How to Stop Websites from Tracking You: Browser Settings and Tools

Every site you visit collects data—your location, device details, browsing habits, and more. Most tracking happens through cookies, fingerprinting, and third-party scripts. You can significantly reduce this with settings already in your browser, plus a few well-chosen tools. This guide covers the most effective changes you can make today, ordered from easiest to most advanced. For a related guide, see Browser Homepage Changed Without Your Permission? How to Fix It.

Quick Wins: Enable Built-In Tracking Protection

All major browsers now include tracking prevention. Turn it on first—it requires no installation and breaks few sites.

Chrome

1. Click the three-dot menu → Settings → Privacy and security → Third-party cookies.
2. Select Block third-party cookies (or Block third-party cookies in Incognito if you want normal browsing unaffected).
3. Scroll to Ad privacy → Ad topics, Site-suggested ads, Ad measurement — toggle all Off.
4. Under Security, enable Enhanced protection under Safe Browsing.

Note: Chrome's "Tracking Protection" (rolled out 2024) blocks third-party cookies by default for 1% of users and expands gradually. The manual setting above ensures it's active now.

Firefox

1. Click the menu → Settings → Privacy & Security.
2. Under Enhanced Tracking Protection, select Strict.
3. Scroll to Cookies and Site Data → check Delete cookies and site data when Firefox is closed (optional but effective).
4. Under Firefox Data Collection and Use, uncheck all boxes.

Firefox's Strict mode blocks known trackers, fingerprinters, and cryptominers. It may break some login flows—switch to Standard if needed.

Safari (macOS / iOS)

1. Open Settings (macOS: Safari → Settings; iOS: Settings → Safari).
2. Enable Prevent cross-site tracking (on by default).
3. Enable Hide IP address from trackers (macOS: Privacy tab; iOS: under Privacy & Security).
4. Optional: Enable Block all cookies — but expect broken logins.

Safari's Intelligent Tracking Prevention (ITP) uses machine learning to limit tracker cookies automatically. The IP-hiding feature routes tracker connections through Apple's relay.

Edge

1. Click the three-dot menu → Settings → Privacy, search, and services.
2. Under Tracking prevention, choose Strict.
3. Scroll to Cookies and site permissions → Manage and delete cookies and site data → enable Block third-party cookies.
4. Enable Send "Do Not Track" requests (symbolic but harmless).

Edge's Strict mode uses the same tracker list as Chrome (Disconnect) but applies it more aggressively.

Manage Cookies and Site Data Proactively

Tracking protection handles third-party cookies. First-party cookies (from the site you're on) still work—and some track via first-party storage. Clean them regularly.

Clear on Close (All Browsers)

• Chrome: Settings → Privacy and security → Third-party cookies → Clear on close (add sites you want to keep logged into as exceptions).
• Firefox: Settings → Privacy & Security → Cookies and Site Data → Delete cookies and site data when Firefox is closed → Manage Exceptions for sites to keep.
• Safari: No native "clear on close" for specific cookies. Use Manage Website Data → Remove All periodically, or use an extension (see below).
• Edge: Settings → Privacy, search, and services → Choose what to clear every time you close the browser → toggle Cookies and other site data.

Container Tabs (Firefox Only)

Firefox Multi-Account Containers let you isolate cookies by context—banking, shopping, social, personal. Install the official Multi-Account Containers extension, then right-click a link → Open in New Container Tab. Each container has separate cookie storage, so trackers can't correlate your activity across contexts.

Install Privacy-Focused Extensions

Browser settings cover the basics. Extensions fill gaps—especially for fingerprinting, CNAME cloaking, and first-party tracker scripts.

Recommended: uBlock Origin

The gold standard. Blocks ads, trackers, malware domains, and more using efficient filter lists. Works on Chrome, Firefox, Edge, Safari (macOS only).

1. Install from your browser's extension store.
2. Click the extension icon → gear icon → Filter lists.
3. Ensure EasyList, EasyPrivacy, Peter Lowe's List, and Online Malicious URL Blocklist are checked.
4. Optional: Enable Annoyances lists (cookie banners, social widgets).

uBlock Origin uses minimal memory and lets you block elements manually (right-click → Block element).

Alternative: Privacy Badger

From EFF. Learns trackers dynamically instead of relying on lists. Good if you want zero-configuration. Less aggressive than uBlock Origin—use alongside it, not as a replacement.

For Cookie Popups: Consent-O-Matic or I Don't Care About Cookies

• Consent-O-Matic (Firefox, Chrome, Edge, Safari): Automatically answers GDPR/CCPA consent dialogs with your preferences (reject all).
• I Don't Care About Cookies (Firefox, Chrome, Edge): Hides cookie banners entirely. Does not auto-reject—pair with Consent-O-Matic for full effect.

Safari Users: Ka-Block! or AdGuard

Safari's extension ecosystem is more limited. Ka-Block! (free, open-source) and AdGuard for Safari (free tier available) are the most effective content blockers on iOS/macOS.

Stop Fingerprinting

Fingerprinting identifies you by combining browser version, screen resolution, fonts, battery status, canvas rendering, and more—no cookies required.

What Browsers Do Natively

• Firefox: privacy.resistFingerprinting (set to true in about:config) — rounds timezone, window size, hides fonts. May break some sites.
• Safari: Built-in fingerprinting defenses (canvas noise, font limiting) — always on.
• Brave: Randomizes fingerprint per session by default.
• Tor Browser: Maximum fingerprinting resistance — all users look identical.

Extension Help

• CanvasBlocker (Firefox): Adds noise to canvas fingerprinting.
• Chameleon (Chrome/Edge): Spoofs user agent and headers (use cautiously—can break sites).

Practical advice: Don't chase perfect fingerprinting resistance unless you have a specific threat model. It breaks sites and requires constant maintenance. The tracking protection + uBlock Origin combo stops 95% of real-world tracking.

Network-Level Blocking: DNS and VPN

Browser settings only protect that browser. DNS filtering blocks trackers system-wide—including in apps.

Encrypted DNS (DoH / DoT)

Prevents your ISP from seeing which domains you resolve. Also enables filtering.

• Cloudflare 1.1.1.1 for Families (malware + adult content blocking): 1.1.1.2 / 1.0.0.2 (DoH: https://security.cloudflare-dns.com/dns-query)
• NextDNS (customizable blocklists, logs, analytics): Free tier 300k queries/month. Configure via app or OS DNS settings.
• Control D, AdGuard DNS, Quad9 — similar options.

Set Up in OS (Windows 11 / macOS / Android / iOS)

1. Windows 11: Settings → Network & internet → Hardware properties → Edit DNS server assignment → Manual → IPv4: 1.1.1.2, 1.0.0.2 → enable DNS over HTTPS.
2. macOS: System Settings → Network → Details → DNS → + → add DoH address (e.g., https://dns.nextdns.io/your-config-id).
3. Android 9+: Settings → Network & internet → Private DNS → Private DNS provider hostname → dns.nextdns.io (or family.cloudflare-dns.com).
4. iOS 14+: Settings → General → VPN & Device Management → Download NextDNS/AdGuard profile, or use their apps for DoH setup.

NextDNS and Control D let you block tracker domains, telemetry, and ads at the DNS level—with per-device logs so you can see what's being blocked.

VPN: When It Helps (and When It Doesn't)

A VPN hides your IP from websites and your ISP from your traffic. It does not stop cookie tracking, fingerprinting, or first-party analytics. Use a VPN for:

• Public Wi-Fi security
• Hiding location from sites
• Preventing ISP logging

Do not rely on a VPN alone for tracker blocking. Combine with browser settings and DNS filtering.

Advanced: Hardened Browsers and Configurations

If you want stronger defaults without manual tuning:

• Brave Browser: Blocks ads/trackers by default, upgrades to HTTPS, randomizes fingerprint. Chromium-based—Chrome extensions work. Built-in Tor window option.
• LibreWolf: Firefox fork with privacy-hardened defaults (telemetry removed, resistance fingerprinting on, uBlock Origin preinstalled). No auto-update on Windows (manual or Flatpak).
• Mullvad Browser: Tor Browser without the Tor network. Maximum fingerprinting resistance, no persistence. For high-sensitivity sessions only.
• Tor Browser: Routes traffic through three relays. Slow, breaks many sites, but unmatched anonymity. Use when you need it, not as daily driver.

What About "Do Not Track"?

The DNT: 1 header is voluntary. No major ad network honors it. Some sites use it as a fingerprinting signal. Enable it if you want (harmless), but don't expect results.

Testing Your Setup

Verify your protections work:

• Cover Your Tracks (EFF) — coveryourtracks.eff.org — tests fingerprinting, tracker blocking, cookie handling.
• DNS Leak Test — dnsleaktest.com — confirms your DNS resolver.
• BrowserLeaks — browserleaks.com — deep dive into WebRTC, canvas, fonts, battery, sensors.

Common Mistakes to Avoid

• Installing five ad blockers: They conflict, slow browsing, and increase fingerprint surface. One (uBlock Origin) is enough.
• Blocking all cookies: Breaks logins, carts, preferences. Use "clear on close" with exceptions instead.
• Using a "privacy" browser with sync enabled: Sync sends data to the vendor. Disable sync or use a passphrase (Firefox, Brave support this).
• Ignoring mobile: Safari on iOS and Chrome on Android need the same settings. DNS filtering is especially valuable on mobile where extension support is limited.

Maintenance Checklist

1. Review extension permissions quarterly — remove unused ones.
2. Update filter lists in uBlock Origin (auto-updates weekly; force update via dashboard).
3. Check NextDNS/Control D logs monthly for new tracker domains to block.
4. Re-verify browser settings after major version updates (browsers occasionally reset flags).
5. Clear cookies/site data periodically if not using "clear on close."

Summary: What to Do Today

1. Enable Strict tracking protection in your browser (Firefox/Edge) or Block third-party cookies + Ad privacy off (Chrome/Safari).
2. Install uBlock Origin (or Ka-Block!/AdGuard on Safari).
3. Set cookies to clear on close with exceptions for sites you trust.
4. Switch DNS to NextDNS or Cloudflare 1.1.1.1 for Families system-wide.
5. Test at coveryourtracks.eff.org — aim for "Strong protection against tracking."

You don't need every tool here. The first three steps alone stop the majority of commercial tracking. Add DNS filtering for system-wide coverage. Reserve hardened browsers and fingerprinting defenses for specific high-privacy needs.