The strongest practical Chrome configuration combines Enhanced Safe Browsing, automatic updates, Safety Check, Always use secure connections, and Secure DNS. On supported Android devices, Android Advanced Protection adds another hardening layer. Together, these controls reduce exposure to malicious sites, downloads, extensions, unencrypted connections, and delayed patches. None can guarantee protection from a zero-day exploit that attackers use before Chrome has a fix.
Enhanced Safe Browsing provides the broadest detection coverage. Automatic updates reduce the time you remain exposed after a vulnerability is fixed. HTTPS-only and Secure DNS protect different parts of the connection rather than the browser engine itself, so they should be enabled as defense in depth.
As an Amazon Associate I earn from qualifying purchases.
Best settings at a glance
Use this order of priority when hardening Chrome. The “privacy cost” column describes the information or usability trade-off established for each control; it does not mean a setting is unsafe.
| Setting | Primary protection | Known and emerging threat coverage | Privacy or usability trade-off | Availability |
|---|---|---|---|---|
| Enhanced Safe Browsing | Real-time checks for sites, downloads and extensions | Known dangers plus potentially new dangers not yet on a local list | More browsing information can be sent to Google, including URLs, small page-content samples, downloads, extension activity and system information | Chrome desktop and Android where the option is offered |
| Automatic updates | Installs browser security fixes promptly | Reduces exposure after a patch is released; cannot protect before a fix exists | Requires occasional restarts and sufficient device connectivity | Chrome on supported desktop and mobile platforms |
| Always use secure connections | Upgrades URLs to HTTPS and warns before unsupported HTTP | Protects transport integrity; does not fix a vulnerable browser engine | Older HTTP-only sites may display a warning or fail to load | Chrome desktop and Android versions that expose the setting |
| Secure DNS | Encrypts DNS lookups | Reduces interception or tampering of domain lookups; does not replace Safe Browsing or updates | Automatic mode is designed to choose a compatible secure service; unusual networks can have compatibility problems | Chrome desktop, with equivalent support varying by platform |
| Android Advanced Protection | Bundles HTTPS enforcement, Safe Browsing Live Threat Protection and disabled JavaScript optimizations | Platform-level hardening in addition to ordinary Chrome protections | Some script behavior or performance characteristics may differ because JavaScript optimizations are disabled | Supported Android devices and software releases only |
Google Safe Browsing reported assessing more than 10 billion URLs and files and showing more than 3 million warnings for potential threats each day in 2024. Those figures describe the scale of the service, not a guarantee that every newly discovered exploit will be classified immediately.
#1 Best Overall
- SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later). Organize and keep your digital life safe from hackers
- SAFE ONLINE BANKING: A unique, dedicated browser secures your online transactions; Our Total Security product also includes 200MB per day of our new and improved Bitdefender VPN
- ADVANCED THREAT DEFENSE: Real-Time Data Protection, Multi-Layer Malware and Ransomware Protection, Social Network Protection, Game/Movie/Work Modes, Microphone Monitor, Webcam Protection, Anti-Tracker, Phishing, Fraud, and Spam Protection, File Shredder, Parental Controls, and more
- ECO-FRIENDLY PACKAGING: Your product-specific code is printed on a card and shipped inside a protective cardboard sleeve. Simply open packaging and scratch off security ink on the card to reveal your activation code. No more bulky box or hard-to-recycle discs. PLEASE NOTE: Product packaging may vary from the images shown, however the product is the same.
1. Turn on Enhanced Safe Browsing
Enhanced Safe Browsing is Chrome’s highest Safe Browsing level. Google describes it as “Google’s most secure browsing experience” and says it protects against known and potential new dangers. Instead of relying only on a list stored on your device, Chrome can perform real-time checks and deeper analysis when a site, download or extension appears suspicious.
What it checks
- Websites that may host phishing, malware or exploit content.
- Downloads that need deeper scanning than a local reputation check can provide.
- Browser extensions and activity that appear unsafe.
- Threats that have not yet been added to a conventional locally stored list.
How to enable it on desktop
- Open Chrome and select the three-dot menu.
- Choose Settings.
- Open Privacy and security, then Security.
- Under Safe Browsing, select Enhanced protection.
Chrome may ask for confirmation when the change increases the information used for real-time analysis. After enabling it, keep the setting on while you download files or install extensions; those are among the activities it is designed to examine.
The privacy trade-off
Enhanced protection is more data-intensive than Standard protection. Google’s descriptions say that real-time analysis can involve URLs, small samples of page content, downloads, extension activity and system information. Enterprise documentation similarly notes that stronger protection requires sharing more browsing information. If your priority is maximum threat detection, the additional analysis is the reason to choose Enhanced. If minimizing information sent for reputation checks is more important, Standard protection shares less but primarily covers known dangers.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
2. Keep automatic updates on and verify them with Safety Check
Updates are the control that closes a browser vulnerability after Chrome engineers release a fix. Chrome can update automatically when a new version is available, but a download that is waiting for a restart still leaves the old code running.
Rank #2
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Why update speed matters
Google’s security explanation describes a patch gap: once a fix is visible in public open-source code, attackers can study the change, infer the original flaw and develop an exploit before the fixed version reaches every Chrome installation. Automatic updates shorten that interval. They do not help when the vulnerability is still unknown or when no fix has shipped.
Check Chrome’s update state
- Open the three-dot menu.
- Select Help, then About Google Chrome.
- Let Chrome check for an update and download it if one is available.
- Select Relaunch when prompted. If the button does not appear, Chrome is already current or the update is still being staged.
You can also open Settings > Privacy and security > Safety Check. Safety Check reports whether Chrome is current and can flag other security settings that need attention. On managed computers, an administrator may control update timing; a missing update option is not proof that the browser is patched.
3. Enable Always use secure connections
Always use secure connections (the HTTPS-only setting) upgrades a URL to HTTPS when the site supports it and warns before opening a site that supports only insecure HTTP. This protects the connection from many forms of interception and helps prevent an attacker on the network from altering traffic in transit.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Enable it
- Open Settings from Chrome’s three-dot menu.
- Choose Privacy and security, then Security.
- Turn on Always use secure connections.
When Chrome displays a warning for an HTTP-only site, continue only if you understand why the site is needed and the connection is acceptable for the information involved. HTTPS-only cannot repair a memory-safety bug, sandbox escape or other vulnerability in the browser engine. It is transport protection, not an exploit patch.
Rank #3
![Norton 360 Premium 2027 Antivirus, 10 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41JNWru8mYL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 10 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
4. Leave Secure DNS enabled
Secure DNS encrypts Chrome’s DNS lookups—the requests that translate a domain name into an IP address. Encryption makes those lookups harder for an intermediary to read or modify. Chrome documents an automatic mode on desktop, and that is the sensible default for most people because it is intended to select a compatible secure service without requiring manual provider details.
Enable or verify it on desktop
- Open Settings.
- Go to Privacy and security > Security.
- Find Use secure DNS and turn it on.
- Leave the mode set to With your current service provider or the equivalent automatic choice unless your organization gives you a different configuration.
Secure DNS does not inspect page content, scan a download or update Chrome. Treat it as a confidentiality and integrity layer for name lookups, alongside Safe Browsing and current software.
5. Use Android Advanced Protection when your device supports it
Android Advanced Protection is a bundled hardening mode rather than a single Safe Browsing toggle. Google says it enforces HTTPS, enables Android Safe Browsing Live Threat Protection and disables JavaScript optimizations. That combination targets both connection security and additional browser attack surface.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhat the bundle changes
- HTTPS enforcement: connections are required to use secure transport where the feature applies.
- Live Threat Protection: Safe Browsing can use current threat information instead of relying solely on an older local list.
- Disabled JavaScript optimizations: Chrome does not use the specified JavaScript optimizations while the protection mode is active.
The exact activation screen depends on the Android release, device and account. Open Chrome’s Settings and search its Privacy and security area for Android Advanced Protection. If the control is not present, the feature may not be available on that software version; do not treat its absence as an error in the other Chrome settings.
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Should you disable JavaScript?
Disabling JavaScript globally is not a practical zero-day strategy for most users. Modern sign-in pages, document tools, banking sites and application interfaces commonly depend on it, and a site that fails without scripts is not necessarily safer if you re-enable scripts for every visit. The settings above reduce malicious-site, download, connection and patch-delay risks without requiring a blanket script ban.
Android Advanced Protection’s decision to disable JavaScript optimizations is more specific than turning JavaScript off. It changes how Chrome handles scripts while retaining the ability to use sites that require JavaScript. If you are investigating a suspicious site, use a separate profile or a disposable environment rather than weakening your everyday browser configuration.
A practical hardening sequence
Set the controls in this order so the most consequential protections are active first:
Free tools Windows power users keep installed
One-click scans. No signup required.
- Update Chrome: open Help > About Google Chrome, install any update and relaunch.
- Enable Enhanced Safe Browsing: use Settings > Privacy and security > Security > Safe Browsing > Enhanced protection.
- Run Safety Check: open Settings > Privacy and security > Safety Check and resolve any update or security warning it reports.
- Enable HTTPS-only: turn on Always use secure connections in the Security settings.
- Verify Secure DNS: turn on Use secure DNS and keep automatic mode unless a managed network requires another choice.
- On Android, inspect Advanced Protection: enable it if the option is offered and its behavior is acceptable for your device.
- Review extensions: remove extensions you no longer use. Enhanced Safe Browsing can assess extension activity, but it cannot make an unnecessary or compromised extension desirable.
Choose the right balance between protection and privacy
There is no universal “maximum” setting independent of a threat model. Enhanced Safe Browsing has the widest detection reach but requires more information for real-time checks. Standard protection sends less information and still covers known dangers. The choice should reflect what you are protecting, how sensitive your browsing is and whether your organization permits cloud-based analysis.
Best Value
- POWERFUL, LIGHTNING-FAST ANTIVIRUS: Protects your computer from viruses and malware through the cloud; Webroot scans faster, uses fewer system resources and safeguards your devices in real-time by identifying and blocking new threats
- IDENTITY THEFT PROTECTION: Protects your usernames, account numbers and other personal information against keyloggers, spyware and other online threats targeting valuable personal data
- REAL-TIME ANTI-PHISHING: Proactively scans websites, emails and other communications and warns you of potential danger before you click to effectively stop malicious attempts to steal your personal information
- ALWAYS UP TO DATE: Webroot scours 95% of the Internet three times per day including billions of web pages, files and apps to determine what is safe online and enhances the software automatically without time-consuming updates
| If your priority is… | Prefer… | Understand that… |
|---|---|---|
| Early warning for unfamiliar malicious sites, files and extensions | Enhanced Safe Browsing | URLs and additional samples or activity data may be sent for analysis |
| Minimizing reputation-check data | Standard Safe Browsing | Coverage is primarily for dangers already known to the local or synchronized service |
| Reducing exposure after a vulnerability is fixed | Automatic updates plus prompt relaunches | No update can protect against a flaw for which no fix exists |
| Protecting traffic on untrusted networks | HTTPS-only and Secure DNS | These settings do not patch Chrome’s rendering or JavaScript engines |
| Additional hardening on Android | Android Advanced Protection | It is limited to supported Android releases and changes JavaScript optimization behavior |
What to do when a setting is missing or causes a problem
Enhanced Safe Browsing is unavailable or greyed out
Work or school administrators can enforce Chrome policies. Check whether the browser displays a “managed by your organization” notice and ask the administrator which Safe Browsing level is required. Do not install a second security extension merely to compensate for a policy you cannot change.
Chrome downloaded an update but still shows the old version
Return to Help > About Google Chrome and select Relaunch if offered. Save open work first. If the update repeatedly fails, the device’s administrator, operating-system support window or network policy may be preventing installation.
An HTTPS-only warning appears
The destination is not offering HTTPS in a way Chrome can use. Verify the domain before proceeding, avoid entering passwords or payment details over HTTP and look for an official HTTPS version of the service. HTTPS-only cannot manufacture encryption for an HTTP-only server.
Secure DNS causes connection failures
Some captive portals, enterprise filters and older networks do not work correctly with encrypted DNS. Temporarily use the automatic compatibility option, reconnect to the network and test again. If the network is managed, follow its documented DNS policy rather than entering an arbitrary provider.
Android Advanced Protection is not listed
Availability depends on the Android software release, device and account. Keep Enhanced Safe Browsing, updates, HTTPS-only and Secure DNS enabled; those controls remain useful without the bundled mode.
The limits of Chrome settings against zero-days
A zero-day is dangerous precisely because defenders may have no patch or reliable detection when exploitation starts. Safe Browsing concentrates on dangerous sites, downloads and extensions, so an exploit delivered through a newly created or compromised page may evade classification temporarily. The patch gap can also expose users between public disclosure and the moment a fixed Chrome build reaches their device.
For that reason, describe these settings accurately: they reduce attack surface and shorten exposure windows. They do not block every zero-day, prove that a site is harmless or replace operating-system updates, account protection and cautious handling of unexpected files. Keeping Chrome current, using Enhanced Safe Browsing when its data-sharing trade-off is acceptable, and enforcing secure connections is the strongest configuration supported by these controls.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
