Browser privacy
Google Chrome Browser Hardening & Privacy Guide (2026)
Step-by-step browser configuration for Google Chrome: DNS-over-HTTPS, Enhanced Safe Browsing, extension privilege auditing, and WebRTC privacy.
Data reviewed October 24, 2026
Web browsers are the primary window through which knowledge workers interact with the internet, making them the leading vector for tracking cookies, credential harvesting, and malware delivery. Hardening Google Chrome protects against session hijacking and data exfiltration.
| Setting | Recommended Option | Defensive Value |
|---|---|---|
| Safe Browsing | Enhanced Protection | Real-time phishing & download screening |
| Secure DNS | Custom: Cloudflare or Quad9 | Encrypts DNS queries against ISP sniffing |
| Third-Party Cookies | Block in all windows | Prevents cross-site behavioral tracking |
| Extension Permissions | On click only | Blocks background DOM snooping |
Enhanced Safe Browsing & Secure DNS
Enable Enhanced Safe Browsing to detect zero-day phishing pages in real time. Configure Secure DNS (DNS-over-HTTPS) using trusted encrypted providers like Cloudflare (1.1.1.1) or Quad9.
Extension Privilege Auditing
Browser extensions with broad permissions can read passwords and credit cards across every tab. Restrict extension site access to "On click" rather than "All sites", and remove unmaintained plugins.
WebRTC IP Leak Mitigation
WebRTC protocol requests can reveal your real local and public IP address even when connected through a VPN. Configure WebRTC policy settings to prevent local IP address broadcast.
Frequently asked questions
- Does Enhanced Safe Browsing send data to Google?
- Yes, Enhanced Safe Browsing sends sampled URLs to Google to check against zero-day phishing databases, offering higher security at the cost of telemetry sharing.
- How do I test if my browser leaks my IP via WebRTC?
- Use dedicated WebRTC leak testing tools while connected to a VPN to confirm only the VPN exit IP is visible.