Modern web browsers have evolved into full-fledged operating systems, capable of interacting directly with your physical hardware. Google Chrome supports an API known as WebUSB, which allows certain websites to communicate directly with hardware plugged into your USB ports. For example, a cryptocurrency hardware wallet manufacturer might use a web portal that asks to connect directly to your physical USB wallet to verify your keys.
While this is incredibly convenient, it is a massive security risk. Malicious websites can abuse this API to scan your USB ports, attempting to pull data from connected external hard drives, webcams, or security keys. Even if the attack fails, you might constantly receive annoying pop-ups near your address bar asking, “[Website] wants to connect to a USB device.” If you value your privacy and security, and have no intention of letting random websites talk to your physical hardware, you should completely disable the WebUSB API.
Disabling WebUSB via Chrome Site Settings
You can globally revoke USB access permissions for all websites directly from Chrome’s advanced privacy menus.
- Open the Google Chrome web browser.
- Look at the top-right corner of the window and click the three vertical dots (the menu button).
- Select Settings from the dropdown menu.
- In the left-hand navigation sidebar, click on Privacy and security.
- In the main panel, click on Site settings.
- Scroll down the page and click to expand the section labelled Additional permissions.
- Look through the expanded list and click on USB devices.
- Under the “Default behavior” section, you will likely see that it is set to “Sites can ask to connect to USB devices.”
- Select the radio button next to Don’t allow sites to connect to USB devices.
From now on, Chrome will automatically and silently block all WebUSB connection attempts. Malicious websites will receive an instant “access denied” signal from your browser without ever bothering you with a pop-up prompt, ensuring your physical hardware remains safely isolated from the internet.