Encryption keys are stored on the hardware security module located on every Chromebook.
Verified boot detects when the OS has been tampered with and the firmware will attempt to boot up an alternate copy.
An OS encrypted at the data and user level boosts productivity with security updates that happen in the background.
Safe Browsing deters users from visiting malicious webpages, while sandboxing isolates sites within tabs to protect accessible areas.
Google Play inspects billions of apps for malicious threats daily to keep users safe.