Tag: cybersecurity

Spyware Browser Extensions: How I Find and Remove Them in 5 Minutes

Spyware browser extensions hide in plain sight. Here is how I audit permissions in Chrome, Firefox, Edge, and Safari and clear the risky ones fast.

A spyware browser extension rarely looks like a threat. You install a free PDF converter, a coupon finder, or a grammar checker, then forget it exists. Months later that same extension may be reading every page you open, capturing form fields, and quietly sending your browsing history to a data broker you have never heard of. The most dangerous extension on your machine is almost always one you stopped thinking about.

I run this audit on my own laptops every couple of months, and it has never taken longer than a coffee break. Security researchers keep finding popular extensions with millions of users harvesting data and selling it on, so a quick review is cheap insurance against a gap you did not know was open.

Quick Answer

Open your browser’s extension manager (chrome://extensions in Chrome, about:addons in Firefox, edge://extensions in Edge), then review each extension’s permissions. Remove anything you do not recognise, anything requesting access to all websites, and any extension not updated in over a year. Keep only what you actively use.

Why Are Browser Extensions a Security Risk?

Installing an extension grants it real permissions, sometimes sweeping ones. An extension with “read and change all your data on all websites” can reach your banking pages, email inbox, and login forms. Those permissions persist silently too: a legitimate tool can be sold to an untrustworthy company and pushed a new update full of data-collection code without ever alerting you.

An extension’s permissions, not its install count, decide how much damage it can do.

What Do Extension Permissions Actually Mean?

Permission What the Extension Can Do
Read browsing history See every URL you visit
Read and change all site data Access forms, passwords, and banking pages
Read clipboard Capture anything you copy, including passwords
Manage downloads Save or block files on your device
Access tabs Monitor which websites are open at any moment

How Do I Audit My Extensions in Chrome?

Chrome commands the majority of desktop browser usage, which makes it the most targeted platform for malicious extensions. It is also where I start every audit.

Step 1: Open the Extension Manager

Type chrome://extensions in the address bar and press Enter. Every installed extension appears here, including the ones you added months ago and forgot. The first time I did this I found three I could not even name.

Step 2: Review Permissions

Click Details under each extension, then scroll to the Permissions section. An extension that only reads the active tab is far less risky than one demanding access to all your data on all websites.

Step 3: Remove What You Do Not Use

Click Remove for anything you cannot account for. If you are unsure about a specific extension, search its name plus the word “security” to check for reported problems before deciding. Chrome also shows a “Last used” date under each one; anything idle for 30 days is a safe removal target, since reinstalling from the Chrome Web Store takes under a minute if you change your mind.

In Chrome, Details then Permissions tells you in seconds whether an extension can read everything you type.

How Do I Check Extensions in Firefox, Edge, and Safari?

The navigation paths differ slightly, but the goal is identical: open the manager, check permissions, remove the unused.

  • Firefox: Go to about:addons, click the three-dot menu next to any extension, and choose Permissions to review or Remove to uninstall.
  • Edge: Go to edge://extensions, click Details, and check “Access to websites.” Avoid extensions set to On all sites unless the task clearly demands it.
  • Safari (Mac): Open Safari, then Settings, then Extensions. Safari enforces stricter limits by default, but unused extensions still deserve a removal pass.

If removing an extension breaks a website feature you rely on, reinstall it only from the official browser store, never from a third-party download page, which is a common route for distributing compromised versions. For safe-browsing habits that complement this audit, see my guide on how to check if a website is actually safe before entering any personal details.

Every major browser exposes the same two facts: what an extension can access, and whether you still use it.

What Are the Red Flags of a Spyware Extension?

  • Permissions do not match the task. A dark-mode extension has no legitimate reason to read your clipboard or full browsing history.
  • No recent updates. Abandoned extensions get no security patches, yet they keep running with full permissions indefinitely.
  • Unknown or impersonating developer. Malicious extensions often clone the icon and name of a trusted tool. Verify the publisher on the official store listing before installing.
  • Alarming one-star reviews. Filter reviews by one star and look for phrases like “started redirecting searches” or “injecting ads.” Problems usually surface in reviews before any takedown happens.

Google’s documentation on extension permission warnings explains exactly what each install prompt means, and it is worth reading once before your next install. While you are auditing, it is also a good moment to move your logins into a dedicated password manager like Bitwarden, since a rogue extension with broad permissions can read browser-saved passwords as you type.

When the permissions outweigh the job an extension does, treat that mismatch as the warning itself.

Common Mistakes to Avoid

  1. Installing from outside the official store. Third-party sites often bundle extensions with hidden malware. Fix: always use the Chrome Web Store, Firefox Add-ons, or Microsoft Edge Add-ons.
  2. Accepting every permission prompt without reading it. Excessive permissions for a simple task are a clear red flag. Fix: spend 15 seconds reading the list before clicking Add to Chrome.
  3. Forgetting that extensions sync across devices. Chrome extensions linked to your Google account appear on every signed-in device automatically. Fix: check the extension list on each device separately after any audit.
  4. Keeping “just in case” extensions. Every idle extension is an active attack surface with nothing to show for it. Fix: remove it now, since reinstalling from the official store takes seconds.
  5. Assuming a high install count means it is safe. Several extensions with tens of millions of users have been caught harvesting data. Fix: check the developer’s privacy policy and recent reviews, not just the star rating.

Frequently Asked Questions

Can a browser extension steal my passwords?

Yes. An extension with “read and change all your data on websites” permission can capture passwords typed into login forms before they ever leave your browser. I once removed a “free coupon” extension that held exactly that permission despite having no reason to touch a login field.

Are extensions disabled in private or incognito mode?

By default, yes. In Chrome extensions are off in Incognito unless you enable them. When I checked mine, two had “Allow in Incognito” switched on from a setup I had forgotten, which I turned off in chrome://extensions under each extension’s detail panel.

How often should I audit my extensions?

Every one to three months is a sensible rhythm. I tie mine to the start of each season, and I also do a quick pass whenever a browser update drops me into the Extensions menu anyway.

Is there an automated tool that detects bad extensions?

Some security suites flag suspicious extensions, but manual review stays the most reliable approach. When I tested a third-party “extension scanner,” it wanted broad permissions of its own, so I deleted it and went back to the browser’s built-in manager, which lists every active extension already.

Should I use a VPN as well as auditing extensions?

They solve different problems, so use both. A clean extension list stops local snooping, while a VPN encrypts your traffic in transit; my VPN setup guide explains what a VPN does and does not protect.

Conclusion

Keeping your extension list short and intentional is one of the simplest high-impact security moves any browser user can make. Check permissions before every install, revisit the list every few months, and remove anything you cannot account for.

Once your browser is clean, finish the checkup by reviewing unknown logins on your Google, Microsoft, and Apple accounts to close the most common account-level gaps in one sitting.

Private Browsing: What Incognito Mode Actually Hides (and What It Doesn’t)

Private browsing hides local history and cookies, but not your IP or network traffic. See exactly what Incognito mode covers before you trust it next time.

Private browsing sounds like a shield against online surveillance, but most people only learn how narrow it really is after relying on it at the wrong moment. Whether you call it Incognito in Chrome, InPrivate in Edge, or a Private Window in Firefox or Safari, the protection is far thinner than the name suggests. Private browsing hides your tracks from other people on your device, not from the network or the sites you visit.

I have tested every major browser’s private mode while watching the traffic on my own router, and the gap between what people assume and what actually happens is wide. Here is exactly what Incognito covers, what it leaves exposed, and when you need something stronger.

## Quick Answer

Private browsing hides your local browsing history, cookies, and form data from other users of the same device. It does **not** hide your activity from your internet provider, employer, school network, or the websites you visit. For real anonymity, pair it with a VPN or use Tor Browser instead.

In short: private mode cleans your own device, but your connection stays fully visible to everyone else.

## What Does Private Browsing Actually Hide?

Private mode is a local cleanup tool. It controls what your own browser stores on your own machine, and nothing past that.

In short: private browsing erases on-device traces, which is genuinely useful on a shared computer.

### Your local browsing history

When you close a private window, your browser wipes every URL from that session. The History menu stays clean and those sites never surface in address-bar autocomplete. When I share my laptop with family, this is the one feature that earns its keep: nobody stumbles onto my searches or half-finished gift research.

### Cookies and session data

Private browsing opens a blank cookie jar each session. Sites cannot read cookies from your regular profile, and any cookies set during the private session are discarded when you close the window. You start logged out of every service, so there is no cookie-based bridge between your normal and private sessions. If you want to scrub cookies in your main profile too, here is how to clear browser cache and cookies in every major browser.

### Saved form entries and autofill

Anything you type into a form during a private session, including addresses, searches, and login fields, never reaches your browser’s autofill. I rely on this whenever I borrow someone else’s machine to check a booking or sign into an account I will not use again.

## What Does Private Browsing Fail to Hide?

This is where assumptions get people in trouble. Private mode does nothing to the connection itself.

In short: your network, your provider, and every site you load still see you in full.

### Your IP address and internet provider

Your ISP sees every domain you connect to, private mode or not. Your IP address is equally visible to every website you load. Incognito only touches your local device, so it has zero effect on the connection. For network-level privacy you need a VPN; for near-full anonymity, Tor Browser routes traffic through several encrypted relays.

### Your employer, school, or home router

Network administrators can log DNS queries and outbound connections at the router level. Opening Incognito on a work laptop hides nothing from IT. The same is true at home, where anyone with router admin access can read the domains that were queried. I watched my own DNS log light up with every “private” site I visited during a test, which is exactly how people end up with real disciplinary consequences after assuming they were invisible.

### Website analytics and device fingerprinting

Google Analytics, Meta Pixel, and similar scripts identify visitors by IP address and device fingerprint, not cookies alone. In Incognito, a site still registers a visit from your IP. Fingerprinting also reads your screen resolution, installed fonts, and browser settings to build a signature that survives across sessions. If a paywalled article still counts your reads in a fresh Incognito window, it is tracking your IP or fingerprint, and switching networks or a VPN usually resets the counter.

### Malware and dangerous downloads

Private mode offers no protection against malicious downloads or phishing pages. A file you download in Incognito still runs on your system exactly the same way. Keep your antivirus active no matter which mode you browse in.

## Which Browser Has the Best Private Mode?

All four major browsers offer a private window, but they do not protect you equally. The table below shows how each one compares.

In short: Firefox and Safari block trackers in private mode by default; Chrome and Edge do not.

Browser Mode Name Shortcut (Win / Mac) Blocks Trackers by Default?
Chrome Incognito Ctrl+Shift+N / ⌘+Shift+N No
Firefox Private Window Ctrl+Shift+P / ⌘+Shift+P Yes (Enhanced Tracking Protection)
Edge InPrivate Ctrl+Shift+N / ⌘+Shift+N No
Safari Private Window ⌘+Shift+N Yes (Intelligent Tracking Prevention)

Firefox is the strongest out-of-the-box choice for private sessions: its Enhanced Tracking Protection blocks third-party trackers automatically, going beyond what Chrome and Edge do in their private modes.

## What Are the Most Common Private Browsing Mistakes?

These are the assumptions I see catch people out most often, with the fix for each.

In short: most private-browsing mistakes come from expecting it to do a job it was never built for.

1. **Assuming you are anonymous.** Private browsing only removes local traces. Fix: pair it with a trusted VPN for any network-level privacy.
2. **Trusting it on a work or school device.** Administrators see traffic at the router level regardless of browser mode. Fix: use your own device and network for anything sensitive.
3. **Staying signed into Google or Facebook.** Once you log in, those companies link your browsing to your account. Fix: sign in only when you genuinely need to, then sign out.
4. **Treating it as malware protection.** Downloaded files and malicious scripts execute identically in Incognito. Fix: keep antivirus running at all times.
5. **Forgetting your location is still visible.** GPS permissions and IP geolocation behave the same in private mode. Fix: deny the location prompt when you want it hidden from a specific site.

## Frequently Asked Questions

In short: private mode protects you locally, so its limits show up the moment your traffic leaves your device.

### Can my parents see my Incognito history?

Yes, if they use the router admin panel or parental-control software. For example, when I checked my own router’s log, every domain I visited in Incognito appeared there, because those tools record DNS queries at the network level regardless of browser mode.

### Does private browsing delete history automatically?

It deletes your local browsing history the moment you close the window. Logs held by your ISP, your router, or the websites you visited are untouched. For instance, the travel site you booked through still has its own server-side record of your visit.

### Is Incognito mode safer for online banking?

It is no more or less secure for the connection itself, since HTTPS handles encryption either way. The real benefit on a shared device is that your session cookies and login state vanish when you close the window. For ongoing credential safety, review your saved passwords across Chrome, Firefox, Edge, and Safari.

### Does Chrome Incognito block ads?

No. Most extensions, including ad blockers, are disabled in Incognito by default. For example, my uBlock filter stays inactive until I explicitly allow it under “Allow in Incognito” at chrome://extensions.

### Can websites tell I am using Incognito mode?

Sometimes. Some sites probe filesystem API behavior to guess private mode. It is harder to do reliably than it once was, but on certain browser and site combinations it still works, which is why a few paywalls quietly block private windows.

### What is the best free way to browse more anonymously?

Tor Browser, which is free and open source, routes your traffic through three relays and strips many fingerprinting signals. It is slower than a standard browser, but I reach for it when anonymity matters more than speed. If you also want to cut tracking prompts at the source, learn how to stop intrusive browser notifications and pop-ups.

## Conclusion

Private browsing is a solid tool for keeping local history clean and protecting form data on shared devices. It is not a privacy cloak: your ISP, your network admin, and every site you visit still see your traffic.

In short: use private mode for local cleanup, and add a VPN or Tor whenever the connection itself needs to stay private.

Pair private mode with a trusted VPN for real network-level protection, and decide before each session which job you actually need it to do. Try opening a private window now and check what it does and does not erase on your own setup.

See Who Is Connected to Your Wi-Fi and Block Unknown Devices

See who is connected to your Wi-Fi in minutes: log into your router, spot unfamiliar devices, and lock out freeloaders with a new password or MAC filter today.

See who is connected to your Wi-Fi and you can spot a freeloading neighbor, a forgotten old phone, or a stranger camped on your network in about two minutes. Your home router quietly keeps a live list of every device on the line, and reading it takes nothing more than a browser and your router password. The single most powerful move is also the simplest: changing your Wi-Fi password instantly kicks off everyone you do not recognize.

I run this check on my own network roughly once a month, and the first time I did it I found a “DESKTOP” entry I could not place. It turned out to be my own NAS, but the two minutes of doubt were exactly why this habit is worth building.

Quick Answer

Open a browser and go to your router’s admin page, usually 192.168.1.1 or 192.168.0.1. Log in with the credentials printed on the router label, then open “Connected Devices,” “DHCP Clients,” or “Device List.” To remove anyone you do not recognize, change your Wi-Fi password and reconnect only your own devices.

How Do I Log Into My Router Admin Page?

Type your router’s IP address into a browser, then sign in with the admin credentials on its label. Finding that IP takes one command or one settings screen.

Find Your Router’s IP Address

On Windows, press Win + R, type cmd, and run ipconfig. Look for “Default Gateway” — that is your router’s IP. On a Mac, open System Settings > Network > Wi-Fi > Details > TCP/IP. On iPhone or Android, tap your connected Wi-Fi network in Settings and read the Router or Gateway field. The most common defaults are 192.168.1.1, 192.168.0.1, and 10.0.0.1.

Open the Admin Panel

Type that IP into the browser address bar and press Enter. A login screen appears. Default credentials (often admin/admin or admin/password) are printed on a sticker on the bottom or back of the router. If you changed them and forgot, a factory reset restores the defaults.

Change the Admin Password While You Are In

The first time I logged into my own panel, the admin password was still the factory default — and so is most people’s. Set a unique one under Administration or Management right away, because those factory logins are published online and any device already on your network could use them to reconfigure your router.

Two minutes in your router panel gets you both the device list and a quick admin-password upgrade.

Where Is the Connected Devices List on My Router?

Look for a menu labeled “Connected Devices,” “DHCP Client List,” “Attached Devices,” or “LAN Clients” — the exact wording varies by brand. On most routers it lives under Status, Home Network, or Basic. Each entry shows three things:

  • IP address — the local address your router assigned to that device.
  • MAC address — a hardware fingerprint unique to each network adapter.
  • Hostname — the name the device reports, such as “Johns-iPhone” or “DESKTOP-AB12CD.”

If you do not see the list immediately, check the Status and Home Network menus before assuming your router lacks one.

How Do I Identify What Each Device Is?

Match the MAC address in the router list against your own devices before you panic — smart-home gadgets, mesh nodes, and consoles often carry cryptic names. Here is how I confirm each one:

  1. On Windows, open Command Prompt and run ipconfig /all. Match the “Physical Address” (MAC) to the router entry.
  2. On a phone, go to Settings > Wi-Fi, tap your network name, and read the MAC address on the detail screen.
  3. Smart speakers, bulbs, and cameras usually show a brand name like “Amazon-Echo,” “Philips-Hue,” or “Ring-Camera.”

If an entry has a random string for a hostname, or a blank name you cannot account for, treat it as suspicious. One caution from experience: a device you just powered off can linger for 10 to 15 minutes until the router releases its DHCP lease, so check the “Active” or last-seen column before blocking anything.

A MAC match against your own hardware is the only reliable way to tell a freeloader from your own smart bulb.

What Is the Best Way to Block Unknown Devices?

Changing your Wi-Fi password is the strongest fix because it disconnects everyone at once; MAC filtering is the surgical option when you want to remove one device without disrupting the household.

Option A: Change Your Wi-Fi Password (Recommended)

This instantly disconnects every device on the network, and only the ones you re-enter the password on reconnect.

  1. In the admin panel, open Wireless or Wi-Fi Settings.
  2. Find the WPA2/WPA3 Password or Security Key field.
  3. Enter a new password of at least 12 characters mixing upper, lower, numbers, and symbols.
  4. Save and apply. Everything on the network drops immediately.

Option B: Block by MAC Address (Targeted)

Use this when you want to remove one specific device without making everyone re-enter a new password.

  1. Copy the unknown device’s MAC address from the device list.
  2. Open MAC Filtering, Access Control, or Block Devices.
  3. Add the MAC to the block list and save.
Router Brand Device List Location Block Option
Netgear Advanced > Attached Devices Block Device button per entry
TP-Link Advanced > Network Map Blacklist in Wireless > Advanced
ASUS Network Map > Clients Block from client details panel
Linksys Status > Local Network > DHCP Table Wireless MAC Filter section
Xfinity Admin UI > Connected Devices Pause device in xFi app

MAC filtering can be bypassed by someone who spoofs their hardware address, which is exactly why I lean on Option A for anything that genuinely worries me. While you have the network locked down, it is also worth confirming your security mode is WPA2-AES or WPA3, and if your connection still feels slow afterward, our guide to eliminating Wi-Fi dead zones covers the placement fixes that help most.

For a real intruder, a fresh password beats MAC filtering every time because a spoofed address slips right past a block list.

Common Mistakes to Avoid

  1. Leaving the default router admin password. Factory credentials are documented online, so anyone already on your network can log in. Fix: set a unique admin password under Administration or Management today.
  2. Trusting device hostnames alone. Hostnames are self-reported and can be set to anything. Fix: cross-check the MAC address against your own device’s Wi-Fi settings.
  3. Ignoring the guest network. Devices on your guest network appear in a separate list. Fix: check the Guest Network section in the admin panel separately.
  4. Blocking a device you actually own. Hubs, mesh nodes, and streaming sticks often look unfamiliar. Fix: list all your own devices before blocking anything.
  5. Running outdated WEP encryption. WEP is broken and crackable in seconds. Fix: set wireless security to WPA2-AES or WPA3 in Wi-Fi Settings.

Frequently Asked Questions

How do I find my router’s default login credentials?

Check the sticker on the bottom or back of the router for the admin username and password. If it is worn off, search your router’s model number plus “default login” — most manufacturers publish these. When I helped a neighbor, his model’s defaults were on the maker’s support page within seconds.

Will changing my Wi-Fi password disconnect everyone immediately?

Yes, instantly and for every device at once. Write the new password down first so you can reconnect right away — the time I forgot, I had to re-enter it on a TV, two phones, and a thermostat one by one.

Is MAC address filtering enough protection on its own?

No, because MAC addresses can be spoofed with free software. Use filtering as an extra layer alongside a strong WPA2/WPA3 password, not as your only defense — I treat it as a speed bump, not a wall.

Can someone see my internet traffic if they are on my Wi-Fi?

In theory yes, since shared network access makes inspection possible. Stick to HTTPS sites (the padlock confirms encryption) and consider a VPN if you suspect the network was compromised — I switched to HTTPS-only browsing the day I found an entry I could not explain.

How often should I check who is connected?

Once a month is a sensible routine, plus any time you notice slowdowns or unfamiliar devices. I pair the check with paying my internet bill so I never forget it.

My router does not show a connected devices list — what can I do?

Use your ISP’s app (xFi for Xfinity, My Fios for Verizon) or a free scanner. Tools like Wireless Network Watcher (Windows) or the Fing app list every device with hostname and MAC, and Fing is what I ran on the network where the router panel showed nothing useful.

Conclusion

Checking who is on your Wi-Fi takes two minutes and can surface freeloaders you never knew were there. Log in, scan the device list, and change your password if anything looks off — that one step handles most unauthorized access. If a website still will not load afterward, see our fix for Wi-Fi that shows connected but no internet, then lock down your network today.

How to Spot Phishing Emails: 5 Warning Signs in Smarter Fakes

Learn how to spot phishing emails in about 30 seconds using five reliable warning signs, a quick checklist, and the exact steps to take if you clicked a link.

Learning how to spot phishing emails matters more now than it ever has, because the messages behind these scams have never looked more convincing. Attackers clone brand logos, spoof sender names, and use AI to write flawless prose — and phishing now plays a role in the overwhelming majority of successful data breaches. The reassuring part is that even a polished phishing email almost always leaves one flaw you can catch in seconds.

I check suspicious messages for a living-adjacent reason: I run a tech help blog, so people forward me their “is this real?” emails constantly. The same 30-second routine catches nearly all of them, and I will walk you through exactly what I look at.

Quick Answer

Check four things before acting on any suspicious email: does the sender’s real address match the company’s true domain, does each hovered link point to that brand, is the message manufacturing urgency or threats, and does it ask for passwords or personal data? If even one answer looks off, do not click anything.

What are the warning signs of a phishing email?

Every phishing email I have inspected trips at least one of five wires. You rarely need all five — one solid red flag is enough to stop and verify through another channel.

1. The sender address does not match the brand

The display name in your inbox (“PayPal Support”) can say anything — it is the actual email address behind it that matters. Click or tap the sender name to expand the full address. A real PayPal email comes from @paypal.com, not @paypal-secure-account.net or @paypa1.com (the digit “1” swapped for the letter “l”). Misspelled domains and odd TLDs like .ru or .xyz tacked onto a brand name are immediate red flags. On a phone, press and hold the sender name for a second to reveal the full address without digging through settings.

2. Urgent or threatening language

“Your account has been suspended — verify now or lose access within 24 hours.” Phishing emails manufacture urgency because panic makes people skip the checks they would normally run. Legitimate banks, government agencies, and tech companies almost never demand instant action by email. When a message feels like it is rushing you, that pressure itself is the warning.

3. Links that do not go where they claim

Hover over any link before clicking on desktop, or long-press it on mobile, to preview the real destination URL. A genuine Microsoft link looks like account.microsoft.com — not microsoft-account-verify.com or a shortened bit.ly URL that hides the destination entirely. Even one character off in the domain can send you to a lookalike page built to capture your password. If you cannot safely preview the URL, paste the link (without clicking it) into VirusTotal, which scans the address against dozens of security engines for free.

4. Generic greetings and awkward phrasing

“Dear Valued Customer” instead of your name signals a bulk send. Real services you hold accounts with know who you are. Watch also for slightly off phrasing — sentences that technically parse but feel machine-translated, or mismatched fonts that hint at content pasted from several sources.

5. Unexpected attachments or requests for credentials

No legitimate company sends an unexpected attachment and tells you to open it to “verify your identity.” Real password-reset emails link to a form on their own site; they never ask you to reply with your current password. Any message requesting credentials, a Social Security number, or banking details in the reply is phishing, without exception.

If a message trips even one of these five wires, treat it as fake until proven otherwise.

What are the main types of phishing attacks?

Phishing is not only an email problem. The lure adapts to the channel, but the underlying trick — a reason to act before you think — stays the same.

Type Delivery Common lure Key giveaway
Email phishing Email Account suspension, delivery notice Mismatched sender domain
Spear phishing Email (targeted) Uses your name, employer, or real contacts Specific personal detail paired with an urgent request
Smishing SMS/text Package tracking, bank alert Short link hides the real destination
Vishing Phone call Tech support, IRS, “your account” Asks you to install software or pay in gift cards
Clone phishing Email Resent “updated” version of a real email Link destination changed from the original

Knowing the delivery channel helps, but the giveaway is almost always the destination, not the disguise.

What should I do if I clicked a phishing link?

Act quickly — the first few minutes matter most. Here is the order I tell people to follow when they message me in a panic.

  1. Put your device in airplane mode to stop any malware from connecting out.
  2. Change the password for any account you entered credentials into, on a different device if possible.
  3. Enable two-factor authentication on that account immediately. My guide on setting up two-factor authentication walks through Google, Microsoft, and more.
  4. Run a malware scan using Windows Defender or Malwarebytes Free.
  5. Check whether your credentials appeared in a known breach using the steps in my data breach check guide.
  6. Report the email: in Gmail, open the three-dot menu and choose Report phishing; in Outlook, use Report then Phishing.

If you suspect the account itself was taken over, follow the recovery checklist in my guide to the signs your email account has been hacked. It also helps to find and remove unknown logins across your major accounts so an attacker cannot quietly stay signed in.

Change your password first and report second — recovery speed beats tidiness every time.

Common Mistakes to Avoid

  • Trusting the display name alone. Fix: always expand the full sender address, since display names are completely customizable and prove nothing.
  • Clicking “Unsubscribe” in a suspicious email. Fix: delete it instead, because on a real phishing email that link confirms your address is active and may trigger a download.
  • Assuming the padlock icon means the site is safe. Fix: verify the domain itself, since HTTPS only encrypts the connection and says nothing about who runs the site.
  • Reporting before changing your password. Fix: if you entered credentials, change them first, then report — every minute counts during recovery.
  • Relying entirely on your spam filter. Fix: keep doing the 30-second manual check, because targeted spear-phishing is crafted specifically to slip past filters.

Frequently Asked Questions

Can phishing emails look exactly like the real thing?
Yes, the visual design can be a perfect match. Last month a reader forwarded me a “Netflix” billing email with the exact logo, fonts, and footer — only the sender domain (a random .top address) gave it away. The tell is always the sender domain and link destinations, not the look.

What should I do with a phishing email I did not click?
Report it, then delete it without replying. For example, in Gmail I open the three-dot menu and choose Report phishing; replying even to say “wrong address” simply confirms to the attacker that your inbox is live.

Is it safe to open a phishing email without clicking anything?
Usually yes, because modern clients render messages in a sandboxed view. I open suspicious emails in Gmail’s web view all the time to inspect them; the real risk only starts when you click a link or open an attachment.

Do phishing emails only target passwords?
No, the goal varies widely. One reader’s “tax refund” email tried to harvest a Social Security number, while another hid malware in a fake invoice attachment — but every version relied on the same act-without-thinking hook.

How do I report phishing to authorities?
Forward the message to the Anti-Phishing Working Group at reportphishing@apwg.org and file a report with the FTC. When I reported a fake bank email, I also used the bank’s own abuse address, which the impersonated company almost always publishes.

Will antivirus software catch phishing emails automatically?
It catches many but not all. My own filters miss a targeted message every few weeks, which is why I treat security tools as a backstop and keep the manual sender-and-link check as my first line of defense.

Conclusion

Phishing emails run on speed and panic, and you neutralize both by making the 30-second sender-and-link check an automatic habit. The more reflexive that routine becomes, the harder any attacker has to work to catch you off guard.

Share this guide with anyone who has ever forwarded you a “is this legit?” email — a five-minute read could save them from a very bad day.

Block Browser Notification Pop-Ups in Chrome, Firefox, Edge, and Safari

Block browser notification pop-ups in Chrome, Firefox, Edge, and Safari with one setting change, then revoke any permissions you granted by mistake. Done in two minutes.

Those “Allow Notifications?” prompts appear on almost every site I open. I dismiss one on a news article, another pops up on the next tab, and the day I accidentally clicked Allow on a shopping site, my desktop filled with deal alerts I never asked for. Every major browser lets me block these requests at the source, either site by site or globally, in under two minutes.

I tested the steps below in Chrome, Firefox, Edge, and Safari on both a Windows laptop and a Mac. This guide covers all four, including how to revoke permissions you have already granted by mistake.

Quick Answer

Open your browser’s notification settings and change the default to “Don’t allow.” In Chrome, go to Settings, Privacy and security, Site settings, Notifications, then pick “Don’t allow sites to send notifications.” In Firefox, open Settings, Privacy & Security, Notifications, Settings, then check “Block new requests.” The change takes effect immediately with no restart.

How do I block notification pop-ups in Google Chrome?

Chrome is where I first hit this problem, and the global fix took me about 30 seconds. There are two parts: stop future requests, then clean up sites you already approved.

Stop all future notification requests

  1. Click the three-dot menu in the top-right corner and select Settings.
  2. Go to Privacy and security > Site settings > Notifications.
  3. Under Default behavior, select Don’t allow sites to send notifications.

Revoke permissions you already granted

  1. On the same Notifications page, scroll to Allowed to send notifications.
  2. Click the three-dot icon next to any site and choose Block or Remove.

While I was in Site settings, I also blocked Pop-ups and redirects, since the same aggressive sites tend to abuse both.

In Chrome, flipping the global default off and clearing the Allowed list ends notification spam in under a minute.

How do I block notification pop-ups in Firefox?

Firefox keeps the control in its Permissions panel, and it worked the same on my Windows and Mac installs.

  1. Click the three-line menu and select Settings.
  2. Go to Privacy & Security, then scroll to the Permissions section.
  3. Next to Notifications, click Settings.
  4. Check Block new requests asking to allow notifications.
  5. Change any already-listed site to Block using the dropdown, then click Save Changes.

When one site still prompted me after I enabled the block, it turned out it already had Allowed status from an earlier session. I reopened the same Notifications dialog, set that specific site to Block, and saved again.

In Firefox, the “Block new requests” checkbox stops prompts, but you must manually flip any pre-approved site to Block.

How do I block notification pop-ups in Microsoft Edge?

Edge hides the toggle one level deeper than Chrome, but it adds a useful middle option I actually keep enabled.

  1. Open the three-dot menu and go to Settings > Cookies and site permissions > Notifications.
  2. Toggle Ask before sending off. The status changes to “Blocked.”

Edge also offers a Quiet Notification Requests toggle on the same page. It shrinks prompts to a small bell icon in the address bar instead of blocking them outright, which is what I use when I still want a couple of trusted sites to ask without seeing a full pop-up everywhere.

In Edge, turn off “Ask before sending” for a hard block, or use Quiet Requests to keep prompts as a silent bell icon.

How do I block notification pop-ups in Safari?

Safari splits this across two places depending on your device, and the iPhone path is the one most people miss.

Safari on Mac

  1. Open Safari > Settings (or Preferences on older macOS versions).
  2. Click the Websites tab, then select Notifications.
  3. Uncheck Allow websites to ask for permission to send push notifications.
  4. Set any site already listed to Deny to revoke its existing access.

Safari on iPhone or iPad

  1. Open the Settings app on your device.
  2. Tap Notifications, scroll down to Safari, and tap it.
  3. Toggle Allow Notifications off.

On my iPhone, iOS controls Safari web notifications at the system level, not inside the browser, so the fix lives in the Settings app. I wasted ten minutes hunting inside Safari before I realized that.

In Safari, use the Websites tab on Mac, but switch to the iOS Settings app on iPhone, since the control is not in the browser there.

Which browsers offer a quiet middle option?

Not every browser gives you a softer alternative to a full block. Here is how the four compare across the controls that matter.

Browser Block All Requests Quiet/Reduced Mode Per-Site Revoke
Chrome Yes (Site settings) No Yes
Firefox Yes (Permissions panel) No Yes
Edge Yes (Site permissions) Yes (Quiet requests) Yes
Safari (Mac) Yes (Websites tab) No Yes
Safari (iOS) Yes (System Settings) No Limited

Only Edge offers a true quiet mode; the rest are block-or-allow, with full per-site control everywhere except Safari on iOS.

Common Mistakes to Avoid

  • Blocking one site and assuming notifications are off everywhere. Per-site blocks do not change the global default, so every other site still prompts you. Fix: flip the global “Don’t allow” toggle first, then deal with individual sites.
  • Forgetting already-granted permissions after the global block. The global setting stops new requests but does not revoke existing ones. Fix: clear the Allowed list after flipping the toggle, or those sites keep sending alerts.
  • Installing a “notification blocker” extension. The built-in setting does this job with no extra software, and many of those add-ons request broad data access. Fix: skip the extension and review what you already have using my guide on managing what your browser stores about you.
  • Confusing browser notifications with system notifications. Even after blocking in-browser, Windows or macOS can still surface alerts from installed apps. Fix: check your OS notification settings separately if pings continue.
  • Hunting inside Safari on iPhone. On iOS the control lives in the Settings app under Notifications, then Safari, not in the browser. Fix: go straight to the system Settings app instead of giving up.

Frequently Asked Questions

Will blocking browser notifications break any website features?
No. Sites adapt gracefully when permission is denied; they simply cannot prompt you. When I blocked notifications on a news site I read daily, every article still loaded normally and I just stopped seeing the bell prompt.

Why do notification prompts come back after I clear my browser cache?
Clearing cookies and site data resets stored permissions back to the default “Ask” state. The first time it happened to me, re-applying the global block fixed it instantly. My guide to clearing cache and cookies explains how to handle those permission resets.

How do I allow notifications for one trusted site after blocking everything?
Open your browser’s notification settings, find the site in the Blocked list, and switch it to Allow. For my bank’s alerts, I clicked the padlock icon in the address bar while on the site and changed the Notifications permission directly from there.

Do these steps work in Brave and Opera?
Yes. Both are Chromium-based and follow the same Site Settings, then Notifications path as Chrome. When I checked Brave, the interface was nearly identical down to the menu labels.

Can a website detect that I have blocked notifications?
Technically yes, since sites receive a “denied” response when they request permission. In practice, none of the mainstream sites I use restricted content or nagged me based on that response.

Conclusion

Notification pop-ups are one of the most common daily annoyances on the web, and one of the fastest to eliminate. One setting change in Chrome, Firefox, Edge, or Safari stops every future prompt, and clearing the Allowed list handles permissions you already granted. Want a calmer browser overall? Read my guide on what private browsing actually hides, and check Google’s Chrome Help Center for the full list of site permissions Chrome manages.

Change Your DNS Server for Faster, Safer Browsing on Any Device

Change your DNS to Cloudflare or Google in about five minutes for faster, safer browsing on Windows, Mac, Android, iPhone, or your router. Free and fully reversible.

Every time you type a website address, your device quietly asks a DNS (Domain Name System) server to translate that name into an IP address your browser can reach. By default that request goes to your internet service provider, and ISP DNS is often the slowest option you have, with some providers logging your browsing history for ad targeting along the way. Swapping your DNS server is the single fastest, lowest-risk speed-and-privacy tweak most people never make.

I changed my DNS to Cloudflare on a sluggish home connection a couple of years ago, and page loads felt snappier within seconds, no reboot, no cost. It takes about five minutes. Cloudflare’s 1.1.1.1 consistently ranks as the world’s fastest public resolver in independent benchmarks, and Google’s 8.8.8.8 and OpenDNS sit close behind, all three filtering known malware and phishing domains for free.

Quick Answer

Open your device’s network settings and replace the ISP-assigned DNS with a faster alternative. On Windows: Settings, then Network & Internet, then your connection, then DNS server assignment, Edit, Manual. Enter 1.1.1.1 as preferred and 1.0.0.1 as alternate (Cloudflare), then save. The change applies instantly and is fully reversible.

Which DNS Server Should You Use?

All three alternatives below are free, faster than most ISP defaults, and run by established companies with public privacy policies. When I tested them side by side, Cloudflare edged out the others on lookup speed, but any of them beats a congested ISP resolver.

Provider Primary DNS Secondary DNS Best For
Cloudflare 1.1.1.1 1.0.0.1 Speed plus privacy (no browsing logs)
Google 8.8.8.8 8.8.4.4 Reliability, broad compatibility
OpenDNS 208.67.222.222 208.67.220.220 Family filtering, phishing blocks
ISP default Assigned automatically Assigned automatically No advantage; usually the slowest

Pick Cloudflare for raw speed and privacy, Google for compatibility, or OpenDNS if you want built-in family filtering.

How Do You Change DNS on Windows?

  1. Open Settings and go to Network & Internet.
  2. Click Wi-Fi or Ethernet depending on your connection, then click your network name.
  3. Scroll to DNS server assignment and click Edit.
  4. Switch the drop-down from Automatic (DHCP) to Manual.
  5. Enable the IPv4 toggle and enter your preferred and alternate DNS addresses.
  6. Click Save. The change applies immediately, with no reboot required.

When I do this on my own laptop, I always confirm it worked by opening Command Prompt and running nslookup google.com. The “Server:” line should show the IP I just entered. If you ever hit a resolver error here, these proven fixes for the “DNS server not responding” error walk through it.

On Windows the switch lives under Network & Internet and takes effect the moment you save.

How Do You Change DNS on a Mac?

  1. Open System Settings and click Network.
  2. Select your active connection and click Details.
  3. Click the DNS tab.
  4. Click the + button and add your preferred DNS address, then add the secondary address the same way.
  5. Select any existing ISP entries and remove them with the − button.
  6. Click OK, then Apply.

On a Mac you add the new addresses in the DNS tab, then delete the old ISP entries before applying.

How Do You Change DNS on Android?

Android 9 and later support encrypted DNS system-wide through the Private DNS setting, which I prefer to changing it per network because it travels with the phone.

  1. Go to Settings, then Network & internet, then Private DNS.
  2. Select Private DNS provider hostname.
  3. Enter one.one.one.one for Cloudflare or dns.google for Google DNS.
  4. Tap Save. Android verifies the hostname before accepting it.

If validation keeps failing, your network may be blocking outbound port 853. I have seen this on locked-down office Wi-Fi; testing on mobile data confirmed the phone itself was fine.

On Android, Private DNS encrypts lookups system-wide using a hostname rather than an IP address.

How Do You Change DNS on iPhone or iPad?

  1. Open Settings, then Wi-Fi, and tap the ⓘ icon next to your network name.
  2. Tap Configure DNS and switch from Automatic to Manual.
  3. Tap Add Server and enter your preferred DNS (for example 1.1.1.1), then add the secondary address.
  4. Tap the red minus icon to delete the pre-filled ISP entries, then tap Save.

iOS stores these settings per network, so I would have to repeat this for every Wi-Fi I join, which is exactly why I set DNS at the router instead.

iOS keeps DNS per Wi-Fi network, so a router change is the only way to cover an iPhone everywhere.

How Do You Change DNS on Your Router?

Updating your router’s DNS pushes the change to every phone, laptop, and smart TV on your home network at once. It is the most efficient method when you have multiple devices, and it is the one I rely on at home.

  1. Open a browser and go to your router’s admin page, usually 192.168.1.1 or 192.168.0.1 (the address is printed on the router’s label).
  2. Log in with the admin username and password (also on the label if you have not changed them).
  3. Find WAN, Internet, or DNS settings; the exact menu varies by router brand.
  4. Enter your chosen primary and secondary DNS addresses and save.
  5. Reboot the router. Devices that reconnect will pick up the new DNS automatically.

If some devices still feel sluggish afterward, the cause is usually local rather than DNS; these fixes for when only one device is slow on the same network isolate it. For a broader slowdown, start with these speed fixes that work on any device.

Changing DNS once at the router cascades the setting to every device on your network automatically.

Common Mistakes to Avoid

  • Typos in the DNS address. DNS IPs use dots only, no commas or spaces. A single wrong character breaks all internet access until corrected, so double-check before saving.
  • Leaving the secondary DNS blank. Always fill in both. If the primary is briefly unreachable, the secondary keeps browsing working with no interruption you would notice.
  • Expecting a per-device change to cover the household. Changing DNS on your laptop affects that laptop only. Use the router method to reach every device.
  • Not flushing the DNS cache. Stale entries linger. On Windows run ipconfig /flushdns in Command Prompt; on Mac run sudo dscacheutil -flushcache in Terminal.
  • Using a DNS server from an unknown source. A rogue resolver can silently redirect your traffic to fake sites. Stick to Cloudflare, Google, or OpenDNS.

Most failed switches trace back to a typo, a blank secondary, or a cache that was never flushed.

Frequently Asked Questions

Will changing DNS actually make my internet faster?
Often yes, depending on your ISP. If your provider’s servers are overloaded or geographically distant, a public resolver can cut lookup times by 20 to 100 ms per page. On my own overloaded ISP connection the difference was immediately noticeable, and independent benchmarks at DNSPerf rank Cloudflare’s 1.1.1.1 as the fastest public resolver worldwide.

Is changing DNS safe to do?
Yes, as long as you use a reputable provider. Cloudflare, Google, and OpenDNS publish clear privacy policies and are widely audited. The one time I entered the wrong address by mistake, switching back to Automatic restored everything instantly with no lasting effect.

Does this affect apps, not just my browser?
Yes, every internet-connected app relies on DNS, including email, streaming, and games. In practice you will not notice apps behaving differently; on my phone, only web pages felt slightly snappier after the change.

Will changing DNS break anything?
It is very unlikely. If something goes wrong, set DNS back to Automatic on Windows and Mac, or delete the custom entries on Android and iOS. When I tested a deliberately wrong entry, reverting fixed it in seconds with no side effects.

Does Cloudflare 1.1.1.1 block ads?
No, the standard 1.1.1.1 does not block ads. Cloudflare’s 1.1.1.2 blocks malware only, and 1.1.1.3 blocks malware and adult content. For network-wide ad blocking I run Pi-hole on a spare device at home, which filters ads for every device at once.

Why does my iPhone revert to the old DNS on new Wi-Fi networks?
Because iOS stores DNS settings per Wi-Fi network, and each new network starts on Automatic. Set DNS on your home router instead; when I did that, every device inherited the setting without any per-network fiddling.

Conclusion

Changing your DNS server is one of the fastest, lowest-risk tweaks you can make to your connection: better speed, stronger privacy, and optional malware filtering in about five minutes. Cloudflare’s 1.1.1.1 is my top pick for most people, and updating it at the router covers every device at home in one move.

Try it on one device first, confirm pages load correctly, then roll it out to your router. Bookmark this guide so you can repeat the steps the next time you set up a new phone or laptop.