Your browser is the window to the internet. And the problem isn't just what you see — it's what the internet sees about you.
Every website you visit receives your browser fingerprint: operating system, screen resolution, fonts, GPU, canvas values, installed plugins, timezone, language settings. This combination is as unique as a fingerprint — and it works without cookies, without JavaScript tracking, without storing anything on your device.
Incognito mode doesn't help against this. A VPN doesn't either. What you need is a browser that fundamentally alters or conceals this fingerprint.
"Privacy is not a crime. It's self-defense."
Five browsers compete. The Tor Browser is deliberately excluded — it has its own article. This is about everyday use: fast, stable, compatible — but without surveillance.
The Core Question: Uniformity or Randomization?
All privacy browsers fight fingerprinting — but with fundamentally different strategies.
Uniformity (Firefox-based): All users look identical to trackers.
Same canvas values, same fonts, same window size via letterboxing, timezone always UTC.
The logic: if everyone looks the same, no one can be recognized. This concept originates from the Tor Project
and lives in privacy.resistFingerprinting (RFP) — Firefox's core anti-fingerprinting mechanism.
Randomization (Chromium-based): The fingerprint is slightly altered on every page load. Canvas values, audio output and font measurements get random noise injected. Brave's implementation is called "Farbling". The problem: Chromium exposes hardware details (GPU model, CPU core count) with high precision — advanced trackers can re-identify users through these stable "hardware anchors" despite randomization.
For pure privacy, the Firefox-based uniformity approach is superior. For security (exploit protection, sandboxing), Chromium leads.
The Five Browsers
1. Brave — The Beginner Browser
Brave is built on Chromium and ships with more privacy than any mainstream browser out of the box. The built-in "Shields" block ads, cross-site trackers, third-party cookies and bounce tracking — no extension required.
The ad blocker is written in Rust and integrated directly into the browser engine. This makes it immune to Google's Manifest V3 — the interface that has effectively gutted powerful ad blockers like uBlock Origin in Chrome. Brave users continue to get full blocking capability.
Brave — Strengths & Weaknesses
- ✅ Best web compatibility of all privacy browsers
- ✅ Shields active by default — zero setup required
- ✅ Native ad blocker (Rust), immune to MV3
- ✅ Fast, Chromium sandboxing
- ⚠️ Farbling randomization is weaker than Firefox uniformity
- ⚠️ Crypto bloat: Brave Wallet, Rewards, AI assistant active by default — all can be disabled
- ❌ 2020: Brave silently inserted affiliate codes for Binance, Coinbase, Ledger and Trezor — CEO apologized, feature was disabled
Best for: Beginners who want immediate protection without any setup. Windows or macOS users who don't want to deal with Firefox forks.
After installation: Disable Brave Rewards, set Shields to "Aggressive", turn off telemetry pings in settings.
2. LibreWolf — Hardened Firefox
LibreWolf is a Firefox fork with one clear goal: remove everything that doesn't need to be there
and harden everything that remains. Mozilla telemetry, Pocket, Firefox Sync, crash reports —
all gone. privacy.resistFingerprinting is active by default.
uBlock Origin is pre-installed. Cookies are cleared on close.
You get strong privacy without hours of configuration. Updates arrive within three days of Firefox releases — sometimes the same day.
LibreWolf — Strengths & Weaknesses
- ✅ RFP active by default — strongest fingerprinting protection after Mullvad
- ✅ uBlock Origin pre-installed, full MV3-free power
- ✅ No telemetry, no Mozilla services
- ✅ Good web compatibility (Firefox engine)
- ⚠️ Updates up to 3 days after Firefox — small security window
- ⚠️ DRM (Netflix, Spotify) disabled by default — can be manually enabled
- ⚠️ Firefox Sync disabled by default — login data not auto-synced
Best for: Advanced users who want strong privacy without tinkering. The best everyday browser for most privacy-conscious users.
3. Mullvad Browser — Maximum Anonymity
Mullvad Browser was developed jointly by the Mullvad VPN team and the Tor Project. The goal: the Tor Browser's anti-fingerprinting technology without the Tor network — for users who prefer a faster VPN.
The browser runs permanently in private mode. On close, cookies, history and all session data are automatically wiped. Pre-installed: uBlock Origin, NoScript and the Mullvad Browser Extension. Fingerprinting protection via the uniformity model — all users appear identical.
Mullvad Browser — Strengths & Weaknesses
- ✅ Strongest fingerprinting protection of any browser (uniformity, Tor technology)
- ✅ No telemetry
- ✅ Permanent private mode — no manual cleanup needed
- ✅ Optimized for VPN use
- ❌ Not a daily driver: logins, cookies and history are wiped on every close
- ❌ Do not install additional extensions — destroys the uniform fingerprint
- ❌ No dark mode or other customizations recommended — same reason
Best for: Journalists, activists, high-risk users. Anyone who needs maximum anonymity for a specific task — not as a primary everyday browser. Ideal paired with Mullvad VPN.
4. Firefox + arkenfox — Full Control
Firefox is the only independent browser engine beyond Chromium with meaningful market share. That alone makes its existence important.
arkenfox is not a browser — it's a user.js configuration file,
a script copied directly into the Firefox profile directory that hardens hundreds of
privacy settings at once: enable RFP, disable telemetry, max out tracking protection,
activate storage isolation.
The advantage over LibreWolf: Mozilla updates arrive immediately with no fork delay. Multi-Account Containers enable true browser isolation for different identities.
Firefox + arkenfox — Strengths & Weaknesses
- ✅ Deepest control over all privacy settings
- ✅ Mozilla updates immediately — no fork delay
- ✅ Multi-Account Containers for true identity isolation
- ✅ Full uBlock Origin support
- ⚠️ High maintenance: manually manage scripts, maintain overrides, fix site breakage
- ⚠️ Not suitable for beginners — requires technical understanding
Best for: Power users with a clear threat model who want maximum control over every setting and are willing to invest the time.
5. Ungoogled Chromium — Not Recommended
Ungoogled Chromium removes all Google services completely from the Chromium source code. No background connections to Google servers — zero. That's the strength.
The weakness: there is no tracking protection and no fingerprinting protection out of the box. Extensions must be installed manually — there is no Web Store. Updates are not automatic and must be downloaded manually. Wait too long, and you're running a browser with known, unpatched security vulnerabilities.
The result: a lot of effort for an outcome Brave delivers better with far less friction.
Manifest V3 — Why This Affects Everyone
Google completed the transition to Manifest V3 in Chrome in late 2024.
The webRequest API — the foundation of effective ad blocking — was replaced by
the restricted declarativeNetRequest API.
Consequence: uBlock Origin (full version) no longer runs in Chrome. uBlock Origin Lite is MV3-compatible but loses critical capabilities: no cosmetic filtering, no custom filter lists, no anti-circumvention techniques.
Not affected: Brave (native Rust blocker, outside the extension system), Firefox, LibreWolf, Mullvad Browser — all continue to offer uBlock Origin at full strength.
Quick Recommendation
| Profile | Recommendation | Why |
|---|---|---|
| Beginner | Brave | Works immediately, best compatibility |
| Advanced | LibreWolf | Strong out of the box, no tinkering needed |
| High-risk / Anonymity | Mullvad Browser | Strongest fingerprinting protection |
| Power user | Firefox + arkenfox | Full control, immediate updates |
| Better avoided | Ungoogled Chromium | No protection by default, no auto-update |
First Steps — Regardless of Which Browser
- Install uBlock Origin (except Mullvad — already included). No other blocker.
- Enable DNS-over-HTTPS — prevents your ISP from reading your DNS queries. Use Nextdns or Mullvad DNS.
- Test your fingerprint: coveryourtracks.eff.org by the EFF shows how unique your browser looks to trackers.
Mobile Browsers
This article covers desktop browsers. On Android — especially GrapheneOS — Vanadium is the first choice: maximum sandboxing, no Google services, direct security updates. A dedicated article: Vanadium: The Most Secure Browser on Android.