My recommendations for the ultimate configuration of the Cromite Browser :)
NOTE: This project can be found on both Codeberg, which will act as the main & preferred way to contribute, and GitHub.
Edit search engines -> Search engines -> Remove any search engines here you don't use (i.e. Google & Bing)
Edit search engines -> Site search -> History -> 3 dots -> Deactivate
Search engine -> DuckDuckGo ✅
Enable native Android autofill -> ❌
Enable native Android autofill in incognito -> ❌
Save passwords -> ❌ (You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)
Auto Sign-in -> ❌
Save and fill payment methods -> ❌ (You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)
Manually verify every time you pay using autofill -> ✅
Save and fill addresses -> ❌ (You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)
Privacy -> Delete browsing data -> At Startup:
-
Browsing history-> ✅ -
Cached images and files-> ✅ -
Saved passwords-> ✅ (You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead) -
Autofill form data-> ✅ (You should not save info in your browser like this for security reasons, use a dedicated password manager like Bitwarden or Proton Pass instead)
Privacy -> Third-party cookies -> Block third-party cookies ✅
Privacy -> Global Privacy Control "Sec-GPC" -> On ✅
Security -> Always use secure connections -> ✅
Security -> Use secure DNS -> ✅
Security -> Use secure DNS -> Choose another provider -> Custom -> Pick a private, secure, & reputable DNS provider of your choice, I would recommend setting up your own NextDNS configuration if you are able to (See my recommendations for NextDNS here, otherwise I would recommend Quad9: https://dns.quad9.net/dns-query (Even if you have a private/secure DNS provider set on your OS/network level, make sure to still set it here too like this, so that you can take advantage of Encrypted Client Hello)
Security -> Always incognito mode -> Enable history -> ❌
Security -> Close all open tabs on exit -> ✅
Security -> HTTP Referer header policy -> Disable if cross-origin and user begins navigation ✅
Other services -> Improve search suggestions -> ❌
Other services -> Expire history days threshold -> No history
Other services -> Access payment methods -> ❌
Enable Adblock Plus -> ✅
Filter lists:
-
EasyList-> ✅ -
Fanboy's Notifications Blocking List-> ✅ -
EasyPrivacy-> ✅ -
Fanboy's Social Blocking List-> ✅
Enable anti-circumvention and snippets -> ✅
Don't forget to select Check for updates now when you're done here.
Ad Blocking -> Autoupdate disabled ❌
Ad Blocking -> Filters URL -> Make sure the box is blank, then select Save
General -> All "General Notifications -> ✅
General -> Browser -> ❌
General -> Completed downloads -> ✅
General -> Active downloads -> ✅
General -> Incognito -> ✅
General -> Playing media -> ✅
Show NTP at startup -> ❌
Mobile User Agent -> Use standard user agent
Desktop Mode User Agent -> Use standard user agent
Desktop Mode User Agent -> Enable processing of the viewport meta tag also for desktop mode -> ❌
Activate User Scripts -> ❌ (User scripts are highly fingerprintable, avoid using them unless absolutely necessary)
Toolbar shortcut -> New tab ✅
Enable Accessibility Service -> ❌ (Unless needed)
Force enable zoom -> ✅
Simplified view for web pages -> ✅
Permissions -> Location -> Blocked ❌
Permissions -> Camera -> Blocked ❌ (Obviously don't set if you use sites that need camera access, but you can still set exceptions for sites if needed)
Permissions -> Microphone -> Blocked ❌ (Obviously don't set if you use sites that need microphone access, but you can still set exceptions for sites if needed)
Permissions -> Notifications -> Blocked ❌
Permissions -> Embedded content -> Blocked ❌
Permissions -> Motion sensors -> Blocked ❌
Permissions -> NFC devices -> Blocked ❌
Permissions -> USB -> Blocked ❌
Permissions -> Clipboard -> Blocked from reading clipboard ❌
Permissions -> Virtual reality -> Blocked ❌
Permissions -> Augmented reality -> Blocked ❌
Permissions -> Your device use -> Blocked ❌
Content -> JavaScript -> Blocked ❌ (This will cause breakage, but it heavily improves privacy & security, so I'd recommend blocking it if possible and if you're willing to re-enable JavaScript on sites that need it)
Content -> Pop-ups and redirects -> Block all popups ✅
Content -> Intrusive ads -> Blocked on some sites ❌
Content -> Protected content -> Blocked ❌ - https://www.eff.org/deeplinks/2017/10/drms-dead-canary-how-we-just-lost-web-what-we-learned-it-and-what-we-need-do-next
Content -> Dark theme for sites -> On ✅
Content -> Background sync -> Blocked ❌
Content -> Autoplay -> Autoplay disabled ❌
Content -> Access to Private Network -> Block access to private network ❌
Content -> JavaScript JIT -> Block JIT and WebAssembly ❌ (May cause breakage with certain advanced web games or anything else that requires advanced graphics, but allows easily re-enabling per-site when needed)
Content -> Timezone override -> Random (for each page) ✅ (Helps against fingerprinting, if this isn't usable for you, you can set this to System timezone)
Content -> Viewport Size Protection -> Enabled ✅
Content -> Webgl -> Disabled ❌ (May cause breakage with certain advanced web games or anything else that requires advanced graphics, but allows easily re-enabling per-site when needed)
Content -> WebRTC -> Disabled ❌ (Will cause breakage with calling through services like Discord & Zoom, but allows easily re-enabling per-site when needed)
Ask where to save files -> ✅
Automatically open PDFs -> ❌ (Only set if you use a private & secure PDF viewer like the one developed by GrapheneOS).
Allow checking for updates -> ✅ (Should be default)
Available:
#android-open-pdf-inline->Enabled
Cromite:
-
#cleartext-permitted->Disabled -
#enable-show-ntp-at-startup->Disabled
-
Use a (reputable) VPN. I would recommend either Mullvad or ProtonVPN.
-
Use a (reputable) anti-virus if possible, such as Hypatia. NOTE: You should install Hypatia through the DivestOS Official Repo instead of F-Droid's main repo, as it will allow you to receive quicker updates directly from the developer. It's also recommended to use F-Droid Basic as your F-Droid client of choice.