Browser Privacy Basics

1. Goal

This guide is for reducing everyday tracking, cleaning up browser habits, and avoiding common privacy traps. It is not about becoming anonymous against every possible adversary.

Good browser privacy comes from a few boring habits:

use a browser that respects your settings;
limit extensions;
block common trackers;
separate accounts and identities;
avoid leaking personal information into every site you visit.

2. Pick a Browser Setup

Use one main browser for normal browsing and a second isolated browser for accounts that should not mix.

Recommended split:

Daily browser: general web use, searches, reading, shopping, and casual logins.
Private/account browser: banking, email, admin panels, school, work, or anything tied to your real identity.
Throwaway/private window: one-off links, unknown sites, and pages you do not plan to revisit.

Avoid signing into a browser sync account unless you actually need synced bookmarks and history. Browser sync is convenient, but it also centralizes a lot of personal data.

3. Recommended Apps

Use a small, boring tool stack.

Firefox: best fit if you want profiles, containers, strong extension support, and a browser that is not built around an ad network.
Firefox Multi-Account Containers: good for separating banking, shopping, social media, admin panels, and throwaway accounts without needing five browsers.
Brave: good for people who want a Chromium-based browser with built-in ad and tracker blocking. Turn off Brave Rewards if you do not want browser ads or crypto features.
Mullvad Browser: good for higher-privacy sessions where fingerprinting resistance matters more than convenience. Do not add a bunch of extensions to it.
Tor Browser: use when anonymity or censorship resistance matters. Do not torrent through Tor, and do not add extra extensions.
uBlock Origin: the default content blocker recommendation for Firefox and other supported browsers.
Bitwarden: easiest password manager recommendation for most people who want sync across devices.
KeePassXC: best fit if you want an offline local password vault instead of cloud sync.

Official links:

Firefox Multi-Account Containers: https://support.mozilla.org/en-US/kb/containers
Brave: https://brave.com
Mullvad Browser: https://mullvad.net/en/browser
Tor Browser: https://www.torproject.org/download/
uBlock Origin: https://github.com/gorhill/uBlock
Bitwarden: https://bitwarden.com
KeePassXC: https://keepassxc.org

4. Extension Rules

Extensions can see a lot. Keep them minimal.

Good baseline:

one trusted content blocker;
one password manager extension if you use one;
no coupon extensions;
no random video downloaders;
no "AI helper" extensions with broad page access;
no duplicate privacy extensions fighting each other.

Remove anything you do not actively use. A stale extension with broad permissions is not harmless.

5. Browser Settings to Check

Review these settings in every browser you use:

block third-party cookies where possible;
disable ad personalization;
disable search and URL suggestions if you do not want typed text sent to the provider;
disable automatic sign-in;
disable background apps after closing the browser;
clear site permissions for camera, microphone, location, notifications, and clipboard;
require confirmation before downloads open automatically.

Notifications are especially worth locking down. Most websites do not need notification access.

6. Identity Separation

Do not use one browser profile for everything.

Separate these when possible:

real-name accounts;
personal email;
admin dashboards;
shopping;
social media;
throwaway accounts;
research or unknown links.

The goal is not perfection. The goal is to stop every site, cookie, extension, and login from living in the same bucket.

7. Practical Profiles

A simple profile layout:

Default/
  normal browsing, news, searches, casual accounts

Personal/
  email, banking, medical, school, work

Admin/
  server dashboards, DNS, hosting, domain registrar

Disposable/
  unknown links, one-off accounts, testing

Rules:

do not save payment methods in the disposable profile;
do not use personal email in the disposable profile;
keep admin dashboards out of the daily browser;
use bookmarks for important login pages;
clear the disposable profile often.

8. Search and Links

Privacy-friendly habits:

search from the address bar only if you trust that provider;
avoid clicking sponsored results;
check domains before logging in;
use bookmarks for important sites instead of search results;
be suspicious of shortened links when the destination matters.

For sensitive accounts, type the domain manually or use a saved bookmark.

9. Quick Maintenance Routine

Once a month:

Remove unused extensions.
Clear site permissions.
Delete saved passwords from the browser if you use a dedicated password manager.
Review downloaded files.
Update the browser.
Check that your content blocker is still enabled.

Small maintenance beats trying to fix privacy after everything is already mixed together.

5.2 KiB Raw Blame History