Deploying the Proton Pass browser extension with Microsoft Intune

Businesses can use mobile device management (MDM) platforms to deploy and manage the Proton Pass browser extension across their team’s Windows devices. This guide explains how to do that with Microsoft Intune. It will allow you to:

• Automatically install the Proton Pass browser extension on your organization users’ Windows devices
• Prevent users from uninstalling the extension
• Monitor deployment status

To get started, you’ll need:

• Access to intune.microsoft.com(new window)
• A Microsoft Intune admin account for your organization

In this guide, we’ll cover:

• How to deploy the Proton Pass extension (Google Chrome and Microsoft Edge)
• How to monitor deployment

Step 1: Create a new Intune policy

1. Sign in to intune.microsoft.com and select Devices → Configuration

2. Select + Create → New Policy

3. Configure the following settings:

• Platform: Windows 10 and later

• Profile type: Settings Catalog

4. Select Create

Step 2: Name and describe the policy

1. Name: Enter a policy name (example: “Proton Pass – Chrome Extension”)
2. Description: Enter a policy description (example: “Deploy Proton Pass browser extension for Google Chrome”)
3. Select Next

Step 3: Configure the extension for your browser

1. Select + Add settings and follow the steps for your browser below:

Chrome Configuration

1. Search for: Google Chrome
2. Select: Google Chrome → Google Chrome Extensions
3. Select: Configure the list of force-installed apps and extensions
4. Toggle the setting to: Enabled
5. In the field, paste:

ghmbeldphafepmbegfdlkpapadhbakde;https://clients2.google.com/service/update2/crx(new window)

1. Click Next → proceed to Step 4

Microsoft Edge Configuration

1. Search for: Microsoft Edge
2. Select: Microsoft Edge → Extensions
3. Select: Control which extensions are installed silently
4. Toggle the setting to: Enabled
5. In the field, paste:

gcllgfdnfnllodcaambdaknbipemelie

6. Click Next

Firefox Configuration

Firefox extension deployment is not supported via Intune Settings Catalog. 

Step 4: Configure Scope tags

1. On the Scope tags tab, review the scope tags settings (leave as Default unless your organization uses custom scope tags)
2. Select Next

Step 5: Assign the policy

1. On the Assignments tab, you have two options:
   • Add all users: Select + Add all users to deploy the extension to all users in your organization
   • Add groups: Select + Add groups to deploy the extension to specific user groups only

2. Select your preference → Next

Step 6: Review and create

1. Review all your settings:
   • Policy name and description
   • Extension ID (Chrome, Edge, or Firefox)
   • Scope tags
   • Assignments
2. Select Create to finalize the policy

3. The policy is now live and will begin deploying to assigned devices.

Extension IDs reference

Use these extension IDs when configuring policies:

Browser	Extension ID
Chrome	ghmbeldphafepmbegfdlkpapadhbakde
Microsoft Edge	gcllgfdnfnllodcaambdaknbipemelie

How to monitor deployment

1. Sign in to intune.microsoft.com
2. Select Devices → Configuration
3. Select your policy (example: “Proton Pass – Chrome Extension”)
4. View deployment status:
   • Device status: Shows per-device installation results
   • Per-setting status: Shows policy configuration details

Status indicators:

• Succeeded: The device successfully installed the extension
• Error: The device failed to install the extension
• Conflict: A policy conflict occurred on the device
• Not applicable: The policy does not apply to this device
• In Progress: The policy is currently being applied to the device

Deploying to multiple browsers

To deploy Proton Pass extension to multiple browsers (Chrome and Edge):

1. Repeat Steps 1-6 above for each browser
2. Create separate policies for each browser with distinct names (example: “Proton Pass – Chrome Extension” and “Proton Pass – Edge Extension”)
3. Assign each policy to the same users or groups