Google Chrome Downloads 4 GB Gemini Nano Model Without User Prompt

Google Chrome Downloads 4 GB Gemini Nano Model Without User Prompt

Chrome’s Silent 4 GB Download: What You Need to Know About Gemini Nano and Your Disk

Google’s browser quietly installs an on-device AI model on millions of PCs. Here is a clear-eyed look at what is happening, why it matters, and what you can do about it.

By Tech Desk | March 4, 2026

If you have noticed that Google Chrome has been quietly consuming an unexpected chunk of your hard drive, you are not alone.

A post by a social media user known as @zephyrianna recently went viral after they discovered a roughly 4 GB file buried inside their Windows user profile — a file placed there by Chrome, without any clear opt-in prompt.

The file turned out to be the Gemini Nano on-device AI model, and the discovery has reignited a long-running debate about how tech companies handle consent when rolling out AI features.

While the post framed the behaviour as a surprise security finding, the reality is more nuanced — and ultimately a story about transparency, not malware.

What Chrome Is Actually Downloading

The file in question is named weights.bin (not weight.bin, as some reports have stated) and sits in the following directory on Windows machines:

%LOCALAPPDATA%\Google\Chrome\User Data\OptGuideOnDeviceModel

This file contains the weights for Gemini Nano, a lightweight, on-device version of Google’s Gemini AI model. Chrome uses it to power features such as “Help me write,” on-device scam detection, and other AI-assisted browser functions — all without sending your text to a remote server.

The download is triggered when Chrome’s AI features are active, which is the case by default in recent versions. Many users have only discovered the file after noticing a sudden and unexplained jump in disk usage. Deleting the file manually provides only temporary relief: Chrome restores it automatically the next time the browser starts.

Is This New?

No. Reports of the OptGuideOnDeviceModel folder and the large weights.bin file have been circulating in community forums for well over a year. The behaviour recently resurfaced on social media and gained wide attention, but the underlying mechanism is not a newly introduced change. What is new is the scale: as Chrome has rolled out Gemini features more broadly, a greater number of everyday users are encountering the download without having consciously opted into anything.

The Real Concern: Consent, Not Security

It is important to be precise here. The weights.bin file is not malware. It is not spyware. It is a legitimate component that enables on-device AI processing — which is, if anything, more privacy-preserving than cloud-based alternatives, because your data never leaves your machine.

The legitimate grievance is about transparency and consent. A 4 GB file is not a minor background update. On a laptop with a 128 GB or 256 GB SSD, it represents a meaningful fraction of available storage. Users on lower-spec hardware may also notice performance impacts while the model loads in the background. Google has not issued a public statement directly addressing the consent question, and the lack of a clear opt-in dialogue before the download begins remains a valid criticism.

A Separate, More Serious Issue: CVE-2026-0628

Separately from the storage controversy, security researchers at Palo Alto Networks Unit 42 recently disclosed a genuine, high-severity vulnerability in Chrome’s Gemini integration. Tracked as CVE-2026-0628, the flaw allowed a malicious browser extension with relatively basic permissions to inject code into Chrome’s Gemini Live side panel and inherit its elevated privileges.

Because the Gemini panel is granted deep browser-level access in order to perform AI tasks — summarising pages, reading local files, accessing camera and microphone — a hijacked panel could have been used to silently spy on users, capture screenshots, or steal local files, all without the victim taking any action beyond opening the Gemini panel.

The good news is that Google patched this vulnerability in early January 2026, in Chrome versions 143.0.7499.192 and above for Windows and macOS. Chrome updates automatically, but users who never fully close their browser may not have received the patch. Checking your version at chrome://settings/help and restarting Chrome if an update is pending is strongly advised.

How to Reclaim Your Disk Space

If you want to stop Chrome from downloading or re-downloading the Gemini Nano model, there are two main approaches:

Option 1 — Chrome Flags (simpler, less permanent):

Open Chrome and navigate to chrome://flags/. Search for “Enables Optimization Guide On Device” and set it to Disabled. Also search for and disable the “Prompt API for Gemini Nano” flag. Restart Chrome, then manually delete the weights.bin file from the OptGuideOnDeviceModel folder.

Option 2 — Windows Registry (more reliable):

A Registry policy key can prevent Chrome from downloading AI models entirely, even after updates. This approach is more permanent and survives Chrome restarts. Because editing the Registry carries risk, ensure you have a full system backup before proceeding and follow a reputable step-by-step guide.

Bottom Line

Chrome’s silent download of the Gemini Nano model is a real and legitimate privacy and storage concern, but it is not a security breach.

The more pressing security issue — CVE-2026-0628 — has already been patched.

Users should update Chrome immediately, be cautious about installing unfamiliar extensions, and use the flags or Registry method above if the 4 GB AI model download is unacceptable for their setup.

Sources: Palo Alto Networks Unit 42, Pureinfotech, Malwarebytes, The Hacker News, Cybernews, NIST NVD

Google Chrome Downloads 4 GB Gemini Nano Model Without User Prompt