this post was submitted on 20 Jun 2025
57 points (93.8% liked)

Privacy

39583 readers
398 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Looking for Privacy-Oriented Open-Source Android Browsers

I'm looking for a privacy-focused, open-source Android browser. Here are some options I've found:

  • IronFox
    • recommended by LibreWolf
  • Fennec
    • no repo
  • Waterfox
  • Vanadium
  • iceraven
    • most stars
    • https://lemmy.world/u/Thetimefarm@lemm.ee - As far as I know ironfox supports any extensions normal firefox mobile does, but neither give you access to the full full extensions store. Iceraven is the only mobile browser I know of that lets you use all the extensions that you can on desktop firefox.
  • bromite
    • no longer maintained
    • Bromite has a fingerprint randomization and Vanadium doesn't. But Vanadium has better security if you use Graphene. So yeah, for privacy Bromite might be better
  • cromite
    • Bromite fork
  • brave
    • controversial
  • duckduckgo

Is there any other browser out there that fits this criteria? Is there an even better choice? I’m particularly interested in ones that focus on privacy.


UPDATE: iceraven vs ironfox

https://www.reddit.com/r/browsers/comments/1lkagoz/iceraven_vs_ironfox_firefox_fork_for_android/

I use both! Ironfox is hardened to improve security as best as possible for a gecko based android browser and focuses mainly on preventing fingerprinting, similar to mullvad's browser. Because of these extra privacy protections some websites will be more prone to break or render goofy on ironfox, but luckily I haven't ran into that issue yet.

Iceraven just strips out mozilla's tracking and adds tons of extra extensions and customizability, but doesn't include the extra security hardening or fingerprint protection like ironfox does.

Both devs are very good at keeping up with releases imo.

So if you really need airtight fingerprint prevention, or want extra security hardening, I'd go with ironfox. Also just a note, even with ironfox's hardening, it's still not as secure as a chromium based browser. Some people have very strong opinions on the gecko vs chromium security debate so I'm just pointing that out as a disclaimer. If you're gonna be treading into websites where there's a significant risk of picking up something nefarious in the background, stick with a chromium based browser for those sites as a precaution. Just my 2 cents.


EDIT: in terms of popularity, privacy and functionality I guess the best choices are iceraven (based on firefox) as it has most stars on github and cromite (based on chromium) as brave is controversial


Solved Questions

I know that Brave is a bit controversial, but If Brave does something behind our backs wouldn’t we be able to know it since all the source code is out there? If it has some features we don’t like can’t we simply modify the source code?

@slackness

re: open source In theory: yes. In practice: maybe. It’ll probably eventually be caught by some researcher but unlike popular belief all open source code bases are not constantly being audited by the community. A random person can’t just read Brave source code for all platforms and accurately gauge if they’re doing something nefarious. It is very easy to hide stuff in code or misuse a protocol for evil purposes, etc.

You can modify the source code but as evident by the fact that there’s no Brave fork with crypto removed (there was one but their branding was too similar to Brave’s so they got sued), it’s not an easy feat to maintain that.


few questions

  • What is the difference between IronFox, Fennec, Waterfox and iceraven?

As far as I know ironfox supports any extensions normal firefox mobile does, but neither give you access to the full full extensions store. Iceraven is the only mobile browser I know of that lets you use all the extensions that you can on desktop firefox.

top 50 comments
sorted by: hot top controversial new old

UPDATE: iceraven vs ironfox

https://www.reddit.com/r/browsers/comments/1lkagoz/iceraven_vs_ironfox_firefox_fork_for_android/

I use both! Ironfox is hardened to improve security as best as possible for a gecko based android browser and focuses mainly on preventing fingerprinting, similar to mullvad's browser. Because of these extra privacy protections some websites will be more prone to break or render goofy on ironfox, but luckily I haven't ran into that issue yet.

Iceraven just strips out mozilla's tracking and adds tons of extra extensions and customizability, but doesn't include the extra security hardening or fingerprint protection like ironfox does.

Both devs are very good at keeping up with releases imo.

So if you really need airtight fingerprint prevention, or want extra security hardening, I'd go with ironfox. Also just a note, even with ironfox's hardening, it's still not as secure as a chromium based browser. Some people have very strong opinions on the gecko vs chromium security debate so I'm just pointing that out as a disclaimer. If you're gonna be treading into websites where there's a significant risk of picking up something nefarious in the background, stick with a chromium based browser for those sites as a precaution. Just my 2 cents.

[–] Cheradenine@sh.itjust.works 11 points 2 weeks ago (1 children)

Iceraven often lags behind on security updates. I know you specified privacy, but good to keep in mind.

I use Ironfox, because I previously used Mull (rip) with RethinkDNS, and Orbot

[–] happeningtofry99158@lemmy.world 2 points 2 weeks ago

good to know!

[–] mnmalst@lemmy.zip 7 points 2 weeks ago (1 children)

Fennec development has not stop, why do you think that's the case? The github repo shows it's on the current firefox build.

[–] happeningtofry99158@lemmy.world 1 points 2 weeks ago* (last edited 2 weeks ago) (1 children)

I'm a bit confused. Its name has changed to Fenix?

[–] mnmalst@lemmy.zip 6 points 2 weeks ago (1 children)

No it's Fennec: https://gitlab.com/relan/fennecbuild maybe you are confusing it with Fenix which was the official android Firefox browser: https://github.com/mozilla-mobile/fenix but is not developed anymore.

[–] happeningtofry99158@lemmy.world 3 points 2 weeks ago

Much appreciated!

[–] hellfire103@lemmy.ca 6 points 2 weeks ago (3 children)

See also:

Firefox-based

Chromium-based

WebView-based

[–] slackness@lemmy.ml 7 points 2 weeks ago* (last edited 2 weeks ago) (11 children)

I know Brave is controversial but they were the only ones (edit: not sure about Vanadium, I'm curious if they were vulnerable) disallowing JS to access localhost thus blocking Meta and Yandex's recently discovered spying.

Sounds like such a no brainer to not allow random websites to communicate with the localhost and very easily circumvent all sandboxing you spent thousands of hours building. Looking at you Android (Google) and all the browser vendors (also Google?, huh).

[–] hellfire103@lemmy.ca 2 points 2 weeks ago

Huh, I didn't know that. I wonder if any of the rest have implemented that since...

load more comments (10 replies)
[–] happeningtofry99158@lemmy.world 2 points 2 weeks ago

Thanks a lot!

[–] ReluctantZen@feddit.nl 2 points 2 weeks ago (1 children)

Isn't webview-based still essentially chromium-based?

[–] hellfire103@lemmy.ca 1 points 2 weeks ago

Sorta. It's the same engine, but it is generally less private and less secure than actual Chromium.

DivestOS used to have some handy tables, before they shut down the website.

[–] relic4322@lemmy.ml 6 points 2 weeks ago

I would stay away from chromium forks in general. Google is doing some underhanded stuff using web manifest v3, not to mention all the bastard stuff they are doing in general.

I am very curious not only to hear the answer to your question regarding FF forks, but also why they get rated that way.

[–] Kazel@lemmy.dbzer0.com 4 points 2 weeks ago (1 children)
[–] happeningtofry99158@lemmy.world 2 points 2 weeks ago (1 children)

firefox on android does not enable resist fingerprint by default. To protect our browser fingerprint we have to tweak many settings and install several extensions (and I'm not sure those extensions supports android browser). That being said, firefox might not be privacy oriented

[–] relic4322@lemmy.ml 3 points 2 weeks ago (1 children)

yeah, and extensions additionally work against you in fingerprinting. Though I'm totally interested in what extensions you are using.

I would recommend Chameleon

[–] relic4322@lemmy.ml 4 points 2 weeks ago (1 children)

I should mention that DuckDuckGo recently released an android browser and it is privacy focused. I cant tell you how well it does its job BUT the important thing is that it has an experimental feature that creates a virtual network interface that routes coms and blocks phone home attempts and tells you what app is doing what.

I have had it running for a few months and its crazy to see how much traffic is going on without your knowledge.

[–] happeningtofry99158@lemmy.world 3 points 2 weeks ago

Thanks! I will look into that

[–] QuantumWanderlust@lemmy.dbzer0.com 4 points 2 weeks ago* (last edited 2 weeks ago) (3 children)

Be aware that Firefox-based browsers on Android are horrible for security and don't even have an internal sandbox.

If you decide to download IronFox, download it through Accrescent, since it enforces that the devs or anyone else won't push a malicious update.

Edit: fixed an ambiguous sentence

[–] MonkderVierte@lemmy.zip 4 points 2 weeks ago (2 children)

Uhm, the Java VM is already there, separated by Linux groups and caged by SeLinux. Why sandbox?

load more comments (2 replies)
[–] swelter_spark@reddthat.com 3 points 2 weeks ago (2 children)

I've never heard of Accrescent. How is it better than F-droid?

load more comments (2 replies)
load more comments (1 replies)
[–] MrSulu@lemmy.ml 3 points 2 weeks ago

I use Cromite and Brave (yeah yeah) plus IronFox via Accrescent.
Brave may well have undesireables like the CEO, cryptocurrency etc., but so easy to switch off. Use your device with RethinkDNS (with or without Wireguard configured) to remove further wrinkles.

[–] bloubz@lemmygrad.ml 2 points 2 weeks ago

Vanadium

I don't think you can install it outside of GrapheneOS though

load more comments
view more: next ›