Who this is for: anyone who wants to delete browsing history, cookies or saved passwords, especially after a data leak or a threat that uses their browsing history. The steps follow each vendor's official help (checked on October 26, 2026). Attack methods are not covered.
What changes when you delete each item
The "delete browsing data" screen lists items that behave very differently. Knowing what each one changes, and what it does not, helps you delete in the right order.
Browsing history
Changes: the list of visited sites on this device (and synced devices) is removed
Does not change: copied history, records kept by sites or networks
Cookies and site data
Changes: you may be signed out of many sites on this device
Does not change: a sign-in someone else took (sign it out on the service)
Cache
Changes: temporary copies such as page images are removed; pages load a little slower next time
Does not change: sign-in state or passwords
Saved passwords
Changes: no longer filled in on this device and synced devices
Does not change: a leaked password (it works until you change it on the site)
Autofill
Changes: suggestions such as addresses and phone numbers are removed
Does not change: personal data already copied
After a leak, the items that matter most are cookies and saved passwords. Neither works by deleting your local copy alone; they only help when combined with signing out on the service side and changing passwords.
What to keep before you delete
If you plan to report a threat or unauthorized access to the police, keep the following before deleting browser data. This is this site's general advice.
Keep the threatening email and take screenshots
Do not delete the email or move it to spam. Take screenshots showing the sender, date, body and list of attachments. Do not open links or attachments in the email, and do not reply. Paying or replying does not guarantee that the sender will delete what they hold.
Record the list of suspicious extensions
Record the names of extensions you do not recognise, with a screenshot, in Extensions (Chrome and Edge) or Add-ons and themes (Firefox), then remove them (labels vary by version). An extension you did not install may be able to read your browsing history and page content.
Record unfamiliar sign-ins and transactions
Screenshot each service's sign-in history, transaction history and notification emails about actions you did not take, with dates visible. How to find them is covered in how to check whether your account has been accessed.
Contact the police cybercrime desk
In Japan, the National Police Agency's cyber incident consultation page (Japanese) lists the prefectural police consultation desks and a nationwide online reporting form. Outside Japan, contact your local police. If there is a risk to someone's life, call emergency services.
If someone threatens you with your browsing history
Even if the history they send looks real, you do not need to meet their demands. If they say they will send it to your family or friends, still do not reply or pay; keep the email and contact the police. Avoid opening URLs or files they point to in order to check what they claim to have (this site's advice).
Where to find the delete screen in each browser
Labels follow each vendor's official help. Screen names may change with app updates and display language.
| Browser | Where to open "delete browsing data" | Shortcut | Where saved passwords are |
|---|---|---|---|
| Chrome (Windows, Mac) | More (top right) > Delete browsing data | Windows: Ctrl+Shift+Delete / Mac: ⌘+Shift+Delete | Passwords and autofill > Google Password Manager |
| Chrome (Android) | More (right of the address bar) > Delete browsing data | None | Google Password Manager |
| Chrome (iPhone, iPad) | More > Delete Browsing Data | None | Google Password Manager |
| Safari (Mac) | History: History > Clear History / Cookies: Safari > Settings > Privacy > Manage Website Data | Not listed in official help | Passwords app |
| Safari (iPhone) | Settings > Apps > Safari > Clear History and Website Data | None | Passwords app |
| Safari (iPad) | Safari sidebar > History > Clear | None | Passwords app |
| Edge (Windows) | Settings and more > Settings > Privacy, search, and services > Clear browsing data | Windows: Ctrl+Shift+Delete | Passwords and autofill > Microsoft Password Manager |
| Firefox (Windows, Mac) | Menu button > History > Clear Recent History | Windows: Ctrl+Shift+Del / Mac: ⌘+Shift+Delete | Menu button > Passwords |
Chrome on computer (Windows, Mac) and phone
If you are signed in to Chrome with sync, deletion also reaches your other devices and your Google Account. Google says that if you delete this data while signed in, Chrome removes it from your other devices and your Google Account.
Computer: delete history, cookies and cache
From More (the three vertical dots) at the top right, select Delete browsing data. You can also open it with Ctrl+Shift+Delete on Windows or ⌘+Shift+Delete on Mac. Set the time range to All time, select Cookies and other site data plus any other items you want to remove (browsing history, cached images and files, autofill data and so on), then select Delete data (item labels vary by version).
Computer: delete saved passwords
Deleting browsing data does not delete saved passwords. Go to More > Passwords and autofill > Google Password Manager, select a password and select Delete. To remove everything, select Settings on the left, then Delete data next to "Delete all Google Password Manager data", then Delete. This also removes passkeys and other Password Manager data.
Android: delete browsing data
Tap More to the right of the address bar, then Delete browsing data. The default duration is 15 minutes, so choose a longer range. To pick specific data types, tap More options, then tap Delete data. Google says that if you delete cookies while signed in to Chrome, you won't be signed out of your Google Account.
iPhone and iPad: delete browsing data
Tap More, then Delete Browsing Data. The default time range is 15 minutes. In the popup, choose a duration next to Time Range, tap Browsing Data to pick the types to remove, tap Confirm, then tap Delete Browsing Data (labels vary by version).
Safari on Mac, iPhone and iPad
Safari separates clearing history from removing cookies (website data). Apple says that if your Mac and other Apple devices have iCloud set up for Safari, your browsing history is removed from all of them.
Mac: clear browsing history
Choose History > Clear History in the menu bar, then use the pop-up menu to choose how far back to clear. Apple says this does not clear histories that websites keep on their own, and downloaded files stay on your Mac.
Mac: clear cookies and cache
Choose Safari > Settings > Privacy > Manage Website Data, select sites and click Remove, or click Remove All. Apple says this may sign you out of websites.
iPhone: clear history, cookies and cache
Go to Settings > Apps > Safari > Clear History and Website Data, confirm the timeframe and tap Clear History. To keep history and clear only cookies and cache, go to Safari > Advanced > Website Data > Remove All Website Data > Remove Now. Apple says clearing history does not change your AutoFill information.
iPad: clear history and cookies
In Safari, open the sidebar, tap History, tap More, then Clear. Under Clear Timeframe, choose how far back to clear and tap Clear History. Apple says this also removes cookies and permissions you granted to websites. If you use Safari profiles, choose All Profiles; otherwise only the selected profile's history is cleared.
iPhone, iPad and Mac: delete saved passwords
Open the Passwords app, tap All, choose the account, tap Edit, then Delete, and confirm (labels vary by version). Apple says this removes the password from your iPhone and iCloud Keychain, but does not remove it from the website or app where you created it. On a Mac, use the Passwords app (or System Settings on some macOS versions).
Edge on Windows
Delete browsing data
Select Settings and more (the three dots at the top right) > Settings > Privacy, search, and services > Clear browsing data, then Choose what to clear next to "Clear browsing data now". Pick the longest option in the Time range menu (labels vary by version), select from Browsing history, Cookies and other site data, Cached images and files, Passwords, Autofill form data and others, then select Clear now. Microsoft's list of Edge keyboard shortcuts gives Ctrl+Shift+Delete to open the clear browsing data options.
Decide how to handle sync
Microsoft says items that are synced will be cleared across all synced devices. To clear data only on the current device, first turn sync off under Settings > Profiles > Sync (labels vary by version).
Check saved passwords
Go to Settings > Passwords and autofill > Microsoft Password Manager to see which sites have saved passwords. Microsoft notes that changing a password in Edge does not change it on the website.
Firefox on Windows and Mac
Delete history, cookies and cache
Select the menu button > History > Clear Recent History (Ctrl+Shift+Del on Windows, ⌘+Shift+Delete on Mac). In the When drop-down, choose Everything, check Cookies and site data, cache and any other items you want removed, then click Clear.
Delete saved passwords
Select the menu button > Passwords to open your saved logins. Select an entry and click Remove, or choose Remove All Passwords from the three-dot menu at the top right.
History kept outside the browser
Some records remain elsewhere after you clear the browser. Check these too if needed.
- Google My Activity
- Activity saved in your Google Account. At myactivity.google.com, click Delete at the top, then All time > Next > Delete. Google notes that activity may still be saved in your browser after you delete it there
- Microsoft privacy dashboard
- If you turn on browsing history sync in Edge, among other settings, browsing history is saved to your Microsoft account. You can view and clear it at account.microsoft.com/privacy. Deleting it there does not delete it from your device (Microsoft)
- Records kept by websites
- Histories that websites keep on their own are not cleared by the browser (Apple)
- Network records
- Records on company or school network equipment and at your internet provider are not removed by clearing the device (general explanation)
- Copies already taken
- Nothing you delete can take back data someone has already obtained
Sign out of all devices on your main accounts
Deleting your own cookies affects sign-ins only on that device. If you suspect someone took your sign-in state, remove other devices and sessions on the service side, then change your password. Do this from a separate device you have no reason to suspect.
Google Account
Go to Google Account > Security & sign-in > Your devices > Manage all devices, select any device you do not recognise and select Sign out.
Microsoft account
On your account's security dashboard, open Advanced security options and select Sign out under "Sign out everywhere". Microsoft says this can take up to 24 hours, and Xbox consoles must be signed out separately.
Apple Account
On iPhone, go to Settings > your name, select any unfamiliar device in the device list and tap Remove from Account. Then change your password from a trusted device.
Other services and password changes
For important services such as brokers, banks and email, check signed-in devices, sign them out and change the password. Someone who knows your password can sign in again after being signed out. Service-by-service screens are covered in how to check for unauthorized access. Also set up multi-factor authentication.
This site's view: use saved passwords as your list of passwords to change before deleting them
If you delete all saved passwords first when you suspect a leak, you lose track of which sites need new passwords. The order this site recommends:
- Keep evidence
- Check the device and remove suspicious extensions
- From a separate, safe device, change passwords for the sites in your saved list, most important first, and sign out of all sessions
- Finally, delete cookies and saved passwords in the browser
Exporting the list with passwords to a file creates a new leak risk, so avoid it. Once you are done, moving to a password manager is an option.
Decide what to do about sync before you delete
Sync is convenient, but it spreads deletion and compromise to your other devices.
- To delete from all devices at once, delete with sync on (Chrome, Edge and Safari each say deletion also reaches synced devices)
- To delete only on the current device, turn sync off first
- If you suspect a takeover or malicious software, keep sync off until your device check is done. Turning sync on from a device that has not been checked may spread that device's data and settings to your other devices (this site's explanation)
The case that prompted this guide: Onamae.com Desktop Cloud
In October 2026, GMO Internet, Inc. announced that it had confirmed customer information was taken out in unauthorized access to Onamae.com Desktop Cloud (fourth notice, October 24). TV Asahi (ANN) reported on October 26 that customers received emails from a sender believed to be the attacker, with part of their browsing history attached as proof that the data is held. The attacker side has also reportedly threatened to send browsing history and other data to acquaintances and family.
Where that browsing history came from has not been disclosed. The attacker side reportedly claims to have accessed data on customers' PCs (ANN), but the company's notices have not confirmed this claim. In its sixth notice (Japanese) of October 26, the company asks customers to fully scan the devices they used to connect, log out of all devices and sessions, and remove linked apps, forwarding settings, extensions and registered devices they do not recognise, and not to turn browser sync on until their check is complete.
The background and what customers should do are covered in unauthorized access to Onamae.com Desktop Cloud.
Sources
All vendor help pages were checked on October 26, 2026. Labels may change with app updates and display language.
- Google Chrome Help, "Delete browsing data in Chrome" (Computer) — support.google.com
- Google Chrome Help, "Delete browsing data in Chrome" (Android) — support.google.com
- Google Chrome Help, "Delete browsing data in Chrome" (iPhone and iPad) — support.google.com
- Google Chrome Help, "Chrome keyboard shortcuts" — support.google.com
- Google Chrome Help, "Manage passwords in Chrome" (Computer) — support.google.com
- Google Account Help, "Delete your activity" — support.google.com
- Google Account Help, "See devices with account access" — support.google.com
- Apple Support, "Clear your browsing history in Safari on Mac" — support.apple.com
- Apple Support, "Clear your cache and cookies in Safari on Mac" — support.apple.com
- Apple Support, "Delete your Safari history, cache, and cookies on iPhone" — support.apple.com
- Apple Support, "Clear your cache and cookies on iPad" — support.apple.com
- Apple Support, "Remove a password from your iPhone and iCloud Keychain" — support.apple.com
- Apple Support, "Review devices signed in to your Apple Account" — support.apple.com
- Microsoft Support, "View and delete browser history in Microsoft Edge" — support.microsoft.com
- Microsoft Support, "Keyboard shortcuts in Microsoft Edge" — support.microsoft.com
- Microsoft Support, "View or edit your passwords in Microsoft Password Manager" — support.microsoft.com
- Microsoft Support, "Browsing history on the privacy dashboard" — support.microsoft.com
- Microsoft Support, "How to sign out of your Microsoft account everywhere" — support.microsoft.com
- Mozilla Support, "Delete browsing, search and download history on Firefox" — support.mozilla.org
- Mozilla Support, "Password Manager - Remember, delete and edit logins and passwords in Firefox" — support.mozilla.org
- Mozilla Support, "Keyboard shortcuts - Perform common Firefox tasks quickly" — support.mozilla.org
- National Police Agency (Japan), "サイバー事案に関する相談窓口" (cyber incident consultation desks, Japanese) — npa.go.jp
- GMO Internet, Inc., "「お名前.com デスクトップクラウド」ご利用のお客様へ改めてのお願い(第6報)" (October 26, 2026, as of 19:00, Japanese) — internet.gmo
- GMO Internet, Inc., fourth notice on the cyberattack on Onamae.com Desktop Cloud (October 24, 2026, Japanese) — internet.gmo
- TV Asahi (ANN), report on emails from the attacker side reaching customers (October 26, 2026, Japanese) — news.yahoo.co.jp
Update history
2026-10-26: First version, based on the official help for Chrome, Safari, Edge and Firefox (checked on October 26, 2026) and GMO Internet's sixth notice.
Read next
- Checking sign-ins: how to check whether your account has been accessed (sign-in history and signed-in devices)
- Passwords: how to check if your password was leaked / Are password managers safe?
- Stronger sign-in: choosing multi-factor authentication
- Phones: smartphone security basics
- The case behind this guide: unauthorized access to Onamae.com Desktop Cloud
- Terms: what malware is / what phishing is
- Baseline: Security baseline checklist