Earlier this year, Chrome began securing and blocking what’s known as “mixed content”, when secure pages incorporate insecure content. Secure HTTPS pages may sometimes still have non-secure features. Update (): Mixed form warnings were originally scheduled for Chrome 86, but will be delayed until Chrome 87 Mixed form warnings and download blocking Among our users who have enabled checking websites and downloads in real time, our predictive phishing protections see a roughly 20% drop in users typing their passwords into phishing sites. When you turn on Enhanced Safe Browsing, Chrome can proactively protect you against phishing, malware, and other dangerous sites by sharing real-time data with Google’s Safe Browsing service. In Chrome 86 we’ll also be launching a number of additional features to improve user security, including:Įarlier this year, we launched Enhanced Safe Browsing for desktop, which gives Chrome users the option of more advanced security protections. You will also be able to use Chrome on iOS to autofill saved login details into other apps or browsers. In our next release, we will launch Safety Check on iOS and Android, which includes checking for compromised passwords, telling you if Safe Browsing is enabled, and whether the version of Chrome you are running is updated with the latest security protections. To help, we’re adding support for ".well-known/change-password" URLs that let Chrome take users directly to the right “change password” form after they’ve been alerted that their password has been compromised.Īlong with these improvements, Chrome is also bringing Safety Check to mobile. We notify you when you have compromised passwords on websites, but it can be time-consuming to go find the relevant form to change your password. This lets Google check them against lists of credentials known to be compromised, but Google cannot derive your username or password from this encrypted copy. To check whether you have any compromised passwords, Chrome sends a copy of your usernames and passwords to Google using a special form of encryption. Today, we’re improving password security on both Android and iOS devices by telling you if the passwords you’ve asked Chrome to remember have been compromised, and if so, how to fix them. Passwords are often the first line of defense for our digital lives.