How to Automatically Revoke Permissions from Unused Sites in Google Chrome

Modern web applications regularly request access to hardware sensors, precise geographic coordinates, and peripheral devices to deliver real-time features. While granting a video conferencing platform access to your webcam or allowing a delivery service to read your geolocation is essential during active use, persistent permissions represent a long-term privacy and security liability. Abandoned tabs, forgotten shopping platforms, and services you only used once continue to retain valid access tokens unless manually purged. Google Chrome features an automated background audit mechanism within its Safety Check engine that detects dormant origins and automatically revokes sensitive hardware permissions after an extended period of inactivity.

How Chrome Safety Check Tracks Dormant Origins

Google Chrome continuously monitors website interaction timelines across your desktop browser profile. When a web application that holds elevated permissions—such as access to your camera, microphone, device location, background synchronisation, or desktop notifications—remains unvisited for several months, Chrome flags the origin as dormant. Rather than leaving the access pipe open indefinitely, the browser strips the granted entitlements and reverts the domain to its default, prompt-on-demand state.

This automated revocation operates on the principle of least privilege. If you navigate back to the website in the future, the application will simply display the standard permission prompt again, ensuring that hardware access requires explicit, active consent rather than relying on historical authorisations.

Enabling Automatic Permission Revocation in Chrome Settings

Automatic permission revocation is managed through Chrome’s centralised Privacy and Security controls. To verify or activate this capability across your desktop browser:

1. Launch Google Chrome on your computer.
2. Click the Customise and control Google Chrome menu (represented by three vertical dots) in the upper-right corner of the browser window.
3. Select Settings from the drop-down menu, or type chrome://settings directly into the address bar and press Enter.
4. In the left-hand navigation sidebar, click Privacy and security.
5. Select Site settings from the central menu.
6. Scroll down to the Permissions section and locate the Automatically revoke permissions from unused sites toggle.
7. Ensure the toggle switch is set to the On position. When activated, Chrome displays a confirmation label indicating that permissions for sites you haven’t visited recently will be removed automatically.

Reviewing and Restoring Revoked Permissions

Whenever Chrome strips permissions from an inactive site, it does not discard the action silently. Instead, the browser logs the revocation inside the Safety Check dashboard, allowing you to review affected origins and restore entitlements if necessary:

1. Navigate to chrome://settings/privacy in your browser address bar.
2. Locate the Safety check module at the top of the panel.
3. If permissions have recently been revoked, Chrome presents an alert stating: “Permissions removed from unused sites” alongside a count of affected domains.
4. Click on the alert card to view the comprehensive breakdown. Each entry specifies the exact website URL and the specific hardware access types that were removed (such as microphone, camera, or notifications).
5. If you frequently use a specific domain and prefer that Chrome never automatically strips its authorisations, click the Reapply permissions icon or choose Keep permissions to place the domain on an exclusion list.

Managing Specific Site Exceptions Manually

While the automated revocation engine protects everyday users against forgotten tracking privileges, you may want to immediately revoke permissions from a suspicious or newly discontinued website without waiting for the inactivity threshold to elapse. You can manage domain-specific privileges directly from the active tab:

1. Navigate to the target website in Google Chrome.
2. Click the View site information icon (represented by two horizontal sliders or a tune symbol) located on the left side of the address bar, immediately preceding the HTTPS URL.
3. A contextual flyout menu appears displaying all permissions currently granted to that specific domain.
4. Click the toggle switch next to any individual permission—such as Camera, Microphone, or Location—to turn it off instantly.
5. Alternatively, click Reset permissions to clear all custom authorisations and cookies associated with the active session in a single click.

Combining automated Safety Check sweeps with proactive manual permission reviews ensures your webcam, microphone, and sensitive system telemetry remain accessible strictly to websites you actively use and trust.