Advertisement

Chrome 70 will let users decline linking web, browser sign-in

Sign into Gmail without signing Chrome into your Google account too.

Over the weekend professor and cryptographer Matthew Green noticed that in Chrome 69, signing into Google websites while using Chrome caused the browser to show him as signed in there as well. Concerned about the implications of tracking behavior across a browser session even though he had intentionally not signed into Chrome, he wrote about it. Google Chrome manager Adrienne Porter Felt explained that the change happened to remind users of who is signed in, and that it did not sync activity to the server under the Google profile unless additional steps were taken.

Now, in response to the feedback, Google has announced that in Chrome 70, users will be able to "turn off linking web-based sign-in with browser-based sign-in." As Google Security Princess Parisa Tabriz writes, it will still default to on, but you can opt out of it and have an assurance that the browser is not syncing your data to the cloud in the background. It's also changing a confusing blue button Green complained about, so that instead of just "Sync as (your name)" it clearly indicates that pressing it will turn syncing on or off.

Finally, one other change comes to the "clear cookies" function. Previously, it would leave Google authorization cookies behind so that the user would still be signed in, but now it will blow those away too.