The Hardware Connection Risk
Google Chrome supports a standard known as the WebUSB API. This powerful feature allows websites (with your explicit permission) to directly connect to and communicate with USB devices plugged into your computer. This was designed for specialized tasks, such as allowing a browser-based application to update the firmware on a custom keyboard, interact with a 3D printer, or communicate with a hardware security key.
While Chrome will always prompt you before granting a website access to your USB ports, the very existence of this feature poses a security risk. Malicious websites can spam you with connection requests, hoping you accidentally click “Allow,” which could then give the site direct, low-level access to your connected hardware. If you do not use specialized web-based hardware tools, you should completely revoke Chrome’s ability to even ask for USB access.
How to Block WebUSB Requests
You can stop websites from requesting USB access in the Site Settings menu.
- Open Google Chrome.
- Click the Three Vertical Dots (Menu) in the top right corner and select Settings.
- In the left-hand sidebar, click on Privacy and security.
- In the main window, click on Site settings.
- Scroll down to the Permissions section and click to expand Additional permissions.
- Click on USB devices.
- You will see a setting that defaults to “Sites can ask to connect to USB devices.”
- Change this selection to “Don’t allow sites to connect to USB devices.”
Chrome is now securely locked down against WebUSB requests. Websites will be instantly denied if they attempt to scan or connect to your local USB hardware, and you will never be bothered by a connection prompt again.