Chrome's defaults are reasonable, but they are designed for everyone, which means they balance privacy against convenience in ways you may not agree with. This checklist goes through the settings that make the most difference, explains what each one actually does and suggests a sensible choice. Menu names are from recent desktop versions of Chrome; most of them live under Settings → Privacy and security (you can also type chrome://settings/privacy into the address bar).
1. Run Safety Check first
Privacy and security → Safety Check (in some versions, a separate Safety Check page) reviews several things at once: whether Chrome is up to date, whether any saved passwords have appeared in known data breaches, whether harmful extensions are installed, and whether sites you no longer visit still hold permissions. It is the fastest way to find the obvious problems.
2. Choose a Safe Browsing level
Safe Browsing warns you about dangerous sites and downloads. Standard protection checks against a list that Chrome downloads regularly. Enhanced protection checks more proactively and in real time by sending more information about your browsing to Google. No protection is not recommended. If you prefer to share less data, Standard is a good balance; if you want the strongest protection against phishing, Enhanced is better.
3. Review third-party cookies
Third-party cookies let companies recognise you across different websites, mostly for advertising. Under Privacy and security → Third-party cookies you can block them, either everywhere or only in Incognito mode. Blocking them can break some embedded content, such as comment widgets or single sign-on, so Chrome lets you add exceptions for specific sites.
4. Check the ad privacy settings
Privacy and security → Ad privacy contains Chrome's newer advertising features, which estimate your interests in the browser and let sites request them. You can turn off ad topics and site-suggested ads there, and review which topics have been recorded.
5. Clean up site permissions
Over time you grant sites access to your location, camera, microphone, notifications and more. Go to Privacy and security → Site settings and look at each category. Two quick wins:
- Notifications: remove any site you did not deliberately allow. Notification spam is one of the most common browser annoyances and is sometimes used for scams. You can also choose not to let sites ask at all.
- Location, camera and microphone: set the default to "ask" and remove sites that no longer need access.
6. Use secure connections
Under Privacy and security → Security, turn on Always use secure connections. Chrome will then try HTTPS for every site and warn you before loading a page that is not encrypted. On the same page, Use secure DNS encrypts the lookups your browser makes to find websites, which stops your network operator from easily seeing which sites you visit.
7. Decide what to sync
If you sign in to Chrome, your bookmarks, passwords, history and settings can be synced to your Google account. That is convenient across devices. You can choose exactly what to sync under You and Google → Sync, and it is worth reviewing whether you need your full history synced.
8. Review saved passwords and payment methods
Open Google Password Manager from the settings menu. Its Checkup section highlights compromised, reused and weak passwords. Change the compromised ones first. Under Autofill and passwords → Payment methods, remove any cards you no longer use, and consider requiring device verification before cards are filled in.
9. Set history to clear automatically (optional)
If you would rather not keep a long browsing history, Delete browsing data lets you clear history, cookies and cached files for a chosen time range. Separately, under Site settings → Additional content settings → On-device site data, you can make Chrome delete site data every time you close all windows. That means logging back in to sites more often, so decide whether the trade-off is worth it for you.
10. Audit your extensions
Extensions can read far more than most settings expose. Open chrome://extensions, remove what you do not use, and limit site access for the rest to "On click" or "On specific sites" where possible.
What Incognito does and does not do
Incognito mode does not save your history, cookies or form entries on your device after you close the window. It does not hide your activity from the websites you visit, your employer or school network, or your internet provider, and it does not make you anonymous. It is useful for shared computers and for logging in to a second account, not as a privacy shield.
The bottom line
Fifteen minutes with these ten settings gives you far more control than the defaults: fewer trackers, fewer intrusive permissions, stronger connection security and a clear picture of what is synced and saved. Revisit the list every few months, particularly site permissions and extensions, which are where most problems quietly accumulate.