Manage Chrome safety and security

For a more secure browsing experience, you can use Chrome’s safety features, like Safety Check and HTTPS-First mode.

Compromised passwords

Compromised passwords were involved in data leaks on a third-party website or app. Change any compromised passwords when you can. To change your password from another site, follow the instructions in Chrome.

Safe Browsing

With Safe Browsing, you get alerts about malware, risky extensions, phishing or sites on Google’s list of potentially unsafe sites. Learn how to use Safe Browsing in Chrome.

Automatic Chrome updates

To make sure you're protected by the latest security updates, when available, Chrome can automatically update to the newest browser version.

On-device encryption for passwords

Once on-device encryption is set up, you can use your Google password or the screen lock for compatible phones or tablets to unlock your password. This type of encryption means that only you have the key to unlock your passwords. Learn more about on-device encryption.

Tip: To relaunch Chrome after an update, follow the instructions on screen.

Run a Safety Check on your computer

Important: Compromised passwords were involved in data leaks on a third-party website or app. Change any compromised passwords as soon as you can.

You can manage Chrome's safety and security with Safety Check. Safety Check searches for:

• Compromised passwords
• Safe browsing status
• Available Chrome updates

On a computer, Safety Check also searches for:

• Harmful extensions
• Harmful software (Windows only)

1. On your computer, open Chrome.
2. At the top, click More   Settings.
3. Click Privacy and security.
4. Under “Safety Check,” select Check now.
5. If Chrome finds any issues:
   1. Select the item with the issue.
   2. Follow the on-screen instructions.

Turn on HTTPS-First mode

Connections to sites that use HTTPS are more secure than those that don’t. When you turn on HTTPS-First mode, Chrome attempts to load all sites over HTTPS and displays a warning before you visit a site that doesn’t support it.

1. On your computer, open Chrome.
2. At the top right, click More Settings.
3. On the left, click Privacy and Security.
4. Click Security.
5. Turn on Always use secure connections.

Tip: When you’re about to load a site that doesn’t use HTTPS, a “Not Secure” warning appears in the address bar.

Use a secure connection to look up sites’ IP addresses

When you visit a site, Chrome looks up the site’s host server’s IP address. To protect your privacy and security, if Secure DNS lookup is turned on, Chrome encrypts your information during the lookup process.

By default, Secure DNS in Chrome is turned on in automatic mode. If Chrome has issues looking up a site in this mode, it'll look up the site in the unencrypted mode.

You can select a custom provider. When you select a custom provider, Chrome won't default to unencrypted mode. If you have issues, like error messages, you can check your provider setting or turn Secure DNS off. The error messages may say that the server’s IP address couldn't be found.

Important: If your device is managed or parental controls are turned on, you can’t use Chrome’s secure DNS feature.

To turn Secure DNS on or off:

1. On your computer, open Chrome.
2. At the top right, select More   Settings. 
3. Click Privacy and security  Security.
4. Turn Use Secure DNS on or off.
5. Select your current service provider or from the drop down menu, select a custom service provider.

Related articles

• Manage passwords
• Update Google Chrome
• Use Safe Browsing in Chrome
• Install and manage extensions
• Get started with on-device encryption for passwords