The Hidden Payload
When you click a download link on a website, Google Chrome initiates the transfer. However, some malicious websites employ a tactic called “drive-by downloading.” When you click a single link, the website’s background script attempts to force Chrome to download 10 or 15 separate files simultaneously in rapid succession. While one file might be the PDF you requested, the other nine are hidden malware executables attempting to sneak onto your hard drive. To protect your file system from this aggressive shotgun approach, you must explicitly forbid Chrome from processing automatic, sequential downloads.
How to Block Automatic Downloads Globally
You can permanently lock the browser to a strict one-file-per-click policy via the Site Settings.
- Open the Google Chrome desktop browser.
- Click the three vertical dots (⋮) in the top right corner and select Settings.
- In the left-hand sidebar, click on Privacy and security.
- In the main window, click on Site settings.
- Scroll down to the “Content” heading and click to expand Additional permissions.
- Click on Automatic downloads.
- Under the “Default behavior” heading, select the radio button for “Don’t allow sites to automatically download multiple files.”
Strict Download Consent
The change takes effect instantly. Google Chrome will completely lock its download manager API. If a website attempts to initiate a second download without you explicitly clicking a second physical link, the browser will instantly block the transfer and throw a warning icon in the address bar. You are now guaranteed that clicking a single download button will only ever result in a single file landing in your Downloads folder, completely neutralizing drive-by malware attacks.