Get all your news in one place.
100’s of premium titles.
One app.
Start reading
Tom’s Guide
Tom’s Guide
Technology
Anthony Spadafora

Google will finally stop this 20-year Chrome bug from leaking your browsing history to other websites — here’s how

Chrome browser on laptop.

With the release of Chrome 136, Google will finally address a long-standing privacy issue in its browser that allowed websites to determine your browsing history by using previously visited links.

Have you ever done a Google search for something and noticed that some of the links in the search results were purple? Well, this is because you previously visited those sites. As BleepingComputer points out though, those links are stylized as “:visited”.

If these purple links were only visible to you, this problem wouldn’t exist. However, since this color change is displayed regardless of which site you were on when you clicked a link, other websites could use creative scripts to leak your browsing history.

Over the years, security researchers have shown how this privacy issue could be used by hackers in a number of different attacks. Fortunately though, Google plans to finally address this 20-year problem with the release of Chrome 136 at the end of this month.

In the next version of Chrome, Google will use triple-key partitioning with “visited” links. That way, instead of storing link visits globally, the browser will partition visited links by link URL, top-level site and frame origin.

Once this change rolls out, it will ensure that a link will only appear as “:visited” on the same site and in the same frame origin. This will eliminate cross-site history links while protecting your privacy.

How to fix this privacy issue right now

(Image credit: Tom's Guide)

If you don’t want to wait until the end of the month, there’s a way you can fix this issue now using Chrome Flags.

For those running, Chrome versions 132 to 135 (latest) you can enable the experimental feature :visited isolation right now. To do so, either head to chrome://flags and search for “Partition the Visited Link Database, including ‘self-links’” or you can just head to the following address: chrome://flags/#partition-visited-link-database-with-self-links.

Once there, you’ll see that the feature is turned off by default but if you click on the box on the right side, you can turn it on by selecting Enabled.

It’s worth noting that as this is an experimental feature, it might now work as expected in all situations. However, at least you have the option to address this privacy issue early.

For extra privacy though, you might also want to consider using one of the best VPN services while surfing the web since all of your web traffic and your searches go through a VPN server and can’t easily be seen by snooping websites and other third parties.

More from Tom's Guide

Sign up to read this article
Read news from 100’s of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.