How to Remove Malware From a Chromebook (Step by Step)

Chromebooks resist traditional viruses far better than Windows or Mac computers, but they are not immune to trouble. A bad extension, a sketchy Android app, or a phishing page can still slow your device down, change your search engine, or flood you with pop-ups. Here is how to confirm what is actually wrong and clear it out, step by step, without paying for anything.

Signs Your Chromebook Has Malware

One symptom alone usually isn’t proof of malware. A few of these happening together is a stronger sign.

• Your Chromebook runs noticeably slower, freezes, or takes a long time to wake up.
• Pop-up ads show up on sites that never had them before.
• Your homepage or default search engine changed on its own.
• You notice a browser extension you never installed.
• Links redirect to strange or unrelated websites.
• Your battery drains faster than it used to, even with light use.

A slow Chromebook on its own usually just means low storage or aging hardware, not malware. Look for two or three of these together before assuming the worst.

Step 1: Test in Guest Mode First

This single step saves you a lot of guesswork. Guest Mode runs ChromeOS without any of your extensions, apps, or saved settings.

1. Sign out of your account.
2. On the sign-in screen, select Browse as Guest.
3. Use your Chromebook normally for a few minutes.

If everything runs smoothly in Guest Mode, the problem is tied to something in your account, like an extension or app, not ChromeOS itself. That narrows down exactly where to look next.

Step 2: Remove Suspicious Browser Extensions

Bad extensions are the most common way unwanted software ends up on a Chromebook. Disabling one isn’t enough. Some re-enable themselves, so remove them completely.

1. Open Chrome and click the three-dot menu in the top right corner.
2. Go to Extensions, then Manage Extensions.
3. Look through everything installed. Pay attention to extensions you don’t remember adding, ones with vague names, and ones asking for broad permissions like “Read and change all your data on all websites.”
4. Click Remove on anything suspicious, not just the toggle to turn it off.
5. Restart Chrome once you’re done.

Step 3: Uninstall Unwanted Android Apps

If your Chromebook runs Android apps, check those too. Some get bundled with broad permissions that act more like spyware than a helpful tool.

1. Open Settings.
2. Select Apps.
3. Review everything listed, especially anything you don’t remember installing or downloaded from outside the Play Store.
4. Click any app you don’t trust, then select Uninstall.

Step 4: Reset Chrome to Its Default Settings

This clears out any changes malware made to your browser, like a hijacked homepage or a new default search engine, without touching your bookmarks or saved passwords.

1. Open Chrome and click the three-dot menu, then Settings.
2. Scroll down and click Reset settings.
3. Select Restore settings to their original defaults, then confirm.

Note that this also turns off your extensions, even the ones you want. Go back to the Extensions page afterward and turn back on anything you trust.

Step 5: Escape a Locked or “Extortion” Page

Sometimes a link or email leads to a fake site that fills your screen with a scary warning, claiming your Chromebook is locked, and you need to pay or call a number to fix it. This is a scare tactic, not a real lock. Don’t call the number and don’t pay anything.

1. Press Ctrl + Shift + Q twice to sign out of your Chromebook completely. This closes Chrome along with the fake page.
2. Sign back in.
3. When Chrome opens and offers to restore your previous tabs, do not click Restore. That would reopen the same malicious page and lock your screen again.
4. Browse to a few normal sites to confirm Chrome is working as expected.

Step 6: Powerwash as a Last Resort

Warning: A Powerwash deletes all local files and settings on your Chromebook. Back up anything in your Downloads folder before continuing. Files stored in Google Drive are not affected.

If the steps above didn’t fix things, a Powerwash wipes your Chromebook back to a fresh, factory state and removes almost anything that was causing trouble.

1. Sign out of your Chromebook.
2. Press Ctrl + Alt + Shift + R.
3. Click Restart.
4. In the box that appears, click Powerwash, then Continue.
5. Sign back in with your Google Account once it’s done. Your bookmarks, extensions list, and saved settings synced to your Google Account will come back automatically. Local files will not.

Why Chromebooks Resist Malware in the First Place

It helps to know what you’re working with. ChromeOS is built differently from Windows or macOS in a few ways that genuinely block most threats.

• Sandboxing. Every tab, app, and website runs in its own isolated space. If one of them gets compromised, it generally can’t reach the rest of your system.
• Verified Boot. Every time your Chromebook starts, it checks its own system files against a known-good copy. If something was tampered with, ChromeOS repairs itself automatically before you even notice.
• No traditional executables. ChromeOS doesn’t run .exe or .dmg style program files, which is how most classic viruses spread on other computers.
• Automatic updates. Security patches install in the background with no action needed from you.

These protections weaken if you turn on Developer Mode, which disables Verified Boot on purpose to give you more control. Casual users rarely need it, and turning it on removes a real layer of protection.

Do You Need Antivirus on a Chromebook?

For most people, no. The built-in protections above already cover the threats that matter most on ChromeOS. The bigger risk isn’t a classic virus, it’s a phishing page that tricks you into typing your Google password, or a malicious extension with broad permissions. Good habits beat any app you could install.

• Install extensions only from the Chrome Web Store, and check the permissions before adding one.
• Turn on 2-Step Verification for your Google Account, so a stolen password alone isn’t enough to get in.
• Leave automatic updates on. Don’t put off restarts when an update is ready.
• Back up anything important to Google Drive, so a Powerwash or a bad day never costs you real data.
• Be cautious with Android apps from outside the Play Store. Google reviews apps in the Play Store before they’re listed.

Frequently Asked Questions

Can Chromebooks actually get viruses?
Rarely, and not in the traditional sense. ChromeOS blocks classic, self-spreading viruses very effectively. What usually causes trouble instead is a malicious extension, a risky Android app, or a phishing page, which behave differently from a virus but can still cause real harm.

Will a Powerwash definitely remove malware?
Almost always, since it wipes all local data and reinstalls ChromeOS fresh. The one exception is if your Google Account itself was compromised through a phishing page, since a Powerwash doesn’t change your account password.

Is it safe to use Developer Mode?
It’s safe if you understand what it does, but it turns off Verified Boot on purpose. That’s a real trade-off, so only enable it if you specifically need it.

My Chromebook is slow. Is that malware?
Probably not by itself. Low storage space and aging hardware cause the same symptom. Check storage usage in Settings before assuming it’s malware.

Most “malware” trouble on a Chromebook traces back to one bad extension or app, and clearing it out takes a few minutes once you know where to look. Keep automatic updates on, stick to the Chrome Web Store and Play Store, and a Powerwash is always there as a clean reset if you ever need it.