Secure Your Web Browser for Security & Privacy

Web browser default settings are designed to be secure. However, you may want to take additional precautions to protect your privacy and enhance security. We recommend that you familiarize yourself with web browser security and privacy settings and make use of those most appropriate for you.

Note: Some browser settings may interfere with the functioning of some systems via the web. Some systems work better with particular web browsers—and even particular versions of those browsers— than others. To find out which browsers, versions, and settings work best with systems provided by ITS, see ITS Web Browser and Desktop Operating System Support.

General Recommendations

  • Keep your browser software up-to-date.
  • Review your browser's security settings and preferences.
  • If you do not need pop-ups, disable them or install software that will prevent pop-up windows. Pop-ups can be used to run malicious software on your computer.
Note: Many ITS administrative systems, as well as general websites, require pop-ups for all features to work correctly. Depending on the systems and services you access, you may need to have pop-ups enabled.

Pay Attention to Plug-ins

Install browser add-ons, plug-ins, toolbars, and extensions with care. Browser add-ons allow code to run on your computer and can pose risks to privacy, and data and device security. 

  • Research the publisher and only install an add-on, plug-in, or extension from a reputable source. Most reputable add-ons are endorsed by the browser(s) that they can be used with. Some add-ons may appear to be a part of a U-M application, when they are a third-party software gaining access to your information (e.g. CourseLynx is not part of Canvas).
  • Be cautious of the permissions you grant to plugins. When you install plugins and give them permissions, you authorize them to access data and take action on your behalf in all web-based services. For example, if you authorize a plugin to "read and change all your data on all websites" it gives the plugin full access to your keystrokes, your browser session credentials, and the ability to control what you see in the browser. Keep in mind that plugins remain active during all of your web browsing, not just when you are using the site for which you installed it.
  • Enable automatic updates to add-ons, plug-ins and extensions to ensure that they have up-to-date protection against potential security threats.
  • Remove plug-ins you are no longer using.

For a list of privacy-protecting tools, see Protect Your Privacy.