Your browser is the single biggest source of leaks about you, and it’s also the easiest thing to fix. You don’t need to become a command-line hermit. Ten minutes of settings changes and one extension will stop the overwhelming majority of commercial tracking. This guide tells you exactly what to change and — just as important — what to skip because it does nothing but slow you down.

First, pick a browser that isn’t working against you

The uncomfortable truth: Google Chrome is made by an advertising company. That doesn’t make it malware, but it does mean its defaults are tuned for a business that profits from data. You have two strong, mainstream alternatives:

  • Firefox — independent, open source, and the most configurable. Best if you’re willing to flip a few switches.
  • Brave — Chromium-based (so every site works exactly like it does in Chrome) with tracker and ad blocking on by default. Best if you want “install and forget.”

Either is a real upgrade. The rest of this guide covers both. If you can only do one thing today, switch to one of these and move on.

The one extension worth installing: uBlock Origin

Skip the dozen “privacy” extensions in the store. Most are redundant, and every extension you add is code that can see your browsing. You want exactly one content blocker, and it should be uBlock Origin (note the “Origin” — there are copycats). It’s free, open source, lightweight, and blocks ads and the trackers embedded in them.

Install it from your browser’s official add-on store, then leave the default filter lists on. That default configuration already blocks the major advertising and tracking networks. Brave users can technically rely on the built-in Brave Shields instead, but uBlock Origin gives you finer control if you want it.

One content blocker, configured well, beats five overlapping ones. More extensions means more attack surface and more breakage, not more privacy.

Firefox: the settings that matter

Open Settings → Privacy & Security and make these changes:

  1. Enhanced Tracking Protection → Strict. This blocks known trackers, third-party tracking cookies, cryptominers, and fingerprinters. A handful of sites break under Strict; when one does, click the shield icon in the address bar to disable protection for just that site.
  2. Cookies → Delete cookies and site data when Firefox is closed (optional but powerful). This wipes tracking cookies every session. The trade-off is you’ll re-log-in to sites, so pair it with a password manager.
  3. Turn off “Ask to save logins” if you use a dedicated password manager (you should — see the password managers guide).
  4. Telemetry: under Privacy & Security, uncheck the Firefox Data Collection boxes.
  5. DNS over HTTPS → Increased or Max Protection. This encrypts the “which website am I visiting” lookups that your internet provider would otherwise see in plain text.

That’s the whole list. Everything else in Firefox’s privacy settings is either already sensible or a matter of taste.

Brave: the settings that matter

Brave blocks most tracking out of the box, so there’s less to do. In Settings → Shields:

  1. Set Trackers & ads blocking → Aggressive.
  2. Set Fingerprinting blocking → Standard (Aggressive breaks more sites than it’s worth for most people).
  3. Turn on Upgrade connections to HTTPS.
  4. In Settings → Privacy and security, turn off the various product-analytics and “Web Discovery” toggles.

Ignore Brave Rewards, the crypto wallet, and the built-in VPN upsell unless you specifically want them. None of them are required for privacy.

What to skip (the placebo pile)

People waste hours on tweaks that don’t help and sometimes hurt:

  • Chasing a “unique” fingerprint by installing lots of extensions. Every extension and exotic setting can make you more identifiable, not less, because it makes your browser stand out. Blending in beats standing out.
  • Private/Incognito mode as a privacy tool. It only stops your browser from saving local history. Websites, your employer, and your ISP still see everything. It’s for hiding a gift purchase from a housemate, not from advertisers.
  • Obscure about:config flags copied from a forum. A few help; most are cargo-culting, and some break sites in ways you won’t connect to the change weeks later. Stick to the settings UI unless you truly know what a flag does.
  • A dozen “tracker blocker” extensions layered together. They overlap and conflict. One (uBlock Origin) is enough.

Verify it actually worked

Don’t take my word for it. Load our What You Leak page before and after. You’ll see your fingerprinting surface, whether Do-Not-Track and Global Privacy Control are being sent, and what a tracker would learn about your setup. It’s the fastest way to confirm your changes did something real.

A note on going further

If you want to raise the ceiling later:

  • Global Privacy Control (GPC) is a signal that legally tells sites in some U.S. states to not sell your data. Brave sends it by default; Firefox has a toggle under Privacy & Security. Turn it on — it’s a free legal lever.
  • Containers (Firefox Multi-Account Containers, or Brave’s session isolation) keep, say, your Google and Facebook logins from watching you across the rest of the web.
  • Hardened browsers like Mullvad Browser or the Tor Browser exist for higher-threat situations, but they’re overkill for everyday use and change how sites behave.

For 95% of people, the ten minutes above is the whole job. Do it once, verify it, and get on with your life. When you’re ready for the next win, work through the privacy checklist — browser hardening is just the first box.