Microsoft Edge Retires Manifest V2 Extensions, Impacting Privacy Tools
Microsoft is phasing out Manifest V2 extensions in Edge, forcing popular privacy and content-blocking tools to adapt to the new Manifest V3 standard or risk being disabled.
Microsoft has begun the process of retiring Manifest V2 (MV2) extensions within its Edge browser, a move that will significantly impact users relying on certain privacy and content-blocking tools. The company aims for full retirement for consumers by the end of 2026, with managed enterprise environments to follow in early 2027. Microsoft justifies this transition by noting that a vast majority of frequently used MV2 extensions in the Edge Add-ons store have already migrated to the newer Manifest V3 (MV3) standard.
Starting this month, some Edge users will encounter warnings within the browser's extension management interface and on the Edge Add-ons store. Over the coming months, MV2 extensions will be progressively disabled by default. This change primarily affects extensions that modify web requests, headers, redirects, or responses, functionalities crucial for privacy and content filtering. To remain operational, these extensions must be redesigned to comply with MV3's architectural changes.
The shift to MV3 is driven by Microsoft's stated goals of enhancing browser security and performance. MV3 replaces some of the broad request-interception capabilities and persistent background code common in MV2 with more constrained, declarative mechanisms. While these changes aim to reduce potential attack surfaces and improve efficiency, they also remove certain functionalities that sophisticated privacy and content-blocking extensions have historically relied upon.
One of the key technical challenges introduced by MV3 is the limitation on the number of rules extensions can implement. Browsers impose ceilings on these rules, with Chrome, for instance, documenting a minimum of 30,000 static rules but with strict limits on how many can be active simultaneously. This constraint means that extensions must find more efficient ways to manage their filtering and blocking capabilities, rather than relying on extensive rule sets.
Despite these limitations, Microsoft emphasizes that the transition is not intended to ban ad blockers. Instead, it requires developers to innovate and find alternative methods to maintain their effectiveness within the new MV3 framework. This necessitates a fundamental rethinking of how these tools operate, moving away from broad interception towards more targeted and efficient approaches.
Malwarebytes has already navigated this transition with its free Browser Guard extension. The company reports that adapting to MV3 required a complete rebuild of its approach, focusing on behavioral analysis, pattern recognition, and faster response times. While the underlying technology has changed, Malwarebytes asserts that Browser Guard continues to offer robust protection against online threats, including phishing and malicious sites, by leveraging its new MV3-compliant architecture.
The retirement of MV2 extensions marks a significant development in browser security and extension development. Users of privacy-focused tools are advised to check for MV3-compatible versions or explore alternatives to ensure their continued protection against online threats. Developers are urged to prioritize migration to MV3 to maintain compatibility and leverage the enhanced security features of the new standard.