Browser Security: Settings, Extensions, Privacy

The browser is your main window to the internet and the main target for attacks. Through it, data leaks, trackers enter, and phishing works. Let’s understand how to configure a browser for security without losing convenience.

Choosing a Browser

Comparing Popular Browsers

Recommendations

For privacy: Firefox with settings or Brave out of the box.

For Apple ecosystem: Safari - good privacy, optimized for macOS/iOS.

For compatibility: Chrome, but with proper settings and extensions.

---

Privacy Settings

Firefox

Enhanced Tracking Protection:

1. Settings → Privacy & Security
2. Enhanced Tracking Protection → Strict
3. Send websites a “Do Not Track” signal → Always

Additional:

about:config → privacy.resistFingerprinting = true
about:config → network.cookie.cookieBehavior = 5
about:config → dom.security.https_only_mode = true

Chrome

Basic Settings:

1. Settings → Privacy and security
2. Third-party cookies → Block third-party cookies
3. Send a “Do Not Track” request → On
4. Safe Browsing → Enhanced protection

Secure DNS:

1. Settings → Security
2. Use secure DNS → On
3. Choose Cloudflare or NextDNS

What this setting actually protects, and why it’s a separate layer against ISP surveillance, is covered in our piece on encrypting DNS queries.

Brave

Out of the box:

• Tracker and ad blocking
• Fingerprinting blocking
• HTTPS Everywhere
• Third-party cookie blocking

Additional:

1. Settings → Shields → Aggressive
2. Settings → Privacy → Block fingerprinting → Strict

Safari

Settings:

1. Safari → Preferences → Privacy
2. Prevent cross-site tracking → On
3. Hide IP address from trackers → On
4. Block all cookies → Optional (may break sites)

---

Essential Extensions

For All Browsers

For Advanced Users

What to Avoid

❌ Free VPN extensions: most collect data

❌ Antivirus extensions: redundant, slow down browser

❌ Video download extensions: often contain malware

❌ Extensions with broad permissions: “access to all sites”

---

uBlock Origin: Proper Setup

Basic Setup

1. Install from official extension store
2. Icon → Settings (gear)
3. Filter lists → enable:
   • EasyList
   • EasyPrivacy
   • Fanboy’s Annoyance List
   • Malware Domain List

Advanced Filters

Against cookie banners:

• I don’t care about cookies
• or Fanboy’s Annoyance

Blocking Modes

---

Fingerprinting Protection

What Is Fingerprinting

Sites collect unique browser characteristics:

• Screen resolution
• Installed fonts
• Browser plugins
• Time zone
• System language
• WebGL renderer

The combination creates a unique “fingerprint” - even without cookies you can be tracked.

How to Protect Yourself

Firefox:

about:config → privacy.resistFingerprinting = true

⚠️ May break some sites.

Brave:

• Built-in protection, works out of the box

CanvasBlocker Extension:

• Spoofs canvas data
• Randomizes fingerprint

Testing

• Cover Your Tracks - EFF test
• AmIUnique - how unique is your browser

---

Password Security in Browser

Built-in Manager vs Specialized

Recommendation

Use a standalone password manager instead of the browser’s:

• Bitwarden: free, open source
• 1Password: paid, best UX
• KeePassXC: local, maximum control

Autofill Setup

1. Disable browser’s built-in password manager
2. Install Bitwarden/1Password extension
3. Enable biometrics for unlock

---

Cookies and Tracking

Cookie Types

Configuration

Blocking third-party cookies:

• Firefox: Settings → Privacy → Strict protection
• Chrome: Settings → Cookies → Block third-party
• Brave: Enabled by default

Auto-delete cookies:

• Cookie AutoDelete extension
• Or “Delete on browser close” setting

---

HTTPS and Secure Connections

Why HTTPS Matters

HTTP:  Your data → [Visible to all] → Server
HTTPS: Your data → [Encrypted] → Server

HTTPS-Only Mode

Firefox:

1. Settings → Privacy → HTTPS-Only Mode
2. Enable in all windows

Chrome:

1. Settings → Security
2. Always use secure connections → On

Brave:

• Enabled by default

Security Indicators

---

Incognito Mode: What It Does and Doesn’t Do

What It Protects

✅ Local history not saved ✅ Cookies deleted on close ✅ Autofill doesn’t work ✅ Extensions disabled (by default)

What It Does NOT Protect

❌ IP address visible to sites and ISP ❌ Employer sees traffic ❌ Sites can track by fingerprint ❌ Downloaded files remain

When to Use

• Logging into someone else’s account on your device
• Searching for something personal on shared computer
• Checking prices without cookie history

For Real Privacy

Incognito + VPN:

• VPN hides IP from sites and ISP
• Incognito leaves no local traces

---

Browser and VPN

How They Work Together

VPN Extensions vs System VPN

Recommendation: Use system VPN client, not extension.

WebRTC Leaks

WebRTC can reveal real IP even through VPN.

Check: browserleaks.com/webrtc

Disable in Firefox:

about:config → media.peerconnection.enabled = false

In Chrome/Brave:

• WebRTC Control extension or uBlock Origin

---

Browser Security Checklist

Basic Level

• Browser updated to latest version
• uBlock Origin installed
• Password manager (Bitwarden/1Password)
• HTTPS-Only mode enabled
• Third-party cookies blocked

Advanced Level

• Firefox or Brave instead of Chrome
• Advanced privacy settings
• Privacy Badger or similar
• DNS encryption (DoH)
• Regular cookie clearing

Paranoid Level

• Tor Browser for sensitive stuff
• Resist Fingerprinting enabled
• Separate browser for finances
• JavaScript disabled by default
• VPN always on

---

Summary

A secure browser is a balance between protection and convenience. You don’t need to become paranoid: basic settings + uBlock Origin + password manager will protect against 95% of threats.

For serious privacy, add Firefox with settings + VPN. This will cover tracking, fingerprinting, and ISP surveillance.

A browser is only one front of digital security; it’s worth pairing its settings with the rest of the safe-browsing habits.