# LinkedIn is scanning your browser extensions to fingerprint and profile users

Source: https://farcaster.xyz/kazani/0x6a1cbbd2
Kiwi News: https://news.kiwistand.com/stories/LinkedIn-is-scanning-your-browser-extensions-to-fingerprint-and-profile-users?index=0x69f470091abb9c97c161f1b413313e52b1b5b7539f08cc7f48eae3a8dabcf9047b3384e4
Submitted by @kazani on 2026-05-01 UTC, 1 upvote, 0 comments

## Summary

LinkedIn is scanning users' browser extensions without explicit consent or disclosure in its privacy policy, according to an article on 404privacy.com. The article says the practice has run since at least 2017 and now covers over 6,278 extensions, with the scan working by attempting to fetch specific files from chrome-extension:// URLs to detect installed extensions. It says the collected data is appended to users' LinkedIn profiles and can be used to infer traits such as job searching activity, political leanings, religious practices, and disability status. A criminal investigation has been opened by the Cybercrime Unit of the Bavarian Central Cybercrime Prosecution Office in Germany.

## Article

LinkedIn Is Scanning Your Browser Extensions. This Is How They Use the Data.

https://404privacy.com/blog/linkedin-is-scanning-your-browser-extensions-this-is-how-they-use-the-data/

LinkedIn is scanning users browser extensions, collecting data without explicit consent or disclosure in their privacy policy.

This practice of scanning extensions has been ongoing since at least 2017 and has expanded to track over 6,278 extensions.

The data collected can be used to infer personal information about users, such as job searching activity, political leanings, religious practices, and disability status.

LinkedIn's extension scan is part of a larger device fingerprinting system (APFC/DNA) that collects numerous browser and device characteristics.

The extension scan works by attempting to fetch specific files from chrome-extension:// URLs; a successful fetch indicates the extension is installed.

This collected data is appended to users existing professional profiles on LinkedIn, linking browsing behavior to verified identities.

The practice can reveal an organization's internal tooling, security products, and workflows by analyzing employees' browser extensions.

The data collected by LinkedIn can be integrated with third-party datasets, enriching user profiles and enabling cross-platform tracking.

LinkedIn has reportedly taken enforcement actions against users based on the presence of specific extensions, without user knowledge.

A criminal investigation into LinkedIn's practices has been opened by the Cybercrime Unit of the Bavarian Central Cybercrime Prosecution Office in Germany.