Скачать Chromium

Windows 10, 8, 7

Как установить, обновить и удалить Chromium, на Windows?

Об обновлениях: ваши настройки, закладки, расширения, история, пароли, куки... будут сохранены. Не волнуйтесь!
Для автоматического обновления, выберите один из лаунчеров


Portable
ВАЖНО: Chromium имеет функцию #secure-preferences, основанную на SID машины. Поэтому расширения, сертификаты и пароли переносятся, но могут возникнуть непредвиденные баги. Лучший способ перенести данные на другой ПК - синхронизировать их с помощью Google аккаунта.

1. Скачайте и распакуйте "chrlauncher-xxxxxxx.zip" (скачать его можно по ссылкам ниже)
2. Выполните chrlauncher.exe (chrlauncher это бесплатный и открытый установщик Chromium)
3. Закройте браузер Chromium, если уведомление отображает новую версию
4. Нажмите на кнопку "Загрузить"
5. Дождитесь загрузки и автоматической установки
6. Откройте браузер Chromium. Он будет обновлен!
7. Чтобы окончательно удалить Chromium в формате Portable: удалите папку с chrlauncher

Архив

1. Скачайте ZIP архив
2. Закройте браузер Chromium, если он открыт
3. Распакуйте ZIP архив
4. Удалите все файлы из установочной папки программы (обычно это папки Chrome, App, Bin и т.д.)
5. Переместите файлы из распакованной папки в папку, которую вы только что очистили
6. Откройте браузер Chromium. Он будет обновлен!
7. Чтобы окончательно удалить Chromium в формате Архива: удалите установочную папку программы

Пакет

1. Установите Chocolatey (бесплатный и открытый менеджер пакетов) в командую строку
2. Хром будет автоматически обновляться через Chocolatey (используя API)
3. Чтобы окончательно удалить Chromium в формате Пакета: используйте командную строку "деинсталляции" через Chocolatey.

Windows XP, Vista

Начиная с версии Chromium 50, поддержка на XP и Vista завершена. Для справки, версия 49 работает нормально.

• Последняя стабильная версия (49.0.2623.112): установщик, portable
• Другие старые версии: portable

Кроме того, если у вас старый процессор без поддержки SSE2, последним будет 34 версия, сборка до 253860).

Chromium для 64-bit Windows

macOS 10.10+

Как установить, обновить и удалить Chromium, на macOS?

Об обновлениях: ваши настройки, закладки, расширения, история, пароли, куки... будут сохранены. Не волнуйтесь! Для автоматического обновления, выберите один из лаунчеров

1. Скачать DMG файл
2. Закройте браузер Chromium, если он открыт
3. Распакуйте DMG файл
4. Перетащите значок файла в папку приложений
5. Затем можно "Извлечь" и выбросить этот образ диска.
6. Чтобы окончательно удалить Chromium: перетащите приложение из папки "Приложения" в Корзину.

Архив

1. Скачайте ZIP архив
2. Закройте браузер Chromium, если он открыт
3. Распакуйте ZIP архив
4. Дважды щелкните по распакованной папке, чтобы открыть её
5. Перетащите значок в папку приложений
6. Чтобы окончательно удалить Chromium: перетащите приложение из папки "Приложения" в Корзину.

Chromium для 64-bit macOS

Chromium for 32-bit macOS

Linux

How to install, update and remove Chromium, on Linux distributions?

In most cases, Chromium is directly available in the official repository of each Linux distribution. So it is easy to install, update and remove it via the integrated software/package manager or in command-lines.

There are other ways like Snappy (chromium::snap-package). For more, check a list of software package management systems.

Chromium for 64-bit and 32-bit Linux

Reference: Google Chrome 84.0.4147.105 (768962) • Tuesday, 14 Jul 2020

BSD

Chromium for 64-bit and 32-bit BSD

Reference: Google Chrome 84.0.4147.105 (768962) • Tuesday, 14 Jul 2020

Android

Chromium for 64-bit and 32-bit Android

Reference: Google Chrome 84.0.4147.105 (768962) • Tuesday, 14 Jul 2020

iOS

Reference: Google Chrome 84.0.4147.71 • Tuesday, 14 Jul 2020

Chromium on iOS is a big fake!

Check the official blog post and build instructions to understand that Chromium cannot use the existing content/implementation, which is based on V8/Blink. It is just a skin on top of Safari. Go your way!

Notes

Obviously, you know this site is not the Chromium official website. As a regular user (not an expert), I created it in 2013 because there was no easy way to download good and stable releases of Chromium, on Windows. I try to keep it as safe and fast as possible! ;) This is absolutely a non-profit site. Please, read the #privacy-policy (on the right-hand side).

In short:

• Since the beginning of the Chromium project until today, there is no binary of stable Chromium, shared by the official Chromium team.
• The official website is development oriented. Users are invited to download Google Chrome.
• The official download page gives to users only ZIP archives of development builds (also known as "snapshot", "nightly", "vanilla" or "raw" builds) which can be very unstable. Users are invited to download Google's Chrome Canary.
• This site gives to users a choice of builds: development (also on its simplest download page), stable and portable builds.

All downloads are only from reliable sources:

• Google Storage → development builds from the official repository (Chromium buildbot)
• GitHub, AWS and SourceForge → other free and open-source builds

1. Project

Chromium exists since 2008. It is the free and open-source project (#features) behind the famous Google Chrome browser. There are many advantages for an enterprise to work on an open-source project. Intrinsically, Chromium is a Google project maintained by many authors (developers, engineers, graphic designers, security researchers...) from Google, Adobe, Amazon, Cloudflare, Facebook, Hewlett-Packard, IBM, Igalia, Intel, Logitech, Microsoft, Mozilla, Nvidia, Opera, Samsung, Vivaldi, Yandex... and external contributors (Official graph).

Chromium is not only a web browser. It is a blend of different important open-source projects:

• ANGLE (Graphics engine abstraction layer)
• Blink (Rendering/layout engine)
• Native Client (Sandbox for running native code)
• PDFium (PDF generation and rendering library)
• Sandbox (Security mechanism for separating running programs)
• Skia (Graphics library)
• V8 (JavaScript engine)
• and others...

One or more projects are used in Chromium browser (obviously!) and other software/service like Google Chrome, Googlebot Evergreen, Bingbot Evergreen, Mozilla Firefox (ANGLE, Skia, Google Safe browsing), Opera, Vivaldi, Microsoft Edge (Search "chromium" at Microsoft Third Party Disclosures. Official PDF presentation), Skype, Spotify, Steam, Minecraft, TeamViewer, WhatsApp, Twitch, Android WebView, Microsoft Visual Studio Code, Adobe Acrobat, Electron, CEF, QtWebEngine...

Chromium is not fully designed by Google! However, as a primary investor, Google gives a consistent guidance and provides all free tools and services related to this project.

2. Stable Chromium version

Officially, Chromium does not have a stable release. The official developers (aka The Chromium Authors) do not release it to end users. So it is continually in development. Google Chrome is the stable release... but is not open-source.


In fact, Chromium has a stable version! ^^
Chromium being open-source (#source-code), anybody can compile it. It is reproductible. You should be a developer to do this. Just get the current stable version (84.0.4147.105) from the official Git repository and compile it!
For example, the current stable version on #linux is 84.0.4147.89. In this version, there are 89 patches which correct many issues (bugs, feature requests, enhancements...).


The stable version of Chromium is compiled by:

• Google developers (USA) → Google Chrome
• Microsoft developers (USA) → Microsoft Edge
• Opera developers (China) → Opera
• Samsung developers (South Korea) → Samsung Internet
• Vivaldi developers (Iceland) → Vivaldi
• Yandex developers (Russia) → Yandex browser
• Hibbiki, Marmaduke and FreeSMUG developers → Chromium, on #windows and #mac
• Some developers → Chromium, on each #linux and #bsd distribution
• Some developers → Chromium-based browsers
• Some developers → other projects like CEF, Electron, Qt WebEngine, Chromely, NW.js, Beaker, JxBrowser ...

3. Development

The development builds (also known as "snapshot", "nightly", "vanilla" or "raw" builds) are built automatically several times a day by the Chromium Buildbot (buildbot console) and made available as binary code releases.

Snapshot

Once a snapshot has been built, it is placed in the chromium-browser-snapshots root directory of Google Cloud Storage and is automatically tested. This build is really just development tool for checking whether issues are fixed in the latest Chromium code. It can be buggy and unstable. They are downloadable on the official site, my alternative webpage and this site (Check The Chromium Authors tag).

LKGR

If that snapshot build successfully passes the automated tests, it is considered as a good build (known as LKGR meaning "Last Known Good Revision") and can become potentially a stable build. For info, LKGR builds were stored in the chromium-browser-continuous root directory until Friday, 18 Mar 2016. The Chromium team has removed few LKGR builders (407399, 576253 and chromium-dev) but other ones still work (latest commit). Finally, there is no LKGR binary shared by the Chromium team... but any developer can re-compile it! ^^

Stable

A stable build is a development build tested by the Buildbot then improved by the Chromium team and all contributors.

4. Conclusion

Note this website and the Chromium builds are made and shared by volunteers (devoted developers), freely, in their spare time. There is absolutely no business, no revenue (#privacy-policy). We are not Google. So please, respect our work. Officially, the #stable-chromium-version does not exist at all. We need time to re-compile Chromium. If you cannot wait for the latest version, prefer to use a development version (download page) or compile Chromium yourself (#source-code) or use other #browsers.

Jerry (admin)

Features

Chromium vs Google Chrome.

Chromium browser has:

• only an open #source-code
• different licences:
  - mainly open-source licenses (BSD license, MIT license, LGPL, MS-PL and MPL+GPL+LGPL  tri-licensed)
  - 1 proprietary licence (but for available source code: UnRAR),
  - few unlicensed files.
  It is a FOSS project. A full list of software developed by third-parties is viewable within the browser at chrome://credits (similar to this online page)
• a trademark according to Google (Search "Chromium™" at Trademarks list)
• a blue-colored logo
• the similar system requirements as Google Chrome
• the similar user interface and settings as Google Chrome
• the similar sandbox as Google Chrome
• the similar support for extensions and themes as Google Chrome
• the similar user agent as Google Chrome
• the similar experiments Field Trials (viewable as a list in "Variations" at chrome://version) as Google Chrome (and similar as Firefox studies)
• the built-in Chrome PDF Viewer (known as PDFium), on Windows
• the built-in Chromoting Viewer (To use it, you need to first install the Chrome Remote Desktop extension)
• the built-in Google Native Client
• the built-in Print preview and print system
• no stable version offered by the official team (aka The Chromium Authors)
• no digital signature
• no auto-update system (Solution: Use #updaters • On #linux, use the integrated software/package manager, even a PPA)
• no Google API keys (Solution: Check #google-api-keys)
• no built-in Flash player (Solution: Check #flash)
• no unwanted software protection (known as Chrome Cleanup and "software_reporter_tool.exe"), on Windows
• no support of proprietary codecs (AAC, H.264/MP4) (Solution: Check #html5-audio-video)
• no user RLZ identifier
• no user metrics (usage statistics) (opt-in option)
• no crash report (opt-in option)
• More details on the official site, focused on Linux.

Why I used the "similar" word, here?
I cannot certify that it is "same/identical" as Google Chome because Chrome is a closed-source software.

Some developers maintain #chromium-forks that offer more features and enhancements. Thanks a lot for developers! ;)

Secure Preferences

Chromium has "Secure Preferences" feature which protect user data against #malware. On Windows, the user profile is encrypted based on the machine SID. So extensions, certificates and passwords are not portable. It works for Chromium and all #chromium-forks like Google Chrome, Microsoft Edge, Opera, Vivaldi, Brave, ungoogled-chromium... (except Cent Browser which is closed-source and therefore can be easily corrupted)

Info relative to this feature:

• PortableApps::Google Chrome portable (Read "App Notes")
• PortableApps::Opera portable (Read "App Notes")
• Portapps::Brave portable (Read "Infos"... or detailed info on Github)
• Copy Chrome extensions from one computer to another
• How to migrate Google Chrome profile (extensions, cookies, etc.) to another Windows installation?
• profile_pref_store_manager.cc (Chromium code source)
• machine_id.cc (Chromium code source)

How to migrate user data from one computer to another?

The simple way to migrate your data is to synchronize them.

Also, to export/import data manually:

• Bookmarks: chrome://bookmarks
• Passwords: chrome://flags/#PasswordImport → Enabled (screenshot). Then restart the browser. Then chrome://settings/passwords (screenshot). For info, you can also use the #flag: --enable-features=PasswordImport (screenshot)
• Extensions: Import and export do not exist. But with an extension like Export links of all extensions (Archive: ZIP), it is possible to list, in an HTML file, all browser extensions used.

There are unstable ways too:

• using these #command-line-flags: --disable-machine-id --disable-encryption (info)
• using an hacking method to bypass "Secure Preferences".

Google API keys

To use Google services (Sync, Translate, Contacts, Hotword...), Chromium needs Google API keys.

Chromium can display a top message if the Google API keys are needed for Google services:
Google API keys are missing. Some functionality of Chromium will be disabled. Learn More

How to create your own Google API keys?

With your own Google API keys, many Google services (Sync, Translate, Contacts, Hotword...) will work. Follow the official API Keys page to get them. Other info at Github Gist. Then set three environment variables.

On Windows

Launch Command Prompt (cmd.exe) and enter the following commands:
setx GOOGLE_API_KEY yourkey
setx GOOGLE_DEFAULT_CLIENT_ID yourclientid
setx GOOGLE_DEFAULT_CLIENT_SECRET yourclientsecret
(setx = set environment variables permanently)

On macOS

This tutorial was written by Aargl on december 7, 2018 (#comment-4078). Thanks to him. There are 2 methods:

1. Method with ChromiumSyncEnabler

ChromiumSyncEnabler (Archive: ZIP)

• Put Chromium_template and ChromiumSyncEnabler.py at the root of the current user (~/)
• Put Chromium.app in ~/Applications
• In Terminal, type: python /Users/your_user_name/ChromiumSyncEnabler.py
• Enter your API keys

N.B.: if you want to activate for all users, do the same procedure putting the files respectively in / and /Applications (I haven't tried, but I can't see why it wouldn't work...)

2. Method with a plist file

Creation of a ~/Library/LaunchAgents/setenv.ChromiumSync.plist containing: <?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "https://www.apple.com/DTDs/PropertyList-1.0.dtd ">
<plist version="1.0">
   <dict>
      <key>Label</key>
      <string>setenv.ChromiumSync</string>
      <key>ProgramArguments</key>
      <array>
         <string>/bin/launchctl</string>
         <string>setenv</string>
         <string>GOOGLE_API_KEY</string>
         <string>your_key</string>
         <string>/bin/launchctl</string>
         <string>setenv</string>
         <string>GOOGLE_DEFAULT_CLIENT_ID</string>
         <string>your_key</string>
         <string>/bin/launchctl</string>
         <string>setenv</string>
         <string>GOOGLE_DEFAULT_CLIENT_SECRET</string>
         <string>your_key</string>
      </array>
      <key>RunAtLoad</key>
      <true/>
   </dict>
</plist> (with "your_key" being the corresponding Google API key)

Of course, you can name the LaunchAgent setenv.ChromiumSync or anything you want.

• This is perfectly working in 10.11
• In 10.9, you must create 3 separate LaunchAgent files instead (one for each key)
• I couldn't test more recent OSes, but I think it should work as in 10.11

The choice between method 1 or 2 depends on wether you want to enter your API keys each time or not... ;-)

On Linux

export GOOGLE_API_KEY yourkey
export GOOGLE_DEFAULT_CLIENT_ID yourclientid
export GOOGLE_DEFAULT_CLIENT_SECRET yourclientsecret


API keys

API keys assigned to Debian (source) GOOGLE_API_KEY "AIzaSyCkfPOPZXDKNn8hhgu3JrA62wIgC93d44k"
GOOGLE_DEFAULT_CLIENT_ID "811574891467.apps.googleusercontent.com"
GOOGLE_DEFAULT_CLIENT_SECRET "kdloedMFGdGla2P1zacGjAQh"
API keys assigned to Arch Linux (source): GOOGLE_API_KEY "AIzaSyDwr302FpOSkGRpLlUpPThNTDPbXcIn_FM"
GOOGLE_DEFAULT_CLIENT_ID "413772536636.apps.googleusercontent.com"
GOOGLE_DEFAULT_CLIENT_SECRET "0ZChLK6AxeA3Isu96MkwqDR4"
API keys assigned to openSUSE (source): GOOGLE_API_KEY "AIzaSyD1hTe85_a14kr1Ks8T3Ce75rvbR1_Dx7Q"
GOOGLE_DEFAULT_CLIENT_ID "4139804441.apps.googleusercontent.com"
GOOGLE_DEFAULT_CLIENT_SECRET "KDTRKEZk2jwT_7CDpcmMA--P"

How to disable Google API keys?

Without Google API keys, many Google services (Sync, Translate, Contacts, Hotword...) will not work.

On Windows

Launch Command Prompt (cmd.exe) and enter the following commands:
setx GOOGLE_API_KEY "false"
setx GOOGLE_DEFAULT_CLIENT_ID "false"
setx GOOGLE_DEFAULT_CLIENT_SECRET "false"
(setx = set environment variables permanently)

Now launch Chromium.

Widevine plugin

Widevine is a closed-source Google plugin to play DRM content (= protected audio/videos) for web browsers.

Chromium does not support Widevine natively. Note that Chromium developers and most of Chromium users do not use this Google plugin at all. We do not bundle/share it. Other people tried to obtain a licence from Google for an open-source project and finally did not get it (Archive: 1). However on this website, the widevine support is enabled on the stable versions (These versions are compiled with the GN argument: enable_widevine = true). So you need to install the Widevine plugin yourself to play DRM content.

In Chromium and Google Chrome, you can check the Widevine support at chrome://components → "Widevine Content Decryption Module" → The number must be different than 0.0.0.0 (screenshot)

Websites to freely test Widevine:

• https://bitmovin.com/demos/drm
• https://demo.castlabs.com/ (Choose videos with labeled "DRM")
• https://shaka-player-demo.appspot.com/demo/

How to install the Widevine plugin?

1. Make sure you have a Chromium version with enabled support of widevine and codecs (standard audio/video codecs + H.264/MP4).
2. Get an offline installer of Google Chrome (mirror). Unzip its content (This is a 7-zip self-extracting archive) and grab its Widevine plugin. (screenshot)
3. Follow the RobRich instructions at #comment-4955 (This link will show all comments of this site)

Flash plugin

Flash is a deprecated multimedia software platform. Adobe will be retire Flash at the end of 2020. Roadmap for Chromium. Roadmap for Firefox. Since 2015, the Flash #npapi plugin is discontinued. So, PepperFlash (PPAPI) is the unique plugin for Chromium. For info, PepperFlash is secure because it works in a sandbox. In short, it executes in its own process, separate from the browser's rendering engine.

How to quickly install the Flash plugin?

On Windows and macOS, Chomium find PepperFlash itself (= without #command-line-flags)

1. Install PepperFlash (PPAPI) from Adobe website.
2. Check chrome://flash
3. Disable "Ask first" in the chrome://settings/content/flash page. (screenshot)
4. Test if animation works on the Flash Player versions page.
5. Enjoy!

How to manually install the Flash plugin?

This is a full manual installation tutorial.
(If Google Chrome is already installed, go directly to "3. Add command-line flags"

1. Get PepperFlash (PPAPI)

This plugin is a non-free (proprietary) software developed by Adobe, and distributed bundled with Google Chrome. So get it from the official sources: Adobe or Google.

1.1 From Adobe

Different official ways:

• Stable version - Download page: Adobe Flash Player (Other versions) (Choose your OS and the PPAPI version)
• Stable version - Direct link: install_flash_player_ppapi.exe (Windows)
• Stable version - Direct link: install_flash_player_osx_ppapi.dmg (macOS)
• Beta version - From Adobe Labs (Search "PPAPI" and "Chromium" for your platform)

After install, the plugin path will be:
- On a 64-bit #windows:

• C:\Windows\system32\Macromed\Flash\pepflashplayer64_[version].dll (64-bit version)
• C:\Windows\SysWOW64\Macromed\Flash\pepflashplayer32_[version].dll (32-bit version)

- On a 32-bit #windows:

• C:\Windows\system32\Macromed\Flash\pepflashplayer32_[version].dll (32-bit version)

1.2 From Google Chrome

Canary channel:

• On #windows, get pepflashplayer.dll from Chrome Canary (64-bit) if you use 64-bit Chromium
• On #windows, get pepflashplayer.dll from Chrome Canary (32-bit) if you use 32-bit Chromium
• On #mac, get PepperFlashPlayer.plugin from Chrome Canary (64-bit)

1.3 From an unofficial source

(Use an online service to prevent #malware)

1. Search "PepperFlash" or "PPAPI" at [RU] effect8.ru or patheticcockroach.com
2. Download and open the .7z archive
3. Get "pepflashplayer.dll" (rename it, if needed) and "manifest.json" files.

Optionally, get the Flash version number:
(If you want to see the correct version number on Chromium internal pages)

• On all platforms, open the manifest.json text file in the PepperFlash folder.
• On Windows, you can do a right-click → Properties → Details, on the .dll file

2. Change the plugin directory

If you want, prefer a short path for the plugin. It will be easier for the next step. ^^
Example on Windows: Put this .dll file in a path like C:\PepperFlash\ (Create the directory if needed)

3. Add command-line flags

Use these #command-line-flags:

• --ppapi-flash-path=[plugin path]
• --ppapi-flash-version=[plugin version]
• And optionally --allow-outdated-plugins to disable browser notifications about outdated plugins

On #windows, create a Chromium shortcut. Then go to its properties and edit the target field: --ppapi-flash-path="C:\PepperFlash\pepflashplayer.dll" --ppapi-flash-version="32.0.0.403" --allow-outdated-plugins
On #mac, you will need to launch it from the command-line (in the Terminal): /Applications/Chromium.app/Contents/MacOS/Chromium --ppapi-flash-path=/Library/Internet\ Plug-Ins/PepperFlashPlayer/PepperFlashPlayer.plugin --ppapi-flash-version=32.0.0.403& The "&" at the end is not a typo. It is there to make sure Chromium is launched in a separate thread. Without the "&", Chromium would exit as soon as you quit the Terminal. Moreover, to simplify the Chromium launch, check How to create simple Mac apps from shell scripts (Archive: 1). Also see the #comment-566 and #comment-344.

4. Restart the browser

Relaunch it to apply changes.

5. Check the installation

• Type chrome://flash in your address bar to check your Flash plugin used.
• Type chrome://settings/content/flash to manage it.
• For update, check the Flash Player version on the official page.
• For security information, see the security bulletins and advisories

6. Enjoy!

Now, even after browser updates, Chromium uses PepperFlash. ^^

HTML5 audio/video

By default, Chromium does not support proprietary codecs (AAC, H.264/MP4) in the HTML <audio> and <video> elements.

How to use Chromium with all audio/video codecs?

Few ways:

• On #windows and #mac, use builds with all-codecs or all-codecs+
• or compile Chromium from #source-code with proprietary codecs, yourself.
• or install an older version having ffmpegsumo file (Ex: 333350, 333334, 333283, 333258...)
• or choose other #browsers
• On #linux, you can use Chromium with proprietary codecs

Before 4 June 2015, we used an alternative with the Google Chrome ffmpegsumo file and our Patch HTML5 Media extension. More info on site archives:

• chromium::wayback.machine (Monday, 8 Jun 2015)
• chromium::archive.is (Friday, 5 Jun 2015)

Note about the H.265/HEVC video codec

Chromium does (and will) not natively support the H.265/HEVC codec. (official source)

• The licence of H.265/HEVC is non-free. It is currently mainly supported by Apple. (Support of H.265/HEVC in web browsers)
• The Chromium team prefers to focus on the open-source AV1 codec. This one is supported by major companies (Alliance for Open Media) like Google, Microsoft, Intel, Samsung... (Support of AV1 in web browsers).

Check HTML5 audio/video support at https://tools.woolyss.com/html5-audio-video-tester/

If there is a video issue, disable hardware acceleration (see #browser-crash).

Advanced

1. Internal pages

To access to all internal pages, use chrome://about. Copy and paste this special URL directly into the address bar (omnibox). Obviously, this special URL works only in Chromium and Google Chrome. Note: About configuration settings, there is nothing similar to Firefox's about:config in Chromium.

Few internal pages:

• chrome://components (Show and update info about available components like Widevine...)
• chrome://conflicts (List all modules loaded into the browser)
• chrome://credits (View all licensing info • Similar to this online page)
• chrome://flags (View all experimental features • You can set each feature)
• chrome://flash (Show info about the #flash plugin)
• chrome://gpu (Show info about GPU)
• chrome://net-export (Get all networking related info)
• chrome://omnibox (Test and follow responses of the searches via the omnibox/address bar)
• chrome://policy (Manage Chromium, for administrators • Policy list)
• chrome://predictors (List autocomplete action predictors and resource prefetch predictors based on user recent search and browsing history)
• chrome://quota-internals (Show info about disk space and storage usage)
• chrome://sync-internals (Show info about the Chromium sync feature)
• chrome://translate-internals (View all supported internal languages)
• chrome://version (Show details of Chromium version)

About browser plugins

Since version 57, the chrome://plugins page no longer exists. (official source)

Info:

• Manage PDF viewer and Flash plugins: chrome://settings/content
• Update components (like Widevine): chrome://components
• Check Flash plugin info: chrome://flash

2. Keyboard shortcuts

To use keyboard shortcuts (on Windows, Mac and Linux), check this full list of official shortcuts... and this one if you are developer. Most of the shortcuts are similar to IE, Firefox or any other browser.

3. Command-line flags

There are command-line flags (or "switches") that Chromium accept in order to enable particular features or modify otherwise default functionality. Note flags often contain experimental or obsolete code, so they tend not to stick around for long.

• Run Chromium with flags
• List of Chromium command-line switches (Auto-updated list provided by Peter Beverloo)

How to start Chromium directly in incognito (or private) mode, on Windows?

Add the "--incognito" flag at the end of the Chromium shortcut and restart the browser. (screenshot)
"C:\{...}\Chromium\Application\chrome.exe" --incognito

4. User data directory

About your profile (history, bookmarks...), it is important to know where is stored your user data.

How to change the user data directory?

Add the "--user-data-dir" flag at the end of the Chromium shortcut and restart the browser. (screenshot)
"C:\{...}\Chromium\Application\chrome.exe" --user-data-dir=..\my-profile-path

5. External extension installation

How to install an external browser add-on?

If you wish to install extensions directly instead of just downloading the .crx source file, you must:

1. Change the flag chrome://flags/#extension-mime-request-handling to "Always prompt for install".
2. Click on the link of the .crx file you want to install

Download the .crx source file of any extension directly from the Chrome Web Store via Get CRX or via a site like Chrome Extension Downloader, ungoogled-extension, CRX Extractor, Crx4Chrome. (For info, you can see the source code before to download the extension: CRX Viewer)

1. Go to chrome://extensions
2. Drag and drop the .crx file on chrome://extensions

If it does not work...

1. Add the "--enable-easy-off-store-extension-install" flag at the end of the Chromium shortcut and restart the browser. (screenshot)
2. Go to chrome://extensions
3. Drag and drop the .crx file on chrome://extensions

If it still does not work...

1. Unzip the .crx file
2. Go to chrome://extensions
3. Drag and drop the unzipped folder on the page... or click on Developer mode (Toggle in top right) then Load unpacked extension... (screenshot)

About updates:

• You have to update manually
• You can update when you want! ^^
• If ever a new version sucks, just re-install the previous one

6. Source code

Before all, check the official guide for developers.

Official links to easily get or see the full Chromium source code:

• Google Git chromium/src
• The official GitHub mirror of the Chromium source
• Chromium Code Search or chromium/src (Old pages: Code search or chromium/src/)
• Source tarballs and its mirror ("-lite" is for building desktop Chromium)
• Chromium source code of the latest stable version: chromium-84.0.4147.105.tar.xz (mirror • File checksums)
• ViewVC (Obsolete since the version 39.0.2132.2, on August 2014)

Interesting info:

• How to build chromium on Windows (by Intel • 2019)
• How to build chromium on macOS (by Intel • 2019)
• How to build chromium for Android (by Intel • 2019)
• How to build chromium for Linux (by Intel • 2019)
• Building Chromium on Windows from source (by Jeremy Sinclair • 2019 • Archive: 1)
• How to compile Chromium with audio/video codecs for Windows (by Nik • 2018 • Archive: ZIP)
• How to build Chromium with proprietary codecs (OS X) (by No encoding • 2018 • Archive: 1)
• Bash script to build and install latest stable Chromium from source on OS X (by Bobo • 2017 • Archive: ZIP)
• [UA] Компіляція браузера Chromium для Ubuntu (x265, HEVC) (by D.Bilous • 2016 • Archive: 1)
• How to compile Chromium for Android (by yashade2001 • 2015 • Archive: ZIP)
• How to compile Chromium for Mac (by sbagmeijer • 2015 • Original site is down!)
• Contributing to Chromium: an illustrated guide (2015 • Archives: 1 or PDF)
• Build your own Chromium (Obsolete guide • 2013 • Archive: 1)

7. Older version

Never update your browser with a very old version. It even does not start.

To downgrade Chromium installed with the Installer (.exe):

1. Open Chromium and check its actual version at chrome://version
2. Close Chromium.
3. Uninstall Chromium WITHOUT to delete your #user-data-directory. It is an option of its uninstaller. (screenshot)
4. Get the Installer (.exe) of an older version (from the → download/ page or Snapshots repository about "official" builds)
5. Execute it to install Chromium.
6. Open Chromium and check the new installed version at chrome://version

8. Browser crash

You have encountered a browser crash or issue :/

Few ways to help you:

• To disable hardware acceleration: chrome://flags/#disable-accelerated-video-decode or chrome://settings → [Advanced] → System
• To disable/enable a browser feature: chrome://flags
• To check for conflicting software: chrome://conflicts
• To disable extensions/add-ons: chrome://extensions (Note the incognito mode disables all extensions by default)

Also you can use #command-line-flags: --disable-gpu, --disable-accelerated-video-decode...

8. Browser benchmark

To test performances of the browser, do differents benchmarks.
Except as otherwise noted, for the result, a higher number is better.

Free websites without registration:

• Basemark (Various tests using the newest web standards and features)
• JetStream (JavaScript benchmark developed by Apple)
• Kraken (JavaScript benchmark developed by Mozilla • Result: A lower number is better)
• MotionMark (Graphics benchmark developed by the WebKit team)
• Octane (JavaScript benchmark developed by Google)
• Speedometer (Performance benchmark that repeats the same actions using DOM APIs)
• WebXPRT (HTML5 and JavaScript test developed by benchmark maker Principled Technologies)

API

This is a free and simple API for developers to update Chromium to the latest good build via a bash (shell) script, a browser extension... Read my #notes. Please, do not use this API to build other websites. To prevent abuse, the site can audit each API request.

API details

GET request parameters:

• os → (required) windows or mac or android
• bit → (optional • 64 by default) 64 or 32
• out → (optional • json by default) json or string or xml or revision

Response:
chromium → windows or mac or android →

• architecture → (string) 64-bit or 32-bit
• timestamp → (integer) Unix time of this release built on the Chromium Buildbot server
• editor → (string) The Chromium Authors
• channel → (string) dev
• repository → (string) snapshots
• version → (string) (like xx.x.xxxx.x)
• revision → (integer) Git revision's commit position
• commit → (string) Git revision's commit hash

Examples:

• → api/?os=mac
• → api/?os=windows&out=string
• → api/?os=windows&bit=32&out=xml

Links

Except the Wikipedia's Chromium page, these links are official and point only to the Google sites.

Focused on Chromium:

• Chromium Blog
• Chromium Browser Snapshots
• Chromium Bugs (Issue tracker)
• Chromium Code Reviews
• Chromium Dash
• Chromium Development Calendar and Release Info
• Chromium Discussion (on Google Groups)
• Chromium Gerrit (Code review)
• Chromium Main Console (Buildbot console)
• Download Chromium (ZIP archives)
• Monorail (The issue tracking tool for chromium-related projects)
• The Chromium Projects (The main Chromium website)
• Wikipedia's Chromium page

Focused on Google Chrome:

• Chrome Platform Status
• Chrome Release Channels
• Chrome Web Store (Extensions and themes 100% compatible with Chromium)
• Google Chrome Help (100% compatible with Chromium)
• Release updates from the Google Chrome team (Google blog)

Browsers

1. Chromium forks

In simple words, a fork of Chromium means Chromium engine is used to create another web browser.

Proprietary browsers:
(developed by official contributors of the Chromium #project)

• Google Chrome (USA)
• Microsoft Edge (USA)
• Opera (China • Otello Corporation, Golden Brick Capital/Qihoo 360)
• Samsung Internet (South Korea)
• Vivaldi (Iceland • Chromium's modified code is still open source)
• Yandex Browser (Russia)

I do not recommend:

• 360 Secure Browser (Proprietary)
• Comodo Dragon (Proprietary • Famous company but its Chromium is ever outdated compared to the #stable-chromium-version)
• Epic (Proprietary • Reviews)
• Slimjet (SlimBrowser) (Proprietary • Reviews - Archive: 1)
• SRWare Iron (Proprietary • Versioning system is not clear: no source code of the latest version available since 2011 - Archive: 1)
• or other proprietary browser with "better privacy" than Google Chrome.

Why not recommended?
Because all of these browsers are closed-source, outdated, based on Chromium like Google Chrome... and most of the features they remove don't even exist in Chromium, in the first place. Control your personal info and #privacy yourself ^^

Colin (InsanityBit) explains this very well at "SRWare Iron Browser – A private alternative to Chrome?" (2012 • Archives: 1, 2)

Note if a new browser with "better privacy" than Google Chrome is based on Chromium and is fully open-source, it should be ok for me. But... Google is famous. Its privacy policy and marketing strategy are well known. So you have to ask you some questions. Do you trust in an unknown team more than Google? Is an outdated Chromium fork?

• Google engineer finds holes in three 'secure' browsers (2016 • Archive: 1)
• Google calls out Comodo's Chromodo Chrome-knockoff as insecure crapware (2016 • Archive: 1)
• Google warns! (2015 • Archive: 1)

Few free and open-source Chromium-based browsers:

• Brave (Block website trackers and remove intrusive internet advertisements • code differences with Chromium )
• Bromite (Patches for Chromium with adblocking features and enhanced privacy)
• Dooble
• Falkon (Formerly QupZilla)
• Iridium (tarball, git, github, code differences with Chromium • Reviews)
• Kiwi Browser (Browser with extensions support, ads & cryptojacking protection...)
• Otter Browser
• qutebrowser (A minimalist browser)
• ungoogled-chromium (A set of patches for removing Google integration • 2016 reviews, 2018 reviews, 2020 reviews)
• Advanced Chrome (Based on a development version • Often outdated browser)
• Aviator (Discontinued project since 2016 • Reviews)
• Inox (A set of patches applied on the Arch Linux chromium package • Arch Linux website)
• Superbird (Based on a development version • No source code since 2016 - Archive: 1)

2. Other open-source "non-Chromium-based" browsers

• Basilisk (Firefox-based using an old Firefox core version)
• Firefox
• LibreWolf (Firefox-based)
• GNU IceCat (Outdated since 2019)
• Midori (Webkit-based)
• NetSurf (Works on any OS)
• Pale Moon (Firefox-based using an old Firefox core version)
• Tor Browser (Firefox-based using Tor, an anonymity network)
• Waterfox (Firefox-based using an old Firefox core version • Acquired by System1, an advertising company)
• and other open-source browsers.

Privacy

For a better privacy protection, use open-source #browsers like Chromium, Firefox and even Tor browser. Do not forget: It is open-source does not mean it is secure and respects user privacy. Moreover, security ≠ privacy. If your browser is fully "open-source", it means that somebody with the capability can review the #source-code. It is easier for developers to find malicious code with versioning tools like SVN or Git. (Ex: Chromium downloads a Chrome extension as a binary without source code → corrected 7 days after the report). Only an open-source code allows such defense. This is better for secure browsing and user privacy. The security of Chromium is very solid. While I recommend ungoogled-chromium, Bromite and Firefox (cf. about:config/user.js settings, containers system, better content-filtering, easier way to stop browser automatic connections, support of a self-hosted Firefox Sync server) as the most reliable browsers for privacy enthusiasts in a standard web browsing, Chromium is probably a reasonable alternative for everyday web browsing.

My way for a standard web-browsing (but do as you like ^^):

1. Modify your #hosts-file to stop "natively" domains who serve ads, spyware and malware
2. Use a VPN with strong encryption for your whole OS or router to bypass many restrictions on Internet (It is better than browser VPN/proxy #extensions)
3. Use an up-to-date web browser
4. Change few #browser-settings
5. Install few #extensions

How to really be anonymous on the Web?

The anonymization solutions are especially necessary for the exercise of freedoms (ex: for journalist, political opponent in certain countries, researcher, whistleblower...). These solutions are obviously very used by hackers too. Personally, I think most people cannot be anonymous on the Web even using a VPN, proxy or TOR network. It is a myth that you cannot be tracked online. If you exist, you are findable, especially if you use multiple devices and websites. There are a lot of technologies to identify a user and get its data. Check the #guides and #tests for more information.

But it is possible to really be anonymous on the Web if your respect all security rules. The book "The Art of Invisibility" written in 2017 by Kevin D. Mitnick will convince you. In a few words, do not trust proprietary software/services, third-party VPN service providers (VPN Leaks, VPN hacked...) and the cryptocurrency (like Bitcoin).

1. Buy a new computer (like a used computer) with cash, from an unknown person. Then remove the HDD
2. Use Tails, Whonix, Qubes OS or a similar live Linux distribution. These ones uses the Tor network (Note Tor is often attacked).
3. Change the MAC address.
4. Connect to a public WiFi connection.
5. Do not change settings or add extensions on Tor Browser. It will prevent browser fingerprinting.
6. Never login to a site/service for which you are already known.
7. SearX and .onion addresses are welcome.
8. Here we go!

Do you know...

Sure you can protect your privacy against tracking and profiling tools but it is really painful because these tracking tools are everywhere today: on Internet (website, app...), at home (computer, phone, router, smart TV, smart home speaker, smart bulb, smart grid...), in your car (GPS system, connected car...), in the street (video surveillance camera...), at your ISP and elsewhere. You can find them in hardware (firmware) and software (operating system, app, website, extension...).

Do you know in all computers (excepted RISC-V and Libreboot) there is an exploit-friendly firmware that user has no access?
Ex: in Intel processors, in AMD processors, in Raspberry Pi (proprietary Broadcom processor).

Do you know you are readily recognizable if you install browser extensions like an ad-blocker? It means, if you install browser extensions, your browser fingerprint is unique. So you are unique on the Web.
Ex: browserleaks::proxy

Do you know there are probably untrusted certificates on your computer?
Ex (Archives): Apple, Google, Microsoft and Mozilla..., Dell..., Google..., Microsoft..., Lenovo..., Surveillance firm...

Do you know it is possible to follow a user behind Tor browser?
Ex (Archives): Advanced Tor browser fingerprinting, Browser Fingerprinting, Tor and its discontents, with CSS (noscript-tracking.go, CrookedStyleSheets), or with a zero-day exploit!...

About the "No log" mention of a VPN, do you know the jurisdiction of the country where the VPN server is located has authority on the jurisdiction of the country where the VPN provider is located?
Ex (Archives): Choose a VPN provider from Panama and connect to a French VPN server. There are no log in Panama. Ok, but this is not the problem! The VPN server is in France and there will be logs in France. This is the law. [FR] Minimal logs lifetime in France: 360 days (Source: "Article 3"). [FR] Minimal logs lifetime in Europe: 14 days.

1. Browser update

The reason for updating to the latest version is security. As security threats are found, they are fixed. Using an old version expose user to a number of security holes and privacy issues. Browsers are far more subject to hacking than other software.

2. Browser settings

Adjust all settings and advanced settings in chrome://settings:

• Do not log in with a Google account in the browser (screenshot • Do not sync your data!)
• Do not save passwords in the browser (Prefer a free and open-source password manager like Bitwarden, KeePass, LessPass or Password Safe)
• Enable the incognito (or private) mode (Ctrl+Shift+N shortcut • Use a #flag to start Chromium in this mode)
• Disable all options in the "Privacy and security" section (chrome://settings/privacy) because most of them use an external Google service. (Ex: "Safe Browsing" option uses Google Safe Browsing • More info about privacy settings)
• Block third-party cookies (chrome://settings/content/cookies)
• Block the #flash plugin (chrome://settings/content/flash)
• Do not share your location (chrome://settings/content/location)
• Prevent canvas fingerprinting (Use the --disable-reading-from-canvas #flag)

3. Hosts file

Modify your hosts file to prevent your OS from connecting to domains who serve ads, spyware and malware. This will increase your OS security and save bandwidth.

• Dan Pollock's list
• Malware Domain List
• MVPS HOSTS
• Peter Lowe's list
• Unified hosts file with base extensions
• No more ads, tracking and other virtual garbage

Note:

• Few #extensions like uBlock Origin can also use these lists in their settings.
• Few tools like Pi-hole and AdAway can also use these lists in their settings.
• Free and open-source auto-updating Hosts managers: hostsmgr, HostsFileEditor (on Windows), Gas Mask (on macOS)

4. DNS services

By default you are using the DNS servers of your ISP but you do not have to stick with them. Before to choose one, compare DNS performance. Free alternative Internet DNS services for personal use:

• Adguard DNS
• Cloudflare DNS resolver (by Cloudflare • 1.1.1.1 for Families)
• Comodo Secure DNS (by Comodo)
• DynDNS (by Dyn)
• Google Public DNS
• Nextdns
• OpenDNS (by Cisco)
• OpenNIC
• Quad9 DNS
• Yandex.DNS (by Yandex • Technical details - IPv4 and IPv6)

Note:

• You can also use a DNS over HTTPS client (screenshot of Firefox 62+). Check Publicly available servers.
• You can also use a DNSCrypt client (Ex: Encrypt your DNS traffic with Simple DNSCrypt for Windows)
• You can also use your own DNS resolver with Unbound or other software.

5. Web search engines

Note: Few #extensions exist to protect user privacy on search engines.

Search engines

Search engines index the content of web pages by running an algorithm on a web crawler.

• Baidu
• Bing
• Gigablast
• Google Search
• Mojeek
• Yahoo! Search
• Yandex Search

Metasearch engine

Metasearch engines use another search engine's data to produce its own results from the Internet.

• Disconnect Search (by Disconnect.me • Uses Bing, Yahoo... results)
• DuckDuckGo (uses its own crawler + Bing, Yahoo, Yandex, Wikipedia... results, on Amazon servers (AWS) • Review at an 8ch page archive • To search without JS, choose the html or lite version)
• Ecosia (uses Bing results)
• Givero (uses Bing results • Review at Hacker News)
• Oscobo
• Private.sh (by Private Internet Access • Uses Gigablast results)
• Qwant (uses its own crawler but is partner with Microsoft for Bing results, Bing Ads and Microsoft Azure • Its lite version)
• Startpage (uses Google results • Owned by System1, an advertising company)
• Swisscows (uses its own crawler + Bing results with enabled parental filter)
• YaCy (A peer-to-peer search engine)

If you are a web developer, use your own metasearch engine yourself ^^

• Searx (uses many search engines • Source code in Python • Author: Adam Tauber, @Searx_engine • Searx instances)
• MetaGer (uses Yahoo... results • Source code in PHP)
• Whoogle Search (uses Google results • Source code in Python • Author: Ben Busby)
• Googol (uses Google results • Source code in PHP • Author: Bronco)

6. Extensions

Note: Extensions hosted on Chrome Web Store are updated via the Chrome update mechanism (cf. Chromium source code) which developers and users do not control. For a manual installation, read the #external-extension-installation part.

Priority to open-source (no code obfuscation) extensions for Chromium and Firefox:

Block ads, trackers, scripts and popups

uBlock Origin + uBO-Extra

• Download: store, amo
• Alternatives: uMatrix, Privacy Badger, ScriptSafe, Nano Adblocker, Adblock Plus, AdBlock, Disconnect, Ghostery, Adguard AdBlocker, Fair AdBlocker, Stealth Mode, Forget Me Not, NoScript
• Info: uBlock Origin (wiki) is pattern-based filtering, while uMatrix (wiki) is matrix-based filtering which gives you more control over the filtering process. You can add filters to your ad-blocker via FilterLists (an open-source website)
• My advice: By default, block third-party scripts and frames (uBlock Origin medium mode • screenshot). Also, about Adblock Plus or AdBlock, disable "Acceptable Ads" option (Adblock Plus screenshot).

Force to use secure connection of websites (https://)

HTTPS Everywhere

• Download: store, amo
• Alternatives: Smart HTTPS, KB SSL Enforcer, HTTPZ

Stop link redirection in Google, DuckDuckGo and Yandex search pages

Google search link fix

• Download: store, amo
• Alternatives: Don't track me Google, Google Redirects Fixer & Tracking Remover, Redirect Bypasser

Control the HTTP Referer on a per-site basis

Referer Control

• Download: store, amo
• Alternatives: Smart Referer, Web Developer
• Info on wikipedia

Prevent canvas fingerprint

Canvas Blocker (Fingerprint protect)

• Download: store, amo
• Alternatives: Canvas Defender, Canvas Fingerprint Defender
• Info on wikipedia, browserleaks, ghacks

Emule locally CDN

Decentraleyes

• Download: store, amo
• Alternatives: Local CDN
• Info on wikipedia

Prevent WebRTC IP leak

WebRTC Leak Prevent

• Download: store, amo
• Alternatives: WebRTC Control, WebRTC Network Limiter
• Info: An extension can only block the leak of your IP address. It does not block WebRTC in the "core" of Chromium. uBlock Origin and ScriptSafe can protect against the WebRTC IP leak. You can do some #tests.

Prevent CSS Exfil attack

CSS Exfil Protection

• Download: store, amo
• Info on BleepingComputer, Github and mike-gualtieri.com

Unblock websites with a browser VPN/proxy

Browsec

• Download: store, amo
• Alternatives: Privatix, anonymoX, HidemanVPN, TunnelloVPN, TouchVPN, Hotspot Shield
• My advice: Prefer to pay for a safe and secure VPN provider protecting your whole OS ; or use a free VPN service without registration. Do not use Hola!, ZenMate or Betternet in their free version. Hola! is a botnet. Betternet shares/sells user data to third-parties. In its free version, ZenMate needs a registration.

Display sites quality

WOT (Web of Trust)

• Download: store, amo
• Alternatives: DuckDuckGo Privacy Essentials, Terms of Service; Didn’t Read
• My advice for WOT addon: Do not share your data. (WOT settings → Real-time protection → Set to off)

7. Tools

• Firewall
• Freenet
• I2P (Invisible Internet Project)
• Proxy
• VPN (Virtual private network)
• Tor (Anonymity network)

8. Guides

• Technical analysis of client identification mechanisms (Chromium)
• Privacy tools (2020 • Source code)
• PRISM break (2020 • Source code)
• Web browser privacy: What do browsers say when they phone home? new (2020 • Archive: PDF)
• The ultimate online privacy guide (2020 • Archive: 1)
• VPN guide: Legality, jurisdictions & Internet censorship 2020 • Archive: 1)
• Privacy Respecting (2019)
• Who left open the cookie jar? (2018 • Archives: 1, PDF)
• Online tracking: A 1-million-site measurement and analysis (2017 • Archive: PDF)
• DNS Leaks (Causes & fixes) (2017 • Archive: 1)
• Privacy and security aspects of the ultrasound ecosystem (2017 • Archive: 1)
• Are VPN providers more trustworthy than your ISP? (2016 • Archive: 1)
• Don't use VPN services (2015 • Archive: 1 • Note I disagree with that but it offers an interesting reflection!)
• Internet privacy (Wikipedia)
• Chromium privacy

9. Tests

Reputable and reliable sites to show or prevent user data tracking:

• Am I Unique (Device fingerprinting)
• AudioContext fingerprint test page
• Browser Leaks (WebRTC IP leak, System fonts, HTML5 Canvas fingerprinting...)
• BrowserSpy (It shows how much information can be retrieved from web browser)
• Browsing experience security check (Secure DNS, DNSSEC, TLS 1.3, Encrypted SNI)
• Device Info (Web browser security/privacy testing)
• Do I leak? (IP, DNS and WebRTC leaks)
• DNS leak test
• EFF Panopticlick (Device fingerprinting)
• Evercookie (Persistent cookies)
• IP Leak (IP, DNS and WebRTC leaks)
• IP Leak privacy test (IP address, DNS, WebRTC...)
• JonDonym (Approach to solving much of the problem of anonymity and access)
• Privacy Online Test And Resource Compendium
• Permission.site (To test the interaction of web APIs and browser permissions)
• STUN IP Address requests for WebRTC
• TorZillaPrint new (Only for Firefox and Tor Browser. Advanced scripts showing that you are unique on the Web even behind Tor, VPN...)
• Webpage tracking only using CSS (and no JS)

Malware

Your antivirus has detected a malicious software in Chromium files.

False positive?

You have downloaded Chromium from a reliable source (#notes) and maybe also used open-source #updaters. In this case, it is surely a false positive. The detection is generic (heuristic). There is absolutely no backdoor or other malware inside Chromium. Remember that the full #source-code is available. You will get a similar result if you compile Chromium yourself.

Note a specific thing about Chromium browser:

1. Chromium has no digital signature (unlike Google Chrome). It is not signed because is open source and not "owned" per se by any one particular developer or organization. Moreover, a certificate is not free for developers (Example, Apple Developer Program).
2. Antivirus use generic detection and database of malware signatures.
3. VirusTotal which aggregates many antivirus is a Google service using its Trusted Source project to limit false positives for software like Google Chrome (because it is digitally signed), not for Chromium.
4. So, unsigned Chromium + any antivirus or VirusTotal service = More chance to get an antivirus alert.

False positive reports known for few years ago:

• Chromium 32bit download has a virus? (2018 • Avast antivirus • Archive: 1)
• IDP.Generic reported for chromium executable (2018 • Avast antivirus • Archive: 1)
• False positive on Chromium executable (2016 • Avast antivirus • Archive: 1)
• False positive with Chromium (2015 • Panda Internet Security • Archive: 1)
• False Positive on latest Chromium Nightly? (2014 • Avast antivirus • Archive: 1)
• AntiVirus detected Malware while syncing using gclient (2014 • Chromium Issue Tracker • Archive: 1)
• pepflashplayer.dll tagged as malware and removed by F-Secure (2012 • Chromium Issue Tracker • Archive: 1)
• Kaspersky detects Chrome as Trojan (2010 • Chromium Issue Tracker • Archive: 1)
• Avast! Anti-Virus reports Google Chrome as Trojan (2008 • Chromium Issue Tracker • Archive: 1)

Authentic malware?

Yes. Obviously, it is also possible.

• The common entry methods for Chromium virus are freeware downloads as bundled software (bundleware) and spam e-mails. It means Chromium has been silently installed via another software. Do not forget Chromium is free and open-source. So malware writers use Chromium to push malicious code on to your system. Remove this "fake" or suspicious Chromium web browser (like BeagleBrowser, BoBrowser, BrowserAir, Chedot, eFast Browser, Fusion Browser, Mustang Browser, MyBrowser, Olcinium Browser, Palikan, Qword Browser, Torch, Tortuga Browser...).
• The other way is about a compromised Chromium repository on a reliable source (#notes).

Free tools to scan your system

Anti-malware:

• AdwCleaner and Malwarebytes (by Malwarebytes)
• Kaspersky Virus Removal Tool (by Kaspersky)
• Emsisoft Emergency Kit (by Emsisoft)
• Norton Power Eraser (by Symantec)

Antivirus:
(Independent tests and distinctions: av-test.org, av-comparatives.org, gartner.com)

• Windows Defender (on Windows 10)
• Avast (Prefer the offline installer. Then choose the advanced installation)
• Kaspersky Security Cloud
• Bitdefender
• Avira
• ClamAV and Immunet (Open-source • Developed by Cisco)

Anti-ransomware:

• Avast ransomware decryption tools
• Kaspersky tools
• No More Ransom! (Decryption tools)

Free online services to scan your files

(no registration required)

• Jotti
• VirusTotal (by Google • Its lite version)
• MetaDefender (by OPSWAT)
• virSCAN
• Hybrid Analysis (by Payload Security)

If you find an issue:

• Contact your anti-virus or anti-malware support
• Report it on the official Chromium supports. For links, see my #comment-1 below.

Chromium updaters

To update Chromium automatically.

As always, never install a closed-source software especially if you have never heard it before! GitHub and its Gist service are good places to find good stuff. So, try these free and open-source Chromium updaters:

Updaters on Windows

• For info, in the #windows section, each "Portable" version uses chrlauncher which can install, update and launch Chromium automatically. You can change its settings in the chrlauncher.ini file.
• Chromium Update Notifications
  (by Christian Mund • 2020 • Browser extension to install Chromium manually • Compatible with all releases of this website)
• chrlauncher
  (by Henry++ • 2020 • C • Compatible with all releases of this website)
• Chocolatey
  (by Chocolatey team • 2020 • In command-line • Compatible with the Stable, Ungoogled and "official" releases of this website)
• Simple Chromium Updater (chrupd.cmd)
  (by mkorthof • 2020 • Batchfile • Compatible with all releases of this website)
• ungoogled-updater
  (by NeverDecaf • 2020 • Python • Compatible with the Ungoogled releases of this website)
• ChromiumForWindows new
  (by Ilyó Kovács Levente • 2020 • C# • Compatible with the Stable, Ungoogled releases of this website)
• chromium for windows installer (by Lusito • 2019 • Javascript)
• ChromiumUpdathe (by Hristo Bogdanov • 2018 • C#)
• cr-updater (by pwlin • 2018 • Batchfile, PHP)
• Chromium_Updater (by Programming4life • 2018 • Rust)
• ChrUpdWin.cmd (by Michael Kharitonov • 2018 • Batchfile)
• A web installer for Chromium (by LonelyCannibal • 2017 • AutoIt • Archive: ZIP)
• Chromium Downloader (by stsy • 2016 • C#)

Updaters on macOS

• Chromium Update Notifications
  (by Christian Mund • 2020 • Browser extension to install Chromium manually • Compatible with all releases of this website)
• Homebrew Tap for the Marmaduke Chromium builds
  (by Charl P. Botha, then Matthew Salazar • 2020 • Ruby • Compatible with all Marmaduke releases of this website)
• Chromium Updater
  (by the FreeSMUG team • 2020 • Chrome Web Store • Archive: ZIP • Compatible with the FreeSMUG's stable release of this website)
• chromium-updater-mac (by wangxufire • 2018 • Python)
• chromium-downloader-script (by Matteo Loporchio • 2017 • Shell)
• chromium-downloader (by Matteo Loporchio • 2017 • C)
• update_chromium_osx (by Klemens Gordon • 2016 • Shell)
• chromium-on-mac (by NicoLargo • 2015 • Shell)

Discontinued updaters

• Chromium Auto Updater [Root] (by Federico Dossena • 2019 • Java)
• getChromium (by Andrew Wright • 2018 • Java)
• Chromium Updater (crupdater) (by Muhammer Ayes aka Zychopat • 2016 • Batchfile, AutoIt)
• chromium-nightly-updater (by Vikrant Chaudhary • 2016 • Java)
• Chromium updater script for OS X (by Alan Grosskurth • 2016 • Shell)
• Chromium-Download-Manager (by xinhugo • 2015 • Batchfile)
• chromium-update (by William Alexander • 2015 • PowerShell)
• Chromium Upgrader for Mac OS X (by mozamimy • 2015 • Shell)
• Chromium Updater (by Daniel Huhn • 2014 • Javascript)
• Chromatic (by Mr Gecko • 2014 • App • Source code)
• extension.chromium-updater (by Jackson Tan aka Hallbin • 2014 • Javascript, CSS)
• Chromium-updater (by Das Schwert • 2010 • AutoIt)
• chromium updater.py (by Curt Micol aka asenchi • 2009 • Python)

Thanks a lot for all developers!
I do not support these tools. Please, contact the developers for thanks, issue, help...