How to Secure Your Chrome Browser in 10 Minutes

Most Chrome security comes down to a handful of settings and habits. Work through this list once and you'll have closed the most common gaps. Each step takes a minute or two.

1. Update Chrome (1 minute)

Open Settings → About Chrome. Chrome checks for updates and asks you to relaunch if one is waiting. Updates fix security holes that attackers actively use, so don't leave the relaunch button sitting there for days.

2. Run Safety Check (1 minute)

Go to Settings → Privacy and security → Safety Check. It flags compromised passwords, harmful or unavailable extensions, and sites with permissions you haven't used in a while. Follow its suggestions.

3. Turn on stronger protection (1 minute)

• Under Privacy and security → Security, choose Enhanced protection for faster warnings about dangerous sites, downloads and extensions. It sends more data to Google for checks; Standard protection is the privacy-friendlier option and still good.
• On the same page, turn on Always use secure connections, so Chrome warns you before loading a site without HTTPS.

4. Fix your passwords (3 minutes)

• Open Google Password Manager → Checkup and change any passwords it marks as compromised or reused, starting with email and banking.
• Use passkeys where sites offer them. They can't be phished or reused.
• Turn on 2-Step Verification for your Google Account, since it holds your synced passwords.

5. Clean up extensions (2 minutes)

Go to chrome://extensions. Remove anything you don't recognize or no longer use. For the rest, check what they can access: an extension that can "read and change all your data on all websites" sees every page you visit. See what extension permissions mean.

6. Review site permissions (2 minutes)

• Under Settings → Privacy and security → Site settings, check Notifications first. Spam sites use notification permission to push fake virus warnings. Remove any you don't want.
• Check camera, microphone, location and pop-ups the same way.
• Check Clipboard (you may need to open Additional permissions). Sites can ask to read what you've copied, which can include passwords and codes. Clipboard Guard blocks those reads and asks you each time whether to allow it once or always.

Good habits that take no time

• Don't click "Allow" on notification prompts from sites you don't know.
• Download software only from the maker's site or a trusted store.
• Sign out and use Guest mode on shared computers.
• If you sync, add a sync passphrase so Google can't read your synced data.

Making your own website "secure" in Chrome

If you're asking because Chrome shows "Not secure" on your site, the fix is HTTPS: install a TLS certificate (most hosts offer a free one, often from Let's Encrypt), redirect all http:// addresses to https://, and replace any images or scripts still loaded over http://. Once every resource loads over HTTPS, the warning goes away.