What redirects are and why they happen

A redirect is when a website or program sends you somewhere else without your permission. You click a link expecting to land on one page, but instead you end up on a different site — often an ad, a scam page, or a search results page you didn't ask for. This happens because malware, browser extensions, or compromised websites are intercepting your traffic and steering it elsewhere.

Redirects can come from several sources. A malicious browser extension you installed might redirect every search you make. A website you visit might have been hacked and now redirects visitors to ad pages. Your internet service provider or a man-in-the-middle attack could redirect you. Sometimes a program on your computer is doing it without your knowledge. The result is the same: you lose time, see unwanted ads, or land on pages that try to trick you into downloading something dangerous.

The good news is that redirects are usually stoppable. Most come from one of three places: your browser settings, an extension you installed, or malware on your device. Finding which one is the culprit takes a few minutes, and fixing it takes even less.

Key Takeaways

  • Redirects usually come from a malicious browser extension, changed browser settings, or malware on your device.
  • Start by checking your browser's homepage and search engine settings — many redirects change these to point at ad sites.
  • Review every browser extension you have installed and remove any you don't recognize or didn't deliberately add yourself.
  • Run a malware scan with Windows Defender or a third-party tool if redirects continue after you've cleaned your extensions and settings.
  • Change your passwords after removing redirects, because malware that redirects you may also be stealing login information.

Check and fix your browser's homepage and search settings

The fastest way to stop many redirects is to look at what your browser is set to do when you open a new tab or search. Open your browser and look at the top of the window. If you see a search bar or homepage that you didn't set, or if it's sending you to an unfamiliar site, that's your first clue.

In Chrome, click the three-line menu in the top right, then go to Settings. On the left side, click "On startup." Make sure it says "Open the New Tab page" or "Continue where you left off" — not "Open a specific page or set of pages." If it says the latter, click "Remove all" to clear any redirect pages. Then click "Search engine" on the left side. Make sure it says Google, Bing, or another search engine you recognize. If it says something else, click the dropdown and change it back.

In Firefox, click the menu button (three horizontal lines) in the top right, then click Settings. On the left, click "Home." Under "Homepage," make sure it's set to Firefox Home or a site you chose. Under "New Tabs," do the same. Then click "Search" on the left. Make sure your search engine is one you recognize. If it's not, click the dropdown and pick a different one.

In Safari on Mac, click Safari in the menu bar, then Preferences. Click the General tab. Under "Homepage," type the site you want to see when you open Safari, or leave it blank. Under "New tabs open with," pick "Top Sites" or "Start Page." Then click the Search tab and make sure your search engine is one you recognize.

Remove suspicious browser extensions

Browser extensions are small programs that add features to your browser. They can also redirect you if they're malicious or if they've been compromised. Go through every extension you have and remove any you don't remember installing or don't use anymore.

In Chrome, click the three-line menu, then click "Extensions." You'll see a list of every extension installed. Look through it carefully. If you see one you don't recognize, click the trash icon next to it to remove it. Don't assume an extension is safe just because it has a lot of users — malicious extensions can hide in plain sight. If you're unsure about one, search its name online plus the word "malware" or "redirect" to see if others have reported problems.

In Firefox, click the menu button, then click "Add-ons and themes." Click "Extensions" on the left. Look through the list and click the three-dot menu next to any extension you want to remove, then click "Remove." Again, search online if you're unsure whether an extension is safe.

In Safari, click Safari in the menu bar, then Preferences. Click Extensions. Look through the list on the left. Click any extension you want to remove, then click "Uninstall." Safari has fewer extensions than Chrome or Firefox, so this list is usually shorter.

Run a malware scan on your device

If you've cleaned your browser settings and removed suspicious extensions but redirects are still happening, malware on your device is probably the cause. Malware can hide in your system and redirect you no matter which browser you use or what settings you change.

On Windows, open Windows Defender (called Windows Security in newer versions). Click the shield icon in your taskbar, or search for "Windows Security" in the Start menu. Click "Virus and threat protection," then click "Scan options." Select "Full scan" and click "Scan now." This will take 15 to 60 minutes depending on how much is on your device. Let it finish. If it finds anything, click "Actions" and follow the prompts to remove it.

If Windows Defender doesn't find anything but redirects continue, download and run Malwarebytes. Go to malwarebytes.com, click "Free Download," and run the installer. Open Malwarebytes and click "Scan." Let it finish. If it finds anything, click "Quarantine" to remove it. Malwarebytes is more aggressive than Windows Defender and catches things Windows Defender sometimes misses.

On Mac, malware is less common but still possible. Open Activity Monitor (search for it in Spotlight). Look through the list of running programs. If you see anything you don't recognize, search its name online to see if it's malware. You can also download Malwarebytes for Mac from malwarebytes.com and run a scan the same way you would on Windows.

Reset your browser to factory settings

If redirects are still happening after you've removed extensions and run a malware scan, resetting your browser to its default state will clear out anything you might have missed. This will remove all your extensions, clear your browsing history, and reset your homepage and search engine. Your saved passwords will usually stay, but check your browser's settings to be sure before you reset.

In Chrome, click the three-line menu, then Settings. Click "Reset settings" at the bottom. Click "Restore settings to their original defaults," then click "Reset settings." Chrome will close and reopen with all extensions removed and all settings back to default.

In Firefox, click the menu button, then click the question mark icon at the bottom. Click "Troubleshooting Information." Click "Refresh Firefox" on the right side. Firefox will close, remove all extensions, and reopen with default settings.

In Safari, you can't fully reset the browser, but you can clear your history and website data. Click Safari in the menu bar, then "Clear History." Select "all history" from the dropdown and click "Clear History." This won't remove extensions or reset your homepage, but it will clear out cached data that redirects might be using.

Change your passwords after removing redirects

Malware that redirects you often also steals passwords and login information. Once you've removed the redirect, change your passwords for any important accounts — email, banking, social media, and anything else you use regularly. Do this on a different device if you have one, or wait until you're confident the malware is gone before you log into sensitive accounts on the same device.

Start with your email password, since email is usually the master key to resetting passwords on other sites. Then change passwords for banking, shopping, and social media. Use a strong password: at least 12 characters, with uppercase and lowercase letters, numbers, and symbols. Don't reuse passwords across different sites.

If you use a password manager like Bitwarden, 1Password, or LastPass, change that password too. Then update any passwords stored in it. If you don't use a password manager, this is a good time to start — it makes strong, unique passwords much easier to manage.

Prevent redirects from happening again

Once you've stopped the redirects, a few habits will keep them from coming back. Only install browser extensions from the official Chrome Web Store, Firefox Add-ons, or Safari Extensions — not from random websites. Before you install an extension, read the reviews and check how many people use it. Look at the developer's name and see if they're a known company or a random account.

Keep your browser and operating system updated. Updates patch security holes that malware uses to get in. On Windows, go to Settings, then "Update and Security," and click "Check for updates." On Mac, click the Apple menu, then "System Preferences," then "Software Update." On all browsers, updates usually happen automatically, but you can check manually by opening the menu and looking for an update option.

Be careful what you download and where you download it from. Only download programs from official websites or the Microsoft Store, Mac App Store, or Google Play — not from random download sites. If a website asks you to download something to view a video or read an article, close the tab instead.

Frequently Asked Questions

Why does my browser redirect me even after I've removed extensions?

Malware on your device can cause redirects even if your browser is clean. Run a full malware scan with Windows Defender or Malwarebytes. If that doesn't work, try resetting your browser to factory settings. If redirects continue after that, the malware may be deeper in your system and you may need to take your device to a technician.

Can redirects steal my passwords or personal information?

Yes. Malware that redirects you often also logs your keystrokes or steals data from your browser. After you remove redirects, change your passwords for email, banking, and other important accounts. If you've entered credit card information on a redirected page, contact your bank or credit card company to report it.

Is it safe to use my browser while it's redirecting me?

No. Redirects usually come from malware, which can steal passwords, download other malware, or trick you into entering personal information. Stop using the browser until you've found and removed the cause. If you need to access important accounts, use a different device.

What if I accidentally installed a malicious extension?

Remove it immediately by going to your extensions list and clicking the trash or remove icon next to it. Then run a malware scan to make sure nothing else got installed. Change your passwords for important accounts. Most malicious extensions only redirect you or show ads — they don't usually steal data unless you entered information while the extension was active.

Do I need antivirus software if I have Windows Defender?

Windows Defender is usually enough for most people. It catches most common malware. If you want extra protection, Malwarebytes is a good second option — it's designed to catch things Windows Defender misses. You don't need both running all the time, but running Malwarebytes once a month is a good habit.