export cookies JSON format for backup and restoration purposes. Netscape HTTP Cookie File format for use with other tools like curl and wget. Copying cookies to a different cookie jar Whitelisting cookies Refer to Cookies and Supercookies section.	An efficient cookie manager. View, edit, delete and search for cookies. Supports private mode and Firefox mobile too. Designed for privacy and security aware users. Enable this extension to open the cookie manager, disable it if you are done.
Copy Link Text	GitHub	Desktop	No need on Android.		The only extension that lets you effortlessly copy link text on both desktop and mobile—via right-click, Alt+C shortcut, or Copy mode activation.
Download All Images	GitHub	Desktop	Not available on Android.		Easily save images with a wide range of customization features, such as file size, dimensions, and image type.
Extension source viewer	GitHub	Desktop	Android (Desktop)	A similar tool as a website is CRX Viewer by the same author with source code in the same repo.	View source code of Firefox add-ons and Chrome extensions (crx/nex/xpi) from addons.mozilla.org, the Chrome Webstore and elsewhere, with CRX Viewer (crxviewer).
Firefox Multi-Account Containers	GitHub	Desktop	Not available on Android due to Bug 1807456. Read Android - Firefox Profiles and Containers Alternative for more information.	Refer to Cookies and Supercookies section for my remarks.	Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs. Cookies are separated by container, allowing you to use the web with multiple accounts and integrate Mozilla VPN for an extra layer of privacy.
Firefox Relay	GitHub	Desktop	Android	Need login to Mozilla account.	Firefox Relay lets you generate email aliases that forward to your real inbox. Use it to hide your real email address and protect yourself from hackers and unwanted mail.
floccus	GitHub	Desktop	Floccus requires specific bookmarks APIs, however, which have not been implemented in Firefox for Android yet. So, we still wait, but the waiting won't be long.	You can sync with Nextcloud Bookmarks (cannot make use of end-to-end encryption), with Linkwarden (cannot make use of end-to-end encryption and does not support keeping the order of bookmarks across syncs), with Karakeep (cannot make use of end-to-end encryption and does not support keeping the order of bookmarks across syncs), via WebDAV (can choose to use end-to-end encryption), via Git over HTTPS (can not make use of end-to-end encryption and currently not available in the mobile app), and via Google Drive (can choose to use end-to-end encryption), and via Dropbox (can choose to use end-to-end encryption). The Android app floccus bookmark sync is available on F-Droid, GitHub release, and Google Play Store.	Securely synchronize bookmarks across Chrome, Firefox, Edge, and more using your own cloud storage.
Force Copy	GitHub	Desktop	Android	Do not use Start since it may break some sites. It's recommended to use Once when you need.	Force Copy professionally circumvents limitations pertaining to Web Copying, Keyboard Usage, and Right-click Functionalities, facilitating an unhindered browsing experience. Open Source Project: https://github.com/WindrunnerMax/TKScript.
Header Editor	GitHub	Desktop	Android (Desktop)	It can replace domain-based redirecting extensions and User-Agent changing extensions with more powerful features such as regular expression matching. Be careful to not unwantedly alter your fingerprints. My rules are in HE.json. Refer to my post on TypeType discussion 279 for more information about YouTube, BiliBili, and NicoNico rules.	Manage browser's requests, include modify the request headers and response headers, redirect requests, cancel requests
MobiDevTools	SourceForge	No need on desktop.	Android		an extension that adds Eruda developer tools to Firefox Android. Lets you use the console, inspect elements, and network monitor on your phone
mozlz4-edit	GitHub	Desktop	Not available on Android.	View and edit .mozlz4 files, notably search.json.mozlz4 in Firefox profile folder. A similar tool as a command-line tool is mozlz4.	The addon lets you add custom search engines to the Mozilla Firefox without the Internet connection using! Add your own search engine to the Firefox! Actually mozlz4-edit is a simple mozlz4 file editor. You can open, edit and save mozlz4 files.
NoScript Security Suite	GitHub	Desktop	Android	Despite that its functionality is largely covered by uBlock Origin and preferences, when your intended behavior is simply block unless manually allowed, NoScript Security Suite may be easier to use. If that's not what you want, you probably should not use this extension and should use uBlock Origin instead.	The best security you can get in a web browser! Allow potentially malicious web content to run only from sites you trust. Protect yourself against XSS other web security exploits.
Plasma Integration	KDE's GitLab	Desktop	No need on Android.	Use if you are use KDE Plasma desktop environment. No need otherwise.	Multitask efficiently by controlling browser functions from the Plasma desktop.
Read Aloud: A Text to Speech Voice Reader	GitHub	Desktop	Android		Read out loud the current web-page article with one click. Supports 40+ languages.
Redirect AMP to HTML	GitHub	Desktop	Android		Automatically redirects AMP pages to the regular web page variant.
Return YouTube Dislike	GitHub	Desktop	Android (Desktop)		Returns ability to see dislike statistics on youtube
Search by Image	GitHub	Desktop	Android		A powerful reverse image search tool, with support for various search engines, such as Google, Bing, Yandex, Baidu and TinEye.
TWP - Translate Web Pages	GitHub	Desktop	Android	Privacy policy: We do not collect any information. However, to translate, the contents of the web pages will be sent to Google or Yandex servers.	Translate your page in real time using Google, Bing or Yandex. It is not necessary to open new tabs.
Ultra Volume Booster	GitHub	Desktop	Android		Boost audio volume up to 1000% with a sleek dark glassmorphism UI
Violentmonkey	GitHub	Desktop	Android	My settings and installed scripts are in violentmonkey.zip, which includes installed scripts 最强的老牌脚本CSDNGreener：CSDN广告完全过滤、人性化脚本优化 (homepage: CSDNGreener GitHub) and AdGuard Extra (homepage: AdGuardExtra GitHub). This is my only recommended extension for userscript support since many userscripts don't function correctly under Greasemonkey, and Tampermonkey is no longer open source.	Userscript support for browsers, open source.
Web Archives	GitHub	Desktop	Android		View archived and cached versions of web pages on various search engines, such as the Wayback Machine and Archive․is.

Next: 4. Search Engines