Key Takeaways
Summary
18 items · 15–30 minutes
Why Your Browser's Default Settings Aren't Doing Much for You
Browser makers face pressure from advertisers, publishers, and partners who rely on data collection to function. The result: privacy-protective features often exist inside your settings but arrive turned off. Most people never find them. This checklist changes that.
You don't need to be a security expert to work through these steps. Each setting is available in the major browsers — Chrome, Firefox, Safari, and Edge — though the exact location varies. When in doubt, use the browser's built-in search bar inside Settings to find the feature by name.
For broader context on protecting yourself online, see our beginner's guide to online privacy — it covers the foundations without assuming any technical background. And if you're working through a fuller audit, this checklist fits neatly into our digital privacy audit checklist.
Some Settings Require a Trade-Off
Blocking all third-party cookies and using strict tracking protection can occasionally break website functionality — forms may not submit, embedded videos may not load, or login flows on some sites may fail. If a site stops working after you enable strict settings, you can add it as an exception without reverting your global configuration. Start strict, then adjust where genuinely needed.
What You'll Need Before You Start
No specialist tools are required. Open your browser and navigate to its Settings or Preferences menu — that's where you'll find everything on this list. Having your browser updated to its latest version helps, since some privacy features were added in recent releases.
Your current web browser
All settings in this checklist live inside the browser's own Settings or Preferences panel.
A dedicated password manager
A safer alternative to storing passwords inside the browser, recommended as part of this checklist.
Browser update (latest version)
Some privacy features — including DNS-over-HTTPS and Enhanced Tracking Protection — were added in recent browser versions.
The Privacy Settings Checklist
Work through each group below. Items marked must are the highest priority — tackle those first if time is short. Should items add meaningful protection with minimal effort. Nice-to-have items are worth enabling if you want tighter control.
Tracking and Cookies
Search and Address Bar
Passwords and Autofill
Network and DNS Security
Permissions and Site Access
Extensions and Advanced Options
Extensions Can Undermine Everything Else
A single malicious or poorly maintained browser extension can bypass every privacy setting you've enabled. Extensions often have permission to read and modify all page data, including passwords and form inputs. Before installing any extension, check the publisher's reputation, review the permissions it requests, and remove any you're not actively using. Fewer extensions generally means a more private and secure browser.
One thing this checklist won't fix: browser fingerprinting, which tracks you without using cookies at all. If that concerns you, our article on browser fingerprinting vs. cookies explains how the two tracking methods differ and what (if anything) you can do about them.
What These Settings Can and Can't Protect
Enabling these settings meaningfully reduces the data advertisers, data brokers, and your internet service provider can collect about you through the browser. But no browser setting is a complete solution. A VPN offers additional protection in some scenarios — particularly on public Wi-Fi — though it has its own limitations worth understanding.
It's also worth knowing that incognito or private mode does not make you anonymous. It prevents your browser from saving your local history, but your internet provider, employer network, and the websites you visit can still see your activity. Our article on what incognito mode actually hides covers this in detail.
For a look at privacy gaps beyond the browser — across your phone, apps, and accounts — see privacy settings most people never change.