How to Block Pop-Ups and Manage Extensions in Safari

Safari already blocks most pop-ups out of the box, but the setting can be loosened site by site — sometimes by you, sometimes by a site that talked you into allowing “just this once.” Extensions are the other half of the story: they add genuinely useful powers to Safari, but a bad one can inject ads, redirect searches, and read more of your browsing than you would ever agree to. This guide shows how to lock pop-ups down properly, allow them only where a trusted site needs them, and install, review, and remove extensions with confidence.

Quick Answer

Open Safari Settings, go to the Websites tab, select Pop-up Windows, and set “When visiting other websites” to Block — then review the per-site list and remove allowances you do not recognise. For extensions, open Settings, then Extensions: uninstall anything unfamiliar, install new ones only from the App Store, and check each extension’s privacy permissions (shown in its settings panel) so it can only access the sites it genuinely needs.

Part 1: Block Pop-Ups Across All Sites

1. Open Safari and choose Safari menu, then Settings.
2. Click the Websites tab.
3. In the left-hand list, select Pop-up Windows.
4. At the bottom-right, find “When visiting other websites” and choose Block (or Block and Notify if you want a small alert when a pop-up is stopped, which is useful at first so you learn which sites try).

With this set, new sites cannot open pop-up windows at all. The list in the upper part of the panel shows sites that already have individual settings — review them next, because old allowances override the general rule.

Part 2: Manage Per-Site Pop-Up Allowances

The configured websites list in the Pop-up Windows panel is where good intentions go stale — a bank needed pop-ups in 2023, a scammy streaming site got allowed once by accident:

1. Read through the list of sites with individual settings.
2. For each site, click its dropdown and choose Block, Block and Notify, or Allow.
3. To remove a site’s special setting entirely (so the general rule applies), select it and click Remove.
4. Keep Allow only for sites you trust that demonstrably need pop-ups: some banking portals, exam platforms, and older work systems still open statements or sessions in pop-up windows.

Apple’s Safari pop-up support page describes the identical panel and notes that some legitimate sites require allowances — the trick is granting them deliberately rather than by accident.

The Difference Between a Pop-Up and a Notification

Many people chase “pop-ups” that are actually website notifications arriving through macOS — different setting, different panel:

1. In the same Websites tab, select Notifications.
2. Deny or remove every site you do not actively want updates from — scam sites abuse notifications to send fake virus warnings to your desktop.
3. Untick “Allow websites to ask for permission to send notifications” to end the permission requests themselves.

If fake warnings keep appearing on your desktop rather than inside web pages, notifications are the culprit — our guide on stopping pop-up ads and redirects in Safari walks through the complete cleanup including the scam-page escape.

Part 3: See What Extensions You Have

1. Open Safari Settings and click the Extensions tab.
2. Every installed extension is listed. Click each one and read what it does and when it was added (your memory is the audit tool here — if you cannot explain why an extension exists, it goes).
3. Notice the permissions described under each extension: some can read and modify all webpages you visit, which is appropriate for a password manager and alarming for a coupon finder.

Part 4: Remove or Disable Extensions Safely

• Disable: untick the extension’s checkbox in the Extensions list. It stops working immediately but stays installed — a good first test when you suspect one extension of breaking a site.
• Uninstall: select the extension and click Uninstall. Safari may tell you the extension came with an app; in that case, delete the companion app from the Applications folder to remove it fully.
• Test: after removing a suspect, quit Safari (Command + Q), reopen, and revisit the pages that misbehaved. Add extensions back one at a time if you removed several, to learn which was guilty.

Part 5: Install Extensions the Safe Way

1. Only install from the App Store: Safari Settings, Extensions, then “More Extensions” opens the curated store section. Apps there are reviewed and signed by Apple.
2. Prefer well-known developers with many reviews and recent updates. Read the privacy line — the App Store shows what data the extension can access.
3. Install one at a time and use Safari for a day before adding another, so cause and effect stay obvious.
4. Be sceptical of categories that commonly bundle junk: random “video downloaders,” coupon poppers, and “search enhancers” from unknown names.

Useful, reputable extension types include password managers, a respected content blocker, a reading-list tool, and your note app’s clipper. Two or three quality extensions beat ten freebies every time.

Control What Extensions Can See

Modern Safari lets you limit an extension per website:

1. Click the extension’s toolbar icon (or find it in Settings, Extensions) and look for its website access options.
2. Where offered, set access to “On specific websites” or approve sites one by one rather than “all websites.”
3. Check the Websites tab in Settings, where some extensions also appear as entries with per-site Allow/Deny controls.

An extension that only runs where you explicitly allow it is dramatically safer than one reading every page by default.

Common Mistakes and Helpful Tips

• Allowing pop-ups globally for one site. Always use the per-site list for the exception; never flip the general setting to Allow.
• Confusing notifications with pop-ups. Desktop warnings come from Notifications permission, not the pop-up setting — fix the right panel.
• Extension amnesia. Audit the Extensions tab twice a year; remove anything whose purpose you cannot state in one sentence.
• Installing extensions from web adverts. If a page offers you an extension, close the page. The App Store is the only front door you should use.
• Ignoring “this extension can read your browsing” warnings. They are precise, not boilerplate. Match the permission to the tool’s job, or choose another tool.

Conclusion

Pop-up control in Safari is two minutes of housekeeping: set the general rule to Block, prune the per-site allowances, and turn off notification begging. Extensions deserve the same discipline — install few, install from the App Store, review permissions, and remove without sentimentality. Together those habits keep Safari fast, quiet, and firmly under your control instead of the advertisers’.

Frequently Asked Questions

A site I trust says it needs pop-ups enabled. How do I allow only that site?

Visit the site, then open Safari Settings, Websites, Pop-up Windows. The site appears in the configured list — set its dropdown to Allow. Every other site keeps following your general Block rule.

Are content blockers from the App Store safe?

Generally yes — App Store extensions are reviewed, and reputable blockers cannot even see your browsing content; they hand Safari a rule list. Stick to well-known names with clear privacy policies.

How do I know if an extension is causing my Safari problems?

Disable all extensions (untick them in Settings, Extensions), restart Safari, and test. If the problem vanishes, re-enable extensions one at a time until it returns — the last one enabled is the culprit.

Can an extension steal my passwords?

An extension with permission to read and modify webpages can see what you type into them — which is why permissions matter. Only password managers and similarly trusted tools should ever hold broad access, and only from the App Store.

The pop-up setting says Block, yet pop-ups still appear. What else could it be?

Check the per-site list for a stray Allow, check Notifications (desktop alerts), and check your extensions — ad-injecting extensions create their own pop-ups regardless of Safari’s setting. Remove the extension and the “pop-ups” usually stop.