Secure Browser Privacy Settings Worth Changing

This page contains affiliate links. If you make a purchase through one, we may earn a commission at no extra cost to you.

Your browser’s default settings are built to balance privacy against convenience and advertising revenue, not to maximize your privacy specifically — which means a handful of changes in settings you already have access to make a real, immediate difference without installing anything new.

Block Third-Party Cookies

Third-party cookies are what let an advertiser track you across unrelated websites, building a profile of your browsing rather than just remembering your login on the site that set the cookie. Blocking third-party cookies specifically — while leaving first-party cookies alone — stops most of this cross-site tracking without breaking normal site functionality like staying logged in, which is why it’s the better default than blocking all cookies outright and then fighting broken websites afterward.

Firefox’s Strict Tracking Protection Is a Real, Meaningful Default

Firefox’s Enhanced Tracking Protection, set to Strict, blocks known tracking scripts, cryptominers, and social media trackers by default, and its Total Cookie Protection confines cookies to the site that actually set them so they can’t follow you across the web at all. This is a genuinely stronger default privacy posture than most other mainstream browsers ship with, worth knowing if browser choice is on the table at all.

If You’re on Chrome, You Have to Turn Things On Manually

Chrome’s privacy tools exist, but they’re opt-in rather than the aggressive default Firefox ships with — worth being direct about this rather than assuming Chrome protects you the same way out of the box. Blocking third-party cookies, reviewing which sites have permission to access your camera, microphone, and location, and enabling Secure DNS are all real settings worth checking specifically if Chrome is your browser, since none of them are guaranteed to already be configured the way you’d want.

Review Site Permissions Periodically, Not Just Once

Every “Allow” you’ve clicked for camera, microphone, location, or notifications over the years is still active until you revoke it, and most people accumulate permissions for sites they no longer use or even remember granting access to. A periodic check of your browser’s site permissions list, removing anything you don’t actively need anymore, closes a real gap that doesn’t require any ongoing effort to maintain once it’s cleaned up.

Where a VPN Fits In — and Where It Doesn’t

It’s worth being precise about what each tool actually does: browser privacy settings control what individual sites and trackers can see about your activity on the web. A VPN like Surfshark controls something different — it hides your traffic and real IP address from your internet provider and from the sites you visit at the network level. Neither replaces the other; browser settings stop tracking scripts from following you across sites, while a VPN stops your ISP and destination sites from seeing your actual IP and location. Using both addresses two separate, real gaps rather than one tool covering everything.