Overview
- Google disclosed Tuesday that its multi-layered defenses reduced unwanted Android Chrome notifications by more than 7 billion per day in the first quarter of 2026.
- Chrome now automatically revokes notification permissions for sites users no longer engage with and for sites that repeatedly trigger suspicious-notification warnings, with revoked permissions reviewable and restorable in Chrome's Safety Hub.
- Google added behavioral detection that analyzes service worker activity to find networks of coordinated sites sending abusive or malicious notifications and to revoke permissions proactively from those networks.
- On the server side Firebase Cloud Messaging enforces rate limits that cap disruptive domains at 1,000 messages per minute, return HTTP 429 errors when exceeded, and apply stricter throttling for repeat offenders until behavior improves.
- The changes include a less disruptive Android permission prompt and one-tap unsubscribe from the notification panel, which should lower prompt fatigue for users, cut unnecessary background work and battery drain, and make large-scale abuse more costly for bad actors.