Browser hijacker: how to tell if your browser is hijacked — and fix it

A browser hijacker takes over your browser's settings: the home page, the search engine, the new tab page. It's usually an extension or a program installed alongside something else. Microsoft classes software that stops you changing browser settings, redirects your traffic or alters web pages without your consent as unwanted software — not always malware in the strict sense, but something to remove.

Signs your browser has been hijacked

• Pop-up ads and new tabs that won't go away.
• Your home page or search engine keeps changing, even after you change it back.
• Extensions or toolbars you don't want keep coming back.
• Your browsing is redirected to unfamiliar pages or ads.
• Alerts claiming your device has a virus.

How hijackers get in

• Bundled with free software — toolbars or programs that show you extra ads, Microsoft notes. When you install an app on Windows or a Mac, it may also install a browser extension.
• Notifications you allowed on a website, which then deliver ads straight to your desktop.
• Fake virus alerts that push you to install a "fix" or call a number. Real security warnings never ask you to call a phone number, the US FTC says.

Step 1: remove unwanted programs

Google's advice is to check your computer for unwanted programs before you reset the browser — otherwise the hijacker may simply put itself back. On Windows 11, go to Start > Settings > Apps > Installed apps and uninstall anything you don't recognize. On a Mac, open Finder > Applications and move unfamiliar programs to the Trash.

Google Chrome

• Remove extensions: More > Extensions > Manage extensions, then Remove on anything you don't recognize.
• Reset settings: More > Settings > Reset settings > Restore settings to their original defaults > Reset settings. This resets your search engine, home page, new tab page, pinned tabs, content settings, cookies, extensions and themes. Bookmarks and saved passwords aren't deleted — and Google notes it isn't a full reset.
• Check the search engine: More > Settings > Search engine. Google says unexpected changes to your search engine can be a sign of malware.
• Stop notification spam: More > Settings > Privacy and security > Site Settings > Notifications, and move unwanted sites to Not allowed to send notifications.

Microsoft Edge

• Remove extensions: select Extensions next to the address bar, then Manage extensions, and remove or turn off anything you don't recognize.
• Block notifications: Settings and more > Settings > Privacy, search, and services > Site permissions > All sites, choose the site and set Notifications to Block. Edge notes that notifications can appear even when the browser is closed.
• Check your search engine: Settings > Privacy, search, and services > Search and connected experiences > Address bar and search. Edge automatically restores the search engine and new tab page when third-party software changes them, and tells you when it does.
• Fix the home page: Settings > Start, home, and new tab page.

Safari on a Mac

• Remove extensions: Safari > Settings > Extensions, select the extension and click Uninstall — or delete the app that installed it.
• Stop website notifications: Apple menu > System Settings > Notifications, select the site under Application Notifications and turn off Allow Notifications. To stop new requests, go to Safari > Settings > Websites > Notifications and deselect Allow websites to ask for permission to send notifications.
• Fix the home page: Safari > Settings > General, and enter the address you want in the Homepage field.

Firefox

• Refresh Firefox: on a Mac, Help > More troubleshooting information > Refresh Firefox; on Windows, open the menu, then Help (Help and Report in newer versions) > More troubleshooting information. It removes extensions, themes, website permissions and added search engines, and keeps bookmarks, history, passwords and cookies.
• Remove an extension: menu > Extensions and themes > Extensions, then the three-dot menu > Remove.
• If an extension took over your home or new tab page, Settings > Home and startup shows which one; Restore defaults stops it doing so again.
• Notifications: Settings > Permissions and data > Permissions > Notifications, remove or block the site, and tick Block new requests asking to allow notifications.

Finish with a scan — and keep it out

• Run a full scan with your security software to catch anything the hijacker brought with it.
• Download software from the vendor's official site and read each installer screen — you can usually opt out of extra software by clearing a check box, Microsoft notes.
• Say no to notification requests from sites you don't know.
• Never call a number shown in a pop-up warning.

Remove the program first, then the extension, then reset the browser. In the other order, the hijacker just comes back.