Browser Privacy: Extensions and Settings That Actually Work

Quick answer: No single setting makes your browser private — it takes a privacy-respecting browser, a couple of well-chosen extensions, and a handful of built-in settings turned on together. Just as important: check what your privacy tools actually do with your data, since not every product that promises to block tracking is actually doing that.

Your browser is the window through which advertisers, data brokers, and trackers watch what you do online. Even “private” or incognito windows don’t stop that — they only stop your own device from remembering where you went, not the sites and trackers watching you get there. Real browser privacy takes a few deliberate choices, and they’re worth getting right, because the tools you trust to protect you aren’t always doing that.

A Real Example: When the Privacy Tool Was the Problem

In 2024, the FTC finalized a $16.5 million settlement against Avast, a company best known for its antivirus software and browser extensions, after finding it had collected and sold users’ web browsing data for years — while explicitly advertising that its products would block tracking and protect their privacy. According to the FTC’s complaint, Avast gathered more than 8 petabytes of browsing data through its browser extensions and antivirus products, then sold detailed, re-identifiable records to more than 100 third parties through a subsidiary, without adequate consent. In February 2025, the FTC began sending redress notices to over 3.5 million people who’d bought Avast antivirus software between 2014 and 2020.

The lesson isn’t “don’t use security software” — it’s that a product’s marketing claims about privacy aren’t the same as verified behavior. Before trusting any browser extension or privacy tool with access to your browsing activity, it’s worth checking what data it collects and what its actual business model is, not just what it says on the download page.

1. Choose a Privacy-Friendly Browser

• Firefox, Brave, and DuckDuckGo Browser all block many trackers by default, without needing extra configuration.
• Chrome can be made reasonably private with the right settings and extensions, but its default behavior favors data collection for Google’s own advertising business, and Google’s plans around third-party cookie tracking have shifted more than once — don’t assume Chrome’s defaults are protecting you without checking your own settings.

2. Must-Have Privacy Extensions (Updated for 2026)

This is the section where outdated advice causes the most harm, so it’s worth being specific about what currently works:

• uBlock Origin is still the strongest content-blocking extension available — but as of 2026, its full version only works properly in Firefox. Chrome and Microsoft Edge have both phased out the older extension framework (Manifest V2) that uBlock Origin’s full version relies on; Chrome removed it from the Web Store entirely as of August 2026. If you’re on Chrome or Edge, you’ll be limited to uBlock Origin Lite, a pared-down version with fewer filtering options. If ad and tracker blocking matters to you, this alone is a good reason to consider switching your daily browser to Firefox.
• Privacy Badger (from the Electronic Frontier Foundation) automatically learns to block trackers based on their behavior, rather than relying on a fixed list.
• ClearURLs strips tracking parameters out of links before you click them, which stops a common way sites and ad networks tie your clicks back to your identity across different pages.
• HTTPS Everywhere — this extension was discontinued in 2023 because modern browsers now handle this automatically. If you still have it installed, you can safely remove it; instead, turn on your browser’s built-in “Always Use Secure Connections” or “HTTPS-Only Mode” setting, found in most browsers’ privacy or security settings.

3. Configure Built-In Settings

• Turn off third-party cookies in your browser’s privacy settings — most browsers now let you do this manually, regardless of what the default happens to be.
• Enable “Do Not Track” if your browser offers it, though be aware that not all sites are required to honor the request — it’s a courtesy signal, not a technical block.
• Set your browser to clear cookies and history on exit, so tracking data doesn’t accumulate indefinitely between sessions.
• Disable autofill for saved passwords and card numbers on shared or public devices, since autofill data can potentially be extracted by malicious scripts on a compromised page.

4. Use Private Windows Correctly

“Incognito” or “private browsing” mode only prevents your own browser from saving your history, cookies, and searches locally. It does not:

• Hide your activity from your internet service provider
• Hide your activity from your employer or school, if you’re on their network
• Prevent the websites you visit from tracking you during that session

For actual anonymity from your network provider or the sites you visit, you need a VPN (which encrypts your traffic and hides your IP address from the sites you visit) or the Tor Browser (which routes your traffic through multiple layers of encryption and relays for stronger anonymity, at the cost of slower browsing).

5. Sync Smartly

If you use your browser’s built-in account sync, be deliberate about what you sync. Passwords and bookmarks are generally low-risk to sync since they’re encrypted. Full browsing history is more sensitive — consider whether you actually need it available across every device, since it’s one more copy of your activity stored somewhere else.

Check Your Current Exposure

Before assuming your setup works, it’s worth actually testing it. The Electronic Frontier Foundation’s free tool, Cover Your Tracks (coveryourtracks.eff.org), analyzes your browser in real time and tells you whether your current blockers are actually stopping trackers and whether your browser’s “fingerprint” is unique enough to be tracked even without cookies. It takes about 30 seconds and gives you a concrete answer instead of a guess.

If You Discover a Privacy Tool Has Been Misusing Your Data

1. Stop using the product and uninstall the extension or software.
2. Check for an official notice or settlement, like the FTC’s Avast redress program, to see if you’re entitled to compensation or should take a specific action.
3. Review what other extensions have access to your browsing data — most browsers let you view and revoke extension permissions in their settings menu.
4. Change passwords for sensitive accounts if the exposed data included anything beyond general browsing history, such as login pages visited or account activity.
5. Periodically audit your installed extensions going forward — remove anything you no longer actively use, since every extension is a potential point of data collection.

People Also Ask

Sources: Federal Trade Commission, press release and finalized order on the Avast browsing-data settlement (2024–2025); Mozilla and Google Chrome developer communications on the Manifest V2 phase-out (2025–2026); Electronic Frontier Foundation, Privacy Badger and Cover Your Tracks documentation

Related Posts:

Why HTTPS Matters

VPN’s Explained