Skip to content

Setting privacy in the browser FireFox and IceCat for PC / android

License

Notifications You must be signed in to change notification settings

de956/browser-privacy

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

42 Commits
 
 
 
 

Repository files navigation

Setting privacy in the browser FireFox and IceCat for PC / android


⚠️ These settings may cause problems on some sites ⚠️

Type in the address bar (and agree to the terms):

about:config

Search for parameters and set the following values:

  • Disable telemetry
Params Value
toolkit.telemetry.archive.enabled false
toolkit.telemetry.enabled false
toolkit.telemetry.unified false
toolkit.telemetry.server empty value
toolkit.telemetry.server_owner empty value
toolkit.telemetry.bhrPing.enabled false
toolkit.telemetry.debugSlowSql false
toolkit.telemetry.ecosystemtelemetry.enabled false
toolkit.telemetry.firstShutdownPing.enabled false
toolkit.telemetry.cachedClientID empty value
toolkit.telemetry.hybridContent.enabled false
toolkit.telemetry.newProfilePing.enabled false
toolkit.telemetry.shutdownPingSender.enabled false
toolkit.telemetry.shutdownPingSender.enabledFirstSession false
toolkit.telemetry.shutdownPingSender.enabledFirstSes false
toolkit.telemetry.updatePing.enabled false
toolkit.telemetry.updatePing.enable false
browser.newtabpage.activity-stream.feeds.telemetry false
browser.newtabpage.activity-stream.fxaccounts.endpoint empty value
browser.newtabpage.activity-stream.telemetry false
browser.newtabpage.activity-stream.telemetry.ping.endpoint false
browser.newtabpage.activity-stream.telemetry.structuredIngestion false
browser.newtabpage.activity-stream.telemetry.structuredIngestion.endpoint empty value
browser.newtabpage.activity-stream.telemetry.ut.events false
browser.ping-centre.telemetry false
browser.urlbar.eventTelemetry.enabled false
media.wmf.deblacklisting-for-telemetry-in-gpu-process false
permissions.eventTelemetry.enabled false
security.certerrors.recordEventTelemetry false
security.identitypopup.recordEventTelemetry false
security.ssl.errorReporting.url empty value
services.sync.telemetry.maxPayloadCount -1
services.sync.telemetry.submissionInterval -1
telemetry.origin_telemetry_test_mode.enabled false
gecko.handlerService.schemes.mailto.1.uriTemplate empty value
gecko.handlerService.schemes.mailto.2.uriTemplate empty value
gecko.handlerService.schemes.mailto.0.uriTemplate empty value
gecko.handlerService.schemes.mailto.0.name empty value
gecko.handlerService.schemes.mailto.1.name empty value
datareporting.healthreport.infoURL empty value
datareporting.healthreport.uploadEnabled false
datareporting.healthreport false
toolkit.telemetry.cachedClientID empty value
services.sync.prefs.sync.media.eme.enabled false
browser.search.suggest.enabled false
browser.search.suggest.enabled.private false
browser.search.suggest false
device.camera.enabled false
browser.newtabpage.activity-stream.asrouter.userprefs.cfr.addons false
browser.newtabpage.activity-stream.asrouter.userprefs.cfr.features false
dom.event.clipboardevents.enabled false
dom.event.clipboardevents false
dom.battery.enabled false
gecko.handlerService.schemes.irc.0.uriTemplate empty value
gecko.handlerService.schemes.ircs.0.uriTemplate empty value
browser.contentHandlers.types.1.uri false
app.feedback.baseURL empty value
breakpad.reportURL empty value
browser.chrome.errorReporter.infoURL empty value
toolkit.crashreporter.infoURL empty value
distribution.id empty value
extensions.abuseReport.amoDetailsURL empty value
extensions.abuseReport.url empty value
geo.provider.network.url empty value
toolkit.datacollection.infoURL empty value
browser.contentblocking.report.cookie.url empty value
browser.contentblocking.report.endpoint_url empty value
browser.contentblocking.report.fingerprinter.url empty value
browser.contentblocking.report.lockwise.how_it_works.url empty value
browser.contentblocking.report.lockwise.mobile-android.url empty value
browser.contentblocking.report.lockwise.mobile-ios.url empty value
browser.contentblocking.report.manage_devices.url empty value
browser.contentblocking.report.mobile-android.url empty value
browser.contentblocking.report.mobile-ios.url empty value
browser.contentblocking.report.monitor.enabled false
browser.contentblocking.report.monitor.home_page_url empty value
browser.contentblocking.report.monitor.how_it_works.url empty value
browser.contentblocking.report.monitor.preferences_url empty value
browser.contentblocking.report.monitor.sign_in_url empty value
browser.contentblocking.report.monitor.url empty value
browser.contentblocking.report.proxy_extension.url empty value
browser.contentblocking.report.show_mobile_app false
browser.contentblocking.report.social.url empty value
browser.contentblocking.report.tracker.url empty value
browser.contentblocking.report.vpn-android.url empty value
browser.contentblocking.report.vpn-ios.url empty value
browser.contentblocking.report.vpn-promo.url empty value
browser.contentblocking.report.vpn.enabled false
browser.contentblocking.report.vpn.url empty value
browser.contentblocking.reportBreakage.url empty value
browser.newtabpage.activity-stream.discoverystream.endpointSpocsClear empty value
browser.newtabpage.activity-stream.discoverystream.endpoints empty value
browser.safebrowsing.provider.google.advisoryURL empty value
browser.safebrowsing.provider.google.gethashURL empty value
browser.safebrowsing.provider.google.reportMalwareMistakeURL empty value
browser.safebrowsing.provider.google.reportPhishMistakeURL empty value
browser.safebrowsing.provider.google.reportURL empty value
browser.safebrowsing.provider.google.updateURL empty value
browser.safebrowsing.provider.google4.advisoryName empty value
browser.safebrowsing.provider.google4.advisoryURL empty value
browser.safebrowsing.provider.google4.dataSharingURL empty value
browser.safebrowsing.provider.google4.gethashURL empty value
browser.safebrowsing.provider.google4.reportMalwareMistakeURL empty value
browser.safebrowsing.provider.google4.reportPhishMistakeURL empty value
browser.safebrowsing.provider.google4.reportURL empty value
browser.safebrowsing.provider.google4.updateURL empty value
browser.safebrowsing.provider.mozilla.gethashURL empty value
browser.safebrowsing.provider.mozilla.updateURL empty value
browser.safebrowsing.reportPhishURL empty value
datareporting.policy.firstRunURL empty value
identity.fxaccounts.auth.uri empty value
identity.fxaccounts.commands.enabled false
identity.fxaccounts.enabled false
identity.fxaccounts.pairing.enabled false
identity.fxaccounts.remote.oauth.uri empty value
identity.fxaccounts.remote.pairing.uri empty value
identity.fxaccounts.remote.profile.uri empty value
identity.fxaccounts.remote.root empty value
identity.fxaccounts.service.monitorLoginUrl empty value
identity.mobilepromo.android empty value
identity.fxaccounts.toolbar.enabled false
identity.fxaccounts.useSessionTokensForOAuth false
identity.mobilepromo.ios empty value
identity.sendtabpromo.url empty value
identity.sync.tokenserver.uri empty value
identity.sync.useOAuthForSyncToken empty value
  • Disable WebRTC
Params Value
media.peerconnection.enabled false
media.navigator.enabled false
media.peerconnection.enabled false
  • Disable WebGL
Params Value
webgl.disabled true
webgl.enable-webgl2 false
Params Value
network.trr.mode 3
network.trr.uri https://cloudflare-dns.com/dns-query
  • Test DNS over HTTPS Cloudflare (if cloudflare is selected)

  • For more DNS resolves over HTTPS: link

  • ⚠️ DNS over HTTPS (DoH) is a secure protocol, but it does not guarantee the privacy of your requests ⚠️

  • Encrypt all dns requests on your Windows / Linux / MacOS device: dnscrypt-proxy (Recommended as the best way)

  • DNScrypt public-servers

  • Test DNSSEC

  • Install add-on CanvasBlocker for FireFox:

  • It is recommended to change 'userAgent' => 'Protect navigator API' settings

  • Check the config in 'Settings' => 'Setting sanitation'

  • Install add-on uBlock for FireFox:

  • Select multiple regions to block ads

  • Install add-on NoScript for FireFox

  • Open settings => 'Per-site Permissions'

  • It is recommended to exclude all addresses from the list of trusted addresses and switch to blocking mode by default

  • Allow scripts to be executed as needed by managing NoScript settings from the add-ons panel

  • Install add-on HTTPS Everywhere for FireFox

  • In the add-on settings, enable the item => 'Encrypt All Sites Eligible is ON'

  • Test | test your Browser

  • Use DuckDuckGo or SearX as your browser's search engine

  • Set auto-delete history in browser settings