Start your 3-day free trial
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.


The tricky part of how to change Chrome proxy settings is usually not the steps. It is choosing the right settings entry. Chrome usually uses the system proxy, but an extension, launch option or policy can control its configuration instead. Google's chrome.proxy documentation lists system as one proxy mode, and the official Windows, macOS, and GNOME documentation places proxy controls in system network settings.[1][2][3][4]
That is why closing and reopening Chrome often does not reset anything. The proxy server, PAC script, or bypass list may still be active at the operating system level. What you need to change is often the system network layer, not Chrome itself.
Key Takeaways
- Chrome usually follows the system proxy instead of storing a separate browser-only proxy configuration.[1][2][3][4]
- Common proxy modes include auto-detect, PAC script, manual proxy, and direct connection.[1][2][3][4]
- A proxy can change routing, but it does not mean traffic is encrypted by default; if you need encryption or full tunnel protection, proxy settings alone are not enough.[1][2][3][4]
- Troubleshooting usually comes down to the proxy address, port, authentication, bypass list, and PAC script.
- On work or school networks, settings may be managed by an administrator and overwritten by policy.
These instructions cover Windows 10/11, macOS with System Settings, and Ubuntu Desktop using GNOME’s Network panel. Record your installed OS and Chrome versions; menu wording can differ. They are organized from the cited official documentation and have not undergone a complete end-to-end test. Change only a configuration you own or have permission to manage.
Google's developer documentation divides Chrome proxy modes into direct, auto_detect, pac_script, fixed_servers, and system. For most users, the common real-world case is simple: Chrome uses the system proxy.[1]
That means when you search proxy inside Chrome, the page that opens is usually the operating system's proxy panel, not a browser-specific control center.
The system panel is only one input. An extension with the proxy permission can set Chrome’s configuration, and command-line options can affect the fallback to system settings. A policy can also control the effective configuration. Consequently, an empty system proxy panel does not by itself prove Chrome is using a direct connection.[1]
Before editing, open chrome://policy to inspect applied policies and their source, and review installed proxy-controlling extensions. Record any approved launch options with the configuration owner. If settings are locked, supplied by your organization, or repeatedly restored, ask IT to identify the controlling layer; do not remove policies or disable a managed extension to force a different route.[5]
If a proxy you never set keeps reappearing on a personal device, treat it as a wider security question and run the broader online safety checks for extensions, accounts and installed software.
The quickest path is:
Settings;proxy;This matters especially at work. You may think no proxy is enabled, while the system is actually using auto-detection or a PAC script.
Before changing anything, privately record the current mode, server and port, PAC URL, bypass list and active network. Obtain missing values from the trusted proxy owner. Keep passwords out of screenshots and shared notes. Choose one permitted website and task for a before/after comparison, and save work in other apps because a system-level change may affect them.
Microsoft's documentation describes three main Windows paths: automatic detection, setup script, and manual proxy server.[2]
For the Windows 11 layout described by Microsoft, use this sequence; Windows 10 may expose the fields directly rather than through a setup dialog.[2]
Steps 2–4 below are alternatives: complete only the mode approved by the network owner.
Settings > Network & internet > Proxy and record all existing automatic and manual settings.Automatically detect settings as instructed by the network owner; this option does not require inventing a server address.Set up or Edit beside Use setup script, enable it, enter the supplied script URL and select Save.Use a proxy server, enter the supplied address and port, preserve approved exceptions and select Save.Use this when a company or campus network already provides proxy settings. If the network depends on auto-detection, typing a random manual address may break connectivity.
Use this when IT gives you a PAC file URL. PAC files can decide whether a request should use a proxy based on the URL or domain.
You need to know:
If you only know half of that information, do not force it.
Apple's path is clear: System Settings > Network > select your current network > Details > Proxies.[3]
There you can configure auto-discovery, PAC, HTTP, HTTPS, and SOCKS proxies, plus hosts and domains that should bypass the proxy.[3]
Common Mac mistakes include filling in the server and port but forgetting:
Apply the change to that network service only:
OK, reopen that service’s Proxies panel to confirm the saved settings, and test the same permitted Chrome task.[3]Changing Wi-Fi settings does not establish what an Ethernet service uses. Check the service actually carrying the comparison request.
GNOME documentation groups proxy settings into None, Manual, and Automatic, with the entry in the Network Proxy panel.[4]
On this desktop, check Chrome’s controlling configuration before assuming it follows these settings.
This example is for Ubuntu’s GNOME desktop, using the upstream GNOME instructions; it is not a universal Linux menu path.[4]
Network, and open the Network Proxy control.Manual only with approved per-protocol addresses and ports, or Automatic with the supplied configuration URL.Other desktop environments and application-specific settings need their own documentation. Do not infer that terminal tools or every application consume this panel.
A proxy forwards requests. It does not encrypt everything by default. If you want broader traffic protection, check whether the tool provides encryption, tunneling, and unified connection protection, not only whether it has a proxy.
A proxy address or PAC script chooses where requests go; it is not a guarantee of an encrypted connection to that proxy. A VPN is not a substitute for correcting the proxy address, credentials, or PAC rules, and it does not override managed-device policy. If you still need an encrypted tunnel for personal browsing, AethoVPN can carry that traffic while HTTPS stays enabled; once connected, confirm which applications and DNS requests actually use the tunnel before relying on its coverage. Create your account with an email code to set up that tunnel.
When the unresolved issue is application coverage, compare system proxy scope with a TUN route. A setting used by Chrome is not proof that every app uses it. This comparison does not authorize replacing a required organizational route.
PAC is flexible, but it can fail because the script URL is down, rules conflict, or workplace policy changes.
Sometimes only part of the traffic is not following the route you expected. You may need to check IP results, DNS behavior, and the bypass list together.
The setting is often stored in the operating system, not the browser.[2][3][4]
I recommend this order:
If nothing changes on a company network, policy override is a common reason. That does not mean you clicked the wrong button. It may mean the device is managed.
Use a new request to the same hostname in the same Chrome profile after saving the change. Repeat the original task, preserve HTTPS validation, and record any proxy, authentication or certificate error. A PAC rule may send the task site and an IP-check site along different paths, so the IP result is only evidence about that request; it does not prove DNS behavior, every site’s route or coverage of other apps.
OK. On GNOME, restore the recorded method and values; select None only if direct access was the approved baseline.[2][3][4]Stopping Chrome or a separate VPN is not restoration of these settings. Retain a private record of what changed and whether the original task recovered; do not claim success from a saved switch alone.
For regular users, usually not through a standalone standard interface. Chrome mostly calls the system proxy.[1]
You probably changed the system proxy, which other browsers may also use. Check each browser’s routing settings before assuming the change applies only to Chrome.
No. A proxy mainly changes the forwarding path. Encryption and broader connection protection depend on the tool you use.
It is an automatic proxy configuration script that decides which URLs should use a proxy and which proxy they should use.[1][2][3][4]
Because the setting may be stored in the operating system, so exiting the browser does not remove it.
It is probably controlled by administrator policy. Confirm whether the device is managed, then contact IT.
An extension, launch option or policy may control the effective configuration. Inspect the controlling layer and ask its owner; an empty system panel is not proof of direct access.[1][5]
Disclaimer
This article is for general network configuration and privacy education only. Proxy policies on enterprise, campus, and managed devices may be controlled by administrators.
Sources
chrome.proxy API: https://developer.chrome.com/docs/extensions/reference/api/proxySources checked 9 October 2026.
Related Articles:
Sign up to experience all premium features at no cost.
*Available only to new users. Each user is limited to one trial.





