diff --git a/modules/browser/firefox.nix b/modules/browser/firefox.nix
index 6473870..7b10ac0 100644
--- a/modules/browser/firefox.nix
+++ b/modules/browser/firefox.nix
@@ -20,9 +20,9 @@
         installation_mode = "force_installed";
         install_url = "https://addons.mozilla.org/firefox/downloads/latest/temporarytabcontainer/latest.xpi";
       };
-      "{d634138d-c276-4fc8-924b-40a0ea21d284}" = {
+      "keepassxc-browser@keepassxc.org" = {
         installation_mode = "force_installed";
-        install_url = "https://addons.mozilla.org/firefox/downloads/latest/1password-x-password-manager/latest.xpi";
+        install_url = "https://addons.mozilla.org/firefox/downloads/latest/keepassxc-browser/latest.xpi";
       };
       "pywalfox@frewacom.org" = {
         installation_mode = "force_installed";
@@ -124,6 +124,15 @@
 
     // use same search engine (duckduckgo) for private browsing
     lockPref("browser.search.separatePrivateDefault", false);
+
+    // stop extensions connecting to the internet
+    lockPref(
+      "extensions.webextensions.base-content-security-policy",
+      "default-src 'none'; script-src 'none'; object-src 'none';"
+    );
+    lockPref(
+      "extensions.webextensions.base-content-security-policy.v3",
+      "default-src 'none'; script-src 'none'; object-src 'none';"
     );
   '';
 }