How to disable Java in your browser on Windows, Mac

How to disable Java in your browser on Windows, Mac

Summary: Amid a serious security flaw in the latest version of Java 7, where even the U.S. Department of Homeland Security has warned users to disable the plug-in, here's how you do it.

SHARE:
TOPICS: Security, Oracle
50

 |  Image 7 of 10

  • Safari: Step 1

    In Safari (both Windows and Mac), you can disable Java in the browser, as well as on the operating system.

    • Go to Safari Preferences (either from the Edit menu or the Safari menu on Mac).
  • Safari: Step 2

    Once you open up the Safari preferences, you should:

    • Go to the Security tab.
    • Under Web Content, ensure that the Enable Java box is unticked.

    The settings are saved automatically. Close the dialog box and restart the browser.

    You can check and verify to see if Java has been disabled by following the instructions here.

  • Chrome

    On Chrome, you may not have Java installed if you are running a 64-bit operating system. Still, it's better to check to be on the safe side.

    • Open Chrome and in the omnibar (search/address bar), type in chrome://plugins and hit Enter.
    • Scroll down until you see Java (TM) and a version number. Simply hit Disable and the settings will be saved for you.

    And that's it. Restart the browser and Java should be disabled.

    You can check and verify to see if Java has been disabled by following the instructions here.

  • Thumbnail 1
  • Thumbnail 2
  • Thumbnail 3
  • Thumbnail 4
  • Thumbnail 5
  • Thumbnail 6
  • Thumbnail 7
  • Thumbnail 8
  • Thumbnail 9
  • Thumbnail 10

Topics: Security, Oracle

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

Talkback

50 comments
Log in or register to join the discussion
  • No need in Windows

    Unless you decided to install that slow buggy mess yourself (in which case you should know how to uninstall it) there hasn't been a Java delivered with Windows for quite a few years.
    Tony_McS
    • This is not the way it looks in Windows 8

      No security slider visible in Windows 8 when you go to the Java control panel.
      deshmyster
      • "This is not the way it looks in Windows 8"

        That's because java isn't included in Windows 8...
        xplorer1959
      • Here Is How

        Bring up charm bar and click on search
        Click on settings
        Type Java in search bar
        Click on Java Icon
        Click Advance
        Uncheck the Java plug in box

        While you are there, might want to check other options.
        eargasm
        • thanks - but a bit more information

          Many windows 8 users like me never see the charms menu or the new interface (I may use it when there are decent apps but not yet - just wanted it for speed increase)
          Control panel is where it always was
          so start >control panel>Java
          However on the advanced panel
          There are settings for Java Console (show hide don't start)
          Default Java for browsers (IE ticked but greyed out Mozilla family ticked and active)
          Java Plugin - enable next generation java plug in - I am guessing this is the one but it is not obvious
          Then there are a whole shed load of other stings oddly unticking that and applying doesn't grey out any other settings so does that imply that things can happen even if you disable java?
          I do have an understanding of using control panel tools but this list is slightly confusing and ambigious to me - an inexperienced user would stop at the word "advanced"
          cymru999
      • Are you running it in administrator mode?

        I think that's required to change security settings...
        D. W. Bierbaum
      • Windows 7 and 8 disabing Java

        The Security tab in the Java control panel applet does NOT appear as shown here UNLESS you UNINSTALL all prior Java updates, THEN install (or re-install) the latest. Then it's easy to uncheck the browser enable box.
        jgarman@...
    • I have sent this about windows 8 to the author - posting here for others

      I would like to apply it but the settings you show are not there in Windows 8 control panel - only a button saying certificates. There is a setting in the Java tab which gives the path of java runtime and version etc and has a enable tick box at the end of the row (that is on the user tab) then there is another sub tab system which has the same one line entry (though it looks like more can be added)

      On the certificates tab is a worrying entry for our university VLE Blackboard which has its certificate listed - if blocking java means that our students wont be able to use parts of blackboard it will be a major problem for us.

      The last tab is Advanced where there is a whole list of things so maybe your techies can add a windows 8 fix please

      Also is there a quick way for an end user to find out which websites NEED java to function
      cymru999
  • ATO need to learn from this

    I really hope the ATO are listening to this! Their business portal (which is a security nightmare to get setup, particularly on anything other than windows) requires Java running in the browser - because of what they claim, is for security reasons. Seems to me they are forcing all australian businesses to take very bad security practices if they want to submit their quarterly BAS.

    PLEASE ATO, fix it soon - I can't afford this sort of vulnerability in my business systems.

    Ben
    ben+zdnet@...
  • If it was that easy....why did it take SO long to get this simple

    solution OUT .......Microsft web site was the usual complete round around......Windows is CRAP.....end of story
    Over and Out
    • @ If it was that easy....why did it take SO long to get this simple

      I guess it is to those who don't have the IQ to figure out how to use it.
      MelbourneTweetr
  • GoToMeeting

    Problem is that so many web services require us to use their Java apps, i.e. GoToMeeting :-(
    marketingdiy
  • Important to differentiate "Java Plugins" from "Java Script"

    Somewhere in the furor over Java exploits, it'd be nice if someone speaking to the general public would point out that "Java Script" (ECMA script language found on almost every web site, including this one), is not the problem, but rather Java Applets or plugins which use JRE. Not that scripting cannot be used for malicious purposes...
    TwangGuru
    • Java Plugins versus Java Script

      Though I generally concur with TwangGuru, trying to explain the differences between these two to the general public, successfully, is about as likely as the probability that more than 50% of the general population can tell you what JRE stands for, if asked.

      The more important issue is that Java, though wonderfully generic and portable for programming, is a nightmare for security. Even if you get all the settings to perfectly firewall a system, the problem is that every click of the mouse will generate a consent box, and some things won't work any more. Within days, the users are disabling the protections because Java is so ubiquitous to everything. It's also a concern that the most recent exploit used trojan websites and single clicks to deliver payloads, a security breach at an extremely high level. Without Homeland Security putting the heat on them, Oracle might have waited weeks to patch the program. And as noted elsewhere, scripting still could be used maliciously. I certainly don't trust my security to anything Oracle says or does.

      But as I noted about users not wanting the inconvenience and security warnings, those of us who have more experience in such things should be educating others about what to watch for - unnecessary clicking of links or popups that are not familiar, odd texts/emails that have been spoofed, and the way to use anti-virus and anti-malware apps to protect the machine.

      Now if we can just figure out a way to completely firewall the JRE from the rest of the computer, seamlessly, for the 50+ million people who play Minecraft every day, we'll be golden. Not really, but it would be a start.
      screamino
  • Java Control Panel

    On step 3, Java Control Panel, Security tab, I do not have the option to Enable Java Content in the Browser (thus I cannot disable it). What now? Running Windows 7, IE 9. Under Security, it simply has "Use certificates to pisitively identify yourself, certifications, authorities, and publishers."
    Loretta Cahill
    • Java Control Panel

      Um, that should have been "positively."
      Loretta Cahill
    • security screen

      update your java to the latest version and the screen you seek should be there. Then disable it.
      michael56555@...
      • Screenshots are different

        Like Loretta I too have the same layout.

        Java says that I am up to date (2 days old).
        imaginarynumber
    • disable in IE

      Hi Loretta

      I guess that you can just disable it in IE

      TOOLS>MANAGE ADD ONS

      look for the JAVA plugin
      imaginarynumber
      • ignore my bad advice

        Sorry the IE plugin is only the JAVA helper plug in and has little do do with JAVA apps running....
        imaginarynumber