What is the CRX file format?
The .crx file extension is used by Google Chrome and other Chromium-based browsers. A .crx file is a Chrome Extension package - an installation file for browser plugins and extensions. It is in fact a package comprised of various files, such as JavaScript (.js), manifest (.json), CSS stylesheets, HTML pages, and image assets that together define the extension's behavior and appearance.
.crx files are used by Google Chrome for adding new features or functionality to the browser, or for changing the UI using custom themes and interactive elements. Chromium-based browsers such as Microsoft Edge, Brave, and Opera also support the format.
ZIP compression and file structure
.crx files use ZIP compression to make the file smaller and thus easier to share over the internet. A .crx file can be opened using data archiving tools such as 7-Zip. However, a .crx is not a bare ZIP - every file begins with a binary header starting with the magic bytes Cr24 (hex 43 72 32 34), which carries an embedded cryptographic signature and public key. Standard archiving tools may not recognize this header, so it must be stripped before the ZIP contents can be extracted.
The current CRX3 format has been mandatory since Chrome 75 (June 2019), replacing the older CRX2 signing scheme. Developers sign their packages using a private key stored in a .PEM file; the matching public key is embedded in the .crx header. The MIME type is application/x-chrome-extension.
Distribution and installation
Most .crx files can be downloaded and installed through the Chrome Web Store. After successful installation, the browser automatically deletes the .crx file. Custom .crx files can be installed manually from disk, though Chrome requires Developer mode to be enabled in the extensions settings for off-store installs.
Security & safety
RISK: HIGHA CRX is executable browser code with access to the pages you visit, your cookies and (depending on permissions) your passwords and history. Installing one from outside the Chrome Web Store bypasses Google's review and malware scanning, so treat sideloaded CRX files like sideloaded apps: install only from a developer you trust. Modern Chrome deliberately blocks casual CRX installs for this reason. Inspect a suspicious CRX by renaming it to .zip and reading manifest.json (especially the 'permissions' list) before loading it. Be wary of "free premium extension" CRX downloads from random sites - many are adware or data-stealers.
Format details
in a nutshell- CryENGINE / CRYENGINE resource file - Some game engines and tools use .crx for compiled resource or archive data - unrelated to Chrome extensions.
- IBM/Lotus and other legacy app data - A few older business applications used .crx for internal data files; these are app-specific and not browser extensions.
Programs that open CRX files
Technical details
deep spec| Magic bytes | Cr24 (hex 43 72 32 34) at offset 0; bytes 4-7 encode the CRX version number |
| Format type | Signed ZIP archive with a binary CRX header prefix |
| Current format version | CRX3 - mandatory since Chrome 75 (June 2019) |
| Legacy format version | CRX2 - used prior to Chrome 75; not accepted by modern Chrome |
| CRX3 header structure | Magic bytes, version field, header length, then a protobuf-serialized SignedData block containing the public key proof |
| Signing algorithm | RSA-2048 with SHA-256 (CRX2); AsymmetricKeyProof protobuf structure (CRX3) |
| MIME type | application/x-chrome-extension |
| Payload compression | ZIP (DEFLATE) - standard ZIP archive begins immediately after the header |
| Required root file | manifest.json - declares the extension name, version, permissions, and entry points |
| Extension ID derivation | 32-character lowercase string derived from the SHA-256 hash of the extension's public key |
| Developer key file | .pem (RSA private key) used to sign the package; the matching public key is embedded in the CRX header |
| Off-store installation | Requires Developer mode enabled at chrome://extensions; enterprise deployment via ExtensionInstallForcelist group policy |
| Post-install behavior | Chrome deletes the .crx file from disk automatically after a successful installation |
| Compatible browsers | Google Chrome, Microsoft Edge (v79+), Brave, Opera, Vivaldi, and other Chromium-based browsers |
| Released | 2010 (CRX2); CRX3 format mandatory since Chrome 75, June 2019 |
| Open standard | Yes · royalty-free |
| Specification | developer.chrome.com |
CRX conversions
Community Q&A
asked by usersNo questions yet - be the first to ask about CRX files.