~/tools/browsers
Browsers & Search
last updated 2026-08-02 · 6 recommendations · what changed
Your browser sees everything you do online, which makes it the single biggest
privacy decision on a normal computer. The good news:
the right pick works out of the box: no extension pile,
no settings safari.
before you pick
More hardening is not automatically better. Aggressive fingerprinting protection
breaks sites, and a heavily customized browser can be more identifiable,
not less. Pick the tier of friction you'll actually live with: a private
browser you abandon after a week protects nothing.
what actually matters
tracking protection by default
Blocking trackers and third-party cookies out of the box, not buried behind flags or an extension you have to know to install.
fingerprinting resistance
Trackers don't need cookies if your browser's configuration is unique. Resisting that matters more every year.
engine security
Chromium is more battle-tested and extensively vetted than Gecko: a flat security reality that privacy circles often wave away. The monoculture concern is real too; it's just a different axis.
update cadence
Browsers are the most attacked software you run. Fast security updates beat any privacy tweak.
recommendations

Brave
the default pick
chromiumopen sourcead blockinganti-fingerprintingfree
Brave is a direct Chromium derivative (not a fork), which keeps it close to
upstream and gives it a security edge over Gecko-based alternatives. It ships
with aggressive ad and tracker blocking, one of the most robust
anti-fingerprinting implementations in any mainstream browser, and a
shields system that works without a separate extension layer. The BAT crypto
rewards it's known for are entirely opt-in, and you can switch them off in
under a minute.
Brave Origin is a variant that strips out everything not
essential to privacy or security and hard-disables it instead of hiding it
behind toggles. It's a one-time ~$59.99 on Windows and macOS and
free on Linux.
good
- Strong blocking and fingerprint randomization with zero setup
- Chromium's security posture and site compatibility
- Origin variant: minimalist build, features hardware-disabled, free on Linux
- Brave Search integration: an independent index by default
mind the
- Chromium monoculture is a legitimate systemic concern, ideologically
- Rewards/wallet clutter in the standard build, switch it off first thing
- Origin's licence check uses a blind-token protocol (Privacy Pass): architecturally sound, but it is one more trust layer worth knowing about

Firefox
the gecko pick
geckoopen sourcefree
Firefox is still a valid pick for people who genuinely need Gecko: the full
extension ecosystem (including unrestricted uBlock Origin), certain enterprise
compatibility, or an ideological preference against the Chromium monoculture.
Be honest about the work, though: out of the box it isn't competitive
on privacy. You'll need to harden it (arkenfox user.js
or a pre-hardened build like LibreWolf) and switch off telemetry and
sponsored content.
good
- The last serious non-Chromium engine: a vote against the monoculture
- Unrestricted extensions, including full uBlock Origin
- Deeply configurable for those willing to do the work
mind the
- Requires hardening to match what Brave does by default
- Telemetry and sponsored tiles ship enabled
- Gecko sees less security scrutiny than Chromium, the uncomfortable flip side of engine diversity
- Mozilla's funding still mostly comes from Google's search deal

Helium
the one to watch
chromiumopen sourcead blockingno accountfree
Helium is a lean open-source Chromium browser built on ungoogled-chromium by
a small team (imput). The privacy defaults are strong: Google services
removed, trackers and third-party cookies blocked out of the box, and the
attack surface kept small by deliberately omitting sync, a
built-in password manager, and DRM. It's still in beta with limited
auto-update on some platforms, so it's not a daily-driver replacement yet,
but it's genuinely interesting for purists who want even less than Brave
Origin.
good
- Privacy-by-omission: less shipped means less to audit and less to leak
- Google services removed at the ungoogled-chromium level
- Blocking on by default, no account, no monetization angle
mind the
- Beta software from a small team, treat it accordingly
- Limited auto-update on some platforms is a real security cost
- No DRM means no Netflix and friends; no sync means you're the sync

Mullvad Browser
recommended secondary
geckoanti-fingerprintingopen sourcefree
Mullvad built this browser in partnership with the Tor Project, using the
same hardened Firefox base as Tor Browser but without the Tor network
attached. The strategy is different from most "private browser" pitches:
it doesn't try to make you unique, it tries to make you identical to
every other Mullvad Browser user, because a shared, locked-down
fingerprint fights tracking far better than per-user randomization. It pairs
naturally with Mullvad VPN, but it works perfectly well with no VPN at all;
treat it as a secondary for sensitive browsing rather than a daily driver.
good
- Uniform fingerprint by design: strong defense against tracking, not just blocking
- Built and maintained by two organizations with real anti-surveillance track records
- Doesn't require Mullvad VPN or any subscription
mind the
- Aggressive hardening breaks some sites, expect occasional friction
- No extensions ecosystem to speak of; that's deliberate, not a bug
- Best as a secondary browser for sensitive browsing, not everyday use

Vivaldi
the power-user pick
chromiumad blockingcustomizablefree
Vivaldi is a Chromium browser built around customization first, privacy
second: tab stacking, panels, a built-in mail client, and more interface
options than almost anything else out there. It ships built-in
tracker and ad blocking, which puts it ahead of stock Chromium and
the many forks that ship nothing, but it's more feature-dense and mainstream
than privacy-first. It's a reasonable pick if you want Chromium's
compatibility and a genuinely useful blocker, and heavy customization is the
main draw, not a minimal footprint.
good
- Tracker and ad blocking on by default, no extension required
- Extremely configurable UI: tab stacking, panels, custom shortcuts
- Chromium compatibility and update cadence
- No Google account ties; independent Norwegian company
mind the
- Feature-dense by design: more surface area than a minimalist browser
- Fingerprinting resistance is weaker than Brave or Mullvad Browser
- Still Chromium under the hood, with the same monoculture trade-off

LibreWolf
secondary, research-grade
geckoopen sourcefree
LibreWolf is Firefox with arkenfox-style hardening baked in before you ever
open it: aggressive fingerprinting resistance, telemetry stripped, trackers
blocked by default. The honest take: this is not recommended as a
daily driver. The hardening that makes it strong also breaks sites
more often than most people will put up with day to day. Updates have closed
the gap with Firefox proper (patches now typically land within days of
upstream), though the structural risk remains: a smaller team with no
centralized telemetry feedback loop. It's better used as a secondary,
research-grade browser than an everyday one.
good
- Aggressive fingerprinting resistance and tracker blocking out of the box
- Telemetry and sponsored content stripped before first launch
- Patch cadence now typically within days of upstream Firefox
mind the
- No automatic updates: applying patches needs manual action or a package manager
- Disables Safe Browsing by default, removing Firefox's malware/phishing blocklist (re-enable manually)
- Inherits Gecko's weaker sandboxing and site isolation versus Chromium
- Small volunteer team, no staffed security org or telemetry feedback loop
at a glance
friction = day-to-day breakage and maintenance, not install difficulty.
search engines
Brave Search as primary. It runs an independent index (not a
reskinned Bing or Google feed), which puts it in a different category from most
"private" search engines. Result quality is competitive and well past the
rising-star phase. It's the default in Brave already; in other browsers it's
two clicks to set.
Startpage as secondary. You get proxied Google results plus
the Anonymous View feature: the pragmatic answer when you need Google's
result quality without the direct relationship. The caveat: it's owned by
System1, an ad-tech company. It's fine as a secondary with clear utility,
but not trustworthy enough by design to be your primary.
Qwant if you want a second independent index. It's French,
runs a partial index of its own, sits under GDPR, and has a credible privacy
stance. It's not as robust as Brave Search, but it's a reasonable
European-backed option to rotate in.
DuckDuckGo, with eyes open. It's usable and easy, but it's
primarily Bing-backed and inherits Bing's limitations. In 2022 its CEO
publicly endorsed down-ranking sites associated with Russian disinformation;
much of the mechanism came from Microsoft's own policy changes, but the
endorsement was DDG's. If you can't control your index, you can't fully
control your results. It's fine for casual use; just don't treat it as
neutral.
Kagi if you'll pay to opt out of the ad economy entirely.
It's a paid, no-ads, no-tracking search engine with independent ranking
signals: your subscription funds the business directly instead of your data
or attention doing it indirectly. It's worth it if search quality is
something you'll budget for like any other tool, rather than something that
has to be free.
SearXNG for a self-hostable, no-account option. It's an
open-source metasearch engine that pulls results from other engines (Google,
Bing, Brave Search, and more) without forwarding your identity to any of
them. Run your own instance for full control, or use one of the many public
instances if you trust the operator. There's no tracking either way.
worth knowing
Fingerprinting matters more than cookies now. Trackers don't
need a cookie if your screen size, fonts, GPU, and timezone combine into a
configuration unique enough to identify you across sites. Aggressive
fingerprinting defenses (Brave's randomization, Mullvad Browser's uniformity)
address this directly; stock Chromium and unhardened Firefox don't.
uBlock Origin is the one extension worth installing. Every
extra "privacy" extension piled on top tends to make you more identifiable,
not less: each one adds another fingerprintable signature to your browser's
configuration. On Brave, Shields already cover what most of those extensions
claim to do, so skip the pile entirely. On Firefox, Gecko still runs uBlock
Origin unrestricted, unlike Chromium's Manifest V3 limits.
Tor Browser is what gives you actual anonymity, not these.
Nothing else on this page hides who you are from a determined observer:
these picks reduce tracking, they don't make you anonymous. Private/incognito
mode in particular is not privacy: it only clears local history, while your
ISP, employer, DNS resolver, and the sites themselves see exactly the same
traffic. Different problem, different tool.