LibreWolf

Best for: privacy-focused Firefox users who want the hardening done for them and are fine updating through a package manager, turning on DRM for streaming, and living with a forced light theme.

Pros

• Telemetry is removed at the source level — crash reporting, Normandy, studies, and personalised recommendations are gone, and the project states it has no infrastructure to collect data even if it wanted to
• uBlock Origin is bundled with custom filter lists, alongside Firefox’s Tracking Protection in strict mode (dFPI / Total Cookie Protection, URL tracking-parameter stripping)
• Resist Fingerprinting (RFP) is on by default — the Tor Uplift project’s anti-fingerprinting work, with WebGL disabled and the browser locale pinned to en-US
• HTTPS-Only mode is enforced, DoH is off by default (left as the user’s choice), and CRLite replaces OCSP for faster, more private certificate-revocation checks
• Fully open source under MPL 2.0, with a Docker-based build anyone can run, and a community-run infrastructure with no vendor, no venture capital, and — by choice — no donations
• Firefox Sync still works if you enable it, and it’s end-to-end encrypted with the option to self-host the server
• Distracting extras are stripped: Pocket is removed at compile time, along with Mozilla VPN ads and sponsored home-page content

Cons

• No built-in auto-update — security patches arrive only when your package manager or you apply them, which is the single most-cited practical weakness
• DRM is disabled by default, so Netflix, Prime Video, Disney+, HBO Max, Hulu, and Spotify won’t play until you turn it on and grant per-site permission
• RFP’s trade-offs are visible daily: a forced light theme for web content, a fixed startup window size, a spoofed timezone, and occasional broken images on sites that need canvas access
• Letterboxing — the window-size anti-fingerprinting measure — is not on by default; you have to add it via an override, so out of the box the fingerprint is “nearly unique” on EFF’s test rather than uniform
• Desktop only — no Android or iOS build, and the project has said it isn’t working on one
• The built-in password manager is disabled by design, and session restore only works if you keep browsing history
• A 2023 issue found LibreWolf writing full visited URLs from JavaScript errors into the systemd journal, including in private windows — specific to its build, not vanilla Firefox
• No independent security audit and no bug-bounty program

Privacy Defaults

LibreWolf’s defaults are close to as private as a mainstream-shaped browser gets. Telemetry isn’t toggled off — it’s removed: crash reporting, Normandy, studies, and personalised recommendations are stripped at build time, and the project’s position is that it couldn’t collect data if it wanted to. uBlock Origin ships with custom lists, Firefox’s Tracking Protection runs in strict mode (which brings dFPI / Total Cookie Protection, SmartBlock, tighter referrer policies, and URL query stripping), disk cache is disabled, and form and search history are off. Google Safe Browsing is disabled on the grounds that it hands Google another lever over the web, and DRM is off because it exposes client identifiers.

Two deliberate choices keep this short of the top. DoH is disabled by default — LibreWolf’s reasoning is that picking a DNS provider is a trade-off the browser shouldn’t make for you — whereas the most locked-down browsers force encrypted DNS through a provider they’ve vetted. And LibreWolf does make a handful of outgoing connections on its own: certificate-revocation data (CRLite), tracking-protection and uBO list updates, the Public Suffix List, a GPU blocklist, add-on updates, and an open WebSocket to Mozilla’s push server that also carries urgent security-list updates. These are documented and security-motivated, not tracking, but they’re not zero.

Anti-Fingerprinting

The core of LibreWolf’s fingerprinting defense is RFP — resistFingerprinting, the output of the Tor Uplift project — enabled by default. It pins the reported timezone, forces a common OS and browser version, masks keyboard layout and language, disables several hardware APIs, and turns WebGL off (available again as a per-site permission). Canvas reads are gated behind a per-site prompt. LibreWolf also explicitly avoids “unnecessary changes that increase the fingerprint” — the same hide-in-the-crowd logic behind the Tor Uplift work it inherits.

Where it stops short is letterboxing. Rounding the content window to fixed increments so window size can’t single you out is an override recipe in LibreWolf, not a default. Without it, EFF’s Cover Your Tracks returns a “nearly unique” result on a fresh install. On PrivacyTests.org’s broader checklist LibreWolf scores well — around 139 of 156 — but that suite measures a wide range of protections, not fingerprint uniformity specifically. The honest summary: RFP is a strong, real defense, but out of the box LibreWolf is protecting metrics rather than making every user look identical.

Transparency & Audits

LibreWolf is as transparent as a project can be about what it is. Everything is open source under MPL 2.0 across more than a dozen repositories, the build is Dockerised so anyone can reproduce it, and the infrastructure is community-run and moving to a self-hosted forge. There’s no vendor, no venture funding, and the project deliberately doesn’t take donations — its stated reasoning is that no funding means no dependency and no expectations. That removes the commercial conflicts that shape most browsers.

What’s missing is external scrutiny. There is no published independent security audit of LibreWolf, and the project explicitly runs no bug-bounty program — security reports go to a PGP address read by three core maintainers. There’s also one trust-history mark: in February 2023 a user found LibreWolf writing full visited URLs from JavaScript errors into the systemd journal, including from private windows, on Fedora and Debian. It didn’t affect vanilla Firefox, so it came from LibreWolf’s own configuration. For a browser this focused on not leaking, that’s worth knowing, even though the practical exposure is limited to someone with access to your local system logs.

Usability & Compatibility

Because LibreWolf is Firefox underneath, the engine, performance, and extension support are all Firefox’s — add-ons install and work, and day-to-day speed is unchanged. The friction is entirely in the hardening. DRM is off, so streaming services don’t play until you enable it and approve each site. RFP forces a light theme on web content, fixes the startup window size, and can leave images striped on sites that rely on canvas; video conferencing often needs WebGL and canvas turned on manually. The password manager is disabled in favour of a standalone tool, and session restore only works if you’re keeping history.

The one that matters most is updates: LibreWolf has no auto-update mechanism, so on Windows and macOS you’re responsible for pulling new versions, and on Linux it’s on your package manager. Given that the whole security model depends on tracking Firefox upstream closely, a browser that can silently fall behind on patches is a real caveat. None of this makes LibreWolf hard to use once it’s set up — but the setup, and the ongoing maintenance, are more than a mainstream browser asks for.

Cross-Platform & Sync

Official builds cover Windows, macOS, and Linux, including ARM64 on all three, distributed as signed packages (and, on Windows, a portable launcher). Recent macOS builds are now code-signed, which removes the “damaged / unsafe” warning earlier versions triggered. There is no Android or iOS build, and the project has said it isn’t working on one.

Sync is available but off by default. It’s Firefox Sync, which encrypts your data locally before it reaches the server, and you can point it at a self-hosted server instead of Mozilla’s if you prefer. Enabling it is a one-line override or a settings toggle. That puts LibreWolf ahead of browsers that strip sync entirely, though behind those that ship it working on day one across mobile too.

Our Rating

Category	Score
Privacy Defaults	9/10
Anti-Fingerprinting	8/10
Transparency	7.5/10
Usability & Compatibility	6/10
Cross-Platform & Sync	7/10
Overall	7.8/10

Weighted: Privacy Defaults 30% · Anti-Fingerprinting 25% · Transparency 20% · Usability & Compatibility 15% · Cross-Platform & Sync 10%.

LibreWolf is the hardened Firefox most people mean when they say they want a hardened Firefox — the tedious config work is done, telemetry is genuinely gone, and RFP is on. It scores high on the privacy categories and holds its own on transparency thanks to a genuinely non-commercial model. It gives ground on usability: no auto-updates, no DRM out of the box, and a set of RFP quirks you have to make peace with. If you want privacy defaults on a familiar engine and you’ll handle updates through a package manager, it’s an easy recommendation. If you want a browser that also updates itself and plays Netflix without a settings trip, this isn’t it.

Affiliate Disclosure

LibreWolf is a free, community project with no affiliate program and no vendor to run one. This review carries no tracked link — the “Visit Site” button points to librewolf.net — and it earns PrivacyPick.com nothing. It’s here because it’s a legitimate, fully open-source option.

Rating: 7.8/10