Chromebooks are built to resist viruses, but you should still know how to check

A Chromebook is harder to infect than a Windows or Mac computer because Chrome OS runs everything in isolated containers and updates itself automatically in the background. Viruses and malware designed for other operating systems cannot run on Chrome OS at all. That said, malicious websites and phishing attempts can still reach you, and a compromised extension or a fake login page can steal your passwords or data.

The good news: you do not need antivirus software on a Chromebook the way you would on another computer. Chrome itself includes built-in scanning that runs constantly. What you do need to know is how to run a manual security check when you suspect something is wrong, how to spot a compromised extension, and how to clear out the browser data that malware or phishing attempts might have collected.

Key Takeaways

  • Chrome OS includes automatic virus scanning that runs in the background, so you do not need to install separate antivirus software.
  • You can run a manual security scan through Settings > Advanced > Security and Maintenance, which takes a few minutes.
  • Malicious browser extensions are a more common threat than viruses on Chromebooks, so check your installed extensions regularly and remove anything you do not recognize.
  • Phishing and fake login pages are the real risk on Chromebooks, so never enter your password on a website unless you typed the address yourself or clicked a link from an official source.
  • Clearing your browsing data regularly removes cookies and cached files that could be used to track you or steal information.

Run a manual security scan through Chrome Settings

Open Chrome and click the three vertical dots in the top right corner. Select Settings. On the left side, click Advanced, then click Security and Maintenance. You will see a section labeled "Security and Maintenance" with a button that says Run security scan. Click it.

The scan will take two to five minutes. Chrome will check for malware, unwanted software, and problematic settings. If it finds anything, it will show you what it detected and ask if you want to remove it. Click Remove to delete the threat. If the scan finds nothing, you will see a message saying your device is find.

This scan checks your browser and your Chromebook's system. It is not the same as the continuous background scanning Chrome does automatically — this is a deeper check you run when you want to be sure. Run it once a month or whenever you notice your Chromebook running slowly or behaving oddly.

Check your installed extensions for malware or unwanted changes

Extensions are small programs that add features to Chrome. They are also the most common way malware reaches Chromebook users, because a legitimate extension can be updated to include malicious code, or a fake extension can masquerade as a real one. Open Chrome and click the three vertical dots, then select More tools, then Extensions. You will see a list of every extension installed on your Chromebook.

Go through the list and ask yourself: do I recognize this? Did I install it? If you see something you do not remember installing, or something with a name that looks like it is trying to trick you (for example, "Google Security" when you know Google does not make that extension), remove it when ready. Click the trash icon next to the extension's name.

Pay special attention to extensions that have permission to read and change data on websites you visit. If an extension you barely use has that permission, remove it. You can always reinstall it later if you need it. Stick to extensions from the official Chrome Web Store, and before you install anything new, read the reviews and check who made it.

Clear your browsing data to remove tracking and stolen information

Malicious websites and phishing pages often leave behind cookies and cached data that can be used to track you or steal information. Clearing this data regularly is a straightforward way to remove anything suspicious. Open Chrome and press Ctrl + Shift + Delete on your keyboard (or Command + Shift + Delete if you use a Chromebook with a Mac keyboard). The Clear Browsing Data window will open.

At the top, make sure the time range is set to All time. Check the boxes next to Cookies and other site data and Cached images and files. You can also check Browsing history if you want to clear that too. Click Clear data. This will remove all the cookies and cached files from every website you have visited.

After you clear this data, you may need to log back into websites you use regularly, because cookies store login information. That is normal and expected. Clearing your data does not hurt your Chromebook — it just removes the files that websites and trackers use to follow you around the internet.

Recognize phishing and fake login pages before they steal your password

The most dangerous threat on a Chromebook is not a virus — it is a phishing page or a fake login screen that tricks you into typing your password. These pages look almost identical to the real thing, but they are hosted on a different website designed to capture what you type. Chrome will warn you if you land on a known phishing page, but not every fake page has been reported yet.

Before you enter your password anywhere, look at the address bar at the top of the browser. The address bar shows the actual website you are on. If you clicked a link in an email or a text message, the address might not be what you expect. For example, a phishing page might be at accounts-google-verify.com instead of accounts.google.com. If you are not sure, close the page and type the address yourself into the address bar.

Never enter your password on a website unless you typed the address yourself or you are absolutely certain the link came from an official source. If you do accidentally enter your password on a phishing page, change that password when ready from the real website. Most services let you change your password in Settings or Account.

Keep Chrome and Chrome OS updated automatically

Chrome OS updates itself automatically in the background, usually overnight. You do not have to do anything. These updates include security patches that close holes malware could use to get in. If you want to check that your Chromebook is up to date, click the time in the bottom right corner, then click the settings icon (gear), then click About Chrome OS. If an update is available, it will start downloading automatically.

Extensions also update automatically, but you can check manually if you want to be sure. Open Chrome, click the three vertical dots, go to More tools, then Extensions. In the top left corner, click Update. Chrome will check for updates to all your extensions and install any it finds.

What to do if Chrome detects a problem

If Chrome finds malware during a security scan, it will tell you what it found and ask if you want to remove it. Click Remove to delete the threat. After removal, Chrome may ask you to restart your Chromebook. Do that — it ensures the malware is completely gone and Chrome can restore any settings that were changed.

If the same threat keeps coming back after you remove it, the problem might be an extension or a website you visit regularly. Run through your extensions again and remove anything suspicious. If you think a specific website is the problem, stop visiting it or use a different browser on a different device to access it.

If your Chromebook is running very slowly or behaving strangely even after you run a security scan and clear your extensions, you can reset Chrome to its default state. Open Chrome, click the three vertical dots, go to Settings, then Advanced, then Reset and clean up, then Restore settings to their original defaults. This will remove all your extensions and clear your browsing data, but it will not delete your files or your Google account.

Frequently Asked Questions

Do I need to buy antivirus software for my Chromebook?

No. Chrome OS includes built-in malware scanning that runs automatically. Antivirus software designed for Windows or Mac will not work on a Chromebook, and you do not need it. The security scan in Chrome Settings is all you need for regular checks.

Can a Chromebook get a virus from visiting a bad website?

Chrome OS is designed so that visiting a malicious website cannot infect your Chromebook the way it could a Windows computer. However, a phishing page can trick you into entering your password, and a malicious extension can steal your data. The risk is your information, not your device.

What should I do if I think I clicked a phishing link?

If you entered your password, change it when ready on the real website. If you only clicked the link but did not enter anything, you can just close the page. Chrome will warn you if the page is a known phishing site. If you are worried, run a security scan and clear your browsing data.

Why is my Chromebook running slowly after I cleared my extensions?

Clearing extensions should make your Chromebook faster, not slower. If it is still slow, run a security scan to check for malware, restart your Chromebook, and make sure Chrome OS is up to date. If it is still slow after that, you may have too many browser tabs open or not enough storage space.

Can I recover files if malware deletes them?

Chromebooks store most files in Google Drive, which keeps deleted files in your Trash folder for 30 days. Open Google Drive, click Trash on the left side, find the file, right-click it, and select Restore. If the file is not in Trash, it may be gone permanently.