Google tells platforms to noindex shareable pages by default
Google updated its guide to preventing user-generated spam on 26 October 2026. The page now covers more than comment forms and hosting platforms. It also applies to any service where users create shareable pages, generated outputs or web apps.
The key advice is to index only content meant for Search. Google says pages built for sharing, collaboration or utility should be noindexed by default, or blocked from crawling. Content that is meant to be found in Search can stay indexable. Google also says that to help platforms catch abuse earlier, you should verify your site in Search Console and watch for unexpected spikes in indexed pages, impressions or queries.
Why it matters
Spammers use public pages that anyone can create. A shared document, a generated landing page or a hosted mini app can each become a place to hide links or promote scams. If those pages get indexed, they can pull your whole domain into a spam problem.
The guide offers two ways to keep pages out of the index: a robots meta tag or an X-Robots-Tag HTTP header with noindex, or a robots.txt block. Do not combine the two on the same URLs. If robots.txt blocks a page, Googlebot cannot read the noindex tag on it, and a blocked URL can still end up indexed.
This applies to SaaS products, AI tools that publish outputs, community sites and any brand with a "share this" feature. It also matters to AI search. Spammy shared pages on your domain can dilute the trust signals that search engines and AI systems read about you.
What to do this week
- List every feature on your site that lets users publish a page: shared links, public profiles, generated reports, embedded apps.
- Check each one for a noindex tag or header. Default to noindex unless the page earns a place in Search.
- Open the Page indexing report in Search Console and look for sudden jumps in indexed URLs.
- Check the Search performance report for odd queries sending impressions to user-created pages.
- Do not use robots.txt and noindex together on the same URLs.
Treat user-created pages as private until you decide otherwise. It is a small change that protects the rest of your site.