The Best Private and Secure Web Browsers

1. Select the preferences or settings menu in the top right hand corner of your screen.
2. Navigate to Settings > Privacy & Security > Firefox Data Collection and Use.
3. Uncheck every box in this section.

Firefox also has a feature which can block trackers, cookies, fingerprinters and cryptominers, called Enhanced Tracking Protection.

1. Select the settings menu in the top right of your screen.
2. Navigate to Settings > Search > Default Search Engine.
3. Choose your preferred search engine from the drop-down menu.

Access advanced settings by entering about:config in the address bar. Click “Accept the risk and continue” to access the configuration menu.

To modify settings, search for the preference name and double-click to toggle between true and false.

Here is a list of the most important advanced Firefox privacy settings, and whether it should be enabled for disabled for maximum privacy:

The most important advanced Firefox privacy settings and recommended values:

Preference Name	Set To	Effect
media.peerconnection.enabled	FALSE	Disables WebRTC to prevent IP address leaks
privacy.resistFingerprinting	TRUE	Enables native fingerprint protection
privacy.trackingprotection.fingerprinting.enabled	TRUE	Enhances fingerprint protection
privacy.trackingprotection.cryptomining.enabled	TRUE	Protects against cryptominers
privacy.firstparty.isolate	TRUE	Enables first-party isolation to prevent cross-domain tracking
privacy.trackingprotection.enabled	TRUE	Blocks known third-party trackers
geo.enabled	FALSE	Disables geolocation services
media.navigator.enabled	FALSE	Prevents tracking of camera and microphone information
network.cookie.cookieBehaviour	4	Enables highest cookie protection (New Cookie Jar)
network.cookie.lifetimePolicy	2	Deletes cookies at end of session
network.dns.disablePrefetch	TRUE	Disables DNS prefetching
network.prefetch-next	FALSE	Disables page prefetching
webgl.disabled	TRUE	Disables WebGL to prevent fingerprinting and security risks
dom.event.clipboardevents.enabled	FALSE	Prevents websites from detecting clipboard actions
media.eme.enabled	FALSE	Disables DRM-controlled HTML5 content

Firefox Focus has telemetry turned on by default. Navigate to the settings to disable it.

At the same time, customize the level of privacy to your preferences. As with any super-private browser, turning on all of the protections breaks some websites or makes them display strangely.

Using Tor correctly isn’t difficult, but it isn’t always intuitive. It has two big vulnerabilities:

1. Information leaks when used improperly.
2. Potential eavesdropping at public exit nodes.

To maintain anonymity, follow these steps:

• Avoid logging into personal accounts, such as social media or email.
• Don’t share personal information.
• Use HTTPS sites exclusively.
• Disable mobile two-step verification.
• Never torrent (risks IP leaks and slows the network).
• Use privacy-focused search engines:
  • DuckDuckGo
  • Searx.me
  • Qwant
  • Start Page

Brave can be a secure, privacy-focused browser if you avoid the advertising system. Even when configured properly, it’s still less privacy-effective than Firefox-based browsers however.

Keep BAT rewards disabled. It’s turned off by default and we recommend you keep it that way.

If you’ve already turned on the rewards system, turn it off by clicking the triangular ‘rewards’ button in the top right corner of the browser.

Unprotected browsers can expose sensitive data to advertisers, governments, tech companies, and even criminals, such as:

• Account details
• Autofill information
• Purchases made
• Messages sent
• Websites visited
• Videos watched

While data sharing for services is common, most collection occurs without user knowledge or consent, often justified by unused features.

There’s a significant risk of data being misused, abused, or shared without consent

Third-party data brokers create extensive user profiles, selling them for:

• Targeted advertising
• Loan term adjustments
• Insurance premium calculations
• Service restrictions based on demographics
• Political influence
• Intelligence gathering

Browser cookies and trackers are crucial to this data ecosystem, powering customized content and ads across websites.

Large-scale data collection poses risks and infringes on individuals’ right to control their information.

A private browser with a VPN is the first step towards reclaiming online privacy. Some VPNs even offer built-in ad and tracker blocking.

1. Secure Browser

A secure browser protects against targeted attacks and malware. It may stop a hacker from stealing your account details, but it won’t prevent you from leaving a trail of data behind you as browse the internet.

Google Chrome is an example of a browser that’s secure but not private.

2. Private Browser

A private browser limits data collection and tracking. It doesn’t share your data with tech companies or governments and has robust anti-tracking measures. Ideally it is also open source for transparency.

Smaller development teams and open source software usually means less frequent security updates, potentially increasing vulnerabilities.

Iridium is an example of a browser that is private but less secure.

3. VPN Browser

So-called ‘VPN browsers’ are normally proxies, not full VPNs, which means they don’t offer as much protection.

The privacy claims of these browsers can be unreliable as there no regulations around what constitutes a ‘VPN browser’.

The Opera browser is just one example of a ‘VPN browser’ that undermines your privacy by sharing your data to numerous third parties, including Facebook and Google. Our advice is to avoid using Opera VPN, as it’s not safe to use.

For optimal privacy, combine a trusted VPN with a genuinely private browser rather than relying on ‘VPN browsers’.

Some browsers claim to have full VPN capabilities, but these ‘VPN browsers’ are often glorified proxies with limited protection. The term lacks a strict definition, so don’t assume they offer privacy. Let’s examine the most popular options:

1. The most popular ‘VPN Browser’ is probably the Opera browser. Despite its popularity, Opera is neither a proper VPN nor is it particularly private. We recommend avoiding the Opera browser where possible. For more details on exactly why, you can skip to our chapter on popular browsers to avoid.
2. Tenta Browser is another “VPN browser” that’s only available on Android. Tenta isn’t fully open-source, which is worrying for a browser that sells itself on privacy. The free version of Tenta isn’t a full VPN, although Tenta do sell a “pro version”, which is. It has a firm no-logs policy and is kept up to date from a security perspective, which are both positives.
3. Epic is the third well-known ‘VPN browser’. Epic is closed-source, so it’s hard to know exactly what it does with your data. Like Opera and Tenta it only runs as a proxy, not as a full VPN. Epic is also based in India, with servers in the US – neither of which are good jurisdictions for privacy. It is based on Chromium, and there is some evidence that it still sends your information back to Google.

We can’t fully recommend using any of these browsers. At the very least, you should use them with caution.

We look forward to the arrival of a well-made, transparent, and effective VPN browser. Until then, the term “VPN Browser” is a marketing statement more than anything else.

If you want a lightweight VPN within your browser then the best option is to use a trustworthy VPN add-on, although these are also often proxies. To help you find a safe option, we’ve written guides to the best VPN extensions for Chrome and VPN extensions for Firefox.

If you’re looking for a private browsing experience that includes a VPN, our advice is to avoid “VPN Browsers”. You should be running a full, trustworthy VPN alongside a properly configured privacy-first browser.

Google Chrome is the world’s most popular browser, but despite it’s ease of use, poses significant privacy risks.

Chrome is a key data source for Google’s lucrative personalized advertising business. It records most of your online activity, even in Incognito Mode. The browser integrates with Google’s ecosystem, allowing extensive data collection across various services that’s the basis of Google’s powerful ad-targeting service.

Data Collection

Chrome’s “Sync” feature, enabled by default when logged into a Google Account, saves the following to Google’s servers:

• Browsing history
• Bookmarks
• Passwords and Autofill information
• Browser settings and extensions

Even with Sync disabled, Google collects data through searches, email, YouTube, third-party services, and analytics on most websites.

Google’s privacy policy couches its data collection in friendly language, saying that they collect data to improve services, but it’s primarily used for targeted advertising.

“We collect information to provide better services to all our users — from figuring out basic stuff like which language you speak, to more complex things like which ads you’ll find most useful, the people who matter most to you online, or which YouTube videos you may like”

Google tracks users even when not signed in, using unique identifiers tied to browsers and devices.

Types of Data Collected

Whether or not you’re signed into your Google account, Google can collect the following data from across its platforms:

• Browser type & settings
• Device type & settings
• Operating system
• Mobile network name
• Phone number
• IP address
• System activity
• Purchases
• Date & time of interaction
• Search terms
• Videos you watch
• Voice and audio (from audio features)
• A list of the people with whom you communicate and share content
• Activity of third-party sites or apps that use Google services*
• Google Chrome browsing history
• Call & message logs from Google Services

^{*Includes any website using Google apps or files hosted in Google Hosted Libraries.}

This data is first analyzed to detect “spam, malware and illegal content” then used to serve highly-detailed and personalized adverts. You can see just how long Google keeps all of this information here.

How to Download Your Google Data

1. Select Manage Your Google Account from your user profile
2. Select Data & Privacy
3. Find Download or Delete Your Data near the bottom of the page
4. Choose Download Your Data and follow the prompts

We recommend you avoid all Google services as much as possible, especially Chrome. If you must use Chrome because of its ease-of-use and speed, then we recommend using it alongside a trusted Chrome VPN at the very least.

Microsoft Edge has improved in performance and user interface, but falls short in privacy features and customization options.

Privacy Concerns

• Stores browsing habits, passwords, and form entries in the cloud
• Includes integrated DRM technology, which can be intrusive
• Offers minimal and ineffective anti-tracking technology

While Microsoft’s data gathering isn’t as extensive as Google’s, Edge is still not a safe haven for user data. However, Microsoft does provide instructions on how to view and delete stored information.

Microsoft’s overall track record on user privacy remains questionable, with the company facing scrutiny over its data practices.

Safari, Apple’s default web browser for macOS and iOS devices, has made significant strides in privacy protection in recent years. However, it still falls short of being considered a truly private browser.

Safari Privacy Protection Features

• Intelligent Tracking Prevention (ITP): Safari uses machine learning to identify and block cross-site trackers, limiting advertisers’ ability to follow you across the web.
• Privacy Report: Provides you with a summary of trackers blocked on the websites you visited.
• Private Browsing mode: Prevents Safari from remembering the pages you visit, your search history, or your AutoFill information.
• Fingerprinting defense: Reduces the ability of websites to uniquely identify your device based on its characteristics.

Safari Privacy Concerns

Apple’s track record on user privacy is mixed at best. The company was a partner in the NSA’s PRISM surveillance program, raising concerns about data sharing with government agencies. Moreover, in the past Apple was also caught storing “deleted” browsing data and collecting browsing history even in private mode.

According to Apple’s privacy policy, the company collects the following personal information from its users:

• Name
• Device IDs
• IP address
• Phone number
• Email address
• Mailing address
• Contact preferences
• Location information
• Credit card information
• Social media profile information
• Information about family & friends
• Content shared from Apple products

Apple states that this data is used for various purposes, from product development and advertising to fraud prevention and internal research.

Safari is closed source. Unlike fully open-source browsers, such as Firefox, Safari’s code is not publicly available for independent security audits.

Safari also offers fewer privacy-enhancing extensions and customization options than we would like.

While Safari does offer more privacy protections than some other mainstream browsers, and Apple claims not to share user data for marketing purposes, significant concerns remain. The company’s internal data use practices and cooperation with government surveillance programs should give pause to privacy-conscious users.

If you decide to stick with Safari despite these concerns, we recommend you:

• Regularly review and adjust privacy settings
• Use Private Browsing mode when appropriate
• Consider supplementing Safari’s built-in protections with a reputable VPN service

Contrary to Opera’s marketing, its built-in “VPN” is actually just a proxy service, not a true VPN. This misrepresentation is compounded by several security concerns:

• A 2016 hack exposed users’ personal information and passwords
• Historical issues with WebRTC leaking IP addresses
• A privacy policy that shows little regard for user anonymity

Third-Party Data Processing

Opera’s privacy policy reveals that third parties may process user data, though details about what data is shared and how it’s processed are scarce.

The list of third-party processors includes major data companies like Google and Facebook, as well as lesser-known entities. The list also includes the Pangle Ad SDK, which is developed by TikTok developer Bytedance, a huge red flag for privacy.

Notable third-party processors include:

• Pangle Ad SDK
• Google Geolocation API
• AppsFlyer
• Facebook SDK
• Google AdMob
• Outbrain
• Amazon Assistant
• Mobpower Ad SDK
• MobVista SDK
• OpenAI

Privacy Implications

The involvement of these data companies significantly undermines Opera’s claims to privacy. Users cannot reasonably expect their data to remain private when it’s being processed by multiple third parties, some of which are notorious for their data collection practices.

Despite its marketing as a privacy-focused browser with VPN capabilities, Opera falls far short in delivering genuine privacy protection. Its reliance on third-party data processors and misleading VPN claims make it a poor choice for users who prioritize their online privacy and security.

Developed by the Alibaba Group, UC Browser is a hugely popular mobile browser in countries like China and Indonesia. It even outperforms Google Chrome in some of these markets and yet is practically unknown to users in Europe and America.

There is significant evidence that UC Browser is not at all secure. While most of the browsers on this list do dubious things with your data or share it with other organizations, UC Browser makes it easy for criminals to get their hands on it.

In June 2020, the Indian government decided to ban UC Browser, claiming that it posed a risk to India’s sovereignty and security. However, reports suggest that the browser is still available to download in the App Store and Google Play Store.

If you have the option, don’t use UC Browser.

However, it’s important to be aware of the following general safety tips:

1. Choose extensions carefully. Untrustworthy sources may include spyware or data collection scripts. Research before downloading, especially free ones, regardless of ratings. If concerned about spyware, read our article on detecting phone spying.
2. Don’t overuse extensions. Too many add-ons make you more identifiable online through browser fingerprinting. The more customized your browser, the more you stand out.

For best results, choose one trusted extension for each key privacy element. For example, one for blocking ads and another for tracking scripts or CDNs. Avoid overlapping utilities and limit yourself to two or three extensions total.

If you have multiple privacy concerns, consider browser compartmentalization.