25 KiB
meta_title, title, icon, description, cover, schema
| meta_title | title | icon | description | cover | schema | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 尊重隐私的 PC 和 Mac 网络浏览器 - Privacy Guides | 电脑浏览器 | material/laptop | These privacy-protecting browsers are what we currently recommend for standard/non-anonymous internet browsing on desktop systems. | desktop-browsers.webp |
|
Protects against the following threat(s):
- :material-account-cash: 监视资本主义{.pg-brown}
These are our currently recommended desktop web browsers and configurations for standard/non-anonymous browsing. 如果你需要强大的隐私保护和开箱即用的防指纹功能，我们推荐 Mullvad 浏览器 ；如果你需要谷歌 Chrome 浏览器的良好替代品，我们推荐 Firefox ；如果你需要 Chromium 浏览器的兼容性，我们推荐 Brave。
如果您需要匿名浏览互联网，则应使用 Tor 。 我们在本页会提出一些配置建议，但除 Tor 浏览器之外的所有浏览器都可以通过 某种方式 追踪到。
Mullvad 浏览器
{ align=right }
Mullvad Browser is a version of Tor Browser with Tor network integrations removed. It aims to provide to VPN users Tor Browser's anti-fingerprinting browser technologies, which are key protections against :material-eye-outline: Mass Surveillance{ .pg-blue }. 它由 Tor 项目开发，由 Mullvad 发布，不需要 使用 Mullvad 的 VPN。
:octicons-home-16: Homepage{ .md-button .md-button--primary } :octicons-eye-16:{ .card-link title="Privacy Policy" } :octicons-info-16:{ .card-link title="Documentation" } :octicons-code-16:{ .card-link title="Source Code" }
Like Tor Browser, Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint identical to all other Mullvad Browser users, and it includes default settings and extensions that are automatically configured by the default security levels: Standard, Safer and Safest.
Therefore, it is imperative that you do not modify the browser at all outside adjusting the default security levels. When adjusting the security level, you must always restart the browser before continuing to use it. Otherwise, the security settings may not be fully applied, putting you at a higher risk of fingerprinting and exploits than you may expect based on the setting chosen.
Modifications other than adjusting this setting would make your fingerprint unique, defeating the purpose of using this browser. 如果你想对浏览器进行更多的配置而且不担心指纹识别，我们建议你使用 Firefox。
防指纹
在不使用 VPN的情况下，Mullvad 浏览器提供的对 天真的指纹脚本 的保护与其他隐私浏览器（如 Firefox+Arkenfox 或 Brave）相同。 Mullvad 浏览器自带这些保护，但牺牲了其他隐私浏览器提供的一些灵活性和便利性。
==为了最完善的反指纹保护，我们建议将 Mullvad 浏览器与 和 VPN== 结合使用，无论是 Mullvad 还是其他推荐的 VPN 提供商。 在使用 Mullvad 浏览器的 VPN 时，你将与许多其他用户共享一个指纹和一个 IP 地址池，使你混入“人群”。 这种策略是挫败进阶跟踪脚本的唯一方法，与 Tor 浏览器使用的反指纹技术相同。
请注意，虽然您可以和任何 VPN 提供商一起使用 Mullvad 浏览器，但该 VPN 上的其他人也必须使用 Mullvad 浏览器才会有“人群”存在。与其他提供商相比，Mullvad VPN 更有可能保证这种情况，尤其是在 Mullvad 浏览器刚刚发布的当下。 Mullvad 浏览器没有内置 VPN 连接，也不会在浏览前检查你是否在使用 VPN；你的 VPN 连接必须单独配置和管理。
Mullvad 浏览器预装了 uBlock Origin 和 NoScript 浏览器扩展程序。 While we typically discourage adding additional browser extensions, these extensions that come pre-installed with the browser should not be removed or configured outside their default values, because doing so would noticeably make your browser fingerprint distinct from other Mullvad Browser users. 它还预装了 Mullvad 浏览器扩展程序，这个拓展程序可以 安全地移除，不会影响你的浏览器指纹，但即使你不使用 Mullvad VPN，保留它也不会有问题。
无痕模式
Mullvad 浏览器一直在无痕浏览模式下运行，这意味着每次关闭浏览器时，你的历史记录、cookies 和其他网站数据都会被清除。 您的书签、浏览器设置和扩展程序设置会被保留。
这是防止深度跟踪的必要条件，但确实牺牲了一些便利性和一些 Firefox 的功能（如多账户容器）。 当然，您可以同时使用多种浏览器，例如，您可以考虑使用 Firefox+Arkenfox 浏览一些需要保持登录状态或在 Mullvad 浏览器中无法正常运行的网站，并使用 Mullvad 浏览器进行一般浏览。
Mullvad Leta
Mullvad Browser comes with Mullvad Leta as the default search engine, which functions as a proxy to either Google or Brave search results (configurable on the Mullvad Leta homepage).
If you are a Mullvad VPN user, there is some risk in using services like Mullvad Leta which are offered by your VPN provider themselves. This is because Mullvad theoretically has access to your true IP address (via their VPN) and your search activity (via Leta), which is information a VPN is typically intended to separate. Even though Mullvad collects very little information about their VPN subscribers or Leta users, you should consider a different search engine if this risk concerns you.
Firefox（火狐浏览器）
{ align=right }
火狐浏览器提供强大的隐私设置，如增强型跟踪保护，它可以帮助阻止各种类型的跟踪。
:octicons-home-16: Homepage{ .md-button .md-button--primary } :octicons-eye-16:{ .card-link title="Privacy Policy" } :octicons-info-16:{ .card-link title="Documentation" } :octicons-code-16:{ .card-link title="Source Code" } :octicons-heart-16:{ .card-link title="Contribute" }
警告
Firefox includes a unique download token in downloads from Mozilla's website and uses telemetry in Firefox to send the token. The token is not included in releases from the Mozilla FTP.
Recommended Firefox Configuration
These options can be found in :material-menu: → Settings.
搜索
- Uncheck Show search suggestions
Search suggestion features may not be available in your region.
Search suggestions send everything you type in the address bar to the default search engine, regardless of whether you submit an actual search. Disabling search suggestions allows you to more precisely control what data you send to your search engine provider.
Firefox Suggest (仅限美国)
Firefox Suggest is a feature similar to search suggestions which is only available in the US. We recommend disabling it for the same reason we recommend disabling search suggestions. If you don't see these options under the Address Bar header, you do not have the new experience and can ignore these changes.
- Uncheck Suggestions from Firefox
- 取消选中 来自赞助商的建议
隐私与安全
增强跟踪保护
- 选择 严格的 增强跟踪保护
This protects you by blocking social media trackers, fingerprinting scripts (note that this does not protect you from all fingerprinting), cryptominers, cross-site tracking cookies, and some other tracking content. ETP protects against many common threats, but it does not block all tracking avenues because it is designed to have minimal to no impact on site usability.
关闭时消毒
If you want to stay logged in to particular sites, you can allow exceptions in Cookies and Site Data → Manage Exceptions...
- 勾选 当Firefox关闭时，删除cookies和网站数据
This protects you from persistent cookies, but does not protect you against cookies acquired during any one browsing session. When this is enabled, it becomes possible to easily cleanse your browser cookies by simply restarting Firefox. You can set exceptions on a per-site basis, if you wish to stay logged in to a particular site you visit often.
Telemetry
- 取消勾选 允许火狐浏览器向Mozilla发送技术和互动数据
- 取消勾选 允许Firefox安装和运行研究
- 取消勾选 允许火狐代表您发送积压的崩溃报告
According to Mozilla's privacy policy for Firefox,
火狐浏览器会向我们发送有关您的火狐浏览器版本和语言、设备操作系统和硬件配置、内存、有关崩溃和错误的基本信息以及更新、安全浏览和激活等自动处理结果的数据。 当火狐浏览器向我们发送数据时，您的IP地址会被暂时收集，作为我们服务器日志的一部分。
Additionally, the Mozilla Accounts service collects some technical data. If you use a Mozilla Account you can opt out:
- 在 accounts.firefox.com上打开你的
配置文件设置。
2 取消勾选 数据收集和使用 > 帮助改进火狐账户
Website Advertising Preferences
- Uncheck Allow websites to perform privacy-preserving ad measurement
With the release of Firefox 128, a new setting for privacy-preserving attribution (PPA) has been added and enabled by default. PPA allows advertisers to use your web browser to measure the effectiveness of web campaigns, instead of using traditional JavaScript-based tracking. We consider this behavior to be outside the scope of a user agent's responsibilities, and the fact that it is disabled by default in Arkenfox is an additional indicator for disabling this feature.
HTTPS-Only Mode
- 选择 启用所有窗口的纯HTTPS-Only模式
This prevents you from unintentionally connecting to a website in plain-text HTTP. Sites without HTTPS are uncommon nowadays, so this should have little to no impact on your day-to-day browsing.
DNS over HTTPS
If you use a DNS over HTTPS provider:
- 选择 最强保护 并选择一个合适的提供商
Max Protection enforces the use of DNS over HTTPS, and a security warning will show if Firefox can’t connect to your secure DNS resolver, or if your secure DNS resolver says that records for the domain you are trying to access do not exist. This stops the network you're connected to from secretly downgrading your DNS security.
Sync
Firefox Sync allows your browsing data (history, bookmarks, etc.) to be accessible on all your devices and protects it with E2EE.
Arkenfox (advanced)
Use Mullvad Browser for advanced anti-fingerprinting
Mullvad Browser provides the same anti-fingerprinting protections as Arkenfox out of the box, and does not require the use of Mullvad's VPN to benefit from these protections. Coupled with a VPN, Mullvad Browser can thwart more advanced tracking scripts which Arkenfox cannot. Arkenfox still has the advantage of being much more flexible, and allowing per-site exceptions for websites which you need to stay logged in to.
The Arkenfox project provides a set of carefully considered options for Firefox. If you decide to use Arkenfox, a few options are subjectively strict and/or may cause some websites to not work properly—which you can easily change to suit your needs. We strongly recommend reading through their full wiki. Arkenfox also enables container support.
Arkenfox only aims to thwart basic or naive tracking scripts through canvas randomization and Firefox's built-in fingerprint resistance configuration settings. It does not aim to make your browser blend in with a large crowd of other Arkenfox users in the same way Mullvad Browser or Tor Browser do, which is the only way to thwart advanced fingerprint tracking scripts. Remember that you can always use multiple browsers, for example, you could consider using Firefox+Arkenfox for a few sites that you want to stay logged in on or otherwise trust, and Mullvad Browser for general browsing.
Brave
{ align=right }
Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default.
Brave是建立在Chromium网络浏览器项目之上的，所以它应该有熟悉的感觉，而且网站兼容性问题最小。
:octicons-home-16: Homepage{ .md-button .md-button--primary } :simple-torbrowser:{ .card-link title="Onion Service" } :octicons-eye-16:{ .card-link title="Privacy Policy" } :octicons-info-16:{ .card-link title="Documentation" } :octicons-code-16:{ .card-link title="Source Code" }
警告
Brave adds a "referral code" to the file name in downloads from the Brave website, which is used to track which source the browser was downloaded from, for example BRV002 in a download named Brave-Browser-BRV002.pkg. The installer will then ping Brave's server with the referral code at the end of the installation process. If you're concerned about this, you can rename the installer file before opening it.
Recommended Brave Configuration
These options can be found in :material-menu: → Settings.
Shields
Brave includes some anti-fingerprinting measures in its Shields feature. We suggest configuring these options globally across all pages that you visit.
Shields的选项可以根据需要在每个站点的基础上进行降级，但在默认情况下，我们建议设置以下内容。
- Select Aggressive under Trackers & ads blocking
Use default filter lists
Brave allows you to select additional content filters within the internal brave://adblock page. 我们建议不要使用这个功能；相反，保留默认的过滤列表。 使用额外的列表会使你从其他Brave用户中脱颖而出，如果Brave中存在漏洞，恶意规则被添加到你使用的列表中，也可能增加攻击面。
- Select Strict under Upgrade connections to HTTPS
- (Optional) Select Block Scripts (1)
- Check Block fingerprinting
- Select Block third-party cookies
- Check Forget me when I close this site (2)
- Uncheck all social media components
- This option disables JavaScript, which will break a lot of sites. To fix them, you can set exceptions on a per-site basis by clicking on the Shield icon in the address bar and unchecking this setting under Advanced controls.
- If you wish to stay logged in to a particular site you visit often, you can set exceptions on a per-site basis by clicking on the Shield icon in the address bar and unchecking this setting under Advanced controls.
Privacy and security
- Select Don't allow sites to use the V8 optimizer under Security → Manage V8 security (1)
- Select Automatically remove permissions from unused sites under Sites and Shields Settings
- Select Disable non-proxied UDP under WebRTC IP Handling Policy
- Uncheck Use Google services for push messaging
- Select Auto-redirect AMP pages
- Select Auto-redirect tracking URLs
- Select Prevent sites from fingerprinting me based on my language preferences
- Disabling the V8 optimizer reduces your attack surface by disabling some parts of JavaScript Just-In-Time (JIT) compilation.
Tor windows
Private Window with Tor allows you to route your traffic through the Tor network in Private Windows and access .onion services, which may be useful in some cases. However, Brave is not as resistant to fingerprinting as the Tor Browser is, and far fewer people use Brave with Tor, so you will stand out. If your threat model requires strong anonymity, use the Tor Browser.
Data Collection
- Uncheck Allow privacy-preserving product analytics (P3A)
- Uncheck Automatically send daily usage ping to Brave
- Uncheck Automatically send diagnostic reports
Web3
Brave's Web3 features can potentially add to your browser fingerprint and attack surface. Unless you use any of these features, they should be disabled.
- Select Extensions (no fallback) under Default Ethereum wallet
- Select Extensions (no fallback) under Default Solana wallet
Extensions
- Uncheck all built-in extensions you don't use
Search engine
We recommend disabling search suggestions in Brave for the same reason we recommend disabling this feature in Firefox.
- Uncheck Show search suggestions
System
- Uncheck Continue running apps when Brave is closed to disable background apps (1)
- This option is not present on all platforms.
Brave Sync
Brave Sync allows your browsing data (history, bookmarks, etc.) to be accessible on all your devices without requiring an account and protects it with E2EE.
Brave Rewards and Wallet
Brave Rewards lets you receive Basic Attention Token (BAT) cryptocurrency for performing certain actions within Brave. It relies on a custodial account and KYC from a select number of providers. We do not recommend BAT as a private cryptocurrency, nor do we recommend using a custodial wallet, so we would discourage using this feature.
Brave Wallet operates locally on your computer, but does not support any private cryptocurrencies, so we would discourage using this feature as well.
Criteria
Please note we are not affiliated with any of the projects we recommend. In addition to our standard criteria, we have developed a clear set of requirements to allow us to provide objective recommendations. We suggest you familiarize yourself with this list before choosing to use a project, and conduct your own research to ensure it's the right choice for you.
最低要求
- 它必须是开源软件。
- Must support automatic updates.
- Must receive engine updates in 0-1 days from upstream release.
- Must be available on Linux, macOS, and Windows.
- Any changes required to make the browser more privacy-respecting must not negatively impact user experience.
- Must block third-party cookies by default.
- Must support state partitioning to mitigate cross-site tracking.1
最好情况
Our best-case criteria represents what we would like to see from the perfect project in this category. Our recommendations may not include any or all of this functionality, but those which do may rank higher than others on this page.
- Should include built-in content blocking functionality.
- Should support cookie compartmentalization (à la Multi-Account Containers).
- Should support Progressive Web Apps (PWAs). PWAs enable you to install certain websites as if they were native apps on your computer. This can have advantages over installing Electron-based apps because PWAs benefit from your browser's regular security updates.
- Should not include add-on functionality (bloatware) that does not impact user privacy.
- Should not collect telemetry by default.
- Should provide an open-source sync server implementation.
- Should default to a private search engine.
-
Brave's implementation is detailed at Brave Privacy Updates: Partitioning network-state for privacy. ↩︎