The development is more than another list of dangerous addresses. Google describes an attempt to detect deceptive behavior within a page, including sites offering fake updates or presenting imaginary problems. In practice, a warning may appear even before the system is highly confident that a site is malicious.
Suspicious and Dangerous Sites Will Receive Different Warnings
According to Google's announcement, Enhanced Protection distinguishes between suspected deception and a high-probability identification of danger. A site identified as dangerous will continue to show a red full-page warning. Marking a site as suspicious is intended to reflect a lower level of certainty.
The company also describes a move to a server-based Gemini model to analyze signs of scams. The result is combined with additional information, including the domain's reputation. This does not confirm that every page without an alert is safe, nor is there reason to interpret every suspicion as definitive proof.
When You Are Asked to Copy a Command to Fix a Problem
One protection addresses ClickFix, a deceptive technique in which users are asked to run a command on their computer to solve an imaginary problem. Google says Chrome detects the copying of suspicious commands in Enhanced Protection mode and may warn users following a check. The company makes clear that the browser will not ask users to repair it this way.
For readers who are not computer experts, this is a useful sign to remember: being asked to leave the browser and run a command is already a different kind of action from reading a page. You can stop, close the page and investigate through the service's familiar support channel. You do not need to follow the instructions to decide whether they look trustworthy.
Enhanced Protection Sends More Information for Checking
Google's Help Center explains that Enhanced Protection may send the company website addresses, samples of page content, download information, extension activity and system details. According to Google, the purpose is security. For signed-in users, the protection may also draw on information across Google services.
Choosing a protection level is therefore also a choice about how much information is sent. With Standard Protection, address checks use a mechanism that hides the IP address in the circumstances described in the Help Center; additional information may be sent when suspicious activity is detected. The difference is not between a mode that sends information and one that sends nothing.
Read the setting's explanation before changing it. Users who prefer to stay with Standard Protection still receive a layer of protection. Turning Safe Browsing off entirely is a separate option that Google does not recommend.
How to Check the Setting on a Computer
Chrome's desktop Help Center gives the following path: open the browser menu, go to Settings, select Privacy and security, then Security. Under Safe Browsing, you can choose Enhanced Protection, Standard Protection or No Protection. Standard Protection is the default described in the documentation.
Check through the browser's own menu, rather than a button on a website promising to upgrade security. This lets you see the current selection and read the explanations beside the options without relying on instructions from an external page.
Anyone who reached a website through a text message can also use our guide to checking a suspicious delivery message. Checking the message and browser protection complement each other: the first helps assess the approach, while the second adds alerts during browsing.
More articles in the News section.
