So, first off, to make it for daily browsing use I did some basic alterations to the browser by allowing it to keep history, caches, cookies, disabling always-on incognito, and so on. I also installed my favorite addons (Dark Reader, Sponsorblock, I try to be as minimalistic in my choices as possible). This of course harms the privacy, but you can just ctrl+shift+p to basically turn all of that shit off when you decide you need to get serious. I kept the letterboxing on, its hard to get used to initially but after about a month of using Mullvad as a daily driver I got used to it. It seems most sites aren’t able to detect my alterations to the browser.
I don’t think any other privacy browser spin (Librewolf, Waterfox, Brave, Tor Browser etc) comes anywhere close to the snappiness and privacy intersection of Mullvad Browser. I’m able to skirt bans due to using anonymity services trivially and the captchas are short and quick and not a never-ending slug fest. Its good enough at faking a unique identity out of the box that most things cannot tell that its fake. I’m in such love that I’m going to swap away from my current vpn (IVPN, sub should end in November) to Mullvad due to how well polished this project is. I’m really interested if their multihop service can get around VPN IP bans better than Tor can.
Kudos to the Mullvad team 🥂 I hope you make an android version soon!
This is not really correct, most sites do not look for injections into the page by addons, only a few do. I’ve run tests where I speedrun site bans on Facebook, Reddit, Github, and YouTube just to see if the fingerprinting on those sites prevents signups with my config, and it did not. Firefox ESR also does not include arkenfox + tor browser tweaks + removals of firefox telemetries baseline which provide gigantic privacy benefits and cannot be understated.
Of course, this is more detectable in comparison to stock Mullvad Browser, but stock Mullvad Browser is a hard sell without more robust features for daily use. By pressing ctrl+shift+p you can go back to stock if the situation calls for it.
And the alternative of course is using a much less private and secure browser, basically no one wants to constantly resign into accounts, browse slower, and miss out on certain crucial ways to block ads. If you want to be a privacy maximalist, stock Tor Browser is over there. For people that want a lot more privacy, good speed, while still keeping a handful of crucial addons and accessibility tweaks, nonstock Mullvad is a great choice.
Raises hand. I must be doing it wrong. Signing back in (with MFA, no less) every time I restart the browser does get tiring after a while though.
I loathe every time my work IAM forces me to sign in again, as it always asks for MFA. They use Okta and promote password managers, idk why we can’t enable passkeys to remove this hassle already.
My best solution to the login problem on stock Mullvad is to use KeepassXC with Autotype (if you’re on Linux with Wayland, use the experimental keepass snapshot). You can press the hotkey and autotype will pop up with a quick search for you to add the username and password. It can also save TOTP and passkeys. This of course doesn’t use any add-ons so its a decent solution to the problem.
Even with it streamlined like this, I still find it tedious lol. KeepassDX handles it so much better on android, wish linux could get functionality like that.
I do this too, keepassdx form filling works really well on android.
yeah, I do use Bitwarden, which has these things. But I store my TOTP codes on the phone to be separate from the passwords and… well, actually serve as multi-factor I suppose.
Yeah, I did that for a long time but I’m pretty done with it on most accounts. I only do it properly on the most important accounts.
I log back in every time, and I like it. Bitwarden fills in the logins for me with ease.
Cries in manual logins with manually copying passwords from keepass. :'(