How Android 16’s Advanced Protection secures Chrome

With Android 16, users can enable Advanced Protection to “activate Google’s strongest security for mobile devices.” The Chrome for Android team has now detailed how Advanced Protection works.

There are three main Advanced Protection features in Chrome 137+ on Android 16, starting with “Always use secure connections” — or HTTPS — being enabled. Before connecting to an insecure (HTTP) site, Chrome asks for explicit permission before loading. 

This setting can be enabled independently of Advanced Protection from Chrome Settings > Privacy and security > Always use secure connection. 

The next feature disables the “higher-level optimizing Javascript compilers inside V8.” 

Advertisement - scroll for more content

This prevents a large category of exploits, but at the expense of “causing performance issues for some websites.” You can also enable this independent of Advanced Protection from Settings > Privacy and security > Javascript optimization & security, with the ability to add per-site exceptions if pages you frequently are heavily impacted.

Finally, Advanced Protection enables Site Isolation wherein Chrome “isolates each website into its own rendering OS process” in memory. 

Desktop Chrome enables Site Isolation by default, but mobile Android devices have memory constraints. Without Advanced Protection, “Chrome will only isolate a site if a user logs into that site, or if the user submits a form on that site.” 

Advanced Protection isolates all sites on devices with 4+ GB of RAM.