Why it's a strong pick

NoScript blocks JavaScript, embedded objects and media by default, so they run only on domains you choose. The official site calls it free open source software, and the repository carries the GPL-3.0 licence. The Chrome Web Store version is 13.6.34, updated 22 September 2026. It is built for Manifest V3. The trade-off: many sites break until you allow them.

What it does

NoScript puts you in charge of what runs on each site. By default it blocks scripts, embedded objects and media. You then allow them for the domains you trust. The official site lists pre-emptive script blocking, per-site trust and anti-XSS protection. It is also built into the Tor Browser, per the same site.

Key features

Block by default. JavaScript, embedded objects and media stay off until you allow them.
Per-site trust. Allow scripts only from the domains you choose.
Anti-XSS protection. Listed on the official site.
Exploit mitigation claim. The developer says it mitigates exploits including Spectre and Meltdown. That is the developer's claim, not our test.
30 languages. Per the store listing.
Chromium and Firefox-based browsers. NoScript 13 is a cross-browser version, per the store listing.

Who it's for

NoScript is for privacy-minded and security-conscious people who accept that many sites will break until they allow scripts. If you want something lighter, Privacy Badger learns trackers for you. For a tool that limits what scripts can read from your browser instead of blocking them, see JShelter. To hide cookie pop-ups, see I Still Don't Care About Cookies.

Is NoScript free and open source?

Yes to both. The official site describes NoScript as "Free Open Source Software (FOSS)" and asks for donations. The source code is public on GitHub under the GNU General Public License version 3. The Chrome Web Store listing shows no price. We found no statement about needing an account, so we say: not stated.

Does NoScript work with Manifest V3?

Yes. The store listing says NoScript 13 is a cross-browser version for Chromium (Manifest V3) and Firefox-based browsers. The project's source manifest also sets manifest version 3. We quote the store version, 13.6.34, because the repository's main branch is already ahead of what the store ships.

What permissions does NoScript ask for?

The store listing does not list them, so we do not either. Chrome shows the exact list when you install. The project's source manifest asks for all-sites access and network-request control, as any script blocker must. Read the install prompt before you add it, and compare it with what a script blocker needs to do.

Does NoScript collect my data?

The store listing says the developer will not collect or use your data. The privacy policy it links to says NoScript collects zero data. Those are the developer's own statements, not an audit by us. A script blocker sees every page you visit, so read the policy yourself before you install.

FAQ

Why does a site look broken with NoScript on? Because the site needs scripts that NoScript blocks by default. Allow the site, then reload the page.

Does NoScript work on Firefox too? The store listing says NoScript 13 supports Chromium and Firefox-based browsers.

Where do I report a problem in Chrome? The store listing asks Chrome users to report issues on the NoScript support forum with "[Chrome]" in the subject.

Good to know

Expect broken pages at first. Start by allowing only the sites you use every day, such as your email and bank, and leave the rest blocked. Add others one at a time when you need them. That way you keep the protection and learn which sites truly need scripts. (Tip from the research and the store listing's support note, not a vendor claim.)

Other VPN and privacy tools to compare

NoScript is one of 12 picks in our VPN and privacy tools guide:

JShelter: limits the data websites can pull from your browser. The nearest neighbour to NoScript.
Privacy Badger: blocks trackers. It learns them for you instead of blocking scripts by default.
I Still Don’t Care About Cookies: handles cookie pop-ups.
ExpressVPN: A browser extension with two modes: a browser-only proxy, or a remote for the ExpressVPN desktop app. It needs a subscription.
NordVPN: A proxy extension that routes your browser traffic through NordVPN. It needs a NordVPN subscription.
Proton VPN: A browser VPN extension from Proton AG, the company behind Proton Mail. It has a free plan and covers browser traffic only.
Surfshark VPN: A lightweight Surfshark extension that protects browser traffic and adds ad, tracker and breach-alert tools. The 7-day trial needs payment details first.
Ghostery: An open-source tracker and ad blocker that also removes cookie pop-ups and shows tracker info for each site.
DuckDuckGo Search & Tracker Protection: Tracker blocking and HTTPS upgrades from DuckDuckGo. It also makes DuckDuckGo your default search engine.
ZeroOmega: Open-source proxy switcher for proxies you supply. Not a VPN: it provides no servers.
FoxyProxy: Open-source proxy switcher with per-site rules for proxies you supply. Not a VPN: it provides no servers.

NoScript