Google Chrome can now check certain things you copy and send them to Google - but only if you use its Enhanced protection mode, and only for one kind of scam.
Google announced it on 20 October in a post about new scam defences. Some headlines call it clipboard monitoring, which sounds scarier than it is.
Here's what actually gets sent, why, and how to switch it off if you'd rather not.
What Chrome Checks - and What It Doesn't
- It looks for suspicious commands. Chrome reacts when you copy something that looks like a system command, the kind scam pages ask you to paste into Windows.
- Personal details are stripped first. Google says it removes personal information before sending the command to its Safe Browsing service.
- You get a warning if it's dangerous. If Google judges the command harmful, Chrome tells you before you run it.
- Your normal copying isn't sent. Copying an address, a message or a password is not what this check is built for.
- It's only in Enhanced protection. On the default Standard protection, none of this happens.
The Scam It's Built to Stop
It's called ClickFix. A web page shows a fake error or a fake "prove you're human" check, then asks you to press Win + R, paste, and press Enter.
What you paste is often not what the page showed you. It quietly downloads malware through Windows' own tools, which slips past Chrome's normal download checks.
The one rule that beats this scam in any browser.
No real website, CAPTCHA or update ever needs you to paste something into the Run box, PowerShell or Command Prompt. If a page asks, close it.
How to Check Which Mode You're Using
- Open Chrome's settings. Click the three dots at the top right, then Settings.
- Go to Privacy and security, then Security.
- Look at Safe Browsing. The selected option is either Enhanced protection or Standard protection.
How to Turn It Off
On that same page, choose Standard protection. Chrome then stops sending copied commands, and the new AI scam checks, to Google.
Standard still warns you about known dangerous sites and downloads, so you are not left unprotected. Don't pick No protection unless you know exactly why.
| Enhanced protection | Standard protection | |
|---|---|---|
| Checks copied commands | Yes | No |
| New "suspicious site" warnings | Yes | No |
| Warns about known bad sites | Yes | Yes |
| Sends more data to Google | Yes | Less |
Should You Leave It On?
If you, or someone you set a PC up for, tends to click first and think later, Enhanced protection is a sensible safety net. The check is narrow and aimed at a scam that does real damage.
If you're careful and would rather share less with Google, Standard is fine. Either way, keep Google Chrome up to date - our page has the full offline installer.
Rather Not Send Anything to Google?
Mozilla Firefox is the best-known browser not built on Google's engine. Brave Browser feels just like Chrome but blocks ads and trackers out of the box.
Microsoft Edge is already on your Windows PC, and you can compare every option in our free web browsers list.
Quick questions
Is Chrome reading everything I copy?
No. Google says the check only kicks in when you copy a suspicious command, and only with Enhanced protection turned on.
Will Chrome see my passwords if I copy them?
The check is aimed at system commands, not passwords. Google also says it strips personal information before anything is sent. A password manager that fills logins for you avoids copying them at all.
Is Enhanced protection on by default?
Standard protection is the usual default. You have Enhanced only if you switched it on or accepted a prompt from Chrome. Check Settings, Privacy and security, Security.
Does turning it off make Chrome unsafe?
No. Standard protection still blocks known dangerous sites and downloads. You just lose the newer, extra checks.
A website told me to press Win + R and paste something. What now?
Don't do it, and close the page. If you already ran it, disconnect from the internet, run a full antivirus scan, and change your important passwords from another device.
Chrome only checks copied commands in Enhanced protection, it's there to stop a real scam, and one setting turns it off.
Keep your Chrome current or try a different browser - and tell us which protection mode you use.
Latest news comments
AllThe Vega OS shift is the biggest Firestick story of 2026. Anyone buying now needs to know: 4K Max = sideloading works, plain 4K = ...
News: The New Fire TV Stick 4K Can't Run Kodi - Here's Which Fire Stick Still Can 2 commentsBrave just enabled it by default for stable users yesterday (1.97). Not specified is chromeOS will be passively gaining decode capability too, and ...
News: JPEG XL Is Back in Chrome: What It Means and How to Open JXL Files 1 commentI didn't know it was EU, AND france. That doesn't sound like a good idea. Related to coding or privacy.
News: Meet Qwant: The Private, EU-Built Alternative to Google 1 comment