🖕 Cloud Exodus Notice: All No iLLusion services are migrating off cloud platforms to a home-grown, fully encrypted server within 6-12 months. Protected by a 100-character password scattered across 10 sticky notes in different languages. Just eat one note and the whole thing goes dark.
No real names, no tracking, no overlords.

Mobile Firefox Privacy Guide

Complete privacy hardening for Firefox on Android and iOS devices

Current Versions (October 2026)

Firefox for Android and Firefox for iOS are both on version 158. Since Firefox 155, Mozilla ships a new release every two weeks on desktop and Android, so keep auto-updates on. Android 17 has been stable since June 2026, and iOS 27 shipped in September 2026 (Apple still offers iOS 26.7 security updates for people who want to stay on 26).

Mobile browsers face unique privacy challenges: app store restrictions, limited extension support, and persistent tracking through device identifiers. This guide focuses on settings that actually exist in current releases.

Last verified: October 2026

Android vs iOS: Privacy Capabilities

Firefox for Android

Advantages:

  • • Real extension support (uBlock Origin, Privacy Badger)
  • • Gecko engine with Total Cookie Protection
  • • Enhanced Tracking Protection: Strict mode
  • • Global Privacy Control built in
  • • Hardened forks available (IronFox, Fennec F-Droid)

Limitations:

  • • No about:config or user.js on the release build
  • • Google Play Services tracking on stock Android
  • • Manufacturer bloatware
  • • Security updates vary by phone maker

Firefox for iOS

Advantages:

  • • Strong sandboxing and app isolation
  • • Fast, long-lived security updates
  • • Built-in tracking protection
  • • Firefox Focus for throwaway sessions

Limitations:

  • • No extension support
  • • No about:config at all
  • • Runs on Apple's WebKit engine, not Gecko
  • • App Store content restrictions

EU browser engine note: The EU Digital Markets Act lets browsers use their own engine on iPhones sold in the EU since iOS 17.4. As of October 2026 Mozilla has not shipped a Gecko-based Firefox for iOS anywhere. Mozilla says maintaining separate EU and non-EU versions is not practical, so Firefox for iOS still uses WebKit everywhere.

Android Firefox Complete Setup

1Installation & App Selection

Firefox (Recommended)

  • • Official Mozilla build
  • • Updates every two weeks
  • • Full extension support
  • • Optional Mozilla account sync
Play Store → Firefox Fast & Private Browser

IronFox (Hardened)

  • • Actively maintained successor to Mull (discontinued)
  • • Telemetry stripped, Strict ETP by default
  • • Ships with uBlock Origin
  • • Some sites break more often
Accrescent, IronFox F-Droid repo, or ironfoxoss.org

Fennec F-Droid

  • • Firefox with proprietary parts removed
  • • No Google dependencies
  • • Still talks to some Mozilla services
  • • Usually lags a release or two behind
F-Droid → Fennec F-Droid

Initial Setup Process:

  1. 1. Install Firefox: Pick the official build or a hardened fork based on your threat model
  2. 2. Skip Mozilla Account: Decline sync for maximum privacy (you can add it later)
  3. 3. Decline Data Collection: Settings → Data collection → turn everything off
  4. 4. Set as Default: Android Settings → Apps → Default apps → Browser app → Firefox

2Essential Privacy Extensions

Recommended Extensions:

uBlock Origin 1.75.0

The one extension everyone should install. Blocks ads, trackers and malware domains.

Menu → Extensions → uBlock Origin
Privacy Badger 2026.9.15 (Optional)

EFF's heuristic tracker blocker. Overlaps heavily with uBlock Origin, so it is optional.

Menu → Extensions → Privacy Badger

Extensions You No Longer Need:

  • • ClearURLs: Not updated since February 2025. Firefox strips tracking parameters itself in Strict mode, and uBlock Origin's "AdGuard URL Tracking Protection" list covers the rest.
  • • Decentraleyes / LocalCDN: Firefox partitions its cache per site, so shared CDN files can no longer track you across sites. Extra extensions also add fingerprinting surface.

Extension Configuration Tips:

  • • uBlock Origin: Enable EasyList, EasyPrivacy, AdGuard URL Tracking Protection and the uBlock annoyance lists
  • • Fewer is better: Every extension can read pages you visit. Only install ones you trust
  • • Test thoroughly: If a site breaks, disable uBlock Origin for that site rather than removing it
  • • Keep updated: Extensions auto-update. Leave that on

3Advanced Privacy Configuration

about:config Is Not Available on Release Firefox

The regular Firefox for Android build blocks about:config and does not read user.js files. Only Firefox Beta, Firefox Nightly and forks like IronFox expose it. On the release build, use the Settings menu equivalents below. If you want a pre-hardened config without tinkering, IronFox is the easier route.

Settings Menu (Any Build):
  • • Enhanced Tracking Protection → Strict (adds fingerprinting and query parameter protection)
  • • "Tell websites not to sell or share my data" → On (Global Privacy Control)
  • • HTTPS-Only Mode → Enable in all tabs
  • • DNS over HTTPS → Max Protection
  • • Delete browsing data on quit → On
about:config (Beta, Nightly, Forks):
media.peerconnection.enabled → false
geo.enabled → false
device.sensors.enabled → false
dom.event.clipboardevents.enabled → false

Disabling WebRTC (peerconnection) breaks video calls in the browser. Avoid privacy.resistFingerprinting on mobile: Mozilla does not support it for general browsing and it breaks many sites.

4Mobile-Specific Privacy Settings

Firefox Site Permissions:

Settings → Site permissions:

  • • Location: Blocked
  • • Camera: Ask to allow
  • • Microphone: Ask to allow
  • • Notifications: Blocked
  • • Autoplay: Block audio and video
Android System Settings:
  • • Permissions: Settings → Security & privacy → Privacy → Permission manager
  • • Location: Android 17 can share precise location temporarily. Use approximate location for most apps
  • • Ads: Delete your advertising ID (Settings → Privacy → Ads)
  • • Advanced Protection: Turn on for high-risk users (Android 16 and newer)
Android Private DNS:

Settings → Network & internet → Private DNS → Private DNS provider hostname:

dns.quad9.net
one.one.one.one

Quad9 validates DNSSEC on every endpoint. Mullvad's public DNS shuts down on November 2, 2026, so move off dns.mullvad.net if you use it.

High-Threat Option: GrapheneOS

GrapheneOS is a hardened Android OS with sandboxed Google Play (or none at all). As of October 2026 it still runs only on Google Pixel phones. A Motorola partnership was announced in March 2026, with the first supported Motorola devices expected in 2027.

iOS Firefox & Focus Setup

1App Installation & Setup

Firefox for iOS

  • • Enhanced Tracking Protection: set to Strict
  • • Settings → Data collection: turn off
  • • Mozilla account sync optional
  • • Limited customization due to iOS rules
App Store → Firefox: Private, Safe Browser

Firefox Focus (Recommended)

  • • Tracking protection always on
  • • Every session is private
  • • One-tap erase of all data
  • • Doubles as a Safari content blocker
App Store → Firefox Focus

Dual Browser Strategy:

  • • Firefox Focus: Quick, private browsing and sensitive searches
  • • Standard Firefox: Accounts, bookmarks and general browsing
  • • Default browser: iOS Settings → Apps → Default Apps → Browser App → Firefox

2iOS System Privacy Configuration

Critical iOS Settings (iOS 26 and 27):

Privacy & Security:
  • • Location Services → Never (or While Using) for browsers
  • • Analytics & Improvements → turn everything off
  • • Apple Advertising → Personalized Ads → Off
  • • App Privacy Report → On, review monthly
  • • Stolen Device Protection → On (default since 26.4.1)
Siri & Apple Intelligence:
  • • Settings → Apps → Firefox → Siri → turn off "Learn from this App"
  • • Turn off suggestions for browsers you use privately
Safari Settings (if you still use Safari):
  • • Prevent Cross-Site Tracking → On
  • • Advanced → Advanced Tracking and Fingerprinting Protection → All Browsing (default since iOS 26)
  • • Fraudulent Website Warning → On
  • • Privacy-Preserving Ad Measurement → Off
  • • Block All Cookies → optional, high-threat only (breaks logins on most sites)

3Content Blocker Configuration

Enable Firefox Focus Content Blocker:

# iOS Settings path:
Settings → Apps → Safari → Extensions
Enable: Firefox Focus
# Blocks trackers in Safari too
Other Safari Content Blockers:
  • • AdGuard (comprehensive lists)
  • • 1Blocker (custom rules)
  • • Wipr 2 (set and forget)

Content blockers only work in Safari and Safari-based views, not inside Firefox for iOS.

Testing & Verification:
  • • Visit ad-heavy sites to test blocking
  • • Run coveryourtracks.eff.org
  • • Verify essential sites still work
  • • Watch battery usage after changes

Mobile Privacy Best Practices

Daily Usage Tips

  • Use Private Browsing: Use private tabs or Focus for anything sensitive
  • Clear Data Regularly: Turn on automatic deletion of browsing data on quit
  • Separate Browsers: Use different browsers for logged-in and anonymous activity
  • Monitor Permissions: Review app permissions every few months

Security Reminders

  • Keep Updated: Firefox now ships every two weeks. Install browser and OS updates promptly
  • Public WiFi: HTTPS protects page contents, but the network still sees which sites you visit. Use encrypted DNS or a trusted VPN, and watch for fake captive portals asking for logins
  • Check URLs: Verify website authenticity before entering sensitive data
  • Review Apps: Fewer apps means fewer trackers. Uninstall what you don't use