Security Guides

How to clear browsing history, cookies and saved passwords (Chrome, Safari, Edge, Firefox on computer and phone): what to delete after a leak, and what to keep first

How to delete browsing history, cookies, cache and saved passwords in Chrome, Safari, Edge and Firefox on computer and phone, based on official help pages. Also covers what deleting cannot undo after a leak or threat, what evidence to keep first, and how sync affects deletion.

Published 2026-10-26 Updated 2026-10-26 Last verified 2026-10-26 18 min read
On this page

Who this is for: anyone who wants to delete browsing history, cookies or saved passwords, especially after a data leak or a threat that uses their browsing history. The steps follow each vendor's official help (checked on October 26, 2026). Attack methods are not covered.

What changes when you delete each item

The "delete browsing data" screen lists items that behave very differently. Knowing what each one changes, and what it does not, helps you delete in the right order.

Browsing history

Changes: the list of visited sites on this device (and synced devices) is removed

Does not change: copied history, records kept by sites or networks

Cookies and site data

Changes: you may be signed out of many sites on this device

Does not change: a sign-in someone else took (sign it out on the service)

Cache

Changes: temporary copies such as page images are removed; pages load a little slower next time

Does not change: sign-in state or passwords

Saved passwords

Changes: no longer filled in on this device and synced devices

Does not change: a leaked password (it works until you change it on the site)

Autofill

Changes: suggestions such as addresses and phone numbers are removed

Does not change: personal data already copied

Main items you can delete in a browser and their effect (a general summary by this site). Deleting any of them does not remove copies someone else already has.

After a leak, the items that matter most are cookies and saved passwords. Neither works by deleting your local copy alone; they only help when combined with signing out on the service side and changing passwords.

What to keep before you delete

If you plan to report a threat or unauthorized access to the police, keep the following before deleting browser data. This is this site's general advice.

1

Keep the threatening email and take screenshots

Do not delete the email or move it to spam. Take screenshots showing the sender, date, body and list of attachments. Do not open links or attachments in the email, and do not reply. Paying or replying does not guarantee that the sender will delete what they hold.

2

Record the list of suspicious extensions

Record the names of extensions you do not recognise, with a screenshot, in Extensions (Chrome and Edge) or Add-ons and themes (Firefox), then remove them (labels vary by version). An extension you did not install may be able to read your browsing history and page content.

3

Record unfamiliar sign-ins and transactions

Screenshot each service's sign-in history, transaction history and notification emails about actions you did not take, with dates visible. How to find them is covered in how to check whether your account has been accessed.

4

Contact the police cybercrime desk

In Japan, the National Police Agency's cyber incident consultation page (Japanese) lists the prefectural police consultation desks and a nationwide online reporting form. Outside Japan, contact your local police. If there is a risk to someone's life, call emergency services.

If someone threatens you with your browsing history

Even if the history they send looks real, you do not need to meet their demands. If they say they will send it to your family or friends, still do not reply or pay; keep the email and contact the police. Avoid opening URLs or files they point to in order to check what they claim to have (this site's advice).

Where to find the delete screen in each browser

Labels follow each vendor's official help. Screen names may change with app updates and display language.

BrowserWhere to open "delete browsing data"ShortcutWhere saved passwords are
Chrome (Windows, Mac)More (top right) > Delete browsing dataWindows: Ctrl+Shift+Delete / Mac: ⌘+Shift+DeletePasswords and autofill > Google Password Manager
Chrome (Android)More (right of the address bar) > Delete browsing dataNoneGoogle Password Manager
Chrome (iPhone, iPad)More > Delete Browsing DataNoneGoogle Password Manager
Safari (Mac)History: History > Clear History / Cookies: Safari > Settings > Privacy > Manage Website DataNot listed in official helpPasswords app
Safari (iPhone)Settings > Apps > Safari > Clear History and Website DataNonePasswords app
Safari (iPad)Safari sidebar > History > ClearNonePasswords app
Edge (Windows)Settings and more > Settings > Privacy, search, and services > Clear browsing dataWindows: Ctrl+Shift+DeletePasswords and autofill > Microsoft Password Manager
Firefox (Windows, Mac)Menu button > History > Clear Recent HistoryWindows: Ctrl+Shift+Del / Mac: ⌘+Shift+DeleteMenu button > Passwords

Chrome on computer (Windows, Mac) and phone

If you are signed in to Chrome with sync, deletion also reaches your other devices and your Google Account. Google says that if you delete this data while signed in, Chrome removes it from your other devices and your Google Account.

1

Computer: delete history, cookies and cache

From More (the three vertical dots) at the top right, select Delete browsing data. You can also open it with Ctrl+Shift+Delete on Windows or ⌘+Shift+Delete on Mac. Set the time range to All time, select Cookies and other site data plus any other items you want to remove (browsing history, cached images and files, autofill data and so on), then select Delete data (item labels vary by version).

2

Computer: delete saved passwords

Deleting browsing data does not delete saved passwords. Go to More > Passwords and autofill > Google Password Manager, select a password and select Delete. To remove everything, select Settings on the left, then Delete data next to "Delete all Google Password Manager data", then Delete. This also removes passkeys and other Password Manager data.

3

Android: delete browsing data

Tap More to the right of the address bar, then Delete browsing data. The default duration is 15 minutes, so choose a longer range. To pick specific data types, tap More options, then tap Delete data. Google says that if you delete cookies while signed in to Chrome, you won't be signed out of your Google Account.

4

iPhone and iPad: delete browsing data

Tap More, then Delete Browsing Data. The default time range is 15 minutes. In the popup, choose a duration next to Time Range, tap Browsing Data to pick the types to remove, tap Confirm, then tap Delete Browsing Data (labels vary by version).

Safari on Mac, iPhone and iPad

Safari separates clearing history from removing cookies (website data). Apple says that if your Mac and other Apple devices have iCloud set up for Safari, your browsing history is removed from all of them.

1

Mac: clear browsing history

Choose History > Clear History in the menu bar, then use the pop-up menu to choose how far back to clear. Apple says this does not clear histories that websites keep on their own, and downloaded files stay on your Mac.

2

Mac: clear cookies and cache

Choose Safari > Settings > Privacy > Manage Website Data, select sites and click Remove, or click Remove All. Apple says this may sign you out of websites.

3

iPhone: clear history, cookies and cache

Go to Settings > Apps > Safari > Clear History and Website Data, confirm the timeframe and tap Clear History. To keep history and clear only cookies and cache, go to Safari > Advanced > Website Data > Remove All Website Data > Remove Now. Apple says clearing history does not change your AutoFill information.

4

iPad: clear history and cookies

In Safari, open the sidebar, tap History, tap More, then Clear. Under Clear Timeframe, choose how far back to clear and tap Clear History. Apple says this also removes cookies and permissions you granted to websites. If you use Safari profiles, choose All Profiles; otherwise only the selected profile's history is cleared.

5

iPhone, iPad and Mac: delete saved passwords

Open the Passwords app, tap All, choose the account, tap Edit, then Delete, and confirm (labels vary by version). Apple says this removes the password from your iPhone and iCloud Keychain, but does not remove it from the website or app where you created it. On a Mac, use the Passwords app (or System Settings on some macOS versions).

Edge on Windows

1

Delete browsing data

Select Settings and more (the three dots at the top right) > Settings > Privacy, search, and services > Clear browsing data, then Choose what to clear next to "Clear browsing data now". Pick the longest option in the Time range menu (labels vary by version), select from Browsing history, Cookies and other site data, Cached images and files, Passwords, Autofill form data and others, then select Clear now. Microsoft's list of Edge keyboard shortcuts gives Ctrl+Shift+Delete to open the clear browsing data options.

2

Decide how to handle sync

Microsoft says items that are synced will be cleared across all synced devices. To clear data only on the current device, first turn sync off under Settings > Profiles > Sync (labels vary by version).

3

Check saved passwords

Go to Settings > Passwords and autofill > Microsoft Password Manager to see which sites have saved passwords. Microsoft notes that changing a password in Edge does not change it on the website.

Firefox on Windows and Mac

1

Delete history, cookies and cache

Select the menu button > History > Clear Recent History (Ctrl+Shift+Del on Windows, ⌘+Shift+Delete on Mac). In the When drop-down, choose Everything, check Cookies and site data, cache and any other items you want removed, then click Clear.

2

Delete saved passwords

Select the menu button > Passwords to open your saved logins. Select an entry and click Remove, or choose Remove All Passwords from the three-dot menu at the top right.

History kept outside the browser

Some records remain elsewhere after you clear the browser. Check these too if needed.

Records that browser deletion does not touch
Google My Activity
Activity saved in your Google Account. At myactivity.google.com, click Delete at the top, then All time > Next > Delete. Google notes that activity may still be saved in your browser after you delete it there
Microsoft privacy dashboard
If you turn on browsing history sync in Edge, among other settings, browsing history is saved to your Microsoft account. You can view and clear it at account.microsoft.com/privacy. Deleting it there does not delete it from your device (Microsoft)
Records kept by websites
Histories that websites keep on their own are not cleared by the browser (Apple)
Network records
Records on company or school network equipment and at your internet provider are not removed by clearing the device (general explanation)
Copies already taken
Nothing you delete can take back data someone has already obtained

Sign out of all devices on your main accounts

Deleting your own cookies affects sign-ins only on that device. If you suspect someone took your sign-in state, remove other devices and sessions on the service side, then change your password. Do this from a separate device you have no reason to suspect.

1

Google Account

Go to Google Account > Security & sign-in > Your devices > Manage all devices, select any device you do not recognise and select Sign out.

2

Microsoft account

On your account's security dashboard, open Advanced security options and select Sign out under "Sign out everywhere". Microsoft says this can take up to 24 hours, and Xbox consoles must be signed out separately.

3

Apple Account

On iPhone, go to Settings > your name, select any unfamiliar device in the device list and tap Remove from Account. Then change your password from a trusted device.

4

Other services and password changes

For important services such as brokers, banks and email, check signed-in devices, sign them out and change the password. Someone who knows your password can sign in again after being signed out. Service-by-service screens are covered in how to check for unauthorized access. Also set up multi-factor authentication.

This site's view: use saved passwords as your list of passwords to change before deleting them

If you delete all saved passwords first when you suspect a leak, you lose track of which sites need new passwords. The order this site recommends:

  1. Keep evidence
  2. Check the device and remove suspicious extensions
  3. From a separate, safe device, change passwords for the sites in your saved list, most important first, and sign out of all sessions
  4. Finally, delete cookies and saved passwords in the browser

Exporting the list with passwords to a file creates a new leak risk, so avoid it. Once you are done, moving to a password manager is an option.

Decide what to do about sync before you delete

Sync is convenient, but it spreads deletion and compromise to your other devices.

  • To delete from all devices at once, delete with sync on (Chrome, Edge and Safari each say deletion also reaches synced devices)
  • To delete only on the current device, turn sync off first
  • If you suspect a takeover or malicious software, keep sync off until your device check is done. Turning sync on from a device that has not been checked may spread that device's data and settings to your other devices (this site's explanation)

The case that prompted this guide: Onamae.com Desktop Cloud

In October 2026, GMO Internet, Inc. announced that it had confirmed customer information was taken out in unauthorized access to Onamae.com Desktop Cloud (fourth notice, October 24). TV Asahi (ANN) reported on October 26 that customers received emails from a sender believed to be the attacker, with part of their browsing history attached as proof that the data is held. The attacker side has also reportedly threatened to send browsing history and other data to acquaintances and family.

Where that browsing history came from has not been disclosed. The attacker side reportedly claims to have accessed data on customers' PCs (ANN), but the company's notices have not confirmed this claim. In its sixth notice (Japanese) of October 26, the company asks customers to fully scan the devices they used to connect, log out of all devices and sessions, and remove linked apps, forwarding settings, extensions and registered devices they do not recognise, and not to turn browser sync on until their check is complete.

The background and what customers should do are covered in unauthorized access to Onamae.com Desktop Cloud.

All time
The range to choose to delete everything. Chrome on phones defaults to 15 minutes
Synced too
With sync on, deletion reaches your other devices (Chrome, Edge, Safari)
Not undone
History already copied cannot be taken back by deleting
Up to 24 h
For Microsoft's Sign out everywhere to take effect

Sources

All vendor help pages were checked on October 26, 2026. Labels may change with app updates and display language.

  • Google Chrome Help, "Delete browsing data in Chrome" (Computer) — support.google.com
  • Google Chrome Help, "Delete browsing data in Chrome" (Android) — support.google.com
  • Google Chrome Help, "Delete browsing data in Chrome" (iPhone and iPad) — support.google.com
  • Google Chrome Help, "Chrome keyboard shortcuts" — support.google.com
  • Google Chrome Help, "Manage passwords in Chrome" (Computer) — support.google.com
  • Google Account Help, "Delete your activity" — support.google.com
  • Google Account Help, "See devices with account access" — support.google.com
  • Apple Support, "Clear your browsing history in Safari on Mac" — support.apple.com
  • Apple Support, "Clear your cache and cookies in Safari on Mac" — support.apple.com
  • Apple Support, "Delete your Safari history, cache, and cookies on iPhone" — support.apple.com
  • Apple Support, "Clear your cache and cookies on iPad" — support.apple.com
  • Apple Support, "Remove a password from your iPhone and iCloud Keychain" — support.apple.com
  • Apple Support, "Review devices signed in to your Apple Account" — support.apple.com
  • Microsoft Support, "View and delete browser history in Microsoft Edge" — support.microsoft.com
  • Microsoft Support, "Keyboard shortcuts in Microsoft Edge" — support.microsoft.com
  • Microsoft Support, "View or edit your passwords in Microsoft Password Manager" — support.microsoft.com
  • Microsoft Support, "Browsing history on the privacy dashboard" — support.microsoft.com
  • Microsoft Support, "How to sign out of your Microsoft account everywhere" — support.microsoft.com
  • Mozilla Support, "Delete browsing, search and download history on Firefox" — support.mozilla.org
  • Mozilla Support, "Password Manager - Remember, delete and edit logins and passwords in Firefox" — support.mozilla.org
  • Mozilla Support, "Keyboard shortcuts - Perform common Firefox tasks quickly" — support.mozilla.org
  • National Police Agency (Japan), "サイバー事案に関する相談窓口" (cyber incident consultation desks, Japanese) — npa.go.jp
  • GMO Internet, Inc., "「お名前.com デスクトップクラウド」ご利用のお客様へ改めてのお願い(第6報)" (October 26, 2026, as of 19:00, Japanese) — internet.gmo
  • GMO Internet, Inc., fourth notice on the cyberattack on Onamae.com Desktop Cloud (October 24, 2026, Japanese) — internet.gmo
  • TV Asahi (ANN), report on emails from the attacker side reaching customers (October 26, 2026, Japanese) — news.yahoo.co.jp

Update history

2026-10-26: First version, based on the official help for Chrome, Safari, Edge and Firefox (checked on October 26, 2026) and GMO Internet's sixth notice.

FAQ

QIf I clear my browsing history, does the history in a threatening email disappear too?
A

No. Clearing browsing history only removes the records left on that device (and synced devices). It cannot reach anything someone has already copied. Apple also says that clearing history in Safari does not clear histories that websites keep on their own. If you receive a threatening email, do not reply or pay; keep the email and contact the police (this site's advice).

QWhat happens when I delete cookies?
A

You may be signed out of many websites on that device. Apple says removing cookies and website data may sign you out of websites. On the other hand, Google says that if you delete cookies on Android while signed in to Chrome, you won't be signed out of your Google Account. Deleting your own cookies does not necessarily end a sign-in that someone else has taken, so also sign out of all sessions and change your password on each service.

QWhat happens if I clear browsing history with sync turned on?
A

It is also removed from your other synced devices on the same account. Google says that if you delete this data while signed in, Chrome removes it from your other devices and your Google Account. Microsoft says items that are synced will be cleared across all synced devices in Edge. Apple says that if Safari is set up with iCloud on your Mac and other Apple devices, history is removed from all of them. To clear only the current device, turn sync off first.

QShould I delete my saved passwords?
A

If you suspect a leak, first use the list of saved sites to change each password from a safe device, before deleting anything. Deleting saved passwords from the browser does not stop a leaked password from working until you change it on the site. Once you have changed them, decide whether to keep using the browser or move to a dedicated password manager (this site's advice). Avoid exporting the list with passwords to a file.

QDo I also need to delete Google My Activity?
A

It is a separate place from your browser history, so check both if needed. Google notes that activity can still be saved in your browser after you delete it from My Activity. Microsoft also says data you delete on the privacy dashboard won't be deleted from your device.

QDoes clearing browsing history hide it from my employer or internet provider?
A

No. Browser deletion removes records inside the device. It does not remove records kept by company network equipment, your internet provider or the sites you visited (general explanation). How records on work devices and networks are handled is set by your employer's policies.

QHow do I clear all browsing history on my phone?
A

In Chrome for Android and iPhone, the default time range is 15 minutes (Google Help). To delete everything, change the range to the all-time option before deleting. In Safari on iPhone, go to Settings > Apps > Safari > Clear History and Website Data and choose the timeframe. Labels vary by version.