the browser built to be indistinguishable

I got this wrong for about two years. I ran Firefox with the arkenfox hardening config the whole time, re-checking it after every Firefox release, maybe thirty hours of maintenance in total, and I assumed the effort compounded. Then in March I ran a browser fingerprinting test against my own setup, and the tool put my carefully hardened profile in a category of roughly nobody. Two years of work had built the least uniform browser in the building. Uniformity is the whole game, and I had been making myself rarer instead of more ordinary, which is the exact opposite of what I thought I was buying.

Mullvad Browser is the fix I eventually accepted. It's the Tor Browser's fingerprint resistance without the Tor network, built by the Tor Project and Mullvad VPN together, released in April 2023, free on Windows, macOS, and Linux. As of this month it's at 15.0.x on the Firefox ESR 140 base, with 16.0 alphas already on the project's GitHub, and it tracks Firefox's release cadence, so the maintenance question I keep asking everything gets answered weekly, not yearly. It ships uBlock Origin and NoScript, wipes history and cookies on close, runs no telemetry, no accounts, no sync, and its entire design goal is that everyone using it looks identical to everyone else using it. The product is the crowd.

the part everyone gets wrong

"A private browser keeps you private" is the sentence to dismantle first. Mullvad Browser changes what your device looks like. It does nothing about where your device sits. Without a VPN, your ISP sees every connection and every site sees your home IP, and no amount of fingerprint resistance changes that; Mullvad's own guidance points you at a VPN for exactly this half. Your IP is not this browser's problem. Pair it with a tunnel or accept that you've solved half the problem, which, to be fair, is still the half nobody else solves.

The second mistake is treating it like Tor Browser lite. Tor routes your traffic through three relays so no single point knows both who you are and what you're reading. This browser routes nothing. With a VPN in front of it, sites treat you like a VPN user, not a Tor exit node, which is a much more comfortable life and a much weaker guarantee. For most threat models that trade is correct. For a source's life it isn't, and the Tor Browser still exists for that.

the mechanics of being boring

The anti-fingerprinting works by subtraction and standardization. Your window gets letterboxed, rounded down to a stepped size with black bars on the sides, so screen dimensions stop being a tell, and you cannot turn it off, which is the point and also the annoyance. On my ultrawide the page renders in a column with black borders wide enough to park a taskbar in, and I have stopped noticing, which took about four days. Canvas, WebGL, fonts, time zone, screen size, all report the same values for every user, and the shipped defaults are the hardened ones, baked in so they survive updates instead of drifting.

That last part matters more than it sounds. The failure mode of DIY hardening is silent drift: you tune Firefox, Firefox updates, your config gets stale, and you end up somewhere stranger than stock without noticing. The settings you assemble yourself are the ones that drift. Mullvad Browser and its sibling ship hardening as defaults that the Tor Project rebuilds for you on Firefox's cadence. You give up the per-site flexibility arkenfox offers and the temptation that comes with it. You get a shield button with Standard, Safer, and Safest levels, a New Identity button that wipes the session, uBlock and NoScript already installed and configured, DuckDuckGo as the search default, and a browser whose only outbound touch beyond the sites you visit is its updater. No account, no telemetry, nothing to delete later.

where it breaks

Captchas are the daily tax. Two weeks as my default for logged-out reading produced eleven of them, and a handful of sites flagged the profile outright and asked me to prove I was human in ways that felt ironic. Streaming is worse: with my Mullvad VPN already running, Netflix was a lost cause before the browser entered the story, and YouTube caps resolution for people running this stack, per the reports I've seen and my own screen.

Logging in defeats the point, and this is the break that decides whether it becomes a daily browser. An account re-identifies you instantly; the moment a cookie ties the session back to you, the uniform fingerprint is decorating a profile. So the practical pattern, which matches what the privacy communities converged on, is two browsers: Mullvad Browser for logged-out reading, something flexible for everything with a login. People who run it all day describe it as too much of an annoyance for general use, and they're right, and the annoyance is the feature working.

Two structural limits. There's no mobile version, so phones stay on something else. And the uniform crowd is everyone else on this specific browser, which is a small crowd next to Chrome's billions. Uniformity protects you from being singled out; it does not make you invisible. A determined observer watching one VPN exit can still watch one VPN exit. That's the honest ceiling.

who it's actually for

Journalists and their sources, activists, anyone whose threat model includes being individually picked out of a crowd by a state or a determined scammer, and people whose work makes them targets of exactly the tracking this thing flattens. For them the crowd is the protection, and the inconvenience is irrelevant next to what it prevents.

For me it's the reading hour. Exploit writeups, breach reports, sketchy repos I'm triaging for the bug bounty side of the week: the traffic where I don't want my name, my work profile, or my ad profile attached. I read those in Mullvad Browser over the Mullvad VPN I already pay for, and the pair runs about six dollars a month, five of it for the account number I keep on an index card.

It is not for my mom. She needs full-screen streaming, a grocery login that stays logged in, and approximately zero captchas. Every one of those is broken here on purpose, and recommending it to her would be malpractice. uBlock Origin in her existing browser does eighty percent of what she actually needs, which is fewer ads.

what to do

• Name the threat model before installing anything. Ad networks: uBlock anywhere does most of the work. Being individually identifiable: this is the tool.
• Pair it with a VPN. The browser handles the fingerprint, the tunnel handles the IP, and neither covers the other.
• Leave the defaults alone. No new extensions, no about:config archaeology. Every change shrinks your crowd and rebuilds the unicorn I spent two years feeding.
• Keep a second browser for accounts and never log in here. The pattern is the product.
• Budget for captchas. Eleven in two weeks is the toll, paid in thirty-second increments.

The admission on top of the one I opened with: eight months in, this is still my second browser, not my first, and I've stopped pretending the first one is getting demoted. The crowd also isn't permanent. Anonymity sets shift as people migrate between browsers, which means the value of standing in this particular crowd is a number someone else controls. I check that number about once a quarter now, instead of maintaining a config.

Try one week with the defaults untouched.