14 Browser Extensions That Quietly Eat RAM and Privacy

What an extension actually hooks into

A Chromium extension is not a passive icon: it is code the browser agrees to run, and the expensive kind declares a content script matched against all URLs. That script is injected into every page you open, so its memory cost repeats per tab rather than per browser — an extension holding twenty megabytes in its process can multiply into hundreds across a dozen tabs. Since Manifest V3, background pages became service workers that idle out between events, which helped; the per-page injections did not go away.

The privacy half is simpler: host permissions. A permission reading 'Read and change all your data on all websites' hands the extension the DOM of every page — every field you type into, every price you see. Most extensions never misuse it, but the grant is binary: either you trust the publisher with everything, or you do not install. That is why the audit below weighs permissions as heavily as RAM.

The fourteen, from earn-their-keep to remove-now

The heavyweights that earn it: an ad blocker costs real memory running filter lists against every request, but on an ad-heavy page it also blocks the heaviest payloads, so busy pages often load leaner with it than without. Password managers inject into every form field on the web — a deliberate, defensible trade. Grammar checkers run on every text field, including the ones nobody will ever proofread. AI sidebars keep page contents in working memory and send them to a server; whether that is a feature or a leak depends on what you paste.

The ones that rarely earn it: coupon and cashback buttons read every shopping page and rewrite affiliate links so the commission routes to them; price trackers run background timers polling for changes; dark-mode injectors re-render the page you just loaded; new-tab replacements ship telemetry along with the wallpaper; screenshot tools and video downloaders ask for all-sites access to do a job the browser half-does already; free-VPN extensions are proxies with a business model; tab managers hold references to everything you left open; PDF converters ask for all sites to merge one local file and famously hijack the default search on the side; and the fourteenth classic is a second ad blocker beside the first — two filters fighting over every request and doubling the cost.

• The host permission reads 'Read and change all your data on all websites' on a tool with one narrow job
• The browser already ships the feature — screenshots, dark mode, password saving, translations
• The business model is shopping: coupon and cashback extensions rewrite affiliate links on every page
• Two ad blockers are installed at once, filtering the same requests twice
• The extension arrived bundled with an installer, not by your deliberate choice

The audit that takes five minutes

Open chrome://extensions or edge://extensions, turn everything off, then re-enable over a week only what you actually miss — that is the honest test of value. In Chrome and Edge, Shift+Esc opens the browser task manager and shows each extension's process next to your tabs, which turns the RAM question from folklore into numbers. When the decision is final, remove rather than disable: disabled extensions still hold their permissions in every Chromium build we have checked.

Before installing anything new, read the permission card first and treat 'all websites' as the price of a used car, not a checkbox. One well-chosen ad blocker, one password manager and nothing else is the setup that survives most audits. And if the browser still feels heavy after the purge, the web itself got heavier — that is a different problem with a different post.

Questions and Answers

Read next