Can Chromebooks Get Viruses?

Chromebooks are among the most secure consumer devices available — but they're not entirely immune to threats. Chrome OS comes with multiple built-in security layers that make traditional viruses very difficult to execute, but malware, phishing, and malicious extensions are a different story.

Our antivirus survey found that 30% of people using non-Windows, non-Mac operating systems — the category that includes Chromebook users — report having gotten a virus even with protection in place. That's a meaningful number for a device often assumed to be untouchable.

Let's explore how Chromebook's security works, where it falls short, and when adding a good antivirus makes sense.

How secure is Chromebook?

Chrome OS is designed around web apps and doesn't allow traditional executable (.exe) files to run. This means conventional viruses — which typically rely on executable files to launch — have a much harder time gaining a foothold on a Chromebook than on Windows or macOS.

It's worth noting that Chromebooks now support Android apps via the Google Play Store and Linux apps through the built-in Linux development environment. These expand what Chromebooks can do, but they also introduce new attack surfaces that Chrome OS's original security model wasn't designed to address. Using apps only from trusted sources remains important.

Beyond the .exe restriction, Chromebooks use several independent security layers. Each layer is separate, so even if a threat breaks through one, it still faces several others:

Automatic updates

Chrome OS automatically manages updates, ensuring your device is always running the latest software version with the most recent security patches. On traditional operating systems, keeping every piece of software from every vendor up to date is a significant challenge. On a Chromebook, it largely takes care of itself.

Sandboxing

Every browser tab and app runs in its own isolated "sandbox." If you visit a malicious website or open a compromised app, any threat is contained within that sandbox and prevented from spreading to the rest of your system. This is one of Chrome OS's most effective defenses against malware.

Verified Boot

Each time your Chromebook starts up, it runs a self-check called Verified Boot. If it detects any tampering or corruption in the system files, it automatically repairs the issue before loading. This makes persistent malware — the kind that survives a restart — extremely difficult to maintain on a Chromebook.

Data encryption

Most Chromebook data lives in the cloud via web apps, keeping it away from local infections. Files stored locally — downloads, cookies, browser data — are encrypted using tamper-resistant hardware, making them very difficult for attackers to access even if they gain a foothold on the device.

Recovery mode

If everything else fails, Chrome OS offers a recovery mode that restores the system to a known good state. A simple keyboard combination initiates the process, giving you a reliable escape hatch if your device is seriously compromised.

Security risks for Chromebooks

Chromebook's security layers are strong, but they can't protect against everything. Here are the threats most likely to affect Chromebook users:

Unsecure websites

Websites that aren't regularly maintained can be compromised and used to serve malware. Chrome often flags these with a warning, but proceeding past it can expose your device to threats. While sandboxing limits the damage, it's still better not to visit compromised sites in the first place.

Vulnerable Android apps

The Google Play Store vets its apps for security, but occasionally a malicious app slips through. In 2024 alone, Google blocked 2.36 million policy-violating apps from reaching the Play Store and banned more than 158,000 developer accounts linked to harmful software.[1] The risk increases significantly if you use third-party app stores, which don't have the same verification processes as the Play Store.

Phishing

Phishing remains one of the most effective attack methods precisely because it bypasses technical defenses by targeting people directly. A convincing email impersonating your bank, a delivery service, or even a colleague can trick you into handing over credentials or downloading malicious software. No operating system's built-in security fully protects against a well-crafted phishing attempt — this is where an antivirus with anti-phishing features adds real value.

Malicious browser extensions

Browser extensions can request broad permissions — including the ability to read everything on every page you visit. While Chrome does a good job filtering the Web Store, bad extensions do occasionally make it through. In 2022, a fraudulent extension impersonating a legitimate company accumulated more than 200,000 installations before being removed.[2] It was changing users' default search engines, opening spam sites, and generating intrusive pop-ups. 

According to research from Stanford University and CISPA in June 2024, 280 million people installed a malware-infected Chrome extension over a three-year period, with bad extensions remaining in the store for an average of 380 days before removal.[3]

Always review extension permissions carefully and remove any you don't actively use.

5 benefits of a Chromebook antivirus

Chrome OS's built-in defenses are genuinely good — but antivirus software adds protection in areas where the OS falls short. Our antivirus survey found that 56% of people who chose third-party antivirus software did so because it offered better protection than the preinstalled software on their device. 

Here's what that extra layer typically covers:

1. Anti-phishing protection

Antivirus tools with anti-phishing features scan incoming emails and web pages for known red flags, flagging or blocking suspicious content before you interact with it. Many also include spam filters that catch unsolicited marketing and potential scam emails before they reach your inbox — an area where Chrome OS's built-in tools offer limited coverage.

2. Malicious website and extension blocking

A good antivirus acts as an early warning system, scanning web pages in real time and alerting you before you land on a compromised site or download a malicious file. Some tools also monitor browser extensions for suspicious behavior — particularly useful given how often bad extensions slip through even the Chrome Web Store's vetting process.

3. App monitoring

Even though Android apps run in a sandbox on Chromebooks, a good antivirus can monitor apps for suspicious behavior and block problematic ones from executing. This provides a meaningful extra layer of protection beyond what the Play Store's initial vetting offers, especially for apps that may have been compromised after their initial review.

4. VPN for private browsing

Many antivirus suites include a virtual private network (VPN), which encrypts your data and hides your browsing activity from your ISP and potential eavesdroppers. This is particularly useful on public Wi-Fi. We've compiled a list of the best VPNs for Chromebook if you want a standalone option. Keep in mind that a VPN doesn't prevent viruses — it protects your connection privacy, not your device from malware.

5. Identity theft and data breach monitoring

Many modern antivirus suites go beyond device protection to monitor your personal information — including your email addresses, Social Security number, and financial accounts — for signs of exposure in data breaches. This kind of monitoring has become increasingly standard in premium antivirus packages and provides a layer of protection that Chrome OS's built-in security doesn't address.

How to choose an antivirus

To find an antivirus that works best for your Chromebook, look for the following:

Chromebook compatibility: Not all antivirus programs support Chrome OS. Look specifically for apps available through the Google Play Store, or browser-based tools designed to work with Chrome. Check compatibility before purchasing — some antivirus suites include Chromebooks in their device count but offer limited features compared to their Windows or Mac versions.

Features that address Chromebook's specific gaps: Chrome OS already handles many traditional antivirus functions well. The features most worth paying for on a Chromebook are those that go beyond what the OS provides: anti-phishing protection, malicious extension monitoring, a VPN, and identity or data breach monitoring.

Level of protection and third-party test scores: Independent testing labs like AV-TEST and AV-Comparatives evaluate antivirus programs on protection, performance, and usability. Checking scores before committing is one of the most reliable ways to separate well-marketed products from genuinely effective ones.

Price vs. value: Free antivirus options exist, but they typically offer limited protection compared to paid alternatives. Paid plans generally range from a few dollars to around $10–$ 15 per month, depending on the tier and the number of devices covered. Given that a serious malware infection or identity theft incident can cost far more in time and money than a year's antivirus subscription, the investment is usually worthwhile.

Best antivirus programs for Chromebook

If you're looking for antivirus software that works well on Chrome OS, here are three of our top-tested options:

Norton 360

One of the most recognizable names in security, Norton 360 offers strong malware detection alongside a wide range of additional features, including cloud backup, parental controls, a VPN, and identity theft protection. Plans vary significantly in what they include, so it's worth reviewing each tier before purchasing.

Read our Norton review

Bitdefender

Bitdefender earns near-perfect scores in third-party testing and is consistently rated among the least intrusive antivirus programs available — meaning it protects without noticeably slowing your device. It includes real-time threat detection, anti-phishing, anti-fraud protection, a VPN, and vulnerability assessments.

Read our Bitdefender review

TotalAV

TotalAV's real-time malware scanner earned a 100% detection score in third-party tests. Its mobile security app includes a VPN, Wi-Fi network checker, data breach scanner, and a web shield that blocks potentially malicious websites — making it a well-rounded option for Chromebook users.

Read our TotalAV review

How to check for malware and viruses

Thanks to sandboxing and Verified Boot, Chromebooks can often contain and resolve threats on their own. But if your device is behaving strangely — running slowly, showing unexpected pop-ups, or crashing — it's worth checking two areas manually:

Check Chrome extensions

A recently installed or compromised extension is one of the most common sources of browser problems on Chromebooks. Here's how to review and remove them:

1. In the upper right corner, click the puzzle icon.

2. Select Manage extensions.

3. Review your extensions, paying close attention to any you installed recently.

4. Click Remove under any extension you want to delete.

5. Once removed, restart your browser to confirm the issue is resolved.

Check Android apps

Android apps on Chromebooks run in their own sandbox, which limits the damage a malicious app can do — but it's still important to remove any you don't recognize or trust. Here's how:

Via Google Play Store:

1. Open the Google Play Store app.

2. Select your profile picture in the top right corner.

3. Choose Manage apps and device.

4. Click on the Manage tab to see all installed apps.

5. Select an app by clicking the box next to it.

6. Tap the trash can icon in the top right corner to uninstall.

Via the Chromebook menu:

1. Open the menu.

2. Find the app, hover over it, and right-click to open a menu.

3. Select Uninstall.

Bottom line

Chromebooks are genuinely among the most secure consumer devices available, thanks to sandboxing, Verified Boot, automatic updates, and data encryption. But "more secure" doesn't mean immune. Phishing, malicious extensions, and compromised Android apps can all affect Chromebook users, and no built-in OS defense fully covers these gaps.

Adding antivirus extends your protection into areas Chrome OS doesn't address — particularly anti-phishing, extension monitoring, and identity protection. Our antivirus survey found that 56% of people who switched to a third-party antivirus did so because it offered better protection than the preinstalled antivirus. On a Chromebook, that extra layer targets the threats most likely to reach you.

For a full breakdown of tested options, see our best antivirus software guide.

FAQs