Disabling Java Plugins

Many security researchers and national computer security organizations caution users to limit their usage of the Java Runtime Environment (JRE), unless required for business reasons, or to remove it entirely, including disabling Java plug-ins in web browsers.

Listed below are instructions for disabling Java plug-ins or add-ons in common web browsers (based on the advice given by the US-CERT Vulnerability Note VU#636312).

NOTE: On systems with multiple user accounts, you may need to disable the plug-ins in each individual user account.

Mozilla Firefox

  1. From the main menu bar, select Tools > Add-ons > Plugins (or press the key combination 'Ctrl+Shift+A')
  2. Look for plugins containing the term 'Java' and click the 'Disable' button next to them
  3. Restart the browser.

Apple Safari

  1. Click Preferences, then Security tab
  2. Uncheck Enable Java.

Microsoft Internet Explorer

  1. Click Tools > Manage add-ons.
  2. Select any add-ons with the name 'Java', then click the Disable button.
  3. Restart the browser.


You can also disable Java from the Microsoft Windows Control Panel:

  1. In Window's Control Panel, click on Java; a Java Control Panel will appear.
  2. In the Java Control Panel, select the Java tab and click the View button. For any JRE versions listed, uncheck the Enabled box. Click OK.
  3. In the Java Control Panel, click Apply or OK.