1. Harden Your Browser Privacy Settings
Every major browser includes a privacy settings panel, but the default configuration is almost always optimized for convenience and compatibility, not privacy. The first step in protecting your privacy is to change these defaults.
In Chrome, navigate to Settings > Privacy and Security. Enable "Send a Do Not Track request with your browsing traffic" - though be aware that many sites ignore it. Set cookies to "Block third-party cookies" or, if available, "Block third-party cookies in Incognito." Disable "Allow sites to check if you have payment methods saved" and turn off "Preload pages for faster browsing and searching," which sends URLs to Google before you click them.
In the Security section, enable "Always use secure connections" and "Use secure DNS" with a privacy-respecting provider like Cloudflare or Quad9. Disable all options under the "Sync and Google services" section that you do not actively need, particularly "Autocomplete searches and URLs" and "Help improve Chrome's features and performance," both of which send browsing activity to Google.
Firefox offers the strongest privacy defaults of the major browsers, particularly with its Enhanced Tracking Protection set to Strict mode. Safari's Intelligent Tracking Prevention (ITP) uses machine learning to classify and isolate trackers. Brave blocks trackers and fingerprinting by default and includes built-in Tor browsing for the highest privacy protection.
2. Install a Tracker Blocker
Browser privacy settings alone are not enough to stop all tracking. Installing a dedicated tracker-blocking extension adds a second layer of protection that operates at the network request level. Extensions like uBlock Origin, Privacy Badger, and Ghostery maintain community-updated block lists of known tracking domains and prevent your browser from making requests to them at all.
Privacy Badger, developed by the Electronic Frontier Foundation, takes a unique approach. Rather than relying on pre-compiled block lists, it learns trackers behaviorally. When a third-party domain appears on multiple sites and sets cookies or fingerprints the browser, Privacy Badger progressively restricts what that domain can load until it is fully blocked. This adaptive approach catches trackers that have not yet been added to static block lists.
FocusGuard, while designed primarily as a website blocker and time management tool, contributes to privacy by reducing your exposure to tracking networks. When you limit time on high-traffic content and social media sites, you naturally load fewer trackers. FocusGuard's local-only data storage model also means your browsing statistics never leave your device - no analytics service, no data collection, and no third-party access to your usage data.
3. Use a Privacy-Focused Search Engine
Google search is the most heavily tracked web service most people use daily. Every query is logged, associated with your IP address and account, and used to build a detailed interest profile. Alternatives like DuckDuckGo, Startpage, and Kagi provide search results without tracking your queries or building a profile.
DuckDuckGo aggregates results from Bing's index and strips all identifying information from the query. It does not store your IP address, does not use cookies for tracking, and offers a !bang syntax to search other sites directly without passing through tracking intermediaries. Startpage acts as a Google proxy - it forwards your query to Google, retrieves the results, strips tracking links, and delivers them to you without Google ever seeing your actual IP address. Kagi is a paid search engine with no advertising and no tracking at all, funding its operations entirely through subscriptions.
Making the switch is simple. Both Chrome and Firefox allow you to change the default search engine in browser settings. DuckDuckGo also offers a browser extension that enforces privacy protections across all your searches and blocks third-party trackers on search results pages.
4. Use Incognito and Private Browsing Modes
Incognito mode in Chrome, Private Browsing in Firefox and Safari, and InPrivate mode in Edge prevent the browser from saving your history, cookies, site data, and form inputs locally. When you close an incognito window, the session data is discarded. This is useful for preventing local tracking - someone using the same device cannot see what you browsed - and for avoiding cookie-based tracking within a single session.
However, incognito mode has important limitations. It does not hide your IP address from websites, does not prevent tracking by network-level observers like your ISP or employer, and does not stop browser fingerprinting. Your browsing activity remains visible to the sites you visit and to any trackers embedded in those sites. Incognito is a privacy tool for local device sharing, not for anonymous browsing.
For genuine browsing privacy, combine incognito mode with a VPN (to hide your IP) and a tracker blocker (to prevent tracking scripts from loading). Using incognito without these additional protections still reduces your cross-session tracking footprint but does not anonymize your activity within a session.
5. Clear Browsing Data Regularly
Even with privacy settings hardened and a tracker blocker installed, some tracking data accumulates over time. Cookies placed by first-party sites, cached resources that encode tracking identifiers, and local storage objects used by analytics scripts persist across sessions and build a profile of your browsing patterns over weeks and months.
Chrome's "Clear browsing data" dialog (accessible via Ctrl+Shift+Del on Windows or Cmd+Shift+Del on Mac) allows you to selectively remove browsing history, cookies, cached images, passwords, autofill data, and hosted app data. Setting a regular schedule - once a week is a reasonable cadence for most users - prevents long-term profile accumulation. Chrome Mobile and desktop Chrome both support the same clearing options, though the exact settings menu layout differs between platforms.
For more aggressive privacy management, several browsers allow you to configure automatic clearing of cookies and site data when you close the browser entirely. Safari includes this option natively. Chrome does not have a built-in "clear on exit" toggle but supports it through the "Cookies and other site data" settings page, where you can add specific sites to an "Always clear cookies when windows are closed" list.
Understanding the full scope of what your browser stores is essential for privacy. If you want a deeper breakdown, our guide on how to delete browsing history in Chrome covers each data type, what it contains, and how frequently you should clear it for optimal privacy protection.
6. Audit Your Browser Extensions
Browser extensions have access to your browsing data and, in many cases, can read and modify the content of every page you visit. A 2024 analysis by the University of Wisconsin found that over 17 percent of Chrome extensions with broad permissions exhibited data collection behavior that was not directly visible to the user. This includes transmitting page content, DOM data, and URL history to remote servers.
Auditing your extensions involves three steps. First, review the permissions each extension requests. An extension that requests access to "Read and change all your data on all websites" should have a clear justification for that level of access. A simple timer extension or screenshot tool likely does not need this permission. Second, check when each extension was last updated. Abandoned extensions with no recent updates are a security risk. Third, remove any extension you are not actively using.
FocusGuard requests only the permissions it needs: storage for local data storage, activeTab for time tracking on the current tab, webNavigation for detecting page changes, and alarms for timer and session management. It does not request access to all websites, does not inject tracking scripts, and stores all collected data locally in Chrome's storage API with no server transmission.
7. Use a VPN for IP Protection
Your IP address reveals your approximate geographic location and, depending on your ISP, can be linked to your identity through billing records. Websites log every IP address that visits them, and tracking networks can use IP-based correlation to connect visits to the same device across different sites even when cookies are blocked.
A VPN encrypts your internet traffic and routes it through a server in a location of your choice. Websites see the VPN server's IP address rather than your real one, preventing IP-based tracking and geolocation. For privacy purposes, choose a VPN provider with a strict no-logs policy, independent security audits, and a jurisdiction outside the Fourteen Eyes intelligence-sharing alliance.
It is important to understand what a VPN does not do. It does not block tracking scripts, prevent browser fingerprinting, or stop the sites you visit from collecting data through cookies and analytics. A VPN complements rather than replaces tracker blockers and privacy-focused browser settings. For maximum protection, use a VPN together with a tracker blocker and hardened browser privacy settings.
8. Minimize Logged-In Browsing
Many users remain signed into Google, Facebook, or other major accounts continuously across browsing sessions. When you are logged in, the platform can directly connect your browsing activity to your account identity. Google, for example, combines data from signed-in browsing, YouTube, Search, Maps, and Android to build a comprehensive activity profile accessible through your Google Account's "My Activity" dashboard.
The simplest mitigation is to sign out of accounts when you are not actively using them. Even better, use separate browser profiles for logged-in activity and general browsing. Chrome supports multiple profiles with separate cookies, extensions, and settings. Maintain one profile signed into your work accounts and another that remains signed out, with privacy settings maximized and a tracker blocker installed.
Container tabs in Firefox take this concept further by isolating cookies and site data by container. You can assign each major service (Google, Facebook, Twitter) to its own container, preventing cross-site data sharing while staying logged in. Mozilla's Multi-Account Containers extension makes this straightforward to set up and manage.
9. Use a Password Manager
Password hygiene is a privacy concern as much as a security one. Reusing passwords across sites allows a data breach on one platform to compromise accounts on others, exposing the personal data stored in each. A password manager generates unique, complex passwords for every site and stores them in an encrypted vault synced across your devices.
The privacy benefit goes beyond security. Credential leaks from data breaches can expose the email addresses and associated metadata connected to your accounts across the web, linking your identities across platforms and enabling cross-account profiling. A password manager, combined with unique email aliases through services like Apple's Hide My Email or Firefox Relay, prevents any single data breach from connecting your accounts across services.
Bitwarden and 1Password offer audited, open-source encryption. Both include breach monitoring features that alert you when accounts associated with your stored credentials appear in known data leaks, allowing you to rotate affected passwords before they can be exploited.
10. Avoid Social Login Buttons
"Sign in with Google" or "Continue with Facebook" buttons are convenient, but they come with a privacy cost. When you use social login, the platform receives information about your activity on the third-party site - including the fact that you visited, your account details shared during the OAuth handshake, and potentially ongoing session activity through the embedded widget.
Creating a separate account with a unique email alias and password for each site you use eliminates this data-sharing channel. Yes, it means managing more credentials - that is where a password manager becomes essential - but it breaks the data pipeline between the site you are using and the platform's broader tracking network. Many websites also offer email-only registration alongside social login options, and privacy regulations in some jurisdictions require them to offer an alternative that does not require sharing data with a third party.