SEC101/Safe Browsing
ENUA

Safe Browsing

Take back your privacy. Block trackers and ads.

Essential Extensions

Browser extensions are desktop-first and depend on the browser. On Chrome/Edge use Manifest V3-compatible blockers; on Firefox, full uBlock Origin is still the better option.

uBlock Origin

Best on Firefox and browsers that still support the full extension. On Chrome/Edge, use uBlock Origin Lite or a browser with strong built-in blocking.

Get uBlock Origin →

Privacy Badger

EFF privacy extension that blocks known trackers and link tracking. Local learning exists, but is off by default for fingerprinting safety.

Get Privacy Badger →

Copy/paste settings to harden any browser

  • Disable third-party cookies.
  • Turn on HTTPS-Only mode.
  • Block pop-ups and auto-play media.
  • Turn off telemetry/usage reporting.
  • On phones, use built-in browser privacy settings because extension support is limited.
Tracker blocking

Tracker blocking visualization. Review the labels and use the controls, when present, to step through the diagram.

Trackers watching
What's happening?

Third-party trackers are small pieces of code from outside companies hidden inside websites. When the same company’s tracker sits on many sites, it can follow you across all of them.

Trackers on news.com:
Google AnalyticsFacebook PixelCriteo
You
news.com
shop.com
social.com
Your Profile (As Trackers See You)
news.com
Articles Read:Politics, Tech, Sports
Time Spent:4 min on politics
Scroll Depth:85% of article
Step 1 / 6
You read the news

A hidden tracker from an ad company loads with the page and quietly notes what you read and for how long.

This profile is used to target ads, adjust offers, and is often resold. Blocking trackers is an easy privacy win, not a magic invisibility cloak.

Cookies, plainly

Every site asks you to “accept cookies”. Here is what that actually means — and what to click.

What a cookie is

A small note a site stores in your browser so it can remember you: that you’re logged in, what’s in your cart, which language you chose. Without cookies you’d be logged out on every click.

First-party vs third-party

First-party cookies come from the site you’re on and mostly make it work. Third-party cookies come from other companies embedded in the page — that’s the cross-site tracking you saw in the tracker demo.

What the banner really asks

The banner is about consent to tracking — not about safety. “Reject all” or “necessary only” is usually the more private choice, and the site still works: login and cart cookies usually don’t need your consent (rules vary by country).

Should you clear cookies?

Clearing cookies logs you out of everything — it can fix a misbehaving site, but it isn’t a security ritual. A tracker blocker protects you continuously without the hassle.

If “Reject all” takes one click — click it. If the banner is a maze, don’t waste minutes: your tracker blocker is doing the real work anyway.

Scary browser warnings, decoded

Sometimes the browser itself stops you with a full-screen warning. Here is what each one means — and when “proceed anyway” is a bad idea.

“Your connection is not private”

The encryption on this connection can’t be trusted right now — the site’s certificate is broken, expired, or someone may be interfering. On café or hotel Wi‑Fi it often just means you must open the network’s login page first.

Never proceed to a bank, email, or shopping site through this warning. Try again later or on another network.

“Deceptive site ahead”

The red screen means the address is on a known list of phishing or malware sites. It is right far more often than not — if you are sure it’s a mistake, check the address carefully before going on.

Close the tab. If you got the link from a message, treat that message as a scam.

“This file may harm your device”

The browser flags downloads that are rarely downloaded, disguised as documents, or known to be malicious.

Only keep it if you chose the download from a source you trust — never for “invoices” or “delivery notes” you didn’t ask for.

Permission pop-ups

Sites must ask before using your camera, microphone, location, or sending notifications. A news site asking for notifications is annoying; a random site asking for your camera is a red flag.

Default to Block. You can always allow later — a site that truly needs it will ask again.

These warnings are the browser doing its job. Clicking through them “just this once” is how most malware gets invited in.

Secure Browsers

Firefox

Good alternative. Requires manual hardening for best privacy.

Get Firefox →

Tor Browser

For when hiding who and where you are matters more than speed. Slower, and some sites break. Logging into your usual accounts tells that site who you are.

Get Tor →

Brave setup (2 min)

  • Settings -> Privacy & security: enable aggressive tracker/ad blocking.
  • Optional: Settings -> Privacy: "Clear browsing data on exit" for cookies. More private, but you will be signed out of every site each time.
  • Disable Google services (autofill, web services you don’t need).

Firefox setup (3 min)

  • Settings -> Privacy: choose "Strict".
  • Enable HTTPS-Only mode in all windows.
  • Settings -> Privacy & Security -> Firefox Data Collection and Use: turn the options off.

Tor basics (2 min)

  • Use for sensitive browsing only; avoid logging into personal accounts.
  • Set Security Level to "Safer" or "Safest": it switches off risky page features.
  • Do not install extensions: they make your browser stand out from other Tor users.

Safe browsing quiz

Question 1 / 7

Why enable HTTPS-Only mode?

Complete the Quiz

Pass the quiz above (70%+) to unlock topic completion.