Browser privacy and security settings: Chrome, Edge, Safari and Firefox

Your web browser is the window you use for banking, shopping, email and almost everything else online, so its settings matter. The main browser security settings and privacy options are keeping the browser updated, safe browsing warnings, tracking protection, cookies, saved passwords and extensions, and this guide explains each one. It includes steps for Google Chrome, Microsoft Edge, Apple Safari and Mozilla Firefox, based on each maker’s help pages.

Most browsers already have sensible protections switched on by default, so this is mostly about knowing where they are and checking them.

Why browser settings matter

A browser does three jobs at once. It shows you websites, it remembers things (history, cookies, passwords) so sites are easier to use, and it runs add-ons (extensions) that you install. Each of these can be a target:

• Out-of-date browsers can have known weaknesses. ASD’s ACSC explains that attackers look for weaknesses in software, called vulnerabilities, and that “when your software is not up to date, it’s like leaving a window unlocked.”
• Deceptive websites copy real ones to collect passwords or card details. Scamwatch describes scammers building “perfect copies of real websites”.
• Tracking lets advertisers and others follow your activity from site to site.
• Extensions can see and change what’s on web pages, so a bad one can cause real problems.

Menus change between versions. The steps below were checked in October 2026, and each maker’s help page has the latest instructions. Device-level settings are covered in the Windows, Mac, iPhone and Android guides.

How to keep your browser updated

ASD’s ACSC describes automatic updates as a “set and forget” feature that updates software as soon as fixes are available. All four browsers update automatically by default, but an update often finishes only when the browser restarts.

Chrome

Based on Google’s instructions (checked October 2026):

1. Open Chrome.
2. Select More (three dots, top right), then Help > About Google Chrome.
3. Select Relaunch if it appears. If it doesn’t, Chrome is already up to date.

Google says Chrome reopens your tabs and windows after relaunching, but Incognito windows don’t reopen. On a Chromebook, Chrome updates with the device’s operating system.

Edge

Based on Microsoft’s instructions (checked October 2026):

1. Select Settings and more (three dots, top right).
2. Go to Help and feedback > About Microsoft Edge.
3. If an update is available, select Download and install, then Restart.

Microsoft says Edge updates automatically by default. On the same About page, Download and install updates automatically keeps this on. On work or school devices, an administrator may manage these settings.

Safari

Apple says Safari is “included with the operating system” on Apple devices. Updating Safari means updating macOS on a Mac, or iOS or iPadOS on an iPhone or iPad. See our guides to Mac security basics and iPhone security basics for how system updates work.

Firefox

Based on Mozilla’s instructions (checked October 2026):

1. Open the Firefox menu (on Windows, the menu button > Help; on a Mac, the Firefox menu in the menu bar).
2. Select About Firefox. Firefox checks for and downloads updates.
3. Select Restart to install.

Mozilla says Firefox “updates automatically in most cases”. Copies installed from the Microsoft Store or a Linux package update through those systems instead.

How to check safe browsing warnings

Each browser can warn you before you open a site or download a file that has been reported as dangerous or deceptive.

Chrome: Safe Browsing

Google describes three levels. Standard protection is the default and “offers security from known dangers”. Enhanced protection also warns about sites, downloads and extensions that Google may not have identified yet, and can warn if a saved password has appeared in a data breach. No protection turns Safe Browsing off, which Google marks as not recommended.

Based on Google’s instructions (checked October 2026):

1. Open Chrome and select More > Settings.
2. Select Privacy and security > Security.
3. Choose Enhanced protection, Standard protection or No protection.

Edge: Microsoft Defender SmartScreen

Microsoft says SmartScreen helps “safeguard your security against phishing and malware sites” by checking sites and downloads against lists of reported ones. Based on Microsoft’s instructions, it’s under Settings and more > Settings > Privacy, search, and services > Security, where the Microsoft Defender SmartScreen switch turns it on or off.

Safari: Deceptive Website Warning

Apple explains that Safari shows a Deceptive Website Warning when you try to visit a site reported as deceptive, which may “try to trick you into installing software or disclosing personal or financial information.” Apple’s guidance is to select Go Back. Apple’s help page has more on what the warning means.

Firefox: deceptive content and dangerous software protection

Mozilla says Firefox can warn about sites that try to install malicious software and block suspicious downloads. Based on Mozilla’s instructions (checked October 2026):

1. Open the Firefox menu and select Settings.
2. Select Privacy & Security.
3. In the Security section, under Connection and software security, select Advanced settings.
4. Under Deceptive content and dangerous software protection, check that Block dangerous and deceptive content and its options are ticked.

A warning is helpful, but its absence doesn’t mean a site is safe. Scamwatch says to “always type web addresses directly into your browser” rather than following links in messages. Our guide to phishing, smishing and vishing explains why.

How to change tracking and privacy settings

Tracking protection limits how much sites and advertisers can follow you across the web. Stricter settings block more but, as each maker notes, can stop some sites working properly.

Chrome: third-party cookies

Google explains that first-party cookies come from the site in the address bar, while third-party cookies come from other sites embedded in the page, such as those behind ads. Google says that “In some cases, this info can be used to track your activity as you browse sites.” Based on Google’s instructions (checked October 2026):

1. Select More > Settings.
2. Select Privacy and security > Third-party cookies.
3. Select Block third-party cookies.

Google notes some sites may not work fully with third-party cookies blocked. Sites added under Sites allowed to use third-party cookies can still use them.

Edge: tracking prevention

Microsoft describes three levels: Basic blocks “potentially harmful trackers but allows most other trackers”; Balanced (Microsoft’s recommended default) also blocks “trackers from sites you haven’t visited”; Strict blocks “most trackers across sites”. Based on Microsoft’s instructions, it’s under Settings > Privacy, search, and services > Tracking prevention, where you can confirm it’s on and pick a level.

Safari: prevent cross-site tracking

On a Mac, based on Apple’s Safari User Guide (checked October 2026):

1. Open Safari, then choose Safari > Settings from the menu bar.
2. Select Privacy.
3. Select Prevent cross-site tracking.

Apple says this deletes third-party cookies and website data unless you visit those sites directly, and blocks tracking from social media Share and Like buttons on other sites.

Firefox: Enhanced Tracking Protection

Mozilla describes Standard (the default), Strict and Custom levels. It notes Strict blocks more trackers but “some sites may break”. Based on Mozilla’s instructions (checked October 2026):

1. Select the shield icon to the left of the address bar.
2. Select Protection Settings.
3. Under Enhanced Tracking Protection, choose a level, then reload your tabs.

How to clear cookies and browsing data

Clearing cookies removes the small files sites store to remember you. Google says deleting cookies may sign you out of sites and erase saved site preferences.

Chrome on a computer, based on Google’s instructions: select More > Delete browsing data, choose a time range, tick Cookies and other site data, then select Delete data.

Safari on iPhone, based on Apple’s instructions: go to Settings > Apps > Safari and tap Clear History and Website Data, then choose a timeframe. To remove cookies but keep history, Apple describes Advanced > Website Data > Remove All Website Data.

How to check saved passwords

Every major browser can save and fill in passwords. That’s convenient, and built-in password tools can flag weak or reused passwords. Google says Chrome’s Safety Check looks for compromised, reused or weak passwords saved in Google Password Manager, and occasionally reminds you about updates and Safe Browsing. On Android, Google’s path is More > Settings > Safety check.

ASD’s ACSC password manager guidance says password managers “can help you create, manage and store passwords”, and describes choosing a reputable one with multi-factor authentication where available. It also says: “Never save your master password to your browser if prompted.” For standalone options, see our guide to password managers. Passkeys are another way some sites now let you sign in without a password.

How to review and remove extensions

Extensions add features, but they can also read what’s on the pages you visit. Google says to approve only extensions you trust, and that Enhanced Safe Browsing can warn when an extension isn’t trusted. Microsoft’s Edge help describes carefully reviewing an extension’s permissions before adding it. ASD’s ACSC personal security guide says to check a password manager’s browser extension “for authenticity before installing”.

Chrome on a computer, based on Google’s instructions (checked October 2026):

1. Select More > Extensions > Manage extensions.
2. Use each extension’s switch to turn it off, or select Remove (then Remove again) to delete it.
3. Select Details to change site access to On select, On specific sites or On all sites.

Edge, based on Microsoft’s instructions (checked October 2026):

1. Select the Extensions icon to the right of the address bar, then Manage extensions.
2. Use the switch next to an extension to turn it off.
3. To delete one, select More actions (three dots) beside it in the Extensions menu, choose Remove from Microsoft Edge, then Remove.

Firefox, based on Mozilla’s instructions (checked October 2026):

1. Open the Firefox menu and select Add-ons and themes, then Extensions.
2. Use the switch next to an extension to turn it off.
3. To delete one, select its three-dot menu, then Remove.

Our guide to malicious browser extensions explains how harmful extensions work and the warning signs.

Things to watch for

• Fake update pop-ups. Browsers update through their own menus or the operating system. The steps above use the browser’s own About page.
• Shared or public computers. ASD’s ACSC advises against “remember me” on public or shared devices in its password manager guidance. Signing out and closing the browser helps.
• Over-strict settings. Blocking all cookies can break sign-ins and shopping carts, as Apple and Google both note.
• Extensions that change hands. An extension you trusted can be updated with new permissions. Reviewing the list now and then helps.
• Work devices. If a setting is greyed out, your organisation may manage it.

Common questions

How do I make my browser more secure?

Browser makers describe a handful of checks: keeping the browser updated, leaving safe browsing warnings on, reviewing tracking settings, removing unused extensions and protecting saved passwords. Most browsers already have sensible protections on by default, so it’s mostly about knowing where they are. ASD’s ACSC explains that updates fix weaknesses attackers look for. Steps for Chrome, Edge, Safari and Firefox start at how to keep your browser updated.

How do I update my web browser?

Chrome, Edge and Firefox each have an About page that checks for updates: in Chrome, More > Help > About Google Chrome; in Edge, Help and feedback > About Microsoft Edge; in Firefox, Help > About Firefox. An update often finishes only when the browser restarts. Apple says Safari is “included with the operating system”, so it updates with macOS, iOS or iPadOS. See how to keep your browser updated.

Should I block third-party cookies?

It’s a trade-off between privacy and sites working fully. Google explains that third-party cookies come from other sites embedded in a page, such as those behind ads, and “In some cases, this info can be used to track your activity as you browse sites.” Google also notes some sites may not work fully with them blocked. Edge, Safari and Firefox limit cross-site tracking in their own ways. See how to change tracking and privacy settings.

Is it safe to save passwords in my browser?

Official guidance doesn’t rule out browser password saving. Chrome’s Safety Check looks for compromised, reused or weak passwords saved in Google Password Manager. ASD’s ACSC says password managers “can help you create, manage and store passwords”, and describes choosing a reputable one with multi-factor authentication where available. It also says: “Never save your master password to your browser if prompted.” See how to check saved passwords and the guide to password managers.

How do I remove a browser extension?

Each browser has its own extensions page. In Chrome, Google’s steps are More > Extensions > Manage extensions, then Remove. In Edge, Microsoft describes Extensions > More actions > Remove from Microsoft Edge. In Firefox, Mozilla describes Add-ons and themes > Extensions, then the three-dot menu > Remove. How to review and remove extensions has the full steps, and malicious browser extensions explains the warning signs.

What do I do if my browser warns me a site is deceptive?

For Safari’s Deceptive Website Warning, Apple’s guidance is to select Go Back. Apple says such sites may “try to trick you into installing software or disclosing personal or financial information.” Chrome, Edge and Firefox show similar warnings. A warning’s absence doesn’t mean a site is safe: Scamwatch says to “always type web addresses directly into your browser” rather than following links in messages. See how to check safe browsing warnings.

Where to get official help

• Google Chrome Help: support.google.com/chrome
• Microsoft Support for Edge: support.microsoft.com
• Apple Support for Safari: support.apple.com
• Mozilla Support for Firefox: support.mozilla.org
• ASD’s ACSC for guidance on updates and passwords, and, according to its cybercrime help page, ReportCyber and the 24/7 hotline: 1300 CYBER1 (1300 292 371)