Google Chrome Security Settings: 10 Changes That Protect You From Hackers
Turn on Chrome's strongest protections in minutes: Enhanced Safe Browsing, Safety Check, password checkup, HTTPS-first, site permissions, extension clean-up and passkeys.
Some links in this guide are affiliate links: if you buy, TechForLive may earn a commission at no extra cost to you. Details.
Why the browser matters so much
Your browser is where you log in, pay and download, so it is where most attacks happen: phishing pages, malicious downloads, fake extensions and stolen session cookies. Chrome has strong defences, but several are not at their strongest by default.
The 10 settings
- Update automatically and restart. Chrome fixes actively exploited security holes several times a year. When the menu button shows "Update", restart promptly.
- Enhanced Safe Browsing. Settings › Privacy and security › Security › Enhanced protection. Chrome checks sites and downloads against Google's real-time threat data and warns about dangerous extensions. It shares more browsing data with Google, which is the trade-off.
- Run Safety Check. It flags passwords found in data breaches, outdated Chrome, harmful extensions and sites with unusual permissions.
- Always use secure connections. Turn on "Always use secure connections" so Chrome tries HTTPS first and warns before loading plain HTTP pages.
- Review site permissions. Settings › Privacy and security › Site settings. Remove notification permission from sites you do not recognise; spammy notifications are a common scam route.
- Prune extensions. Go to
chrome://extensionsand remove anything you do not use. Extensions can read pages you visit, and popular ones are sometimes sold to new owners who add malicious code. - Use passkeys or strong unique passwords. Chrome's Password Manager can create and store unique passwords and passkeys and sync them across devices.
- Turn on 2-Step Verification for your Google account. If your account is taken over, so is everything synced to Chrome.
- Be careful with downloads. Only download software from the official site. Chrome warns about suspicious files; do not click past the warning.
- Use separate profiles for work, personal and shared family browsing, so one compromised session does not expose everything.
Beyond the browser
Chrome blocks known-bad pages, but brand-new phishing sites and scam calls get through. A good security suite adds scam and malware protection system-wide, and a VPN protects your traffic on public Wi-Fi.
Quick answers
Is Enhanced Safe Browsing worth it?
For most people, yes: it catches threats faster than standard protection. If you prefer to share less data with Google, standard protection is still valuable.
Does Incognito mode protect me from hackers?
No. Incognito only stops Chrome saving history and cookies on your device after you close the window. It does not hide you from websites, your network or malware.
How do I know if an extension is safe?
Install as few as possible, prefer well-known developers, check the permissions it asks for, and remove any that change ownership or start showing ads.