Google: We'll give you better malware protection in Chrome, but only if you sign in

After last week expanding the Gmail Advanced Protection Program for high-risk G Suite users, Google is now bringing some anti-malware features of the program to Chrome. 

While the Gmail Advanced Protection Program requires that users employ a hardware security key like Google's Titan, the additional anti-malware protections for Chrome will require them to log in to Google's browser account system, called Sync.   

The company angered some Chrome users last year by rolling out an unannounced feature that automatically logged users in to Chrome's account system if they were already logged into a Google service like Gmail. 

SEE: How to build a successful developer career (free PDF)

Being logged into Chrome sends web browsing history to Google's servers, allowing it to sync web history, passwords and settings across multiple devices. Enabling sync also automatically signs users into all Google services they visit, including YouTube and Search.   

The new Advanced Protection offering appears to give users the choice of trading some privacy for extra security. 

Once logged in, Google says, "Chrome will automatically start receiving stronger protections against risky downloads across the web, like files containing malware."

The company argues that because Advanced Protection offers higher protection to Gmail users, "attackers are shifting their strategies to threaten Advanced Protection users outside email with linked malware and 'drive-by downloads' where users unknowingly download harmful software onto their devices".

Chrome already has a bunch of built-in anti-malware features, including Safe Browsing, an ESET-powered malware cleanup feature, and in March it added new protections to block file downloads from within sandboxed iframes, cutting off a key technique used to automatically install malware on computers from the web. 

But Google says that "Advanced Protection users will get an even stronger level of protection" in Chrome.

The next time Chrome with sync enabled runs into a potentially nasty executable on the web, users may see a message in the bottom corner of the browser that a file was "blocked by Advanced Protection". 

The Advanced Protection Program for G Suite announced last week caters to G Suite admins who previously didn't have control over who was enrolled in the program. 

Admins can now nominate groups of specific high-risk users and require them to use a security key as well as create a whitelist of apps that are allowed to access their users' Gmail data.

More on Google, Gmail, Chrome, and security

• Google: High-risk G Suite users now get same advanced security we use in-house
• Google's new Gmail security: If you're a high-value target, you'll use physical keys  
  
• Google to remove Chrome's built-in XSS protection (XSS Auditor)
• Half of all GoogleChrome extensions have fewer than 16 installs
• Google brings the Titan Security Key to more countries
  
• Use Gmail at work? Now you get security sandbox to fight 0-day threats, ransomware
• Google says it stored some G Suite passwords in unhashed form for 14 years
• Google brings Cloud Security Command Center into GA, adds new services
• Office 365 vs G Suite: Which productivity suite is best for your business
• The difference between Gmail, a Google Account, and G Suite accounts TechRepublic
• Gmail confidential mode for G Suite launching in June CNET