Microsoft Axes Vulnerable Browser Extensions in Favor of Secure Manifest V3

Microsoft has announced plans to fully retire Manifest V2 (MV2) browser extension support in Microsoft Edge by early 2027, completing a transition to the more restrictive Manifest V3 (MV3) extension platform. The move is intended to improve browser security and performance by imposing stricter permission controls and preventing extensions from executing remotely hosted code.

The change will affect Edge users on Windows, macOS, and Linux across Canary, Dev, Beta, and Stable channels. According to Microsoft, the enterprise deprecation process will begin globally in early January 2027 and is expected to finish by late April 2027.

Manifest V3 addresses security concerns related to remotely hosted code, which allows extensions to download and execute JavaScript or other logic from an external server after installation. This approach creates a risk of extension behavior changing without review through the browser's add-on store.

Microsoft said MV2 extensions will start displaying deprecation warnings in the Edge Manage Extensions page at edge://extensions and on Microsoft Edge Add-ons product pages. Consumer users will have MV2 extensions disabled by default during the rollout, although they may initially be able to manually re-enable affected extensions. This option will be phased out over time.