Android
- -
- Unfortunately the Android version of Firefox doesn't support managing tabs as containers. The recommended extensions below are a substitute, however as APIs do not exist for clearing IndexedDB, Service Workers cache, appCache, or cache by host. As a result they are not as good as the above Temporary Container suggestions.
-
-
-{% include cardv2.html
- title="ETag Stoppa"
- image="/assets/img/svg/3rd-party/etag_stoppa.svg"
- description="ETag Stoppa Prevents Firefox from storing entity tags by removing ETag response headers unconditionally and without exceptions."
- website="https://addons.mozilla.org/firefox/addon/etag-stoppa/"
- forum=""
- github="https://github.com/claustromaniac/etag-stoppa"
- firefox="https://addons.mozilla.org/firefox/addon/etag-stoppa/"
-%}
-
-{% include cardv2.html
- title="Cookie AutoDelete: Automatically Delete Cookies"
- image="/assets/img/png/3rd-party/cookie_autodelete.png"
- description="Cookie AutoDelete automatically removes cookies, lingering sessions, and other information that can be used to spy on you when they are no longer used by open browser tabs."
- website="https://addons.mozilla.org/firefox/addon/cookie-autodelete/"
- forum="https://forum.privacytools.io/t/discussion-cookie-autodelete/267"
- github="https://github.com/Cookie-AutoDelete/Cookie-AutoDelete"
- firefox="https://addons.mozilla.org/firefox/addon/cookie-autodelete"
- chrome="https://chrome.google.com/webstore/detail/cookie-autodelete/fhcgjolkccmbidfldomjliifgaodjagh"
-%}
-
-For Advanced Users
+For Advanced Users
These addons require quite a lot of interaction from the user, and some of them completely replace the add-ons we've recommended above. Some sites may not work properly without careful configuration.
diff --git a/_includes/sections/browser-tweaks.html b/_includes/sections/browser-advanced-tweaks.html
similarity index 61%
rename from _includes/sections/browser-tweaks.html
rename to _includes/sections/browser-advanced-tweaks.html
index 9b69d737..23808845 100644
--- a/_includes/sections/browser-tweaks.html
+++ b/_includes/sections/browser-advanced-tweaks.html
@@ -1,4 +1,4 @@
-
Firefox: Privacy Related "about:config" Tweaks
+Firefox: Advanced Privacy Tweaks using "about:config"
This is a collection of privacy-related about:config tweaks. We'll show you how to enhance the privacy of your Firefox browser.
@@ -6,38 +6,43 @@
- Enter "about:config" in the firefox address bar and press enter. -
- Press the button "Accept the Risk and Continue" [FF71+] or "I accept the risk". -
- Copy and paste each of the preferences below (for example "webgl.disabled") into the search bar, and set each of them to the stated value (such as "true"). +
- Press the button "Accept the Risk and Continue" +
- Copy and paste each of the preferences below (for example "webgl.disabled") into the search bar, and set each of them to the stated value (such as "true").
Getting started:
+Firefox Desktop:
+First Party Isolation
+These settings should be safe, however first party isolation may break some third party login systems.
- privacy.firstparty.isolate = true
- A result of the Tor Uplift effort, this preference isolates all browser identifier sources (e.g. cookies) to the first party domain, with the goal of preventing tracking across different domains. (Don't do this if you are using the Firefox Addon "Cookie AutoDelete" with Firefox v58 or below.) +
- privacy.resistFingerprinting = true
- A result of the Tor Uplift effort, this preference makes Firefox more resistant to browser fingerprinting. -
- privacy.trackingprotection.fingerprinting.enabled = true -
- [FF67+] Blocks Fingerprinting - -
- privacy.trackingprotection.cryptomining.enabled = true -
- [FF67+] Blocks CryptoMining - -
- privacy.trackingprotection.enabled = true -
- This is Mozilla's new built-in tracking protection. One of it's benefits is blocking tracking (i.e. Google Analytics) on privileged pages where add-ons that usually do that are disabled. - +
- browser.send_pings = false
- The attribute would be useful for letting websites track visitors' clicks. +
- Disable Firefox prefetching pages it thinks you will visit next: +
-
+ Prefetching causes cookies from the prefetched site to be loaded and other potentially unwanted behavior. Details here and here.
+
-
+
- network.dns.disablePrefetch = true +
- network.dns.disablePrefetchFromHTTPS = true +
- network.predictor.enabled = false +
- network.predictor.enable-prefetch = false +
- network.prefetch-next = false +
+
+ - browser.urlbar.speculativeConnect.enabled = false
- Disable preloading of autocomplete URLs. Firefox preloads URLs that autocomplete when a user types into the address bar, which is a concern if URLs are suggested that the user does not want to connect to. Source - -
- dom.event.clipboardevents.enabled = false -
- Disable that websites can get notifications if you copy, paste, or cut something from a web page, and it lets them know which part of the page had been selected. - +
- media.eme.enabled = false
-
Disables playback of DRM-controlled HTML5 content, which, if enabled, automatically downloads the Widevine Content Decryption Module provided by Google Inc. Details
@@ -47,21 +52,22 @@ - media.gmp-widevinecdm.enabled = false
- Disables the Widevine Content Decryption Module provided by Google Inc., used for the playback of DRM-controlled HTML5 content. Details +
- media.navigator.enabled = false
- Websites can track the microphone and camera status of your device. +
- network.cookie.cookieBehavior = 1
-
- Disable cookies
+ Disable cookies. 2 is likely to break some sites. 4 is the default default. 1 is more strict than 4.
-
-
- 0 = Accept all cookies by default
- 1 = Only accept from the originating site (block third-party cookies)
- 2 = Block all cookies by default +
- 4 = Block Cross-site and social media trackers
-
-
+ - network.http.referer.XOriginPolicy = 2
-
Only send
Refererheader when the full hostnames match. (Note: if you notice significant breakage, you might try1combined with anXOriginTrimmingPolicytweak below.) Source @@ -82,9 +88,12 @@
+ - webgl.disabled = true
- WebGL is a potential security risk. Source +
- browser.sessionstore.privacy_level = 2
- This preference controls when to store extra information about a session: contents of forms, scrollbar positions, cookies, and POST data. Details @@ -95,35 +104,44 @@ +
- beacon.enabled = false
- Disables sending additional analytics to web servers. Details -
- browser.safebrowsing.downloads.remote.enabled = false -
- Prevents Firefox from sending information about downloaded executable files to Google Safe Browsing to determine whether it should be blocked for safety reasons. Details - -
- Disable Firefox prefetching pages it thinks you will visit next: -
-
- Prefetching causes cookies from the prefetched site to be loaded and other potentially unwanted behavior. Details here and here.
-
-
-
- network.dns.disablePrefetch = true -
- network.dns.disablePrefetchFromHTTPS = true -
- network.predictor.enabled = false -
- network.predictor.enable-prefetch = false -
- network.prefetch-next = false -
-
- network.IDN_show_punycode = true
- Not rendering IDNs as their Punycode equivalent leaves you open to phishing attacks that can be very difficult to notice. Source -
- Looking for TRR, DoH or ESNI? -
- They have moved to our DNS page. +
- browser.safebrowsing.downloads.remote.enabled = false +
- Prevents Firefox from sending information about downloaded executable files to Google Safe Browsing to determine whether it should be blocked for safety reasons. Details + +
- privacy.firstparty.isolate = true +
- A result of the Tor Uplift effort, this preference isolates all browser identifier sources (e.g. cookies) to the first party domain, with the goal of preventing tracking across different domains. (Don't do this if you are using the Firefox Addon "Cookie AutoDelete" with Firefox v58 or below.) + +
- privacy.resistFingerprinting = true +
- A result of the Tor Uplift effort, this preference makes Firefox more resistant to browser fingerprinting. +
- privacy.resistFingerprinting.letterboxing = true +
- This sets the resolution of your Firefox window to a standard resolution. Only use this if you are using the above privacy.resistFingerprinting
+
+
Media
+This may break some websites which use VOIP based features.
+ - webgl.disabled = true +
- WebGL is a potential security risk. Source + +
- Disable WebRTC +
- See WebRTC section
- arkenfox user.js (formerly ghacks-user.js) - An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting. +
- arkenfox user.js An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting. Desktop Firefox Only
+ Cookies: All third-party cookies (may cause websites to break)
+
+ 
+ Tracking content: In all windows
+
+ 
+ Cryptominers
+
+ 
+ Fingerprinters
+
+- Remember browsing and download history +
- Clear history when Firefox closes
- Browsing & Download History +
- Active Logins +
- Form & Search History +
- Cookies +
- Cache +
- Data +
- Offline Website Data +
Resist Fingerprinting
+One of the features of resist fingerprinting is to set the reported browser timezone to UTC. If you depend on having your real time zone reported to the websites you visit, this setting may break that.
Block outbound
Location bar
Plugins
Hardware Fingerprinting
Persistent Storage
Headers/Referers
Media
+This may break some websites which use VOIP based features.
Sessions and session restoration
Miscellaneous
Safe Browsing
+Firefox Android (Fenix):
+ +First Party Isolation
+These settings should be safe, however first party isolation may break some third party login systems.
+Resist Fingerprinting
+One of the features of resist fingerprinting is to set the reported browser timezone to UTC. If you depend on having your real time zone reported to the websites you visit, this setting may break that.
+Firefox user.js Templates
-
-
Related Information
-
diff --git a/_includes/sections/browser-easy-tweaks.html b/_includes/sections/browser-easy-tweaks.html
new file mode 100644
index 00000000..842bfe5c
--- /dev/null
+++ b/_includes/sections/browser-easy-tweaks.html
@@ -0,0 +1,64 @@
+
Firefox: Easy Privacy Enhancing Tweaks
+ +With Enhanced Tracking Protection (ETP) that Firefox offers, you can control cookies and data saved on your device.
+
+Enhanced Tracking Protection
+ETP can be made more strict by clicking on the main menu (or Edit) and then Preferences. From the side menu select 🔒 Privacy & Security.
+ +We recommend that All third-party cookies be blocked. The only pages likely to break under this configuration are social logins (i.e. authentication with services using your Google, Facebook account etc). Social logins are terrible for privacy and they link all services you use to a single identity, that is mostly used for advertising purposes, such as targeted advertising. + +
When you use a social login you also run the risk of being locked out of services you use, if you lose access to the account. We recommend creating individual accounts with separate passwords. Passwords can be managed with a Password Manager.
+ +For more information about Enhanced Tracking Protection, see Mozilla's for Desktop and Android. + +The only suggestion we would make is to switch from standard to custom with the configuration listed below. + +Custom
+-
+
The strict setting will only block known cross-site and/or social media trackers. This may still let through third party cookies that can be used for tracking.
+ +Firefox sessions and saved data
+We also suggest clearing history, and persistent data upon close of your browser. If you wish to remain logged in for some websites we suggest setting some exceptions. For desktop users we suggest using the Persistent storage management addons.
+ +History
+Firefox will Use custom settings for history +-
+
+ Next select Settings… the Settings for Clearing History will load. Make sure there is a checkmark next to each item: +
-
+