Almost everything happens through the browser: email, homework, social media, shopping. That's why attackers target browsers with fake websites (phishing), harmful extensions, scam ads and spam notifications – those “Virus detected!” messages that pop up in the corner of the screen because you once clicked “Allow notifications”.
Modern browsers have good protection (Google Safe Browsing, Microsoft Defender SmartScreen, protection against deceptive websites in Firefox and Safari), but it needs to be up to date and switched on.
Menu names may differ slightly depending on the browser version and language. On phones, the menus are similar but shorter.
⚙️ Step-by-step settings
Menu names may differ slightly depending on the model and version.
Update your browser
Browsers get security updates very often – sometimes for holes that are being actively exploited.
- Chrome: ⋮ menu → Help → About Google Chrome – it updates itself, then click Relaunch.
- Edge: … menu → Help and feedback → About Microsoft Edge.
- Firefox: ☰ menu → Help → About Firefox.
- Safari: updates together with macOS/iOS – use Software Update.
- Close your browser completely and reopen it at least once a week so that updates get installed.
- On your phone, update the browser from Google Play or the App Store.
Turn on safe browsing
The browser warns you before you open scam websites or harmful downloads.
- Chrome: ⋮ → Settings → Privacy and security → Security → choose Enhanced protection, or at least Standard protection.
- Edge: … → Settings → Privacy, search, and services → Security → turn on Microsoft Defender SmartScreen and Block potentially unwanted apps.
- Firefox: ☰ → Settings → Privacy & Security → Security → turn on Block dangerous and deceptive content.
- Safari on Mac: Safari → Settings → Security → Warn when visiting a fraudulent website. On iPhone: Settings → Apps → Safari → Fraudulent Website Warning.
- Turn on HTTPS-Only / Always use secure connections (Chrome: Security → Always use secure connections; Firefox: HTTPS-Only Mode).
- When the browser shows a red warning page, go back – don't click past it.
Check and clean up extensions
Extensions can read everything you type and see on a page, including passwords.
- Chrome: type chrome://extensions in the address bar.
- Edge: type edge://extensions.
- Firefox: ☰ → Add-ons and themes, or about:addons.
- Safari: Safari → Settings → Extensions (on iPhone: Settings → Apps → Safari → Extensions).
- Remove any extension you don't recognise, don't use or didn't install yourself.
- Only keep the extensions you need, from the official store (Chrome Web Store, Edge Add-ons, Firefox Add-ons, App Store), with lots of users and good reviews.
- Be careful with extensions that promise “free video downloads”, a “free VPN” or “coupons” – they often collect data.
Stop spam notifications and pop-ups
Fake “Your phone has a virus” notifications come from websites you've given permission to send notifications.
- Chrome: ⋮ → Settings → Privacy and security → Site settings → Notifications → remove unknown sites from the Allowed list; choose Don't allow sites to send notifications, or use quieter messaging.
- In the same place: Pop-ups and redirects → Don't allow.
- Edge: Settings → Cookies and site permissions → Notifications; and Pop-ups and redirects → Block.
- Firefox: Settings → Privacy & Security → Permissions → Notifications → Settings → remove unknown sites and choose Block new requests.
- Safari on Mac: Safari → Settings → Websites → Notifications / Pop-up Windows.
- On Android: Settings → Apps → Chrome → Notifications → Sites category – turn off unknown sites.
- A simple rule: when a website asks “Allow notifications?”, choose Block.
Store passwords safely
A password manager creates strong passwords and won't fill them in on fake websites.
- Use the built-in manager: Google Password Manager (Chrome), Microsoft Password Manager (Edge), Firefox Passwords or the Passwords app (Apple) – or a separate, trusted password manager.
- Chrome: ⋮ → Passwords and autofill → Google Password Manager → Checkup – change leaked, weak or reused passwords.
- Edge: Settings → Profiles → Passwords → turn on Password Monitor.
- Firefox: ☰ → Passwords – check the breach alerts.
- Protect your browser account (Google, Microsoft, Firefox, Apple) with 2-step verification – it stores all your passwords.
- On a shared computer (school, library), don't save passwords and use a private window; sign out of your accounts when you've finished.
Check your privacy and clear your data
Limits tracking and removes cookies from suspicious websites.
- Chrome: Settings → Privacy and security → Third-party cookies → Block third-party cookies.
- Edge: Settings → Privacy, search, and services → Tracking prevention → Balanced or Strict.
- Firefox: Settings → Privacy & Security → Enhanced Tracking Protection → Standard or Strict.
- Clear your browsing data every now and then (Ctrl + Shift + Delete on Windows) – note that this will sign you out of your accounts.
- In Site settings, check which websites have access to your camera, microphone and location.
✅ Do / Don't
✅ Do this
- Always keep your browser up to date.
- Check the address (URL) before typing a password – e.g. “faceb00k-login.com” is not Facebook.
- Use a password manager and regularly check for leaked passwords.
- Keep as few extensions as possible, and only from official stores.
- Block notifications from websites you don't know.
- Turn on safe browsing / SmartScreen.
- Sign out of your accounts and use private windows on shared computers.
- Type the addresses of important websites yourself, or use bookmarks.
❌ Don't do this
- Don't click “Allow” when an unknown website wants to send you notifications.
- Don't believe windows saying “Your computer/phone has 5 viruses” – they're scam ads.
- Don't download browser or Flash Player “updates” from websites that offer them to you.
- Don't install extensions that promise free stuff (coins, skins, films).
- Don't click past the red “Deceptive site” or “Your connection is not private” warning on pages where you type passwords.
- Don't save passwords on shared computers.
- Don't enter card details on websites you found through ads or links in messages.
- Don't click shortened or strange links without knowing where they lead.
👨👩👧 Safe browsing for children
Browser parental controls are usually set up through the device's own system:
- Chrome + Google Family Link (Android, Chromebook): in Family Link → your child's profile → Controls → Content restrictions → Google Chrome → choose Try to block explicit sites or Only allow approved sites. Also turn on SafeSearch in Google Search.
- Edge + Microsoft Family Safety (Windows, Xbox): at family.microsoft.com → your child → Content filters → Filter inappropriate websites. Other browsers on Windows are usually blocked.
- Safari + Screen Time (iPhone, iPad, Mac): Settings → Screen Time → Content & Privacy Restrictions → Content Restrictions → Web Content → Limit Adult Websites or Only Approved Websites.
- Firefox has no parental controls of its own; use the system controls or DNS filters on your router.
- Create a separate browser profile for your child.
- Block extension installs (Family Link does this automatically for supervised accounts).
- Teach your child: when something scary or strange appears, close it and tell an adult – they won't get into trouble for it.
⚠️ Warning signs
- Your home page, search engine or new tab page has changed without you doing it.
- Notifications appear in the corner of the screen saying “Virus!” or “You've won!”, or showing adult ads.
- There are extensions you didn't install, or that can't be removed (“Managed by your organisation” on a home device).
- Your searches are redirected to unknown search engines.
- New tabs with ads open by themselves.
- You get notifications that your saved passwords have been found in a data breach.
🆘 If you get hacked
- Step 1: Close the browser and don't enter any passwords until you've cleaned it up.
- Step 2: Remove all unknown extensions (chrome://extensions, edge://extensions, about:addons).
- Step 3: Remove notification permissions for unknown websites (Site settings → Notifications).
- Step 4: Reset the browser: Chrome – Settings → Reset settings; Edge – Settings → Reset settings; Firefox – Help → More troubleshooting information → Refresh Firefox.
- Step 5: Scan the device with your antivirus (e.g. Windows Security) and check your installed programs for unknown software.
- Step 6: From a safe device, change your important passwords (starting with your email) and turn on 2-step verification.
- Step 7: If you've entered card details, tell your bank immediately; for scams and blackmail, report it to Kosovo Police on 192.
More help: Help & Reporting