Browser privacy settings: the switches that matter
You do not have to switch browsers to browse more safely – the right settings usually do it. This guide shows the switches that give you the most protection and privacy.
Safe browsing is not a question of expensive tools. It is a question of settings. The switches below exist in every modern browser. They take ten minutes and cut tracking and risk noticeably. Which browser protects you best in general is covered in the browser overview .
The short version
- Tracking protection on “strict” and third-party cookies blocked.
- HTTPS-only mode turned on.
- Global Privacy Control turned on, so sites get your opt-out automatically.
- Permissions cleaned up: location, camera, microphone, notifications.
- Safe Browsing / dangerous site warnings on.
- Automatic updates left on – the single most important security setting.
The key settings, step by step
Go through this once – in any browser
- Tracking protection: in the privacy settings, set it to the strictest level.
- Cookies: block third-party cookies; clear cookies on close if you want.
- HTTPS-only: force encrypted connections.
- Global Privacy Control: switch on “tell sites not to sell or share my data”.
- Permissions: under site settings, set location, camera, microphone and notifications to “ask” or “block”.
- Safe Browsing / malware protection: turn it on.
- Search engine: switch to a privacy-friendly one if you want.
- Pop-ups and redirects: block them.
Where to find it
- Chrome / Edge: Settings → “Privacy and security” (cookies, Safe Browsing, site permissions).
- Firefox: Settings → “Privacy & Security” → “Enhanced Tracking Protection: Strict”. The GPC switch sits in the same panel.
- Safari: Settings → “Privacy” (prevent cross-site tracking) and “Websites” (permissions).
A US-specific switch worth knowing
Websites in the US are not required to show you a cookie banner. Instead, state privacy laws give you the right to opt out of the sale or sharing of your data. You will see this as a “Your Privacy Choices” link in the footer – but clicking it works on that one site only.
Global Privacy Control (GPC) sends the same request automatically, on every site you visit. California’s privacy law treats it as a binding opt-out signal, and several other states recognize it as well. Firefox and Brave have it built in; in Chrome and Edge you add it with an extension. It costs one click and then keeps working on its own.
Keeping permissions under control
Many sites ask for location, camera or notifications without needing them. Set the default to “ask” and take away permissions you no longer use. Be especially strict with notifications – they are often abused for spam and scam messages.
What settings cannot do
- No anonymity: settings reduce your traces, they do not make you invisible.
- No protection against clicking a phishing link: stay alert – how to spot phishing .
- No substitute for updates: an out-of-date browser stays attackable.
Common mistakes
- Leaving tracking protection on “standard” instead of “strict”.
- Accepting every notification prompt.
- Installing extensions at random – each one is a risk.
- Postponing updates and clicking warnings away.
When you are done, check the result with our tracking protection test , or go back to the privacy section .
Frequently asked questions
Which setting helps the most?
Strict tracking protection plus blocking third-party cookies. Together they stop most cross-site ad tracking. Right after that come HTTPS-only mode and cleaning up site permissions.
Do I have to switch browsers to browse safely?
Not necessarily. Every major browser can be set up in a privacy-friendly way. Which one protects you most by default is in our overview of safer browsers, but the settings matter more than the brand.
What does Global Privacy Control do?
It sends an automatic signal to every site telling it not to sell or share your data. Under California law that signal counts as a valid opt-out, and several other state laws recognize it too. It is one switch and it works site-wide.