https://github.com/celenityy/better-vanadium
My recommendations for the ultimate configuration of the Vanadium web browser to maximize privacy, security, and usability. :)
https://github.com/celenityy/better-vanadium
ads android android-application anti-fingerprinting anti-tracking aosp aosp-android chromium chromium-browser divested grapheneos hardened hardening mulch privacy privacy-protection security security-hardening tracking vanadium
Last synced: 2 months ago
JSON representation
My recommendations for the ultimate configuration of the Vanadium web browser to maximize privacy, security, and usability. :)
- Host: GitHub
- URL: https://github.com/celenityy/better-vanadium
- Owner: celenityy
- License: gpl-3.0
- Created: 2024-06-18T04:56:13.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-05-06T22:22:26.000Z (5 months ago)
- Last Synced: 2025-05-06T23:24:50.584Z (5 months ago)
- Topics: ads, android, android-application, anti-fingerprinting, anti-tracking, aosp, aosp-android, chromium, chromium-browser, divested, grapheneos, hardened, hardening, mulch, privacy, privacy-protection, security, security-hardening, tracking, vanadium
- Homepage: https://codeberg.org/celenity/better-vanadium
- Size: 25.4 KB
- Stars: 4
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE
Awesome Lists containing this project
README
# better-vanadium
My recommendations for the ultimate configuration of the [Vanadium](https://github.com/GrapheneOS/Vanadium) web browser to maximize privacy, security, and usability. :)
> [!NOTE]
> This project can be found on [Codeberg](https://codeberg.org/celenity/better-vanadium) *(which will act as the main & preferred way to contribute)*, [GitLab](https://gitlab.com/celenityy/better-vanadium), and [GitHub](https://github.com/celenityy/better-vanadium).
# Search engine
**Search engine** -> `DuckDuckGo` ✅
# Password Manager
**Save passwords** -> ❌ *(You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)*
**Auto Sign-in** -> ❌
# Payment methods
**Save and fill payment methods** -> ❌ *(You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)*
**Manually verify every time you pay using autofill** -> ✅
# Addresses and more
**Save and fill addresses** -> ❌ *(You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)*
# Autofill Options
**Autofill Options** -> `Use other providers` ✅
# Privacy and security
Privacy -> **Third-party cookies** -> `Block third-party cookies` ✅ *(Should be default)*
Privacy -> Third-party cookies -> Block third-party cookies -> **Allow related sites to see your activity in the group** -> ❌
Privacy -> **Close tabs on exit** -> ✅
Privacy -> **Cross-origin referrer policy** -> `Disable cross-origin referrer` ✅ *(If this causes you any issues, you could also try setting this to `Reduce cross-origin referrer`)*
Privacy -> **Improve search suggestions** -> ❌
Privacy -> **WebRTC IP handling policy** -> `Disable non-proxied UDP` *(Don't set this if you have to call on the web through services like Discord & Zoom)*
Security -> **Safe Browsing** -> `No protection (not recommended)` ❌ *(On Android, Safe Browsing in its `standard` mode requires Google Play Services, so I wouldn't recommend it here)*.
Security -> **Always use secure connections** -> ✅
Security -> **Use secure DNS** -> ✅
Security -> Use secure DNS -> Choose another provider -> **Custom** -> Pick a private, secure, & reputable DNS provider of your choice. I would generally recommend setting up your own [NextDNS](https://nextdns.io) configuration if you are able to *(See my recommendations for NextDNS [here](https://codeberg.org/celenity/nextdns-settings))*. Otherwise, I think [Quad9](https://quad9.net/) is an excellent choice: `https://dns.quad9.net/dns-query`
*(Even if you have a private/secure DNS provider set on your OS/network level, make sure to still set it here too like this, to ensure you can take advantage of [Encrypted Client Hello](https://blog.cloudflare.com/announcing-encrypted-client-hello))*.
Security -> **Access payment methods** -> ❌
# Notifications
General -> **All "General Notifications** -> ✅
General -> **Browser** -> ❌
General -> **Completed downloads** -> ✅
General -> **Active downloads** -> ✅
General -> **Incognito** -> ✅
General -> **Playing media** -> ✅
# Toolbar shortcut
**Toolbar shortcut** -> `New tab`
# Accessibility
**Force enable zoom** -> ✅
**Simplified view for web pages** -> ✅
# Site settings
Permissions -> **Location** -> `Blocked` ❌
Permissions -> **Notifications** -> `Blocked` ❌
Permissions -> **Embedded content** -> `Blocked` ❌
Permissions -> **Motion sensors** -> `Blocked` ❌
Permissions -> **NFC devices** -> `Blocked` ❌
Permissions -> **USB** -> `Blocked` ❌
Permissions -> **Clipboard** -> `Blocked from reading clipboard` ❌
Permissions -> **Virtual reality** -> `Blocked` ❌
Permissions -> **Augmented reality** -> `Blocked` ❌
Permissions -> **Your device use** -> `Blocked` ❌
Content -> **JavaScript** -> `Blocked` ❌ *(This **will** cause breakage, but it heavily improves privacy & security, so I'd recommend blocking it if possible and if you're willing to re-enable JavaScript on sites that need it)*
Content -> **JavaScript JIT** -> `Blocked` ❌ *(Should be default)*
Content -> **Pop-ups and redirects** -> `Blocked` ❌ *(Should be default)*
Content -> **Ads** -> `Blocked` ❌
Content -> **Protected content** -> `Blocked` ❌ - [https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next](https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next)
Content -> **Auto-verify** -> `Blocked` ❌
Content -> **Dark theme for sites** -> `On` ✅ *(See `chrome://flags` below)*
Content -> **Background sync** -> `Blocked` ❌
# Downloads
**Ask where to save files** -> ✅
**Automatically open PDFs** -> ❌ *(You should instead prefer to use GrapheneOS's dedicated secure [PDF Viewer](https://github.com/GrapheneOS/PdfViewer))*
# chrome://flags
`#back-forward-cache` -> `Disabled`
`#darken-websites-checkbox-in-themes-setting` -> `Enabled` *(This will allow you to toggle `Dark theme for sites` under `Site settings` above)*
`#enable-parallel-downloading` -> `Enabled`
# Additional recommendations
* Use a *(reputable)* VPN. I would generally recommend either [Mullvad](https://mullvad.net/), [IVPN](https://www.ivpn.net/), or [ProtonVPN](https://protonvpn.com/).