Business Browser Security Checklist

Use this checklist on each business PC where Chrome is used. Work through each layer — device, user, browser, credential and account. Any unchecked item is a gap worth addressing.

Device

• □ Supported Windows version installed and up to date
• □ Automatic screen lock configured — short inactivity timeout
• □ Windows Hello configured — PIN, fingerprint or facial recognition
• □ BitLocker or device encryption enabled where appropriate
• □ Each user has their own Windows account — no shared logins

User

• □ Each person uses their own Windows account
• □ Windows Hello set up for each user on each device
• □ Shared Windows logins reviewed and eliminated

Browser

• □ Current supported version of Chrome installed
• □ Automatic Chrome updates enabled
• □ Use Windows Hello when filling passwords — reviewed and enabled if appropriate
• □ Verify it's you to autofill payment methods — reviewed and enabled if appropriate
• □ Saved payment cards reviewed — unnecessary cards removed
• □ Saved card security codes reviewed
• □ Unnecessary browser extensions removed
• □ Extension permissions reviewed

Credential

• □ Unique passwords used for all accounts
• □ A password manager in use
• □ Weak or reused passwords reviewed and replaced
• □ Passkeys used where the service supports them

Account

• □ Google Account MFA or passkeys enabled
• □ Account recovery methods reviewed and current
• □ Work and personal Chrome profiles reviewed — appropriate separation in place

Business

• □ Company payment card access restricted to staff who genuinely need it
• □ Browser policies documented — staff know what is and is not permitted
• □ Shared Windows accounts avoided

Finding the settings

Password verification: Chrome → Passwords and autofill → Google Password Manager → Settings → Use Windows Hello when filling passwords.

Payment verification: Chrome → Settings → Autofill and passwords → Payment methods → Verify it's you to autofill payment methods.