Chrome Enhanced Protection shares clipboard data with Google servers
Google has updated Chrome’s Enhanced Safe Browsing Protection to share clipboard contents and webpage data with its servers for improved scam detection. The company claims this mode makes users ten times safer from phishing and social engineering threats. While the system uses Gemini models to analyze page intent and brand representation, it processes data ephemerally to avoid retention. This shift marks a significant expansion of data sharing for users who opt into the advanced security tier, balancing enhanced protection against potential privacy trade-offs.
Key points
- Google Chrome’s Enhanced Safe Browsing Protection now shares clipboard content and visited webpage data with Google servers to detect social engineering scams like ClickFix.
- Google states that this enhanced mode makes users ten times safer from phishing, notification abuse, and other threats compared to the standard protection setting.
- The update introduces a two-tier warning system, displaying a shield icon for suspicious sites and a full-screen red interstitial for high-confidence dangerous sites.
- Google utilizes Gemini models in the cloud to evaluate page content, analyzing brand representation and scam likelihood while combining this with domain reputation signals.
- To address privacy concerns, Google processes page content ephemerally, ensuring data is not logged, retained, or used to train future models.
- The new features build on Enhanced Protection, which was introduced over five years ago, to combat increasingly sophisticated web threats and deceptive patterns.
Google has introduced significant updates to its Chrome browser’s Enhanced Safe Browsing Protection mode, expanding the scope of data shared with its servers to improve threat detection. The new features allow Chrome to share clipboard contents and visited webpage data with Google’s infrastructure. This approach is designed to protect users from sophisticated social engineering tactics, such as ClickFix, which rely on deceptive patterns that standard local checks might miss. Google asserts that users in this enhanced mode are ten times safer from phishing and other scams compared to those using the standard protection setting.
The update also refines how Chrome alerts users to potential threats. Instead of a single warning type, the browser now employs a two-tiered system. Sites exhibiting deceptive patterns trigger a shield icon in the address bar, allowing users to mark the site as safe or return to a previous page. High-confidence dangerous sites continue to display a full-screen red interstitial warning. This distinction helps users gauge the severity of the risk before proceeding.
Underpinning these improvements is the integration of Gemini models in the cloud. These models analyze page content to assess brand representation, user intent, and scam likelihood. Google combines this analysis with domain reputation and other security signals to identify deceptive sites. To mitigate privacy concerns, the company states that page content is processed ephemerally, meaning it is not logged, retained, or used to train future models. This development represents a notable shift in how browser security leverages cloud-based AI, balancing advanced protection with data transparency for users who opt into the enhanced tier.
Sources
The WireByte editorial team synthesises technology news from multiple primary sources, verifies the facts, and links every source. Articles are produced with AI assistance and reviewed under our editorial policy.
