Category Archives: Google Chrome Blog

The latest news from the Google Chrome team

How we designed Chrome to help businesses

Businesses all over the world rely on Chrome to get things done securely and collaboratively — both at home and in the office. And that’s due to the Googlers who work every day to make sure enterprise users stay safe online using Chrome.

We chatted with Robert Shield, a longtime Chrome Googler and the director of engineering on the Chrome Browser Enterprise team, to get an insider’s point of view on how Chrome evolved to become a secure browser for businesses.

Why did Chrome decide to invest in building a browser for businesses?

Early on, we realized that businesses had specific needs for managing Chrome to a large workforce. Shortly after Chrome’s initial launch, we added a variety of enterprise management capabilities like Chrome Browser Cloud Management, and zero trust solutions like BeyondCorp Enterprise, to help with added security controls, distributing software and supporting legacy browsers.

How have businesses’ browser security needs changed over the years?

The way we work has shifted quite drastically, from legacy systems connected over private networks to cloud-centric computing. Workers now need to access data from anywhere and on different types of devices. While this change brings more flexibility and productivity to organizations, it requires them to work even harder to secure their data.

What are some specific requests you get from IT and security professionals using Chrome in modern enterprise environments?

Customers tell us they have a growing need to secure access to data hosted in the cloud, so we provide tools to prevent data loss right in the browser. We also make it easy for businesses to integrate Chrome with popular security solution providers, like Splunk, CrowdStrike and Palo Alto Networks. This allows customers to gain a deeper understanding of potentially harmful threats their users face on the web and be more proactive in their remediation efforts.

What are you working on that excites you most?

We’re really focused on helping businesses safeguard their whole computing stack, from cloud services to the desktops, laptops and phones used by workers. With the move to cloud workloads accelerating over the coming years, we’re investing in tighter integrations between Chrome and the full slate of security tools and services that organizations use every day to provide complete end-to-end security for users and data. It’s exciting to see the browser evolve to play an active role in securing business environments.

Source: Google Chrome


Celebrate Native American artists in Chrome and ChromeOS

It’s Native American Heritage Month in the U.S., a time when we honor the history, traditions and contributions of Native Americans. As a citizen of the Cherokee Nation, I celebrate this month by taking time to reflect and express gratitude for my ancestors, the resilience of my tribe and other Indigenous people, and future generations carrying our tribal traditions forward.

As a product manager at Google, I’m also proud of how we’re celebrating across our products. On Google Assistant, for example, just say “Happy Native American Heritage Month” or “Give me a fact about Native American Heritage” throughout the month of November to hear a collection of historical facts and stories from the Native American community. Meanwhile, a recent Doodle on Google’s homepage celebrated the history of Stickball, a traditional sport created by Indigenous tribes.

An image of a recent Doodle on Google’s homepage with 5 abstract characters playing Stickball, a traditional sport created by Indigenous tribes.

We also commissioned five Native American artists to create a collection of themes for Chromebooks and Chrome browser. This collection has a special meaning to me because it showcases important traditions and reminds me of home. Richard D. York’s piece “ᎤᎧᏖᎾ (Uktena, or Horned Serpent)” in particular brings me back to my childhood listening to the stories of Uktena and other tales from my elders. A more solemn work, “A Lot Meant,” reminded me of growing up in Oklahoma and how historical policies like allotment impacted my family and so many others.

Now available globally, these themes reflect the unique experiences and identities of each artist. Here’s what they shared about their work:

To apply one of these themes (or others from Black, Latino and LGBTQ+ artists) to your Chrome browser, visit the Chrome Web Store collection, select a theme and click "Add to Chrome." You can also open a new tab and click the “Customize Chrome” button on the bottom right to explore background collections. To apply one of these wallpapers to your Chromebook, right-click your desktop, choose "Set wallpaper and style," then select "Native American Artists.”

Source: Google Chrome


The 5 best ways to stay secure online with Chrome

We designed Chrome to be secure by default, protecting you from dangerous and deceptive sites that might steal your passwords or infect your device. Chrome pioneered many of the techniques that are now foundational to browser security (such as sandboxing and site isolation), and with recent advances like predictive phishing protection, you can be confident that we’re using the latest technology to keep your data safe.

But what can you do yourself to make sure you stay safe online? To mark Cybersecurity Awareness Month, we talked to a few Chrome security engineers to share a few pieces of advice:

Keep Chrome up to date

Hundreds of security engineers across Google work to keep Chrome safe against the latest threats, and those improvements come out at least every two weeks. “We try to shorten the time between when a security bug has been discovered or reported and when a fix is released,” says Amy Ressler, a security technical program manager. “No matter how fast we work, we know motivated adversaries are looking for opportunities to exploit the ‘patch gap’ between when we release the fix and when some users update to the newest version.” Chrome checks for updates regularly, and when one is available, Chrome downloads it immediately and then applies it when you close and reopen the browser. But if you haven’t closed your browser in a while, you may have a pending update visible in the upper right corner of the browser window. To apply the update, click “Update” or simply close and reopen Chrome. Don’t worry: You won’t lose your tabs, and it will only take a few seconds.

Zoomed in version of the Chrome browser that highlights the “Update” action button

Store strong, unique passwords with Google Password Manager

Using a password manager (even if it’s not Google’s) will help you store and use a strong, unique password for each site you log into. “If your password is compromised through a phishing attack or a security breach,” security software engineer Nwokedi Idika says, “using a unique password on every site reduces its value to an attacker because it only provides access to a single site — not multiple ones.” If you’re using a password manager to store “fido1234” as your password for every site, you're not making the most of the tool. Google Password Manager can suggest and save a strong, unique password of gobbledygook (like KZamPPzj43T9mQM). Then, Chrome will autofill the password next time you need it — on any device. Chrome should suggest a new strong password when creating a new account, or you can always right click in the password field and click “Suggest Password.”

Image of a website asking for username and password with the option to have Google Password Manager in Chrome help with sign in.

Don’t ignore Chrome's download warnings

Chrome and Safe Browsing work to ensure that we warn you about dangerous downloads when possible. When you see a download warning, you can still download the file, but we strongly recommend against it. Computers are often compromised by malware because people misunderstand or ignore warnings. "We hear feedback from people that think Google disapproves of that download or software, so they ignore the warning,” says software engineer Daniel Rubery. “But the file is actually malicious!" We are constantly working to remove warnings that aren't useful; for example, we recently reevaluated our list of dangerous file types which reduced low risk warnings by more than 90%. This means you can trust that a download warning really means danger.

Image of a Chrome browser warning message about a dangerous download with a button to discard.

Browse the web with Enhanced security protection

To be even more secure while browsing the web in Chrome, turn on Enhanced Safe Browsing protection in your Chrome settings. It substantially increases protection from dangerous websites and downloads by sharing real-time data with Safe Browsing. “This is how you can get the most out of Chrome's security features,” recommends security software engineer Javier Castro. “By enabling enhanced protection, you are letting Chrome use the latest threat intelligence and the most advanced user protections to keep you safe while you browse.” If you’re signed in, Chrome and other Google apps you use (Gmail, Drive, etc) will be able to provide improved protection based on a holistic view of threats you encounter on the web and attacks against your Google Account. As a result, people using Enhanced Safe Browsing are successfully phished 20-35% less.

Image of Chrome security setting with the option to enable enhanced protection.

Protect your Google Account with 2-step verification

Two-factor authentication can use your phone ​​to add an extra step to verify that it's you when you sign in. Signing in with both a password and a second step on your phone protects against password-stealing scams. Software engineer Diana Smetters says, “It's simple to turn on, and you only have to use your phone the first time you sign in on each of your devices. If an attacker gets your password online and tries to sign in, they'll be blocked because they don't have your phone.” If you sign into Chrome with a Google Account, be sure that you’re enrolled in 2-step verification to protect your account.

To stay even safer online, take a few minutes this month to update Chrome, start using Google Password Manager, turn on Enhanced Safe Browsing and enroll in 2-step verification. One last tip–you can always confirm your use of security features by running Safety Check in Chrome settings.

Image of Chrome browser search bar with the text “run safety check”

Source: Google Chrome