Chromebook security basics

A Chromebook is a laptop that runs Google’s ChromeOS, and much of its security happens automatically; the main settings left to the owner are updates, the screen lock, 2-Step Verification on the Google Account, where files are saved, and extensions and app permissions. Much of what happens on it is tied to a Google Account: email, files in Google Drive, saved passwords and settings. This guide explains the main Chromebook security settings and features, why each one matters, and how it is usually turned on, based on Google’s own help pages and guidance from the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC).

Google changes menus between ChromeOS versions, so each section links to Google’s page with the latest steps.

Why it matters

Chromebooks are designed so that a lot of security happens automatically. Google’s Chrome device security overview describes several built-in protections:

• Sandboxing. Google says “each web page and application runs in a restricted environment called a sandbox”.
• Verified Boot. Each time the Chromebook starts, it checks itself. Google says: “If it detects that the system has been tampered with, or corrupted in any way, it will repair itself”.
• Data encryption. Google says the device encrypts user data “using tamper-resistant hardware”.
• Recovery mode. Google says that if something goes wrong, “you can simply push a button to enter recovery mode”.

A few things still depend on the owner: restarting so updates finish, a screen lock, protecting the Google Account, saving files somewhere other than the temporary Downloads folder, and keeping an eye on extensions and app permissions. The sections below cover each one, and the Personal Cyber Safety Checklist gives a way to tick them off.

How to check for updates

The ACSC describes automatic updates as “a ‘set and forget’ feature that updates your software as soon as it becomes available”, and says: “The easiest way to stay on top is by turning on or confirming automatic updates where possible.”

On a Chromebook this is already the default. Google says: “Your Chromebook automatically checks for updates and downloads when it connects to the internet.” The update finishes when the Chromebook restarts, so a Chromebook that’s never shut down can sit with an update waiting.

Based on Google’s instructions (checked October 2026). Menus can change between versions; Google’s Chromebook update guide has the latest steps.

1. Connect the Chromebook to Wi-Fi.
2. Select the time at the bottom right, then the Settings gear.
3. Select About ChromeOS at the bottom left.
4. Select Check for updates. If an update is found, it downloads automatically. Google says that if this option isn’t shown, the Chromebook may already be up to date.
5. When the Update device notification appears, select Restart to finish installing.

Google suggests keeping the Chromebook plugged in during updates.

Update end dates

Every Chromebook model has a date when automatic updates stop. Google’s Auto Update policy says “ChromeOS devices receive 10 years of updates”, counted “from the platform release date”, not from the date the Chromebook was bought. It lists an “Automatic updates until” date for each model, and says: “Remember to check the date when making a purchasing decision.”

To see the date on the Chromebook itself, Google describes going to Settings > About ChromeOS > Additional details and looking under Update schedule for “This device will get automatic updates until” a given date.

After that date, Google says the device may show: “This device will no longer receive software updates. You can continue using your computer but should consider upgrading.” The ACSC says: “The risk of a cybersecurity incident is much higher when a product reaches end of support.” Its end-of-support page describes upgrading as the best protection. Our guide to resetting a Chromebook before selling or recycling it covers the old device.

How to set up the screen lock and a PIN

Google’s help recommends locking the screen “for extra security” when stepping away from a Chromebook. The ACSC’s first steps guide describes locking devices “with a passphrase, password, PIN or passcode”, and setting them “to automatically lock after a short time of inactivity.”

To lock the screen straight away, Google describes holding the Search (or Launcher) key and pressing L, or selecting the time and then the Lock icon.

Based on Google’s instructions (checked October 2026). Google’s screen lock guide has the latest steps.

1. Select the time at the bottom right, then the Settings gear.
2. Under Privacy and security, select Lock screen and sign-in, and enter the password.
3. Turn on Lock when sleeping or lid is closed.
4. To add a PIN, select PIN or password, then Set up PIN.
5. Enter a PIN of “six digits or more”, then enter it again to confirm.

Google says a PIN unlocks the screen faster, and on some Chromebooks can be used instead of the Google Account password to sign in.

How to turn on 2-Step Verification for the Google Account

Because a Chromebook signs in with a Google Account, that account protects the device’s email, files and settings. The ACSC’s first steps guide says multi-factor authentication “makes it harder for cybercriminals to gain initial access to your account.”

Google describes 2-Step Verification as an extra layer of security. Its options include Google prompts (a Yes or No tap on a signed-in phone, which Google describes as its recommended option), passkeys and hardware security keys (which Google says protect against phishing), authenticator apps, codes by text or voice call, and printable backup codes. Google notes that “verification codes sent by texts or calls can be vulnerable to phone number-based hacks”, and warns: “Never share your verification codes with anyone, as scammers may try to take over your account.” It also says: “You won’t receive a call from Google to verify a code.”

Based on Google’s instructions (checked October 2026). Google’s 2-Step Verification guide has the latest steps.

1. Go to myaccount.google.com and sign in.
2. Select Security & sign-in.
3. Under How you sign in to Google, select Turn on 2-Step Verification.
4. Follow the on-screen steps.
5. Optionally, print or download backup codes, which Google describes keeping “in a safe place”.

Google says these steps may not work for work or school accounts, which are handled by the administrator. Our guides to how to secure your online accounts, how passkeys work and planning account recovery explain related settings.

How to save files somewhere safer than Downloads

The ACSC describes backing up as “a precautionary measure so that it can be recovered if it is ever lost, stolen or damaged.”

On a Chromebook, the default save location is easy to overlook. Google says files are saved to “a temporary folder on your Chromebook’s hard drive”, and that “your Chromebook will sometimes delete downloaded files to clean up space.” Files can be saved to Google Drive instead, and Google’s reset guide says a factory reset “won’t delete any of your files on Google Drive or external hard drive.”

Based on Google’s instructions (checked October 2026). Google’s files guide has the latest steps.

1. In the app where the file is open, press Ctrl + S.
2. Enter a file name.
3. In the left column, choose Google Drive, then My Drive.
4. Select Save.

Our guide to the 3-2-1 approach to backups explains the idea of keeping more than one copy.

How to sign a lost Chromebook out of the Google Account

Google’s lost device page describes signing a missing Chromebook out of the Google Account from another device. This removes the Chromebook’s access to the account and connected apps. Google’s page shows “the last time that the device was used, and the last city it was in.” It says Chromebooks aren’t listed under Find your phone, and it doesn’t describe showing a Chromebook on a map.

Based on Google’s instructions (checked October 2026). Google’s lost device page has the latest steps.

1. On another device, open the Google Account and sign in.
2. In the Security section, find Your devices and select Manage devices.
3. Select the Chromebook.
4. Next to Account access, select Sign out and follow the steps.
5. Change the Google Account password: Security > Signing in to Google > Password.

Google also describes reviewing saved passwords at passwords.google.com, and watching accounts and card statements for fraud. Our guide to what to do if an account has been hacked explains where official guidance says to start.

How to review and remove extensions

Extensions add features to the Chrome browser, and Google notes that “Some extensions need permission to read and change site data.” The ACSC’s first steps guide says to “Check the privacy permissions carefully when installing new apps on your device, particularly for free apps.” Google also says that with Chrome’s Enhanced protection turned on, “it warns you when an extension you want to install isn’t trusted.”

Based on Google’s instructions (checked October 2026). Google’s extensions guide has the latest steps.

1. In Chrome, select the three-dot menu at the top right, then Extensions > Manage extensions.
2. Look through the list and select Details on any extension to see its permissions.
3. To limit an extension, use the site access options: only when the extension is selected, on specific sites, or on all sites.
4. To remove an extension, select Remove, then Remove again to confirm.

How to manage camera, microphone and location access

ChromeOS has privacy controls for the camera, microphone and location, both for the whole device and for each app. Google says turning off camera access in Privacy controls “blocks access on all levels and services”. For location, there are three levels: allowed for apps and websites with permission, allowed only for system services such as the time zone, or off.

Based on Google’s instructions (checked October 2026). Google’s camera, microphone and location guide has the latest steps.

1. Select the time at the bottom right, then the Settings gear.
2. Select Privacy and security, then Privacy controls.
3. Turn Camera access or Microphone access on or off for the whole device.
4. Select an app to change its permission individually.
5. For location, select Location access, then Change access, and choose one of the three levels.

Google notes that Chrome and web app permissions can also be changed at chrome://settings/content.

Things to watch for

• Files left in Downloads. Google says the Chromebook sometimes deletes downloaded files to free up space.
• An update waiting for a restart. Google says a restart is needed to finish installing.
• The update end date. Google lists an “Automatic updates until” date for each model; the ACSC describes the risk as much higher after end of support.
• Unexpected verification codes or prompts. Google warns never to share verification codes and says it won’t call to verify one. Our guide to how phishing, smishing and vishing work explains how scammers ask for codes.
• Extensions asking for broad access. Google notes some extensions can read and change data on every site visited.
• Work or school Chromebooks. Google says these can’t be reset by the user and that settings are managed by the administrator.

Common questions

How do I secure my Chromebook?

Chromebooks have a lot of built-in protection, including sandboxing, Verified Boot and data encryption, so the owner’s part is a short list. It covers restarting so updates finish, a screen lock and PIN, 2-Step Verification on the Google Account, saving files somewhere other than the temporary Downloads folder, and reviewing extensions and app permissions. The steps start at how to check for updates, and the Personal Cyber Safety Checklist lists them to tick off.

Do I need antivirus on my Chromebook?

Neither Google’s Chrome device security overview nor the ACSC’s personal cyber security first steps guide mentions antivirus software. Google’s overview describes the protections built into ChromeOS: automatic updates, sandboxing, Verified Boot, data encryption and recovery mode. The ACSC guide focuses on updates, multi-factor authentication, backups, passphrases and screen locks. The guide to antivirus software explains what built-in protection covers and what paid security suites add.

How long will my Chromebook get updates?

Google’s Auto Update policy says “ChromeOS devices receive 10 years of updates”, counted “from the platform release date”, not from the date the Chromebook was bought. Each model’s “Automatic updates until” date is in Google’s list, and on the Chromebook under Settings > About ChromeOS > Additional details > Update schedule. The ACSC says: “The risk of a cybersecurity incident is much higher when a product reaches end of support.” See update end dates.

What do I do if my Chromebook is lost or stolen?

Google describes signing it out of the Google Account from another device, under Security > Your devices > Manage devices, then Sign out next to Account access. Google then describes changing the Google Account password and watching accounts and card statements for fraud. Google says Chromebooks aren’t listed under Find your phone, and it doesn’t describe showing one on a map. The full steps are in how to sign a lost Chromebook out of the Google Account.

Does a factory reset delete my Google Drive files?

No, according to Google. Google says a reset “erases all user data on your Chromebook’s hard drive”, including the Downloads folder, but “won’t delete any of your files on Google Drive or external hard drive.” Files kept only in Downloads are erased by a reset, which is where saving files somewhere safer than Downloads comes in. The guide to resetting a Chromebook covers the reset itself.

Why did files disappear from my Chromebook’s Downloads folder?

Google says Downloads is “a temporary folder on your Chromebook’s hard drive”, and that “your Chromebook will sometimes delete downloaded files to clean up space.” Saving to Google Drive instead means pressing Ctrl + S and choosing Google Drive > My Drive in the left column. The ACSC describes backing up as a way for information to be “recovered if it is ever lost, stolen or damaged.” See how to save files somewhere safer than Downloads.

Where to get official help

• Google Chromebook Help (support.google.com/chromebook) has the current steps for every Chromebook setting in this guide, and Google Account Help covers 2-Step Verification.
• ASD’s ACSC publishes guidance on updates and end of support.

Related guides

• How to secure your online accounts
• Passkeys explained
• An account recovery plan
• Backups for personal devices: the 3-2-1 approach
• Selling, giving away or recycling a device
• Windows computer security basics
• Mac security basics