Raising industry standards
to make the internet
safer for everyone.
The security and privacy of our users is at the core of everything we do, and every product we build. We lead the industry in creating and sharing safety technologies that raise industry standards for everyone.
users safer online.
As new threats arise and user needs evolve, we are continuously innovating to automatically protect the private information of every user, at every risk level, across all our products.
Advanced Protection Program
for those who need it most
The Advanced Protection Program is Google's strongest account security offering and the industry’s first free program designed to safeguard the personal and enterprise Google Accounts of those at higher risk of targeted online attacks – like policymakers, campaign teams, journalists, activists, and business leaders. The program provides comprehensive account security against a wide range of threats and continuously evolves to add new protections.
Limiting the personal information that is used and saved
We believe that products should keep your information for only as long as it’s useful and helpful to you – whether that’s being able to find your favorite destinations in Maps or getting recommendations for what to watch on YouTube.
The first time you turn on Location History – which is off by default – your auto-delete option will be set to 18 months by default. Web & App Activity auto-delete will also default to 18 months for new accounts. This means your activity data will be automatically and continuously deleted after 18 months, rather than kept until you choose to delete it. You can always turn these settings off or change your auto-delete setting at any time.
Building helpful products with less data
Federated learning is a data minimization technology pioneered at Google that brings machine learning (ML) intelligence right to your device. This new approach combines anonymized information from different devices to train ML models. Federated learning helps preserve your privacy by keeping as much personal information on your device as possible.
Strengthening privacy protections through anonymization
We use leading anonymization techniques to protect your data while making our services work better for you. For example, we aggregate data from millions of users and anonymize it so you can see how busy a place will be before you get there.
Enhanced safe browsing
Enhanced Safe Browsing goes beyond our existing Safe Browsing protections to be more proactive and tailored to your individual needs. For those who choose to enable Enhanced Safe Browsing in Chrome, Google will automatically evaluate a holistic view of threats you encounter on the web and attacks against your Google Account to provide more proactive and tailored protections from phishing, malware, and other web-based threats. Learn more about Enhanced Safe Browsing.
safer online through collaboration.
We’re committed to making the web a safer place for all. To help do this, we open-source many of our technologies and make our resources accessible to developers and organizations.
Helping secure sites across the web through encryption
Backing our services with HTTPS encryption ensures you can securely connect to sites and enter your private information like credit card numbers without anyone intercepting your information. We’ll continue investing to make sure our sites and services provide modern HTTPS by default, and we’ll help the rest of the web make the move to HTTPS too by providing tools and resources to all developers.
Protecting you from risky sites, apps, and ads across the web
We built our Safe Browsing technology to protect web users from malware and phishing attempts by alerting users when they try to visit dangerous websites. Safe Browsing protects more than just Chrome users – to make the internet safer for everyone, we made this technology free for other companies to use in their browsers, including Apple’s Safari and Mozilla’s Firefox. Today, more than 4 billion devices are protected by Safe Browsing. We also alert website owners when their sites have security flaws and offer free tools to help them quickly fix problems.
open-source privacy technologies
Sharing our privacy protections and innovations
We are committed to constantly improving the privacy protections we offer and sharing these advancements with others. That’s why we open-source our advanced anonymization and data minimization technologies, like differential privacy, federated learning, and Private Join and Compute. It’s our hope that these open-source tools help produce insights that benefit everyone while still protecting individual privacy.
Cross-Account Protection extends the security protections that we have in your Google Account to the apps and sites that you sign in to with Google Sign-In. When apps and sites have implemented Cross-Account Protection, we’re able to send information about security events – an account hijacking, for instance – to them so they can protect you, too. To develop this leading technology, we worked with other major technology companies and the standards community to make it easy for all apps to implement.
At Google, we pioneered vulnerability reward programs that pay independent researchers to find vulnerabilities in our services. To reward all the cutting-edge external contributions that help us keep our users safe, we award millions of dollars in research grants and bug bounties every year. We currently offer vulnerability rewards for many of our products, including Chrome and Android.
In addition to engaging independent researchers, we also have an internal team of engineers, called Project Zero, that tracks down and addresses security flaws in software used across the internet.
We’ve always been at the forefront of co-creating or adopting the strongest possible sign-in and authentication standards on the web. We collaborate across the industry and share technology by developing centralized web standards. One such partnership with the nonprofit organization FIDO Alliance worked to set and deploy new industry standards for users, companies, and their employees to use, ensuring secure account access for everyone.
We share our security technology whenever we believe it can provide value for others. For example, we make our Google Cloud Web Security Scanner freely available to developers so they can scan and analyze their web applications for security vulnerabilities. We’ve contributed multiple security tools, developed internally, as open-source projects for others to use.
We provide educational materials, training, and tools to help people around the world learn how to stay safe online. Our outreach team annually reaches more than 100 million people – including educators, students, parents, the elderly, and persons with disabilities – with online safety resources and training.
Project Shield is a service that uses our security technology to help protect news, human rights organizations, election sites, political organizations, and campaigns and candidates from distributed denial-of-service (DDoS) attacks. These attacks are attempts to take websites down and prevent users from accessing vital information by overwhelming them with fake traffic. No matter the size of the website or the size of the attack, Project Shield is always free.
We launched an open-source data portability platform and continue to collaborate with companies like Apple, Microsoft, Facebook, and Twitter to help people move their data across the web and easily try new online service providers.
We are committed to creating collaborative spaces like Privacy Sandbox and working with the web community to develop a set of open standards that protect user privacy while still supporting free, accessible content across the web. By sharing our resources and platforms, we hope to encourage progress toward a more private web.
health authorities fight COVID-19
To help governments fight the COVID-19 pandemic, Google and Apple jointly created contact tracing technologies like the Exposure Notifications System with privacy and security central to the design. Through close cooperation and collaboration with developers, governments, and public health providers, we hope to harness technology to continue solving global issues while still protecting high standards of user privacy.