Google Chrome: Language Download PDF Watch Edit
Google Chrome: Language Download PDF Watch Edit
Search
Google Chrome
Article Talk
Language
Download PDF
Watch
Edit
This article is about the web browser. For the operating system, see ChromeOS. For
other uses, see Chrome (disambiguation).
Google Chrome
Google Chrome running on Windows 11
Develo Google
per(s)
Windows, 117.0.5938.132[1] / 27
macOS, Linux September 2023; 3 days
ago
Windows 109.0.5414.165[2] /
Server 13 September 2023; 17
2012/2012 R2 days ago
Android 117.0.5938.140[3] / 27
September 2023; 3 days
ago
iOS 117.0.5938.117[4] / 26
September 2023; 4 days
ago
Extended 116.0.5845.228[5] / 28
Support September 2023; 2 days
Release ago
Windows, 118.0.5993.32[6] / 28
macOS, Linux September 2023; 2 days
ago
Android 118.0.5993.32[7] / 28
September 2023; 2 days
ago
iOS 118.0.5993.29[8] / 28
September 2023; 2 days
ago
Available 47 languages[14]
in
Website www.google.com/chrome/
Most of Chrome's source code comes from Google's free and open-source
software project Chromium, but Chrome is licensed as proprietary freeware.
[15] WebKit was the original rendering engine, but Google eventually forked it
to create the Blink engine;[18] all Chrome variants except iOS used Blink as of
2017.[19]
As of October 2022, StatCounter estimates that Chrome has a 67%
worldwide browser market share (after peaking at 72.38% in November
2018) on personal computers (PC),[20] is most used on tablets (having
surpassed Safari), and is also dominant on smartphones[21][22] and at 65%
across all platforms combined, making it the most used web browser in the
world today.[23] Because of this success, Google has expanded the "Chrome"
brand name to other products:
ChromeOS, Chromecast, Chromebook, Chromebit, Chromebox,
and Chromebase.
History
See also: History of Google
Learn more
This section needs to
be updated. (September 2022)
The first release of Google Chrome passed both the Acid1 and Acid2 tests.
Beginning with version 4.0, Chrome has passed all aspects of the Acid3 test.
[63]
As of May 2011, Chrome has very good support for
JavaScript/ECMAScript according to Ecma International's ECMAScript
standards conformance Test 262[64] (version ES5.1 May 18, 2012). This test
reports as the final score the number of tests a browser failed; hence lower
scores are better. In this test, Chrome version 37 scored 10 failed/11,578
passed. For comparison, Firefox 19 scored 193 failed/11,752 passed and
Internet Explorer 9 has a score of 600+ failed, while Internet Explorer 10 has
a score of 7 failed.
In 2011, on the official CSS 2.1 test suite by standardization
organization W3C, WebKit, the Chrome rendering engine, passes 89.75%
(89.38% out of 99.59% covered) CSS 2.1 tests.[65]
On the HTML5 web standards test, Chrome 41 scores 518 out of 555 points,
placing it ahead of the five most popular desktop browsers. [66][67] Chrome 41
on Android scores 510 out of 555 points.[68][69][70] Chrome 44 scores 526,
only 29 points less than the maximum score.[71]
User interface
Google Chrome logos
Material Design motif used from September 2014 onward for mobile versions and
October 2015 onward for desktop versions
New Google Chrome logo from 2022. It has increased brightness and clarity
compared to the previous logo.
Speed
The JavaScript virtual machine used by Chrome, the V8 JavaScript engine,
has features such as dynamic code generation, hidden class transitions,
and precise garbage collection.[32]
In 2008, several websites performed benchmark tests using the SunSpider
JavaScript Benchmark tool as well as Google's own set of computationally
intense benchmarks, which include ray tracing and constraint solving.
[102] They unanimously reported that Chrome performed much faster than all
competitors against which it had been tested, including Safari (for
Windows), Firefox 3.0, Internet Explorer 7, Opera, and Internet Explorer 8.
[103][104][105][61]{[106][107] However, on October 11, 2010, independent tests of
JavaScript performance, Chrome has been scoring just
behind Opera's Presto engine since it was updated in version 10.5. [108]
On September 3, 2008, Mozilla responded by stating that their
own TraceMonkey JavaScript engine (then in beta), was faster than Chrome's
V8 engine in some tests.[109][110][111] John Resig, Mozilla's JavaScript
evangelist, further commented on the performance of different browsers on
Google's own suite, commenting on Chrome's "decimating" of the other
browsers, but he questioned whether Google's suite was representative of
real programs. He stated that Firefox 3.0 performed poorly on recursion-
intensive benchmarks, such as those of Google, because the Mozilla team
had not implemented recursion-tracing yet.[112]
Two weeks after Chrome's launch in 2008, the WebKit team announced a
new JavaScript engine, SquirrelFish Extreme,[113] citing a 36% speed
improvement over Chrome's V8 engine.[114][115][116]
Like most major web browsers, Chrome uses DNS prefetching to speed up
website lookups,[81] as do other browsers like Firefox,[117] Safari,[118] Internet
Explorer (called DNS Pre-resolution),[119] and in Opera as a UserScript (not
built-in).[120]
Chrome formerly used their now-deprecated SPDY protocol instead of
only HTTP[121][122] when communicating with servers that support it, such as
Google services, Facebook, Twitter. SPDY support was removed in Chrome
version 51. This was due to SPDY being replaced by HTTP/2, a standard that
was based upon it.
In November 2019, Google said it was working on several "speed badging"
systems that let visitors know why a page is taking time to show up. The
variations include simple text warnings and more subtle signs that indicate a
site is slow. No date has been given for when the badging system will be
included with the Chrome browser.[123]
Chrome formerly supported a Data Saver feature for making pages load
faster called Lite Mode.[124] Previously, Chrome engineers Addy Osmani and
Scott Little announced Lite Mode would automatically lazy-load images and
iframes for faster page loads.[125] Lite Mode was switched off in Chrome 100,
citing a decrease in mobile data costs for many countries. [126]
Security
See also: Browser security
Chrome periodically retrieves updates of two blacklists (one for phishing and
one for malware), and warns users when they attempt to visit a site flagged
as potentially harmful. This service is also made available for use by others
via a free public API called "Google Safe Browsing API".[32]
Chrome uses a process-allocation model to sandbox tabs.[127] Using
the principle of least privilege, each tab process cannot interact with critical
memory functions (e.g. OS memory, user files) or other tab processes –
similar to Microsoft's "Protected Mode" used by Internet Explorer 9 or
greater. The Sandbox Team is said to have "taken this existing process
boundary and made it into a jail". This enforces a computer security
model whereby there are two levels of multilevel security (user and sandbox)
and the sandbox can only respond to communication requests initiated by
the user.[128] On Linux sandboxing uses the seccomp mode.[129][130]
In January 2015, TorrentFreak reported that using Chrome when connected
to the internet using a VPN can be a serious security issue due to the
browser's support for WebRTC.[131]
On September 9, 2016, it was reported that starting with Chrome 56, users
will be warned when they visit insecure HTTP websites to encourage more
sites to make the transition to HTTPS.[132]
On December 4, 2018, Google announced its Chrome 71 release with new
security features, including a built-in ad featuring system. In addition, Google
also announced its plan to crack down on websites that make people
involuntarily subscribe to mobile subscription plans. [133]
On September 2, 2020, with the release of Chrome 85, Google extended
support for Secure DNS in Chrome for Android. DNS-over-HTTPS (DoH), was
designed to improve safety and privacy while browsing the web. Under the
update, Chrome automatically switches to DNS-over-HTTPS (DoH), if the
current DNS provider supports the feature.[134]
Password management
Windows
Since 2008, Chrome has been faulted for not including a master password to
prevent casual access to a user's passwords. Chrome developers have
indicated that a master password does not provide real security against
determined hackers and have refused to implement one. Bugs filed on this
issue have been marked "WontFix".[135][136] As of February 2014, Google
Chrome asks the user to enter the Windows account password before
showing saved passwords.[137]
Linux
On Linux, Google Chrome/Chromium can store passwords in three
ways: GNOME Keyring, KWallet or plain text. Google Chrome/Chromium
chooses which store to use automatically, based on the desktop
environment in use.[138] Passwords stored in GNOME Keyring or KWallet are
encrypted on disk, and access to them is controlled by dedicated daemon
software. Passwords stored in plain text are not encrypted. Because of this,
when either GNOME Keyring or KWallet is in use, any unencrypted passwords
that have been stored previously are automatically moved into the
encrypted store. Support for using GNOME Keyring and KWallet was added in
version 6, but using these (when available) was not made the default mode
until version 12.
macOS
As of version 45, the Google Chrome password manager is no longer
integrated with Keychain, since the interoperability goal is no longer
possible.[139]
Security vulnerabilities
No security vulnerabilities in Chrome were exploited in the three years
of Pwn2Own from 2009 to 2011.[140] At Pwn2Own 2012, Chrome was
defeated by a French team who used zero day exploits in the version of Flash
shipped with Chrome to take complete control of a fully patched 64-
bit Windows 7 PC using a booby-trapped website that overcame Chrome's
sandboxing.[141]
Chrome was compromised twice at the 2012 CanSecWest Pwnium.[141][142]
[143] Google's official response to the exploits was delivered by Jason Kersey,
who congratulated the researchers, noting "We also believe that both
submissions are works of art and deserve wider sharing and
recognition."[144] Fixes for these vulnerabilities were deployed within 10
hours of the submission.[145][146]
A significant number of security vulnerabilities in Chrome occurred in
the Adobe Flash Player. For example, the 2016 Pwn2Own successful attack
on Chrome relied on four security vulnerabilities. Two of the vulnerabilities
were in Flash, one was in Chrome, and one was in the Windows kernel. [147] In
2016, Google announced that it was planning to phase out Flash Player in
Chrome, starting in version 53. The first phase of the plan was to disable
Flash for ads and "background analytics", with the ultimate goal of disabling
it completely by the end of the year, except on specific sites that Google has
deemed to be broken without it. Flash would then be re-enabled with the
exclusion of ads and background analytics on a site-by-site basis. [148]
Leaked documents published by WikiLeaks, codenamed Vault 7 and dated
from 2013 to 2016, detail the capabilities of the CIA, such as the ability to
compromise web browsers (including Google Chrome). [149][150]
Malware blocking and ad blocking
Google introduced download scanning protection in Chrome 17. [151] In
February 2018, Google introduced an ad blocking feature based on
recommendations from the Interactive Advertising Bureau. Sites that employ
invasive ads are given a 30-day warning, after which their ads will be
blocked.[152] Consumer Reports recommended users install dedicated ad-
blocking tools instead, which offer increased security against malware and
tracking.[153]
Plugins
Chrome supported, up to version 45, plug-ins with the Netscape Plugin
Application Programming Interface (NPAPI),[154] so that plug-ins (for
example Adobe Flash Player) run as unrestricted separate processes outside
the browser and cannot be sandboxed as tabs are. ActiveX is not supported.
[154] Since 2010, Adobe Flash has been integral to Chrome and does not need
be installed separately. Flash is kept up to date as part of Chrome's own
updates.[155] Java applet support was available in Chrome with Java 6 update
12 and above.[156] Support for Java under OS X was provided by a Java
Update released on May 18, 2010.[157]
On August 12, 2009, Google introduced a replacement for NPAPI that is more
portable and more secure[158] called Pepper Plugin API (PPAPI).[159] The
default bundled PPAPI Flash Player (or Pepper-based Flash Player) was
available on ChromeOS first, then replaced the NPAPI Flash Player on Linux
from Chrome version 20, on Windows from version 21 (which also reduced
Flash crashes by 20%),[160] and eventually came to OS X at version 23. [161]
On September 23, 2013, Google announced that it would be deprecating and
then removing NPAPI support. NPAPI support was removed from Linux in
Chrome release 35.[162] NPAPI plugins like Java can no longer work in Chrome
(but there are workarounds for Flash by using PPAPI Flash Player on Linux
including for Chromium).[163]
On April 14, 2015, Google released Chrome v42, disabling the NPAPI by
default. This makes plugins that do not have a PPAPI plugin counterpart
incompatible with Chrome, such as Java, Silverlight and Unity. However,
NPAPI support could be enabled through the chrome://flags menu, until the
release of version 45 on September 1, 2015, that removed NPAPI support
entirely.[164]
Privacy
Incognito mode
"Incognito mode" redirects here. For other uses, see Incognito.
The private browsing feature called Incognito mode prevents the browser
from locally storing any history information, cookies, site data, or form
inputs.[165] Downloaded files and bookmarks will be stored. In addition, user
activity is not hidden from visited websites or the Internet service provider.
[166]
Incognito mode is similar to the private browsing feature in other web
browsers. It does not prevent saving in all windows: "You can switch between
an incognito window and any regular windows you have open. You'll only be
in incognito mode when you're using the incognito window". [167]
The iOS version of Chrome also supports the optional ability to lock incognito
tabs with Face ID, Touch ID or the device's passcode. [168]
Listening capabilities
In June 2015, the Debian developer community discovered that Chromium 43
and Chrome 43 were programmed to download the Hotword Shared Module,
which could enable the OK Google voice recognition extension, although by
default it was "off". This raised privacy concerns in the media. [169][170] The
module was removed in Chrome 45, which was released on September 1,
2015, and was only present in Chrome 43 and 44.[171][172]
User tracking concerns
Chrome sends details about its users and their activities to Google through
both optional and non-optional user tracking mechanisms. [173][174]
Some of the tracking mechanisms can be optionally enabled and disabled
through the installation interface[175] and through the browser's options
dialog.[176] Unofficial builds, such as SRWare Iron, seek to remove these
features from the browser altogether.[177] The RLZ feature is not included in
the Chromium browser either.[178]
In March 2010, Google devised a new method to collect installation statistics:
the unique ID token included with Chrome is now used for only the first
connection that Google Update makes to its server. [179]
The optional suggestion service included in Google Chrome has been
criticized because it provides the information typed into the Omnibox to the
search provider before the user even hits return. This allows the search
engine to provide URL suggestions, but also provides them with web use
information tied to an IP address.[180]
Chrome previously was able to suggest similar pages when a page could not
be found. For this, in some cases Google servers were contacted. [181] The
feature has since been removed.[citation needed]
A 2019 review by Washington Post technology columnist Geoffrey A. Fowler
found that in a typical week of browsing, Chrome allowed thousands of more
cookies to be stored than Mozilla Firefox. Fowler pointed out that because of
its advertising businesses, despite the privacy controls it offers users, Google
is a major producer of third-party cookies and has a financial interest in
collecting user data; he recommended switching to Firefox, Apple Safari, or
Chromium-based Brave.[182]
Tracking methods
O
pt
Information Optio
Method[17 When -
7] sent nal?
in
?
Installat Randomly
ion generated token
included in an
installer; used On
to measure the installat No —
success rate of ion
Google Chrome
once at
installation[183]
clientID[ Unique
176] identifier along
with user
Yes[18 Ye
preferences, Unknown
5] s
logs of use
metrics and
crashes
Google Information
Update about how
often Chrome is Partial
Periodicall [note
used, details No
y 3]
about the OS [186]
and Chrome
version
FLoC
Main article: Federated Learning of Cohorts
Each channel has its own release cycle and stability level. The Stable
channel updated roughly quarterly, with features and fixes that passed
"thorough" testing in the Beta channel. Beta updated roughly monthly, with
"stable and complete" features migrated from the Developer channel. The
Developer channel updated once or twice per week and was where ideas and
features were first publicly exposed "(and sometimes fail) and can be very
unstable at times". [Quoted remarks from Google's policy announcements.]
[206][207][208]
On July 22, 2010, Google announced it would ramp up the speed at which it
releases new stable versions; the release cycles were shortened from
quarterly to six weeks for major Stable updates.[209] Beta channel releases
now come roughly at the same rate as Stable releases, though
approximately one month in advance, while Dev channel releases appear
roughly once or twice weekly, allowing time for basic release-critical testing.
[210] This faster release cycle also brought a fourth channel: the "Canary"
channel, updated daily from a build produced at 09:00 UTC from the most
stable of the last 40 revisions.[211] The name refers to the practice of using
canaries in coal mines, so if a change "kills" Chrome Canary, it will be
blocked from migrating down to the Developer channel, at least until fixed in
a subsequent Canary build.[212] Canary is "the most bleeding-edge official
version of Chrome and somewhat of a mix between Chrome dev and the
Chromium snapshot builds". Canary releases run side by side with any other
channel; it is not linked to the other Google Chrome installation and can
therefore run different synchronization profiles, themes, and browser
preferences. This ensures that fallback functionality remains even when
some Canary updates may contain release-breaking bugs. [213] It does not
natively include the option to be the default browser, although on Windows
and OS X it can be set through System Preferences. Canary was Windows-
only at first; an OS X version was released on May 3, 2011.[214]
The Chrome beta channel for Android was launched on January 10, 2013; like
Canary, it runs side by side with the stable channel for Android. [215]
[216] Chrome Dev for Android was launched on April 29, 2015. [217]
All Chrome channels are automatically distributed according to their
respective release cycles. The mechanism differs by platform. On Windows,
it uses Google Update, and auto-update can be controlled via Group Policy.
[218] Alternatively, users may download a standalone installer of a version of
Chrome that does not auto-update.[219][220] On OS X, it uses Google Update
Service, and auto-update can be controlled via the OS X "defaults" system.
[221] On Linux, it lets the system's normal package management
system supply the updates. This auto-updating behavior is a key difference
from Chromium, the non-branded open-source browser which forms the core
of Google Chrome. Because Chromium also serves as the pre-
release development trunk for Chrome, its revisions are provided as source
code and buildable snapshots are produced continuously with each
new commit, requiring users to manage their own browser updates. [222]
In March 2021, Google announced that starting with Chrome 94 in the third
quarter of 2021, Google Chrome Stable releases will be made every four
weeks, instead of six weeks as they have been since 2010. Also, Google
announced a new release channel for system administrators and browser
embedders with releases every eight weeks.[223]
Release version numbers
Releases are identified by a four-part version number, e.g. 42.0.2311.90
(Windows Stable release April 14, 2015[224]). The components are
major.minor.build.patch.[225][226]
Major.minor reflects scheduling policy
Build.patch identifies content progression
Major represents a product release. These are scheduled 7–8 per year, unlike
other software systems where the major version number updates only with
substantial new content.
Minor is usually 0. References to version 'x' or 'x.0', e.g. 42.0, refer to
this major.minor designation.
Build is ever increasing. For a release cycle, e.g. 42.0, there are several builds
in the Canary and Developer period. The last build number from Developer is
kept throughout Beta and Stable and is locked with the major.minor for that
release.
Patch resets with each build, incrementing with each patch. The first patch is
0, but usually the first publicly released patch is somewhat higher. In Beta
and Stable, only patch increments.