Get it!

Latest stable

Get NoScript for Firefox NoScript for Firefox (desktop and mobile!), Tor Browser and other Mozilla-based browsers from Mozilla Add-ons
Get NoScript for Chromium NoScript for Chrome and other Chromium-based browsers (eg. Edge, Brave, Vivaldi...) from the Chrome Web Store

Direct download for Firefox

You can get the latest stable version for Firefox desktop only also using this direct NoScript 11.4.42 download link. To install, just drag and drop it onto your address bar.

v 11.4.42
============================================================
x [nscl] Further SyncMessage simplification
x Mitigate race conditions on startup

Development build

NoScript development happens very fast to keep up with emerging web threats. If you're brave enough and you need a specific feature or fix not released yet, or you simply want to provide feedback before official release, you may want to try the latest release candidate.

RC for Firefox

Install NoScript 11.4.43rc5 on Firefox Desktop by simply clicking here.

On Firefox for Android, unfortunately, a pre-release can only be downloaded (same link as above) and temporarily installed on Nightly by using the web-ext tool, which is only suitable for hardcore developers and contributors.

RC for Chromium

You can Download NoScript 11.4.43rc5 for Chromium-based browsers here.

In order to install this pre-release until the next stable version reaches the Chrome Store, you need to unzip it and load it as an unpacked extension in developer mode.

Please follow these steps:

Open the Extension Management page by navigating to chrome://extensions. Alternatively, open this page by clicking on the Extensions menu button and selecting Manage Extensions at the bottom of the menu. Alternatively, open this page by clicking on the Chrome menu, hovering over More Tools then selecting Extensions
Enable Developer Mode by clicking the toggle switch next to Developer mode.
Unzip the zipped "noscript-11.4.43rc5-chrome.zip" package to a directory of your choice.
Click the [Load unpacked] button and select the extension directory you've unzipped the extension to (the one containing the "manifest.json" file)

You're done. Happy testing!

Recent development history

v 11.4.43rc5
============================================================
x Fixed prompts factory regression on Android

v 11.4.43rc4
============================================================
x Improved prompts factory

v 11.4.43rc3
============================================================
x Refactor browser-dependent UI CSS

v 11.4.43rc2
============================================================
x [build] accept "signed" as a "sign" synonym.
x [nscl]  Fixed SyncMessage regression in the MV2 code paths

v 11.4.43rc1
============================================================
x [nscl] Block file: media sources independently from CSP
x Update copyright dates
x [nscl] MV3-compatible SyncMessage implementation
x Add match_origin_as_fallback to manifest content scripts
x Fix Tor Browser falling back to a serif font for NoScript
  UI

v 11.4.42rc2
============================================================
x [nscl] Further SyncMessage simplification

v 11.4.42rc1
============================================================
x Mitigate race conditions on startup

v 11.4.41rc4
============================================================
x [nscl] Fixed Chromium worker patching regression caused by
  failSafe scope

v 11.4.41rc3
============================================================
x [nscl] Force service workers to be patched bypassing cache

v 11.4.41rc2
============================================================
x [nscl] More robust SyncMessage implementation
x [nscl] Enhanced remote worker patching
x [nscl] Remove missing source map warning for
  browser-polyfill.js
x [nscl] Better console handling in execution context
  patches

v 11.4.41rc1
============================================================
x Reduce console spam on non-debugging instances
x [nscl] Avoid patched workers breakage if console API is
  disabled (thanks ayi for reporting)

v 11.4.40rc1
============================================================
x [nscl] Fix patched workers failures caused by Firefox
  webRequest filters disconnect() breaking on large files
  (thanks barbaz for reporting)

v 11.4.39rc4
============================================================
x [nscl] Fixed regression in replaying property interactions
  with shadowed/patched workers

v 11.4.39rc3
============================================================
x [nscl] Improved WebGL-hooking and worker patching
  stability
x [L10n] Lower to 90% the threshold for including a new
  translation
x [L10n] Updated he, pt_PT

v 11.4.39rc2
============================================================
x [nscl] Prevent patchWindow from throwing on SOP violations

v 11.4.39rc1
============================================================
x [nscl] Correctly propagate extra arguments to shadowed
  worker constructors

v 11.4.38rc2
============================================================
x [nscl] Reuse uuid() in SyncMessage

v 11.4.38rc1
============================================================
x Updated file exclusions on packaging
x [nscl] Simpler and safer SyncMessage logic on
  Chromium-based browsers (thanks NDevTK for reporting)
x Fixed missing frameId on interception reporting

v 11.4.37rc3
============================================================
x [nscl] Do not patch windows with WebGLHook if webgl is
  globally disabled

v 11.4.37rc2
============================================================
x [nscl] Do not patch workers if webgl is globally disabled

v 11.4.37rc1
============================================================
x [L10n] Updated uk
x [nscl] Workers-aware WebGL Hook

v 11.4.36rc1
============================================================
x [nscl] Merged MV3-compatible branch
x [XSS] Take in account the whole redirection chain (thanks
  NDevTK for reporting)

v 11.4.35rc4
============================================================
x Improved lazy_load capability (optimization and
  notification)
x [nscl] Slight optimization of NOSCRIPT element emulation
  loop
x Automatically add extra capabilities to policyTypesMap
x [L10n] Updated de, fr, tr, ru, zh_CN

v 11.4.35rc3
============================================================
x Gracefully handle new capabilities still unknown to the
  settings host (e.g. Tor/Mullvad browser), if any
x Configurable "lazy_load" capability (see
  https://github.com/whatwg/html/issues/5250)
x [L10n] Updated fr

v 11.4.35rc2
============================================================
x Prefetch all CSS subresources (1st party included) in
  private contexts where both unchecked_css and scripting
  capabilities are disabled
x Forcibly neutralize lazy loading attributes when scripting
  is disabled

v 11.4.35rc1
============================================================
x [nscl] Restored SyncMessage compatibility with Firefox 78
  and below
x [L10n] Updated uk
x Lock nscl version on stable releases

Deprecated, obsolete and unsupported "Classic" versions

You can still download NoScript "Classic" (5.1.9) (SHA256) for Seamonkey, Palemoon, Waterfox Classic and possibly other "vintage" (pre-Gecko 57) Firefox forks here.

Notice: you may need to open about:config and set your xpinstall.signatures.required preference to false in order to install NoScript 5.x, since Mozilla doesn't support signatures for legacy add-ons anymore. If you're using a non ESR Firefox, you may also need this hack.

Users of Firefox 58 and below are urged to upgrade their very unsafe browser. For those few who can't,

Disclaimer

We cannot update nor support NoScript 5.x and below anymore, because it was based on a completely different and now obsolete technology. However you can still find usage information and a FAQ section for those ancient versions in the NoScript Classic archived website.