Limit a Chrome Extension’s Site Access and Understand Its Limits
By ON Lab · Sources checked November 6, 2026
In desktop Chrome, open Extensions → the extension's More menu → This can read and change site data to choose when a supported extension may access matching websites. “When you select the extension” is narrower than “On all sites.” However, site access is not a master switch for every permission the extension has.
Separate website access from the whole permission list
A web clipper might need to read a page you ask it to save. That does not mean you want it active automatically on every website. Chrome provides site-access controls for extensions that request the relevant host access, but Google states that those changes affect sites matching the extension's host permissions. Extensions working through lower-level network access, such as VPN or proxy settings, are outside that control.
Do not infer that restricting site access revokes a separate permission to use another browser capability. Google's permission explanations distinguish permissions requested by an extension; the site-data menu is one part of that picture. If the concern is a permission such as browsing history, inspect that permission and the developer's explanation rather than assuming a website allow-list disables it.
Read the controls for the right extension
- Open More → Extensions → Manage extensions.
- Find the exact extension and choose Details. Check its name so that you do not change an unrelated tool with a similar icon.
- Read the permissions and site-access settings shown. Record the current choice if you may need to restore it.
- Decide whether you need occasional access to the site you choose, automatic access to named sites, or no use of the extension at all.
Google says that some work or school computers block extensions. A missing or locked setting is a reason to consult the administrator or current help, not permission to remove organizational controls. This guide does not install, modify or reverse-engineer extension code.
Choose access that matches the task
| Choice | Documented behavior to expect |
|---|---|
| When you select the extension | It can access the current site in that tab or window when you invoke it. After closing the tab or window, invoke it again when needed. |
| On the current site | It may automatically read and change data on that site. |
| On all sites | It may automatically read and change data across sites covered by its requested access. |
The toolbar wording and Details wording are not identical in Google's current help: Details lists On select, On specific sites and On all sites. Use the displayed explanation and the official guide together rather than expecting an old screenshot's exact phrasing.
Maintain a list of allowed sites
In the extension's Details page, Google's procedure uses Permissions and Allowed sites. Choose Add to add an intended website. If that option is not visible, change the site-access choice to On specific sites. To remove an entry, use its More → Remove control.
Read the exact site before confirming. An allow-list of sites where the extension may work is not the same as an “all sites except these” exclusion list. If the latter is what you need, do not describe the former as equivalent. A developer's own settings might offer additional behavior, but that is extension-specific and is not established by Chrome's generic menu.
Check useful behavior without exposing private content
Our suggested comparison uses a harmless public page. Invoke the extension deliberately and see whether the intended operation works. Reopen its site-access setting and confirm the choice remained as intended. Then record the result, including whether Chrome asked you to reload. Save unfinished page work before reloading.
If the extension stops performing a needed action, do not widen access automatically. Check whether the chosen site matches its requested permissions and whether the action requires a separate documented capability. Ask the developer which permission is required for that operation. A successful clip is evidence of that operation, not proof that all background access is blocked.
When restriction is not enough
If you do not trust the extension or its requested capabilities exceed what you accept, Google documents switching it off in Manage extensions or removing it. Removal requires a separate confirmation. Read the developer's information about saved data or account-backed content before uninstalling; Chrome's generic removal procedure is not a promise about what happens inside the extension's service.
To reverse an experimental restriction, return to the recorded site-access choice or restore the specific allowed-site entry you removed. Recheck the setting and the intended task. Prefer that controlled correction over granting all-site access without knowing why it is needed.
Scope: Chrome's documented desktop extension controls and their host/network limitations. No extension was installed, inspected internally or tested for data collection. This is not a security audit or a guarantee that site restrictions revoke every other permission.