How to Block File Downloads in Chrome on Windows 10
Chrome, like any other browser, can download files. It has a built-in anti-virus feature that normally prevents users from downloading malicious files, allowing only safe files to be downloaded. The anti-virus is hard to fool so if anyone unintentionally clicks on a link that downloads a malicious file, the download will be stopped by Chrome. If you need to block downloads in Chrome, regardless if they’re safe or not, you can.
Windows 11/10 Pro
In order to block downloads in Chrome on Windows 11/10 Pro, you need to configure the Group Policy. Make sure you’ve imported the latest Google Chrome ADMX templates first (see Set Chrome browser policies). Use Windows search to look for and open the Group Policy editor. Navigate to Computer Configuration > Administrative Templates > Google > Google Chrome.
Enable the Allow Download Restrictions policy and choose one of the following options:
- No special restrictions – downloads are allowed
- Block malicious downloads (recommended)
- Block dangerous downloads
- Block potentially dangerous downloads
- Block all downloads – disables all file downloads
Click OK, apply the policy, and restart Chrome. This will block downloads in Chrome for all profiles on the device that are managed by this policy.
Windows 11/10 Home
Windows Home editions don’t include the Group Policy editor, so you’ll set the policy via the Windows Registry. You will need admin rights.
Open the Windows Registry Editor and go to the following location (per-user):
Computer\HKEY_CURRENT_USER\Software\Policies\Google\Chrome
If the Google and Chrome keys don’t exist under the Policies key, create them. Right-click Policies > New > Key and name it Google. Then right-click Google > New > Key and name it Chrome.
Under the Chrome key, right-click the empty pane on the right and select New > DWORD (32-bit) Value. Name it DownloadRestrictions.
Double-click it and set one of these values:
- 0 – Allow all downloads
- 1 – Block malicious downloads and dangerous file types
- 2 – Block malicious, uncommon/unwanted downloads and dangerous file types
- 3 – Block all downloads (no files can be downloaded)
- 4 – Block malicious downloads (recommended)
Restart Chrome and the restriction will take effect immediately. You can also set the same value under the machine-wide key if you want it to apply to all users on the device:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
If you prefer, you can follow Google’s registry deployment guidance here: Manage Chrome policies with Windows registry.
Other Restrictions
Chrome has options for limiting downloads and restricting them completely isn’t the only option. On Windows Pro (via Group Policy) or Home (via the Registry), you can set the policy to:
- Allow all downloads (0)
- Block malicious & dangerous (1)
- Block malicious, uncommon/unwanted & dangerous (2)
- Block all downloads (3)
- Block malicious downloads (4)
The change is easy to reverse but you will need admin rights. If you’re doing this to prevent a user from downloading files, it will work and the user will not be able to reverse the change unless they have admin access on the system.
macOS (Managed)
If you manage Macs, you can enforce the same Chrome restriction with a managed preferences plist or JSON policy. Set the DownloadRestrictions key in your managed Chrome policy file and deploy it to users. See Google’s admin article for options and deployment paths: Chrome policy: DownloadRestrictions.
FAQs
Does this affect all Chrome profiles?
Yes. Policies apply to the browser instance on that device, not just a single signed-in profile.
Does Incognito bypass the restriction?
No. Enterprise policies apply in all modes, including Incognito.
Will extensions or Chrome Web Store items still download?
If you select stricter levels (e.g., block dangerous file types), Chrome may block certain extension file types from downloading. Use the setting that best fits your environment.
How do I revert the change?
Set DownloadRestrictions back to 0 (or delete the value) and restart Chrome. In Group Policy, set the policy to Not Configured or choose a less restrictive option.
Do I need to update templates?
If you manage this via Group Policy, install the latest Chrome ADMX templates to see all current options: Set Chrome browser policies.
What’s New in This Update
- Updated instructions and headings for Windows 11/10 (Pro & Home).
- Added current policy options, including the value 4 (“Block malicious downloads”) now available in Chrome enterprise policy.
- Clarified per-user (
HKCU) versus machine-wide (HKLM) registry paths. - Added a macOS (Managed) section for organizations enforcing Chrome policies on Macs.
- New FAQs covering profiles, Incognito, extensions, and reverting the change.
- Linked to current Google admin docs for DownloadRestrictions and Windows registry deployment.
Last updated: 2025-10-10
