caption: Enable Process Isolation
default: null
desc: |-
  This policy controls the Process Isolation settings for <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.

  Enabling Process Isolation improves the security of <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> by preventing authorized applications on the system from tampering with or reading the contents of <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>'s running processes. This helps prevent other applications on the system from gaining access to <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>'s encrypted data.

  Enabling Process Isolation may cause incompatibilities with third party applications that rely on being able to inject or tamper with <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>'s processes, such as antivirus, screen reader or window manager applications.

  Setting the policy to Enabled turns on process isolation in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.

  Setting the policy to Disabled turns off process isolation in <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph>.

  If this policy is unset, <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> will follow the default rollout process for the Process Isolation feature, which means that the feature will be gradually rolled out to an increasing number of users.

  Note: This policy is applied when <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> starts. If the policy is changed while <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> is running, the new setting will take effect on the next restart.
example_value: true
features:
  dynamic_refresh: false
  per_profile: false
items:
- caption: Enable Process Isolation.
  value: true
- caption: Disable Process Isolation.
  value: false
- caption: Process Isolation may be used depending on feature launch process.
  value: null
owners:
- wfh@chromium.org
- file://sandbox/win/OWNERS
schema:
  type: boolean
supported_on:
- chrome.win:151-
tags:
- system-security
type: main
