Search Engine and Homepage Keep Changing? Here’s How to Fix It (2026)

Your default search engine or homepage switching on its own almost always points to one of three things: a browser hijacker (malware), a rogue extension, or a Chrome enterprise policy that shouldn’t be there. The fix depends on which one you’re dealing with, and this guide walks through every scenario across Chrome, Firefox, Edge, and Safari so you can lock your settings down for good.

What’s Actually Causing It

Before you start changing settings that will just get overridden again, figure out why it’s happening. Here’s a quick diagnostic:

Symptom	Likely Cause	Jump To
Search engine changes to Yahoo, Bing, or an unfamiliar engine every time you restart the browser	Browser hijacker (malware) or rogue extension	Remove Browser Hijackers section
Chrome shows “Managed by your organization” on a personal computer	Fake enterprise policy injected by malware	Remove Fake Chrome Policies section
Settings change only on your work/school computer	Legitimate IT policy—talk to your admin	Managed Browser Environments section
Homepage changed once and stayed	Accidental setting change or an extension you installed recently	Change Your Homepage section
Settings keep reverting across multiple devices	Hijacked browser sync	Check Browser Sync section

Remove Browser Hijackers First

If your search engine or homepage keeps changing back after you fix it manually, malware is almost certainly overriding your settings. Changing the search engine without removing the hijacker first is pointless—it will just change back.

Step 1: Uninstall Suspicious Programs

On Windows 10/11: Open Settings → Apps → Installed apps. Sort by “Install date” and look for anything you don’t recognize, especially programs installed around the time the problem started. Common culprits include anything with “Search,” “Toolbar,” “Browser Helper,” or “Assistant” in the name. Uninstall anything suspicious.

On Mac: Open Finder → Applications. Look for apps you didn’t install. Drag suspicious apps to the Trash, then empty the Trash. Also check System Settings → General → Login Items and remove anything unfamiliar that launches at startup.

Step 2: Remove Rogue Extensions

Extensions are the #1 way hijackers get into your browser in 2026. Even extensions that look legitimate can be sold to third parties who inject redirect code.

Chrome: Type chrome://extensions in the address bar. Disable every extension, then re-enable them one at a time. If the problem stops when a specific extension is disabled, you found it—remove it. Pay special attention to extensions you don’t remember installing.

Firefox: Type about:addons in the address bar. Check both Extensions and Plugins tabs. Remove anything unfamiliar.

Edge: Type edge://extensions in the address bar. Same process—disable all, re-enable one at a time.

Safari: Go to Safari → Settings → Extensions. Uncheck or uninstall any extension you don’t recognize or actively use.

Step 3: Run a Malware Scan

Manual removal often misses components. Run a dedicated anti-malware tool:

Windows: Download and run Malwarebytes AdwCleaner (free)—it specifically targets browser hijackers, adware, and PUPs. After that, run a full scan with Windows Security (built into Windows 10/11) via Settings → Privacy & security → Windows Security → Virus & threat protection → Full scan.

Mac: Download Malwarebytes for Mac (free version). Run a full scan. Also check System Settings → Privacy & Security → Profiles. If you see any configuration profiles you didn’t install, select them and click the minus (-) button to remove them. Malware on Mac commonly uses configuration profiles to force browser settings.

Step 4: Check Windows Task Scheduler

Some persistent hijackers create scheduled tasks that re-infect your browser settings every time you log in.

Press Windows + S, type “Task Scheduler,” and open it. In the Task Scheduler Library, look for tasks that reference a browser, a search URL, or an unknown executable. Right-click suspicious tasks and select “Delete.”

Remove Fake Chrome Policies (“Managed by Your Organization”)

If Chrome displays “Managed by your organization” at the top of the Settings page and you’re on a personal computer, malware has injected fake enterprise policies to lock your search engine and homepage.

Verify the Problem

Type chrome://policy in the address bar. If you see policies listed that you didn’t set (especially ones controlling the default search engine or homepage), you need to remove them.

Windows Fix

1. Press Windows + R, type regedit, and press Enter
2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
3. Delete the entire Chrome key (right-click → Delete)
4. Also check HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome and delete that key if it exists
5. Restart Chrome

Mac Fix

1. Open Terminal (Applications → Utilities → Terminal)
2. Run: defaults read com.google.Chrome to see what policies exist
3. Delete each policy with: defaults delete com.google.Chrome [PolicyName]
4. Alternatively, delete the policy file directly: sudo rm /Library/Managed Preferences/com.google.Chrome.plist
5. Restart Chrome

Change Your Default Search Engine

Once you’ve confirmed malware isn’t the issue (or after removing it), set your preferred search engine in each browser.

Chrome

1. Open Chrome → click the three-dot menu (⋮) → Settings
2. Click Search engine in the left sidebar
3. Next to “Search engine used in the address bar,” select your preferred engine from the dropdown
4. Click Manage search engines and site search to remove any unfamiliar entries—click the three-dot icon next to suspicious entries and select “Delete”

Firefox

1. Open Firefox → click the hamburger menu (☰) → Settings
2. Click Search in the left sidebar
3. Under “Default Search Engine,” select your preferred engine from the dropdown
4. Scroll down to “Search Shortcuts” and remove any engines you don’t recognize by selecting them and clicking “Remove”

Microsoft Edge

1. Open Edge → click the three-dot menu (⋯) → Settings
2. Click Privacy, search, and services in the left sidebar
3. Scroll to the bottom and click Address bar and search
4. Under “Search engine used in the address bar,” select your preferred engine
5. Click Manage search engines to remove any suspicious entries

Safari (Mac)

1. Open Safari → click Safari in the menu bar → Settings
2. Click the Search tab
3. Select your preferred search engine from the dropdown next to “Search engine”

Safari (iPhone/iPad)

1. Open the Settings app → scroll down and tap Safari
2. Tap Search Engine
3. Select Google, Yahoo, Bing, DuckDuckGo, or Ecosia

Change Your Homepage

Chrome

1. Open Settings → click Appearance in the left sidebar
2. Toggle on “Show Home button”
3. Enter your preferred URL or select “New Tab page”
4. Also check On startup in the left sidebar—select “Open the New Tab page” or set specific pages

Firefox

1. Open Settings → click Home in the left sidebar
2. Next to “Homepage and new windows,” select “Custom URLs” and enter your preferred page
3. Next to “New tabs,” select “Firefox Home” or “Blank Page”

Microsoft Edge

1. Open Settings → click Start, home, and new tabs in the left sidebar
2. Under “When Edge starts,” choose your preference
3. Under “Home button,” toggle it on and enter your preferred URL

Safari

1. Open Safari → Settings → General tab
2. Next to “Homepage,” enter your preferred URL
3. Set “New windows open with” and “New tabs open with” to “Homepage” if you want it everywhere

Check Browser Sync

If your search engine changes across multiple devices at the same time, the hijacker infected one device and browser sync pushed the corrupted setting everywhere else.

Chrome: Go to Settings → You and Google → Sync and Google services → Manage what you sync. Either turn off sync temporarily, fix the setting on every device, and re-enable—or click “Reset sync” at chrome.google.com/sync to clear all synced data from Google’s servers and start fresh.

Firefox: Go to Settings → Sync. Temporarily disconnect sync, fix settings on all devices, then reconnect.

Edge: Go to Settings → Profiles → Sync. Toggle off sync, fix settings on each device individually, then turn sync back on.

Managed Browser Environments (Work and School)

If you’re using a work or school computer, your IT administrator can lock your default search engine and homepage through group policies. This is legitimate and is how organizations manage their devices.

You’ll see “Managed by your organization” in Chrome settings, but unlike the malware scenario, this is expected. The only way to change these settings is to contact your IT department and request the change. On a managed device, attempting to edit the registry or remove policies could violate your organization’s acceptable use policy.

Prevent It From Happening Again

Once you’ve fixed your settings, take these steps to keep hijackers out for good:

Be careful with free software installers. Most browser hijackers arrive bundled with free downloads. Always choose “Custom” or “Advanced” installation options and uncheck any bundled offers for toolbars, search engines, or browser extensions.

Audit your extensions regularly. Go through your browser extensions every few months and remove anything you’re not actively using. Extensions can be sold to new owners who add malicious code through updates.

Keep your browser updated. Chrome, Firefox, Edge, and Safari all release security patches that close vulnerabilities hijackers exploit. Enable automatic updates if they’re not already on.

Use an ad blocker. A reputable ad blocker like uBlock Origin can prevent malicious ads that deliver hijacker payloads through drive-by downloads.

Don’t ignore “Managed by your organization” warnings. On a personal device, this message is a red flag. Address it immediately using the steps in this guide.