Is "Firefox Multi-Account Containers" on Firefox Add-ons Safe to Install?

Firefox · firefox · v8.3.7

About This Extension The Firefox Multi-Account Containers extension lets you carve out a separate box for each of your online lives – no more opening a different browser just to check your work email! Under the hood, it separates website storage into tab-specific Containers. Cookies downloaded by one Container are not available to other Containers. You can even integrate individual Containers with Mozilla VPN to protect your browsing and location. With the Firefox Multi-Account Containers extension, you can... Sign in to two different accounts on the same site (for example, you could sign in to work email and home email in two different Container tabs. Keep different kinds of browsing far away from each other (for example, you might use one Container tab for managing your Checking Account and a different Container tab for searching for new songs by your favorite band) Avoid leaving social-network footprints all over the web (for example, you could use a Container tab for signing in to a social network, and use a different tab for visiting online news sites, keeping your social identity separate from tracking scripts on news sites) Protect your browsing activity in individual Containers using Mozilla VPN, so you can shop while travelling abroad but check your bank account from a server in your home country. After installing the Firefox Multi-Account Containers extension, click the Containers icon to edit your Containers. Change their colors, names, and icons. Long-click the new tab button to open a new Container tab. For more information on how to use Multi-Account Containers, visit our help articles: All about Multi Account Containers Multi Container user - how to use Mozilla VPN VPN subscriber - how to use Multi Account Containers

Risk Assessment

Analyzed
100
out of 100
CRITICAL

292 security findings detected across all analyzers

Firefox extension requesting 17 permissions

Severity Breakdown

0
Critical
159
High
133
Medium
0
Low
0
Info

Finding Categories

158
Malware Signatures
1
Obfuscation
3
Network
128
IoC Indicators

YARA Rules Matched

9 rules(158 hits)
postinstall network communication postinstall file manipulation postinstall file download postinstall persistence mechanism postinstall system command postinstall obfuscation postinstall environment access postinstall crypto operations NoUseWeakRandom

Requested Permissions

17 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
management

Manage other installed extensions

Dangerous
nativeMessaging

Exchange messages with programs outside the browser

Dangerous
proxy

Control the browser's proxy settings

Dangerous
cookies

Read and modify cookies on all sites

High
history

Read and modify your browsing history

High
webRequestBlocking

Block network requests before they complete

High
webRequest

Intercept, modify, and block all network requests

High
activeTab
Medium
tabs
Medium
bookmarks
Medium
browsingData
Medium
contextMenus
Low
contextualIdentities
Low
idle
Low
storage
Low
unlimitedStorage
Low

About This Extension

<strong>About This Extension</strong> The Firefox Multi-Account Containers extension lets you carve out a separate box for each of your online lives – no more opening a different browser just to check your work email! Under the hood, it separates website storage into tab-specific Containers. Cookies downloaded by one Container are not available to other Containers. You can even integrate individual Containers with Mozilla VPN to protect your browsing and location. With the Firefox Multi-Account Containers extension, you can... <ul><li>Sign in to two different accounts on the same site (for example, you could sign in to work email and home email in two different Container tabs.</li><li>Keep different kinds of browsing far away from each other (for example, you might use one Container tab for managing your Checking Account and a different Container tab for searching for new songs by your favorite band)</li><li>Avoid leaving social-network footprints all over the web (for example, you could use a Container tab for signing in to a social network, and use a different tab for visiting online news sites, keeping your social identity separate from tracking scripts on news sites)</li><li>Protect your browsing activity in individual Containers using Mozilla VPN, so you can shop while travelling abroad but check your bank account from a server in your home country.</li></ul> After installing the Firefox Multi-Account Containers extension, click the Containers icon to edit your Containers. Change their colors, names, and icons. Long-click the new tab button to open a new Container tab. <strong>For more information on how to use Multi-Account Containers, visit our help articles:</strong> <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/d0cd767dac5a88fa1f511985303276e82cf6be9fa92f0b1cc7d31d53c99a16be/https%3A//support.mozilla.org/en-US/kb/containers/" rel="nofollow">All about Multi Account Containers</a> <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/6b454da72274d31d0abfa1d2fbdda8fb151d78df071a5d3b8908874da5ce9b9d/https%3A//support.mozilla.org/en-US/kb/protect-your-container-tabs-mozilla-vpn/" rel="nofollow">Multi Container user - how to use Mozilla VPN</a> <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/da1147c4692c2ac8a7f75dbab06c6ea351b04f59d13154dbd77d50145eeb3241/https%3A//support.mozilla.org/en-US/kb/use-multi-account-containers-mozilla-vpn/" rel="nofollow">VPN subscriber - how to use Multi Account Containers</a>

Detailed Findings

164 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
36
IP Addresses
8
Domains
87
Strings
128

All Indicators · 128

URL
detected URL: https://$

XIOC detected URL: https://$

extracted_from_files

Domain
detected Domain: assignmanager.open

XIOC detected Domain: assignmanager.open

extracted_from_files

URL
detected URL: https://github.com/mozilla-l10n/multi-account-containers-l10n/workflows/L10n%20Linter/badge.svg)

XIOC detected URL: https://github.com/mozilla-l10n/multi-account-containers-l10n/workflows/L10n%20Linter/badge.svg)

extracted_from_files

URL
detected URL: https://github.com/mozilla/multi-account-containers

XIOC detected URL: https://github.com/mozilla/multi-account-containers

extracted_from_files

URL
detected URL: https://mzl.la/2gJtIZ4

XIOC detected URL: https://mzl.la/2gJtIZ4

extracted_from_files

URL
detected URL: https://bit.ly/fb-share-mac-addon

XIOC detected URL: https://bit.ly/fb-share-mac-addon

extracted_from_files

URL
detected URL: http://bit.ly/tweet-100-tabs-mac-addon

XIOC detected URL: http://bit.ly/tweet-100-tabs-mac-addon

extracted_from_files

URL
detected URL: https://www.mozilla.org/favicon.ico

XIOC detected URL: https://www.mozilla.org/favicon.ico

extracted_from_files

URL
detected URL: https://stackoverflow.com/questions/105034/create-guid-uuid-in-javascript

XIOC detected URL: https://stackoverflow.com/questions/105034/create-guid-uuid-in-javascript

extracted_from_files

URL
detected URL: https://bugzil.la/1314674

XIOC detected URL: https://bugzil.la/1314674

extracted_from_files

URL
detected URL: https://github.com/mozilla/testpilot-containers/issues/608

XIOC detected URL: https://github.com/mozilla/testpilot-containers/issues/608

extracted_from_files

Hash
detected MD5 Hash: b1a78e0471da2a1732727efd2833ff20

XIOC detected MD5 Hash: b1a78e0471da2a1732727efd2833ff20

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

URL
detected URL: https://accounts.firefox.com/?service=sync&action=email&context=fx_desktop_v3&entrypoint=multi-account-containers&utm_source=addon&utm_medium=panel&utm_campaign=container-sync&brand=mozilla

XIOC detected URL: https://accounts.firefox.com/?service=sync&action=email&context=fx_desktop_v3&entrypoint=multi-account-containers&utm_source=addon&utm_medium=panel&utm_campaign=container-sync&brand=mozilla

extracted_from_files

URL
detected URL: https://github.com/Rob--W/bookmark-container-tab/

XIOC detected URL: https://github.com/Rob--W/bookmark-container-tab/

extracted_from_files

URL
detected URL: https://github.com/mozilla/testpilot-containers/issues/626

XIOC detected URL: https://github.com/mozilla/testpilot-containers/issues/626

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1215376#c16

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1215376#c16

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1352102

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1352102

extracted_from_files

URL
detected URL: https://support.mozilla.org/en-US/kb/manage-extension-shortcuts-firefox

XIOC detected URL: https://support.mozilla.org/en-US/kb/manage-extension-shortcuts-firefox

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1295072

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1295072

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/API/tabs/move):

XIOC detected URL: https://developer.mozilla.org/en-US/Add-ons/WebExtensions/API/tabs/move):

extracted_from_files

URL
detected URL: https://pontoon.mozilla.org/projects/firefox-multi-account-containers/).

XIOC detected URL: https://pontoon.mozilla.org/projects/firefox-multi-account-containers/).

extracted_from_files

URL
detected URL: https://www.mozilla.org/MPL/2.0/).

XIOC detected URL: https://www.mozilla.org/MPL/2.0/).

extracted_from_files

URL
detected URL: http://www.bohemiancoding.com/sketch

XIOC detected URL: http://www.bohemiancoding.com/sketch

extracted_from_files

URL
detected URL: https://sketchapp.com

XIOC detected URL: https://sketchapp.com

extracted_from_files

URL
detected URL: http://creativecommons.org/ns#

XIOC detected URL: http://creativecommons.org/ns#

extracted_from_files

URL
detected URL: https://github.com/mozilla/multi-account-containers/issues/847

XIOC detected URL: https://github.com/mozilla/multi-account-containers/issues/847

extracted_from_files

URL
detected URL: https://github.com/mozilla/testpilot-containers/issues/421

XIOC detected URL: https://github.com/mozilla/testpilot-containers/issues/421

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

URL
detected URL: https://www.mozilla.org/about/governance/policies/participation/).

XIOC detected URL: https://www.mozilla.org/about/governance/policies/participation/).

extracted_from_files

URL
detected URL: https://www.mozilla.org/about/governance/policies/participation/reporting/)'

XIOC detected URL: https://www.mozilla.org/about/governance/policies/participation/reporting/)'

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/page.cgi?id=etiquette.html).

XIOC detected URL: https://bugzilla.mozilla.org/page.cgi?id=etiquette.html).

extracted_from_files

Domain
detected Domain: identity.name

XIOC detected Domain: identity.name

extracted_from_files

URL
detected URL: https://support.mozilla.org/kb/containers

XIOC detected URL: https://support.mozilla.org/kb/containers

extracted_from_files

URL
detected URL: https://github.com/mozilla/multi-account-containers#readme

XIOC detected URL: https://github.com/mozilla/multi-account-containers#readme

extracted_from_files

Domain
detected Domain: city.name

XIOC detected Domain: city.name

extracted_from_files

Domain
detected Domain: radiobtn.name

XIOC detected Domain: radiobtn.name

extracted_from_files

Domain
detected Domain: currenttab.id

XIOC detected Domain: currenttab.id

extracted_from_files

Domain
detected Domain: mzl.la

XIOC detected Domain: mzl.la

extracted_from_files

Domain
detected Domain: bit.ly

XIOC detected Domain: bit.ly

extracted_from_files

Domain
detected Domain: www.mozillllllllllllllllllllllllllllllllllllla.org

XIOC detected Domain: www.mozillllllllllllllllllllllllllllllllllllla.org

extracted_from_files

Domain
detected Domain: www.mozillllllllllllllllllllllllllllla.org

XIOC detected Domain: www.mozillllllllllllllllllllllllllllla.org

extracted_from_files

Domain
detected Domain: e.target.id

XIOC detected Domain: e.target.id

extracted_from_files

Domain
detected Domain: proxyinfo.host

XIOC detected Domain: proxyinfo.host

extracted_from_files

Domain
detected Domain: editedidentity.name

XIOC detected Domain: editedidentity.name

extracted_from_files

Domain
detected Domain: containername.select

XIOC detected Domain: containername.select

extracted_from_files

Domain
detected Domain: el.id

XIOC detected Domain: el.id

extracted_from_files

Domain
detected Domain: proxy.host

XIOC detected Domain: proxy.host

extracted_from_files

URL
detected URL: https://support.mozilla.org/kb/protect-your-container-tabs-mozilla-vpn

XIOC detected URL: https://support.mozilla.org/kb/protect-your-container-tabs-mozilla-vpn

extracted_from_files

URL
detected URL: https://www.mozilla.org/products/vpn

XIOC detected URL: https://www.mozilla.org/products/vpn

extracted_from_files

URL
detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1340930

XIOC detected URL: https://bugzilla.mozilla.org/show_bug.cgi?id=1340930

extracted_from_files

Domain
detected Domain: accounts.firefox.com

XIOC detected Domain: accounts.firefox.com

extracted_from_files

Domain
detected Domain: achievement.name

XIOC detected Domain: achievement.name

extracted_from_files

Domain
detected Domain: element.click

XIOC detected Domain: element.click

extracted_from_files

Domain
detected Domain: backbutton.click

XIOC detected Domain: backbutton.click

extracted_from_files

Domain
detected Domain: tout.name

XIOC detected Domain: tout.name

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: currentcontainer.name

XIOC detected Domain: currentcontainer.name

extracted_from_files

Domain
detected Domain: container.name

XIOC detected Domain: container.name

extracted_from_files

Domain
detected Domain: reopenedtab.id

XIOC detected Domain: reopenedtab.id

extracted_from_files

Domain
detected Domain: element.style

XIOC detected Domain: element.style

extracted_from_files

Domain
detected Domain: mullvad.net

XIOC detected Domain: mullvad.net

extracted_from_files

Domain
detected Domain: noneoption.id

XIOC detected Domain: noneoption.id

extracted_from_files

Domain
detected Domain: sender.id

XIOC detected Domain: sender.id

extracted_from_files

URL
detected URL: http://mozilla.org/MPL/2.0/.

XIOC detected URL: http://mozilla.org/MPL/2.0/.

extracted_from_files

Domain
detected Domain: localidentity.name

XIOC detected Domain: localidentity.name

extracted_from_files

Domain
detected Domain: syncidentity.name

XIOC detected Domain: syncidentity.name

extracted_from_files

Domain
detected Domain: localmatch.name

XIOC detected Domain: localmatch.name

extracted_from_files

Domain
detected Domain: getident.name

XIOC detected Domain: getident.name

extracted_from_files

Domain
detected Domain: identityinfo.name

XIOC detected Domain: identityinfo.name

extracted_from_files

Domain
detected Domain: newwindowobj.id

XIOC detected Domain: newwindowobj.id

extracted_from_files

Domain
detected Domain: tabs.map

XIOC detected Domain: tabs.map

extracted_from_files

Domain
detected Domain: identities.map

XIOC detected Domain: identities.map

extracted_from_files

Domain
detected Domain: windowobj.id

XIOC detected Domain: windowobj.id

extracted_from_files

Domain
detected Domain: tabs.at

XIOC detected Domain: tabs.at

extracted_from_files

Domain
detected Domain: stackoverflow.com

XIOC detected Domain: stackoverflow.com

extracted_from_files

Domain
detected Domain: bugzil.la

XIOC detected Domain: bugzil.la

extracted_from_files

Domain
detected Domain: support.mozilla.org

XIOC detected Domain: support.mozilla.org

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: constants.open

XIOC detected Domain: constants.open

extracted_from_files

Domain
detected Domain: command.name

XIOC detected Domain: command.name

extracted_from_files

Domain
detected Domain: this.new

XIOC detected Domain: this.new

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: list.map

XIOC detected Domain: list.map

extracted_from_files

Domain
detected Domain: changeinfo.contextualidentity.name

XIOC detected Domain: changeinfo.contextualidentity.name

extracted_from_files

Domain
detected Domain: this.menu

XIOC detected Domain: this.menu

extracted_from_files

Domain
detected Domain: bookmarktreenode.id

XIOC detected Domain: bookmarktreenode.id

extracted_from_files

Domain
detected Domain: browser.tabs.group

XIOC detected Domain: browser.tabs.group

extracted_from_files

Domain
detected Domain: servercountry.name

XIOC detected Domain: servercountry.name

extracted_from_files

Domain
detected Domain: option.id

XIOC detected Domain: option.id

extracted_from_files

Domain
detected Domain: u.it

XIOC detected Domain: u.it

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

Domain
detected Domain: www.amazon.com

XIOC detected Domain: www.amazon.com

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: newtab.id

XIOC detected Domain: newtab.id

extracted_from_files

Domain
detected Domain: this.open

XIOC detected Domain: this.open

extracted_from_files

Domain
detected Domain: extensioninfo.id

XIOC detected Domain: extensioninfo.id

extracted_from_files

Domain
detected Domain: www.bohemiancoding.com

XIOC detected Domain: www.bohemiancoding.com

extracted_from_files

Domain
detected Domain: sketchapp.com

XIOC detected Domain: sketchapp.com

extracted_from_files

Domain
detected Domain: kr.tf

XIOC detected Domain: kr.tf

extracted_from_files

Domain
detected Domain: i.cm

XIOC detected Domain: i.cm

extracted_from_files

URL
detected Domain: purl.org

XIOC detected Domain: purl.org

extracted_from_files

Domain
detected Domain: creativecommons.org

XIOC detected Domain: creativecommons.org

extracted_from_files

Domain
detected Domain: v.tm

XIOC detected Domain: v.tm

extracted_from_files

Domain
detected Domain: pontoon.mozilla.org

XIOC detected Domain: pontoon.mozilla.org

extracted_from_files

Domain
detected Domain: warning-icon.show

XIOC detected Domain: warning-icon.show

extracted_from_files

Domain
detected Domain: img.menu

XIOC detected Domain: img.menu

extracted_from_files

Domain
detected Domain: moz-vpn-controller-content.show

XIOC detected Domain: moz-vpn-controller-content.show

extracted_from_files

Domain
detected Domain: g.nf

XIOC detected Domain: g.nf

extracted_from_files

Domain
detected Domain: jb.bd

XIOC detected Domain: jb.bd

extracted_from_files

Domain
detected Domain: n.sg

XIOC detected Domain: n.sg

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain
detected Domain: td3f4df980a5e4d80305c71a30a7f7fd3.b1a78e0471da2a1732727efd2833ff20.addons.mozilla.org

XIOC detected Domain: td3f4df980a5e4d80305c71a30a7f7fd3.b1a78e0471da2a1732727efd2833ff20.addons.mozilla.org

extracted_from_files

Domain
detected Domain: www.mozilla.org

XIOC detected Domain: www.mozilla.org

extracted_from_files

Domain
detected Domain: bugzilla.mozilla.org

XIOC detected Domain: bugzilla.mozilla.org

extracted_from_files

Domain
detected Domain: mozilla.org

XIOC detected Domain: mozilla.org

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

IP
detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: conduct.md

XIOC detected Domain: conduct.md

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain
detected Domain: backgroundlogic.new

XIOC detected Domain: backgroundlogic.new

extracted_from_files

Domain
detected Domain: messagehandler.lastcreatedtab.id

XIOC detected Domain: messagehandler.lastcreatedtab.id

extracted_from_files

Domain
detected Domain: event.target.id

XIOC detected Domain: event.target.id

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Firefox Multi-Account Containers is a Firefox Add-ons extension published by Firefox. Version 8.3.7 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 292 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 159 finding(s)
  • Medium: 133 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Firefox Multi-Account Containers is published by Firefox on the Firefox Add-ons marketplace. The extension has approximately 401K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions