
When you install an add-on through another website, Firefox checks to make sure that the add-on is digitally signed. Where would I encounter unsigned add-ons?Īdd-ons installed through the official Firefox Add-ons site go through security checks before they are published. Other types of add-ons do not need to be signed. Add-on signing in Firefox helps protect against browser hijackers and other malware by making it harder for them to be installed.įirefox prevents you from installing unsigned add-ons and disables any unsigned add-ons that are already installed.Įxtensions (add-ons that add features to Firefox), language packs and Themes (add-ons that change the visual appearance of Firefox) need to be signed. The add-on signing process requires developers to follow Mozilla Developer guidelines.

While Firefox currently has a blocklist system, it is becoming difficult to track and block the growing number of malicious, or unverified add-ons.


Developers: To learn more about the add-on signing guidelines, see Signing and distributing your add-on and Review Policies at Mozilla Developer Network.
