Jump to content

My Firefox Settings: Difference between revisions

From Copper9 Wiki
← Older editNewer edit →
undoAdmin (talk | contribs)
Bureaucrats, Interface administrators, Administrators
78 edits
VisualWikitext
No edit summary
No edit summary
Line 34: Line 34:
Instead of manually configuring <code>about:config</code>, you can use pre-configured <code>user.js</code> files.
Instead of manually configuring <code>about:config</code>, you can use pre-configured <code>user.js</code> files.


TODO: Add information about how to set up user.js here.
To use a <code>user.js</code> file, you need to place it in your Firefox profile directory. This file is read every time Firefox starts, overriding any matching settings in <code>about:config</code> or <code>prefs.js</code>:
 
# Navigate to <code>about:support</code> in your URL bar.
# Find the '''Profile Directory''' row and click the '''Open Directory''' button.
# Create a new text file in this directory and name it exactly <code>user.js</code>.
# Open the file using a text editor (e.g., <code>micro</code> on Arch Linux or <code>vim</code> on OpenBSD).
# Paste your desired configuration settings from the templates below into the file and save it.
# Restart Firefox for the changes to take effect.


'''Generators:'''
'''Generators:'''
Line 64: Line 71:
* '''Block Pop-Ups''': [https://support.mozilla.org/bm/questions/1369602 Mozilla Support thread on native pop-up blocking].
* '''Block Pop-Ups''': [https://support.mozilla.org/bm/questions/1369602 Mozilla Support thread on native pop-up blocking].
* '''GeckoView Config''': You can access deeper settings via [chrome://geckoview/content/config.xhtml chrome://geckoview/content/config.xhtml].
* '''GeckoView Config''': You can access deeper settings via [chrome://geckoview/content/config.xhtml chrome://geckoview/content/config.xhtml].
TODO update this part with my settings My settings are
Going to settings and.
General:
Open links in tabs instead of new windows -> enabled
Show an image preview when you hover on a tab -> disabled
Fonts -> Allow pages to choose their own fonts instead of your selections above -> disabled
Language -> English US
Webpage language -> Request English versions of web pages for enhanced privacy -> True
Enable full page translations -> disabled
Check spelling as you type -> false
Enable PiP video controls -> false
control media via keyboard headset or virtual interface -> false
enable link previews -> disabled
Home:
Homepage and new windows -> blank page
new tabs -> blank page
Search:
Switch to a better search engine (lite.duckduckgo.com or my own searxng and 4get instances)
Show search suggestions -> disabled
Privacy and Security:
Strict tracking protection -> fix major site issues -> disabled
Tell websites to not to sell or share my data -> enabled (enabled DNT too by using the secret about config entry)
Clear cookies and site data every time you close firefox -> true
do not save passwords, payment, address
clear history when firefox closes -> true
permissions -> disallow everything


block popups and 3rd party redirect -> true
=== Custom GUI Settings ===
Navigate to the standard Firefox Settings (<code>about:preferences</code>) to adjust the following:


warn if websites install extensions -> true
'''General'''
* '''Tabs:''' Enable ''Open links in tabs instead of new windows''. Disable ''Show an image preview when you hover on a tab'' and ''Enable link previews''.
* '''Fonts:''' Uncheck ''Allow pages to choose their own fonts, instead of your selections above''.
* '''Language:''' Set to English (US). Enable ''Request English versions of web pages for enhanced privacy''. Disable ''Enable full page translations''.
* '''Typing:''' Disable ''Check your spelling as you type''.
* '''Browsing & Media:''' Disable ''Enable picture-in-picture video controls'' and ''Control media via keyboard, headset, or virtual interface''.


data collection -> disallow everything
'''Home'''
* '''New Windows and Tabs:''' Set both ''Homepage and new windows'' and ''New tabs'' to '''Blank Page'''.


https only mode -> enable
'''Search'''
* '''Default Search Engine:''' Switch to a privacy-respecting alternative like <code>lite.duckduckgo.com</code>, or your own self-hosted '''SearXNG''' or '''4get''' instance.
* '''Search Suggestions:''' Disable ''Show search suggestions''.


dns over https -> max protection with a privacy friendly provider
'''Privacy & Security'''
* '''Tracking Protection:''' Set Enhanced Tracking Protection to '''Strict''' (disable ''Fix major site issues'' if opting for absolute strictness without exceptions).
* '''Global Privacy Control:''' Enable ''Tell websites not to sell or share my data''.
** ''Note:'' You can also explicitly enable the Do Not Track header by setting <code>privacy.donottrackheader.enabled</code> to <code>true</code> via the hidden <code>about:config</code> entry.
* '''Cookies and Site Data:''' Enable ''Delete cookies and site data when Firefox is closed''.
* '''Logins and Passwords:''' Disable saving passwords, payments, and addresses.
* '''History:''' Set to ''Use custom settings for history'' and enable ''Clear history when Firefox closes''.
* '''Permissions:''' Disallow all requests (Location, Camera, Microphone, Notifications, etc.). Enable ''Block pop-up windows'' and ''Warn you when websites try to install add-ons''.
* '''Data Collection and Use:''' Disallow/uncheck all telemetry and data collection options.
* '''Security:''' Enable ''HTTPS-Only Mode in all windows''.
* '''DNS over HTTPS:''' Set to '''Max Protection''' and select a privacy-friendly provider.


== Comprehensive Hardening Guides & Reading ==
== Comprehensive Hardening Guides & Reading ==

Revision as of 10:56, 18 May 2026

Note: This article is imported from an old note-taking app and may be outdated.

Core Modifications & Bloatware Removal

Some guides, such as the Spyware Watchdog Mitigation Guide, recommend deleting default plugins bundled within the Firefox directory that may introduce privacy concerns or act as bloatware.

Navigate to your Firefox features directory and remove unnecessary add-ons: 

cd /usr/lib/firefox/browser/features
doas rm *.xpi

List of bundled plugins commonly removed:

  • firefox@getpocket.com.xpi — Pocket
  • followonsearch@mozilla.com.xpi — Follow-On Search
  • activity-stream@mozilla.org.xpi — Activity Stream
  • screenshots@mozilla.org.xpi — Screenshots
  • onboarding@mozilla.org.xpi — Onboarding
  • formautofill@mozilla.org.xpi — Autofill
  • webcompat@mozilla.org.xpi — Web Compatibility Reporter

Configuration Tweaks (about:config) (if user.js does not cover them)

Privacy, Security & Networking

accessibility.blockautorefresh
Set to true to disable forced redirections. Combining this with disabled CSS and JS yields raw, unmangled result links. (via Pedantic Software)
browser.sessionstore.interval
Set to a very high value to reduce disk writes and SessionStore tracking.

Additional Hardening Actions

  • Disable Firefox SessionStore: Search for browser.sessionstore in about:config and disable relevant telemetry/saving mechanisms.
  • Disable CSS Visited Links: Mitigates history-sniffing vulnerabilities. Read the Reddit discussion here.

User.js Templates & Generators

Instead of manually configuring about:config, you can use pre-configured user.js files.

To use a user.js file, you need to place it in your Firefox profile directory. This file is read every time Firefox starts, overriding any matching settings in about:config or prefs.js:

  1. Navigate to about:support in your URL bar.
  2. Find the Profile Directory row and click the Open Directory button.
  3. Create a new text file in this directory and name it exactly user.js.
  4. Open the file using a text editor (e.g., micro on Arch Linux or vim on OpenBSD).
  5. Paste your desired configuration settings from the templates below into the file and save it.
  6. Restart Firefox for the changes to take effect.

Generators:

  • ffprofile.com — Interactive user.js generator.
    • Note on User-Agent Spoofing: While you can spoof your user-agent to a more common one (e.g., Chrome), doing so on Firefox can actually make your browser fingerprint more unique (alternative tools list). Because Firefox's engine behaves differently than Chromium, mismatched engine/user-agent data is easily detectable. For common agents, see Willhouse or WhatIsMyBrowser.

Popular Pre-configured Templates:

  1. Arkenfox (Highly recommended, well-known)
  2. Pyllyukko (Security focused)
  3. Narsil's user.js (Privacy focused) (I use this one)
  4. Vulpes
  5. Narsil's user.js for Pale Moon (Privacy focused)
  6. krathalan config
  7. simeononsec FireFox Script
  8. vermaden's Sensible Setup

Extensions & Add-ons

  • ximatrix: A Firefox extension similar to uMatrix capable of blocking inline scripts and advanced requests. Source code available here.
  • Chrome Extensions on Firefox: Firefox has introduced capabilities for importing Chrome extensions. Read the Slashdot coverage.
  • Extension Restrictions: Mozilla occasionally restricts add-ons on specific domains. To disable these restrictions and allow uBlock Origin to operate aggressively everywhere, read 12bytes' analysis and their uBlock suggested settings.

Browser UI & Maintenance Tweaks

Custom GUI Settings

Navigate to the standard Firefox Settings (about:preferences) to adjust the following:

General

  • Tabs: Enable Open links in tabs instead of new windows. Disable Show an image preview when you hover on a tab and Enable link previews.
  • Fonts: Uncheck Allow pages to choose their own fonts, instead of your selections above.
  • Language: Set to English (US). Enable Request English versions of web pages for enhanced privacy. Disable Enable full page translations.
  • Typing: Disable Check your spelling as you type.
  • Browsing & Media: Disable Enable picture-in-picture video controls and Control media via keyboard, headset, or virtual interface.

Home

  • New Windows and Tabs: Set both Homepage and new windows and New tabs to Blank Page.

Search

  • Default Search Engine: Switch to a privacy-respecting alternative like lite.duckduckgo.com, or your own self-hosted SearXNG or 4get instance.
  • Search Suggestions: Disable Show search suggestions.

Privacy & Security

  • Tracking Protection: Set Enhanced Tracking Protection to Strict (disable Fix major site issues if opting for absolute strictness without exceptions).
  • Global Privacy Control: Enable Tell websites not to sell or share my data.
    • Note: You can also explicitly enable the Do Not Track header by setting privacy.donottrackheader.enabled to true via the hidden about:config entry.
  • Cookies and Site Data: Enable Delete cookies and site data when Firefox is closed.
  • Logins and Passwords: Disable saving passwords, payments, and addresses.
  • History: Set to Use custom settings for history and enable Clear history when Firefox closes.
  • Permissions: Disallow all requests (Location, Camera, Microphone, Notifications, etc.). Enable Block pop-up windows and Warn you when websites try to install add-ons.
  • Data Collection and Use: Disallow/uncheck all telemetry and data collection options.
  • Security: Enable HTTPS-Only Mode in all windows.
  • DNS over HTTPS: Set to Max Protection and select a privacy-friendly provider.

Comprehensive Hardening Guides & Reading

Retrieved from "https://wiki.n216.dedyn.io/index.php?title=My_Firefox_Settings&oldid=56"