~/tools/browsers

Browsers & Search

last updated 2026-08-02 · 6 recommendations · what changed

Your browser sees everything you do online, which makes it the single biggest privacy decision on a normal computer. The good news: the right pick works out of the box: no extension pile, no settings safari.

before you pick More hardening is not automatically better. Aggressive fingerprinting protection breaks sites, and a heavily customized browser can be more identifiable, not less. Pick the tier of friction you'll actually live with: a private browser you abandon after a week protects nothing.

tracking protection by default

Blocking trackers and third-party cookies out of the box, not buried behind flags or an extension you have to know to install.

fingerprinting resistance

Trackers don't need cookies if your browser's configuration is unique. Resisting that matters more every year.

engine security

Chromium is more battle-tested and extensively vetted than Gecko: a flat security reality that privacy circles often wave away. The monoculture concern is real too; it's just a different axis.

update cadence

Browsers are the most attacked software you run. Fast security updates beat any privacy tweak.

Brave

the default pick
chromiumopen sourcead blockinganti-fingerprintingfree

Brave is a direct Chromium derivative (not a fork), which keeps it close to upstream and gives it a security edge over Gecko-based alternatives. It ships with aggressive ad and tracker blocking, one of the most robust anti-fingerprinting implementations in any mainstream browser, and a shields system that works without a separate extension layer. The BAT crypto rewards it's known for are entirely opt-in, and you can switch them off in under a minute.

Brave Origin is a variant that strips out everything not essential to privacy or security and hard-disables it instead of hiding it behind toggles. It's a one-time ~$59.99 on Windows and macOS and free on Linux.

good
  • Strong blocking and fingerprint randomization with zero setup
  • Chromium's security posture and site compatibility
  • Origin variant: minimalist build, features hardware-disabled, free on Linux
  • Brave Search integration: an independent index by default
mind the
  • Chromium monoculture is a legitimate systemic concern, ideologically
  • Rewards/wallet clutter in the standard build, switch it off first thing
  • Origin's licence check uses a blind-token protocol (Privacy Pass): architecturally sound, but it is one more trust layer worth knowing about
free · Origin ~$59.99 one-off (free on linux) brave.com →

Firefox

the gecko pick
geckoopen sourcefree

Firefox is still a valid pick for people who genuinely need Gecko: the full extension ecosystem (including unrestricted uBlock Origin), certain enterprise compatibility, or an ideological preference against the Chromium monoculture. Be honest about the work, though: out of the box it isn't competitive on privacy. You'll need to harden it (arkenfox user.js or a pre-hardened build like LibreWolf) and switch off telemetry and sponsored content.

good
  • The last serious non-Chromium engine: a vote against the monoculture
  • Unrestricted extensions, including full uBlock Origin
  • Deeply configurable for those willing to do the work
mind the
  • Requires hardening to match what Brave does by default
  • Telemetry and sponsored tiles ship enabled
  • Gecko sees less security scrutiny than Chromium, the uncomfortable flip side of engine diversity
  • Mozilla's funding still mostly comes from Google's search deal

Helium

the one to watch
chromiumopen sourcead blockingno accountfree

Helium is a lean open-source Chromium browser built on ungoogled-chromium by a small team (imput). The privacy defaults are strong: Google services removed, trackers and third-party cookies blocked out of the box, and the attack surface kept small by deliberately omitting sync, a built-in password manager, and DRM. It's still in beta with limited auto-update on some platforms, so it's not a daily-driver replacement yet, but it's genuinely interesting for purists who want even less than Brave Origin.

good
  • Privacy-by-omission: less shipped means less to audit and less to leak
  • Google services removed at the ungoogled-chromium level
  • Blocking on by default, no account, no monetization angle
mind the
  • Beta software from a small team, treat it accordingly
  • Limited auto-update on some platforms is a real security cost
  • No DRM means no Netflix and friends; no sync means you're the sync

Mullvad Browser

recommended secondary
geckoanti-fingerprintingopen sourcefree

Mullvad built this browser in partnership with the Tor Project, using the same hardened Firefox base as Tor Browser but without the Tor network attached. The strategy is different from most "private browser" pitches: it doesn't try to make you unique, it tries to make you identical to every other Mullvad Browser user, because a shared, locked-down fingerprint fights tracking far better than per-user randomization. It pairs naturally with Mullvad VPN, but it works perfectly well with no VPN at all; treat it as a secondary for sensitive browsing rather than a daily driver.

good
  • Uniform fingerprint by design: strong defense against tracking, not just blocking
  • Built and maintained by two organizations with real anti-surveillance track records
  • Doesn't require Mullvad VPN or any subscription
mind the
  • Aggressive hardening breaks some sites, expect occasional friction
  • No extensions ecosystem to speak of; that's deliberate, not a bug
  • Best as a secondary browser for sensitive browsing, not everyday use

Vivaldi

the power-user pick
chromiumad blockingcustomizablefree

Vivaldi is a Chromium browser built around customization first, privacy second: tab stacking, panels, a built-in mail client, and more interface options than almost anything else out there. It ships built-in tracker and ad blocking, which puts it ahead of stock Chromium and the many forks that ship nothing, but it's more feature-dense and mainstream than privacy-first. It's a reasonable pick if you want Chromium's compatibility and a genuinely useful blocker, and heavy customization is the main draw, not a minimal footprint.

good
  • Tracker and ad blocking on by default, no extension required
  • Extremely configurable UI: tab stacking, panels, custom shortcuts
  • Chromium compatibility and update cadence
  • No Google account ties; independent Norwegian company
mind the
  • Feature-dense by design: more surface area than a minimalist browser
  • Fingerprinting resistance is weaker than Brave or Mullvad Browser
  • Still Chromium under the hood, with the same monoculture trade-off

LibreWolf

secondary, research-grade
geckoopen sourcefree

LibreWolf is Firefox with arkenfox-style hardening baked in before you ever open it: aggressive fingerprinting resistance, telemetry stripped, trackers blocked by default. The honest take: this is not recommended as a daily driver. The hardening that makes it strong also breaks sites more often than most people will put up with day to day. Updates have closed the gap with Firefox proper (patches now typically land within days of upstream), though the structural risk remains: a smaller team with no centralized telemetry feedback loop. It's better used as a secondary, research-grade browser than an everyday one.

good
  • Aggressive fingerprinting resistance and tracker blocking out of the box
  • Telemetry and sponsored content stripped before first launch
  • Patch cadence now typically within days of upstream Firefox
mind the
  • No automatic updates: applying patches needs manual action or a package manager
  • Disables Safe Browsing by default, removing Firefox's malware/phishing blocklist (re-enable manually)
  • Inherits Gecko's weaker sandboxing and site isolation versus Chromium
  • Small volunteer team, no staffed security org or telemetry feedback loop
browserengineblocking by defaultfingerprint defenseauto-updatefriction
BraveChromiumbuilt-inrandomizationyeslow
FirefoxGeckostrict mode + uBlockneeds hardeningyesmedium
HeliumChromiumbuilt-inlean profileplatform-dependentmedium-high
Mullvad BrowserGeckobuilt-inuniformity by designmanual-ishmedium-high
VivaldiChromiumbuilt-instandard chromiumyeslow
LibreWolfGeckobuilt-inarkenfox-stylemanualhigh

friction = day-to-day breakage and maintenance, not install difficulty.

Brave Search as primary. It runs an independent index (not a reskinned Bing or Google feed), which puts it in a different category from most "private" search engines. Result quality is competitive and well past the rising-star phase. It's the default in Brave already; in other browsers it's two clicks to set.

Startpage as secondary. You get proxied Google results plus the Anonymous View feature: the pragmatic answer when you need Google's result quality without the direct relationship. The caveat: it's owned by System1, an ad-tech company. It's fine as a secondary with clear utility, but not trustworthy enough by design to be your primary.

Qwant if you want a second independent index. It's French, runs a partial index of its own, sits under GDPR, and has a credible privacy stance. It's not as robust as Brave Search, but it's a reasonable European-backed option to rotate in.

DuckDuckGo, with eyes open. It's usable and easy, but it's primarily Bing-backed and inherits Bing's limitations. In 2022 its CEO publicly endorsed down-ranking sites associated with Russian disinformation; much of the mechanism came from Microsoft's own policy changes, but the endorsement was DDG's. If you can't control your index, you can't fully control your results. It's fine for casual use; just don't treat it as neutral.

Kagi if you'll pay to opt out of the ad economy entirely. It's a paid, no-ads, no-tracking search engine with independent ranking signals: your subscription funds the business directly instead of your data or attention doing it indirectly. It's worth it if search quality is something you'll budget for like any other tool, rather than something that has to be free.

SearXNG for a self-hostable, no-account option. It's an open-source metasearch engine that pulls results from other engines (Google, Bing, Brave Search, and more) without forwarding your identity to any of them. Run your own instance for full control, or use one of the many public instances if you trust the operator. There's no tracking either way.

Fingerprinting matters more than cookies now. Trackers don't need a cookie if your screen size, fonts, GPU, and timezone combine into a configuration unique enough to identify you across sites. Aggressive fingerprinting defenses (Brave's randomization, Mullvad Browser's uniformity) address this directly; stock Chromium and unhardened Firefox don't.

uBlock Origin is the one extension worth installing. Every extra "privacy" extension piled on top tends to make you more identifiable, not less: each one adds another fingerprintable signature to your browser's configuration. On Brave, Shields already cover what most of those extensions claim to do, so skip the pile entirely. On Firefox, Gecko still runs uBlock Origin unrestricted, unlike Chromium's Manifest V3 limits.

Tor Browser is what gives you actual anonymity, not these. Nothing else on this page hides who you are from a determined observer: these picks reduce tracking, they don't make you anonymous. Private/incognito mode in particular is not privacy: it only clears local history, while your ISP, employer, DNS resolver, and the sites themselves see exactly the same traffic. Different problem, different tool.