Your browser can block trackers and scam sites. The strongest settings just aren't on by default.

Your browser can block trackers and warn you off scam sites. In Chrome the strongest settings are off by default; in Edge they are turned down. Five minutes fixes both.

Share
5-Minute Tech Tip card: analog clock with the headline "Are your browser's strongest settings turned on?"

Your browser can block a lot of the tracking and scam sites you worry about. But the strongest settings are switched off, or turned down by default.

Chrome does not block third-party cookies until you tell it to. It does not turn on its best scam protection either. Edge does more out of the box, but it holds the strict setting back by default. None of these cost anything or need an install. It takes about five minutes and a couple of menus.

Two things to do in whatever browser you use. Block the trackers that follow you from site to site. And switch on the built-in check that warns you off scam and malware pages before you click in.

In Chrome

Block third-party cookies.

  1. Open Chrome. Top right, click the three dots, then 'Settings'.
  2. In the left menu, click 'Privacy and security'.
  3. Click 'Third-party cookies'. On some versions this reads 'Tracking Protection'. Same place.
  4. Choose 'Block third-party cookies'.
  5. Scroll down a little and turn off 'Allow related sites to see your activity in the group'. Blocking cookies leaves this one on. It lets a company's own cluster of sites keep sharing what you do across them, so switch it off.

Shortcut if the menu does not match: paste chrome://settings/cookies into the address bar and press Enter.

Chrome Settings, Third-party cookies page, with Block third-party cookies selected and the related-sites sharing toggle switched off.
Chrome: block third-party cookies, then switch off related-sites sharing just below it.

Turn on Enhanced protection.

  1. Back in 'Privacy and security', click 'Security'. (Or paste chrome://settings/security.)
  2. Under 'Safe Browsing', choose 'Enhanced protection'.

Standard protection is already on by default. It blocks sites Google already knows are bad. Enhanced protection is the stronger setting. It checks pages in real time, so it can warn you off a scam site that went up an hour ago, before it lands on anyone's blocklist.

Chrome Settings, Security page, with Safe Browsing set to Enhanced protection.
Chrome: choose Enhanced protection under Safe Browsing.
The tradeoff. Enhanced protection sends more of what you browse to Google, so it can spot brand-new scam pages faster. For most people the scam and phishing protection is worth it. If you would rather not hand Google the extra data, leave it on 'Standard protection'. You still get blocked from the sites Google already knows are dangerous. You just react slower to the new ones.

In Edge

Bump tracking prevention to Strict.

  1. Open Edge. Top right, click the three dots, then 'Settings'.
  2. Click 'Privacy, search, and services'.
  3. Make sure 'Enable tracking prevention' is on, then choose the 'Strict' tile.

Edge already runs 'Balanced' by default, so this moves it up rather than turning it on. Strict blocks the most trackers. It also blocks cookies from sites you have never visited.

Microsoft Edge Settings, Tracking prevention set to Strict with tracking prevention turned on.
Edge: set Tracking prevention to Strict.

Confirm the scam protection, and turn on the app check.

  1. On that same 'Privacy, search, and services' page, scroll down to 'Security'.
  2. Make sure 'Protect from harmful sites and downloads' is on. It is by default. This is Microsoft Defender SmartScreen, the piece that warns you off phishing and malware pages, the same job Enhanced protection does in Chrome.
  3. Right under it, turn on 'Block potentially unwanted apps'. This one is off by default. It stops the junk that rides along with a "free download," the extra toolbar or "cleaner" you never asked for.
  4. Check that 'Scareware blocker' is on. On most computers it already is. It kills the full-screen "your computer is infected, call this number" page, the fake alert aimed at people who panic. On an older or low-memory PC you may have to switch it on yourself, or it may not show up at all.

If you want the belt-and-suspenders version, Edge also has a plain 'Block third-party cookies' toggle under 'Cookies and site permissions'.

Microsoft Edge Settings, Security section, showing Protect from harmful sites and downloads on, Block potentially unwanted apps on, and Scareware blocker on.
Edge: confirm SmartScreen and Scareware blocker, and turn on the app check.

When a site acts up

Expect this once in a while. Block trackers or third-party cookies, and some site you use starts misbehaving. A login will not take. A video will not play. A shopping cart forgets what was in it.

Do not switch the whole setting back off. Both browsers let you allow the one site that broke and keep everything else protected. In Chrome, click the eye icon at the right of the address bar (it shows up on sites that use third-party cookies) and allow cookies for that site. In Edge, click the eye icon next to the address and do the same. Allow the one site, then move on.

Chrome's Tracking Protection popup, opened from the eye icon in the address bar, with the toggle to allow third-party cookies for this site.
Click the eye icon at the right of the address bar, then flip the toggle to allow the one site. Edge's version looks nearly the same.

The short version

These settings will not make you invisible. Neither will a VPN. What they do is cut down the everyday tracking that follows you between sites. And they put a warning between you and the worst pages before you click, the phishing and fake-update pages built to catch you off guard.

Five minutes and a couple of menus. No charge. Open the browser you actually use and turn them on. Once they are on, they stay on.

If a setting is not where I said it would be, your browser probably updated and moved it. Reply and tell me which one, and I will point you to it.

Joel

Sources

[ Free guide, free Tuesday email ]
Tech news without having to be tech savvy.
Subscribe ×