How to Remove a Browser Hijacker, Toolbar, or Search Redirect

You open your browser and something is off. The homepage is a search engine you have never heard of, your searches get redirected somewhere unfamiliar, or a toolbar you never asked for is sitting under the address bar. This is a browser hijacker: unwanted software that changes your browser's settings to funnel your traffic, show you ads, or collect data about what you do. It is usually more annoying than dangerous, but it should still come off promptly. Here is how to clean it up and keep it away, step by step.

What a browser hijacker actually is

A browser hijacker is a type of unwanted program, often bundled with free software or slipped in through a misleading download. Rather than damaging your files, it quietly rewires your browsing. Typical signs include:

• Your homepage or default search engine changed without your doing it, and it resets if you change it back.
• Searches redirect through an unfamiliar site before reaching results.
• New toolbars or extensions appeared that you did not install.
• More pop-ups and ads than usual, sometimes for dubious products.
• The browser feels slower or opens new tabs on its own.

Most hijackers exist to make money from ads and redirected searches, and to harvest data about your habits. That data angle is why you should not just live with it. If you want to understand the wider family of software that quietly collects information, our explainer on what an infostealer is is a useful companion, though a hijacker is usually far less severe.

Before you start: a quick sanity check

Not every odd behaviour is a hijacker. An update can change a default, or you might have clicked "yes" to an extension during another install. Still, if settings revert on their own or you see redirects, treat it as unwanted software and clean it out. The steps below are safe to run even if you are not certain.

Step 1: Remove suspicious programs from your device

Hijackers often install a companion program on your computer that keeps resetting the browser. Remove it first, or your browser cleanup will not stick.

• On Windows, open the list of installed apps and look for anything you do not recognise, especially items installed around the time the trouble started. Uninstall them.
• On a Mac, check your Applications folder and remove unfamiliar apps, and look for login items that launch on startup.
• Note the names of anything you remove, in case you need to search for leftover pieces afterwards.

If you are unsure whether something is legitimate, be cautious, but a genuine program is easy to reinstall, whereas a hijacker will keep bothering you.

Step 2: Remove unwanted browser extensions

Open your browser's extensions or add-ons page and review the list. Remove anything you did not deliberately install, particularly toolbars, "search enhancers," coupon finders, or extensions with vague names. If in doubt, disable it first and see whether the problem stops. Do this in every browser you use, since a hijacker can affect more than one.

Step 3: Reset your homepage and default search

With the extensions gone, put your settings back:

• Homepage and startup pages: set them to what you actually want.
• Default search engine: choose a reputable one and remove any unfamiliar entries from the search engine list.
• New tab page: check it has not been redirected too.

If a setting keeps reverting after this, a program or extension is still present, so return to steps one and two.

Step 4: Clear cached data and check for leftovers

Clear your browser's cache and cookies to remove stored traces the hijacker relied on. Then check a few less obvious hiding places:

• Browser shortcut targets. Some hijackers append a web address to the shortcut you click, so the browser opens their page every time. Check the shortcut's properties and remove anything after the program's name.
• Home network settings are rarely involved, but if redirects persist across devices, it is worth confirming your router has not been tampered with. Our guide to securing your home Wi-Fi router covers the basics.

Step 5: Scan with reputable security software

Run a full scan with a trusted security tool to catch anything left behind. A reputable scanner will detect most hijackers and potentially unwanted programs. This is also a good moment to make sure your operating system and browser are fully updated, since updates close the gaps that let unwanted software in.

Step 6: Restart and verify

Close everything, restart your device, and reopen your browser. Confirm that your homepage, search engine, and new tab page are what you set, and that the redirects and pop-ups are gone. If the problem returns, something is still installed, so repeat the removal steps and scan again.

How to keep it from coming back

Prevention is mostly about how you install software:

• Download from official sources. Get apps from the vendor's real site or the official app store, not from ad-heavy download portals.
• Choose custom or advanced installation when installing free software, and untick any bundled "offers," toolbars, or extra programs.
• Slow down on install screens. Bundled extras rely on people clicking "next" without reading.
• Be wary of pop-ups urging a download or update. If a message pressures you to install something urgently, treat it like any other scam and verify it first, using the checks in our guide on spotting scam messages and links.
• Keep everything updated, and review your extensions occasionally so nothing sneaks in unnoticed.

When to worry a little more

A browser hijacker on its own is usually a nuisance rather than a breach. But if you also notice new logins you did not make, passwords that stopped working, or messages sent from your accounts, treat it as a possible sign of something more serious and follow our emergency checklist for after you click a bad link. In most cases, though, a careful cleanup restores your browser to normal, and a bit of caution at install time keeps it that way.