Skip to content
ScanMyPrivacy
Menu

Privacy and leak tests

Full Privacy ScanDNS Leak TestWebRTC Leak TestBrowser Fingerprint TestAm I Using a VPN?HTTP Headers ViewerUser Agent CheckerOpen Port Checker

Online safety assistant

Website Safety CheckerSuspicious Link CheckerScam and Phishing Message CheckerBrowser Security GuideMobile App Safety CheckPersonal Security Checkup

IP and network lookups

IP LookupMy IP LocationWhat Is My Public IP?What Is My IPv6 Address?Reverse DNS LookupDNS Lookup
Online safety Guides API About

Step-by-step settings · all major browsers

Browser Privacy and Security Guide

Choose your browser and topic to get the exact settings that block tracking, malicious pop-ups and over-sharing. No installs, no signup.

Find your settings

Pick your browser. If a menu name differs from what you see, use the search box at the top of the browser's settings page for the topic's name.

Detected automatically: your browser's name (to pick the right steps) and whether it sends the Global Privacy Control signal. Nothing else.

You check yourself: every setting in the steps below. A web page cannot read your browser's settings, extensions, saved permissions or other sites, so each step is an instruction for you to follow and confirm.

Topic

Google Chrome · Desktop

Cookies and trackers

Goal: Block third-party cookies and turn on tracker protection.

Shortcut: paste chrome://settings/cookies into the address bar.

  1. Open the three-dot menu, choose Settings, then Privacy and security.
  2. Open Third-party cookies and choose Block third-party cookies.
  3. To see what is stored, open See all site data and permissions and remove sites you do not recognise.
Phishing and malware warnings

Goal: Leave the warning feature on. Never click through a red warning page for a site you do not fully trust.

Shortcut: paste chrome://settings/security into the address bar.

  1. Settings, Privacy and security, Security.
  2. Under Safe Browsing choose Standard protection, or Enhanced protection for faster, more proactive warnings (it shares more browsing data with Google).
  3. Leave Warn you if passwords are exposed in a data breach switched on.
Site permissions overview

Goal: Set each permission to "ask" or "block" by default and remove sites you do not recognise.

Shortcut: paste chrome://settings/content into the address bar.

  1. Settings, Privacy and security, Site settings.
  2. Scroll to Permissions and open each one (Location, Camera, Microphone, Notifications and so on).
  3. Choose Sites can ask or Don't allow, then read the Allowed list and remove anything unfamiliar.
Pop-ups and redirects

Goal: Block pop-ups and redirects by default and allow only the few sites that genuinely need them.

Shortcut: paste chrome://settings/content/popups into the address bar.

  1. Settings, Privacy and security, Site settings, Pop-ups and redirects.
  2. Choose Don't allow sites to send pop-ups or use redirects.
  3. Use Allowed to send pop-ups only for sites that need them, such as your bank's statement viewer.
Notifications

Goal: Stop sites from asking, and remove any you do not recognise from the allowed list.

Shortcut: paste chrome://settings/content/notifications into the address bar.

  1. Settings, Privacy and security, Site settings, Notifications.
  2. Choose Don't allow sites to send notifications, or Use quieter messaging.
  3. Under Allowed to send notifications, remove sites you do not recognise.
Location access

Goal: Ask first or block, and review who already has access.

Shortcut: paste chrome://settings/content/location into the address bar.

  1. Settings, Privacy and security, Site settings, Location.
  2. Choose Sites can ask to know your location, or Don't allow sites to see your location.
  3. Review Allowed to see your location and remove sites you no longer use.
Camera and microphone

Goal: Ask first, never "always allow" for a site you do not use daily, and remove stale entries.

Shortcut: paste chrome://settings/content/camera into the address bar.

  1. Settings, Privacy and security, Site settings, Camera, then Microphone.
  2. Choose Sites can ask to use your camera (or microphone) rather than allowing by default.
  3. Remove any site under Allowed that you do not use for calls or recording.
Extensions

Goal: Keep only extensions you use, restrict their site access and remove anything you do not remember installing.

Shortcut: paste chrome://extensions into the address bar.

  1. Open the puzzle-piece icon and choose Manage extensions.
  2. Remove every extension you do not use or do not remember installing.
  3. Open Details on the rest and set Site access to On click or On specific sites.
  4. Check the publisher and recent reviews of anything you keep.

Microsoft Edge · Desktop

Cookies and trackers

Goal: Block third-party cookies and turn on tracker protection.

Shortcut: paste edge://settings/privacy into the address bar.

  1. Open the three-dot menu, choose Settings, then Privacy, search, and services.
  2. Under Tracking prevention choose Balanced (the default) or Strict.
  3. Go to Cookies and site permissions, Manage and delete cookies and site data, and turn on Block third-party cookies.
Phishing and malware warnings

Goal: Leave the warning feature on. Never click through a red warning page for a site you do not fully trust.

Shortcut: paste edge://settings/privacy into the address bar.

  1. Settings, Privacy, search, and services, then Security.
  2. Make sure Microsoft Defender SmartScreen is on.
  3. Turn on Block potentially unwanted apps and Enhanced security mode if you want stricter protection on unfamiliar sites.
Site permissions overview

Goal: Set each permission to "ask" or "block" by default and remove sites you do not recognise.

Shortcut: paste edge://settings/content into the address bar.

  1. Settings, Cookies and site permissions.
  2. Under All permissions open each category.
  3. Set it to ask, or block, and delete entries you do not recognise.
Pop-ups and redirects

Goal: Block pop-ups and redirects by default and allow only the few sites that genuinely need them.

Shortcut: paste edge://settings/content/popups into the address bar.

  1. Settings, Cookies and site permissions, Pop-ups and redirects.
  2. Switch Block (recommended) on.
  3. Use Allow only for specific sites that need it.
Notifications

Goal: Stop sites from asking, and remove any you do not recognise from the allowed list.

Shortcut: paste edge://settings/content/notifications into the address bar.

  1. Settings, Cookies and site permissions, Notifications.
  2. Turn on Quiet notification requests, or block them entirely.
  3. Remove unfamiliar sites from the Allow list.
Location access

Goal: Ask first or block, and review who already has access.

Shortcut: paste edge://settings/content/location into the address bar.

  1. Settings, Cookies and site permissions, Location.
  2. Keep Ask before accessing (recommended) on.
  3. Remove sites you do not recognise from Allow.
Camera and microphone

Goal: Ask first, never "always allow" for a site you do not use daily, and remove stale entries.

Shortcut: paste edge://settings/content/camera into the address bar.

  1. Settings, Cookies and site permissions, Camera, then Microphone.
  2. Keep Ask before accessing on for both.
  3. Remove sites from Allow that you no longer use for calls.
Extensions

Goal: Keep only extensions you use, restrict their site access and remove anything you do not remember installing.

Shortcut: paste edge://extensions into the address bar.

  1. Open the three-dot menu and choose Extensions, Manage extensions.
  2. Remove extensions you do not use or do not remember installing.
  3. Open Details on the rest and limit Site access to On click or specific sites.

Mozilla Firefox · Desktop

Cookies and trackers

Goal: Block third-party cookies and turn on tracker protection.

Shortcut: paste about:preferences#privacy into the address bar.

  1. Open the menu, choose Settings, then Privacy & Security.
  2. Under Enhanced Tracking Protection choose Standard, or Strict for more blocking (a few sites may break).
  3. Under Website Privacy Preferences turn on Tell websites not to sell or share my data (Global Privacy Control).
  4. Use Cookies and Site Data, Manage Data to remove stored data for sites you do not recognise.
Phishing and malware warnings

Goal: Leave the warning feature on. Never click through a red warning page for a site you do not fully trust.

Shortcut: paste about:preferences#privacy into the address bar.

  1. Settings, Privacy & Security, scroll to Security.
  2. Make sure Block dangerous and deceptive content is ticked, including Block dangerous downloads.
  3. Leave Warn you about unwanted and uncommon software ticked.
Site permissions overview

Goal: Set each permission to "ask" or "block" by default and remove sites you do not recognise.

Shortcut: paste about:preferences#privacy into the address bar.

  1. Settings, Privacy & Security, scroll to Permissions.
  2. Press Settings next to Location, Camera, Microphone and Notifications in turn.
  3. Tick Block new requests asking to access (each one) if you want to be asked less, and remove sites you do not recognise.
Pop-ups and redirects

Goal: Block pop-ups and redirects by default and allow only the few sites that genuinely need them.

Shortcut: paste about:preferences#privacy into the address bar.

  1. Settings, Privacy & Security, Permissions.
  2. Tick Block pop-up windows.
  3. Press Exceptions to allow specific sites that need them.
Notifications

Goal: Stop sites from asking, and remove any you do not recognise from the allowed list.

Shortcut: paste about:preferences#privacy into the address bar.

  1. Settings, Privacy & Security, Permissions, Notifications, Settings.
  2. Tick Block new requests asking to allow notifications.
  3. Remove any site in the list that you do not recognise.
Location access

Goal: Ask first or block, and review who already has access.

Shortcut: paste about:preferences#privacy into the address bar.

  1. Settings, Privacy & Security, Permissions, Location, Settings.
  2. Tick Block new requests asking to access your location, or leave it asking.
  3. Remove sites you no longer use.
Camera and microphone

Goal: Ask first, never "always allow" for a site you do not use daily, and remove stale entries.

Shortcut: paste about:preferences#privacy into the address bar.

  1. Settings, Privacy & Security, Permissions, Camera, then Microphone, Settings.
  2. Tick Block new requests asking to access your camera (or microphone) if you rarely use them.
  3. Remove sites you do not recognise.
Extensions

Goal: Keep only extensions you use, restrict their site access and remove anything you do not remember installing.

Shortcut: paste about:addons into the address bar.

  1. Open the menu and choose Add-ons and themes, then Extensions.
  2. Remove what you do not use. Open each remaining extension and read its Permissions tab.
  3. Turn off Run in Private Windows for extensions that do not need it.

Safari · Mac

Cookies and trackers

Goal: Block third-party cookies and turn on tracker protection.

  1. In the menu bar choose Safari, Settings, then Privacy.
  2. Keep Prevent cross-site tracking ticked (it is on by default).
  3. Use Manage Website Data to remove data for sites you do not recognise. Block all cookies is stricter but breaks many logins.
Phishing and malware warnings

Goal: Leave the warning feature on. Never click through a red warning page for a site you do not fully trust.

  1. Safari, Settings, then Security (on some versions this sits under Privacy).
  2. Keep Warn when visiting a fraudulent website ticked.
  3. Keep macOS updated: Safari's warnings and fixes arrive through system updates.
Site permissions overview

Goal: Set each permission to "ask" or "block" by default and remove sites you do not recognise.

  1. Safari, Settings, then Websites.
  2. The sidebar lists Camera, Microphone, Screen Sharing, Location, Notifications, Pop-up Windows and more.
  3. Open each one, set the default to Ask or Deny, and change any site you do not recognise to Deny.
Pop-ups and redirects

Goal: Block pop-ups and redirects by default and allow only the few sites that genuinely need them.

  1. Safari, Settings, Websites, Pop-up Windows.
  2. Set When visiting other websites to Block and Notify or Block.
  3. Change individual sites to Allow only when you need them.
Notifications

Goal: Stop sites from asking, and remove any you do not recognise from the allowed list.

  1. Safari, Settings, Websites, Notifications.
  2. Untick Allow websites to ask for permission to send notifications.
  3. Set any listed site you do not recognise to Deny, or remove it.
Location access

Goal: Ask first or block, and review who already has access.

  1. Safari, Settings, Websites, Location.
  2. Set When visiting other websites to Ask or Deny.
  3. Also check System Settings, Privacy & Security, Location Services to see which apps can use your location.
Camera and microphone

Goal: Ask first, never "always allow" for a site you do not use daily, and remove stale entries.

  1. Safari, Settings, Websites, Camera, then Microphone.
  2. Set When visiting other websites to Ask or Deny.
  3. Set any site you do not use for calls to Deny.
Extensions

Goal: Keep only extensions you use, restrict their site access and remove anything you do not remember installing.

  1. Safari, Settings, Extensions.
  2. Untick extensions you do not use. To remove one fully, select it and choose Uninstall.
  3. Select each remaining extension and check which websites it may access.

Brave · Desktop

Cookies and trackers

Goal: Block third-party cookies and turn on tracker protection.

Shortcut: paste brave://settings/shields into the address bar.

  1. Open the menu, choose Settings, then Shields.
  2. Under Trackers & ads blocking choose Standard, or Aggressive for stricter blocking.
  3. Under Cookies choose Block third-party cookies (or Block cross-site cookies), and keep Block fingerprinting on.
Phishing and malware warnings

Goal: Leave the warning feature on. Never click through a red warning page for a site you do not fully trust.

Shortcut: paste brave://settings/security into the address bar.

  1. Settings, Privacy and security, Security.
  2. Under Safe Browsing choose Standard protection (Enhanced sends more data to Google).
  3. Keep Warn you if passwords are exposed in a data breach on if you use Brave's password manager.
Site permissions overview

Goal: Set each permission to "ask" or "block" by default and remove sites you do not recognise.

Shortcut: paste brave://settings/content into the address bar.

  1. Settings, Privacy and security, Site and Shields settings.
  2. Open each permission under Permissions and choose Sites can ask or Don't allow.
  3. Open the list for each one and remove sites you do not recognise.
Pop-ups and redirects

Goal: Block pop-ups and redirects by default and allow only the few sites that genuinely need them.

Shortcut: paste brave://settings/content/popups into the address bar.

  1. Settings, Privacy and security, Site and Shields settings, Pop-ups and redirects.
  2. Choose Don't allow sites to send pop-ups or use redirects.
  3. Add exceptions only for sites that need them.
Notifications

Goal: Stop sites from asking, and remove any you do not recognise from the allowed list.

Shortcut: paste brave://settings/content/notifications into the address bar.

  1. Site and Shields settings, Notifications.
  2. Choose Don't allow sites to send notifications.
  3. Remove unfamiliar sites from the Allowed list.
Location access

Goal: Ask first or block, and review who already has access.

Shortcut: paste brave://settings/content/location into the address bar.

  1. Site and Shields settings, Location.
  2. Choose Sites can ask to know your location, or block it.
  3. Remove sites you no longer use.
Camera and microphone

Goal: Ask first, never "always allow" for a site you do not use daily, and remove stale entries.

Shortcut: paste brave://settings/content/camera into the address bar.

  1. Site and Shields settings, Camera, then Microphone.
  2. Choose Sites can ask rather than allowing by default.
  3. Remove stale sites from the Allowed lists.
Extensions

Goal: Keep only extensions you use, restrict their site access and remove anything you do not remember installing.

Shortcut: paste brave://extensions into the address bar.

  1. Open the menu, choose Extensions, Manage extensions.
  2. Remove what you do not use or do not remember installing.
  3. Open Details and limit Site access where the option is offered.

Chrome · Android

Cookies and trackers

Goal: Block third-party cookies and turn on tracker protection.

  1. Open Chrome, tap the three dots, then Settings.
  2. Tap Privacy and security, then Third-party cookies, and choose Block third-party cookies.
  3. Tap Delete browsing data to clear cookies and site data you do not need.
Phishing and malware warnings

Goal: Leave the warning feature on. Never click through a red warning page for a site you do not fully trust.

  1. Chrome, three dots, Settings, then Safe Browsing.
  2. Choose Standard protection, or Enhanced protection for proactive warnings.
  3. Keep Chrome and Android updated from Google Play and system settings.
Site permissions overview

Goal: Set each permission to "ask" or "block" by default and remove sites you do not recognise.

  1. Chrome, three dots, Settings, then Site settings.
  2. Open Location, Camera, Microphone, Notifications and others in turn and choose Ask or Blocked.
  3. Also open Android Settings, Apps, Chrome, Permissions to control what Chrome itself may use.
Pop-ups and redirects

Goal: Block pop-ups and redirects by default and allow only the few sites that genuinely need them.

  1. Chrome, three dots, Settings, Site settings, Pop-ups and redirects.
  2. Switch the toggle off so pop-ups and redirects are blocked.
Notifications

Goal: Stop sites from asking, and remove any you do not recognise from the allowed list.

  1. Chrome, three dots, Settings, Notifications.
  2. Turn off sites you do not recognise, or turn off Show notifications entirely.
  3. Android Settings, Apps, Chrome, Notifications also lets you switch them off at system level.
Location access

Goal: Ask first or block, and review who already has access.

  1. Chrome, three dots, Settings, Site settings, Location.
  2. Choose Ask first, or turn it off.
  3. Review individual sites in the list below.
Camera and microphone

Goal: Ask first, never "always allow" for a site you do not use daily, and remove stale entries.

  1. Chrome, three dots, Settings, Site settings, Camera, then Microphone.
  2. Choose Ask first rather than allowing by default.
  3. Open Android Settings, Privacy, Permission manager to see every app with camera or microphone access.
Extensions

Goal: Keep only extensions you use, restrict their site access and remove anything you do not remember installing.

  1. Chrome on Android does not run extensions, so there is nothing to review in the browser.
  2. The equivalent risk on a phone is installed apps: see the Mobile App Safety Check for how to review them.

Safari · iPhone and iPad

Cookies and trackers

Goal: Block third-party cookies and turn on tracker protection.

  1. Open Settings, Apps, Safari, then Advanced or Privacy & Security (older iOS: Settings, Safari).
  2. Keep Prevent Cross-Site Tracking on.
  3. Use Clear History and Website Data to remove stored cookies. Block All Cookies is stricter but breaks many logins.
Phishing and malware warnings

Goal: Leave the warning feature on. Never click through a red warning page for a site you do not fully trust.

  1. Settings, Apps, Safari, Privacy & Security (older iOS: Settings, Safari).
  2. Keep Fraudulent Website Warning on.
  3. Install iOS updates promptly: Safari's protections and fixes ship with them.
Site permissions overview

Goal: Set each permission to "ask" or "block" by default and remove sites you do not recognise.

  1. Settings, Apps, Safari, then Settings for Websites (older iOS: Settings, Safari).
  2. Open Camera, Microphone and Location and set them to Ask or Deny.
  3. Also review Settings, Privacy & Security to see which apps may use location, camera, microphone and photos.
Pop-ups and redirects

Goal: Block pop-ups and redirects by default and allow only the few sites that genuinely need them.

  1. Settings, Apps, Safari.
  2. Switch Block Pop-ups on.
Notifications

Goal: Stop sites from asking, and remove any you do not recognise from the allowed list.

  1. Websites can only send notifications from web apps you added to your Home Screen.
  2. Open Settings, Notifications and turn off any web app you do not recognise.
Location access

Goal: Ask first or block, and review who already has access.

  1. Settings, Apps, Safari, Location (older iOS: Settings, Safari, Location).
  2. Choose Ask or Deny.
  3. Check Settings, Privacy & Security, Location Services for apps that can see where you are.
Camera and microphone

Goal: Ask first, never "always allow" for a site you do not use daily, and remove stale entries.

  1. Settings, Apps, Safari, Camera, then Microphone (older iOS: Settings, Safari).
  2. Choose Ask or Deny.
  3. Settings, Privacy & Security, Camera (and Microphone) lists every app with access: switch off what you do not use.
Extensions

Goal: Keep only extensions you use, restrict their site access and remove anything you do not remember installing.

  1. Settings, Apps, Safari, Extensions.
  2. Switch off extensions you do not use, and check which websites each one may access.
  3. Delete the app that installed an extension you do not trust.

What we test, what we do not, and what we store

Full method →

We test

  • Nothing: this is an instruction guide, not a scanner. It does not read your browser settings

We do not test

  • Your actual settings: it cannot see which options you have switched on
  • Menu names in every browser version: browsers rename items, so each step also gives an address-bar shortcut where one exists
  • Malware already on your device

What we store

  • Nothing: your browser choice is read from your own browser to pre-select a tab and is never sent to us
  • Anonymous usage counts only: which tool was completed and a coarse result category, never what you typed, your IP address or your results. Nothing is sent if your browser signals Global Privacy Control or Do Not Track.

Third parties that see data: None. This page makes no third-party requests.

Why browser settings matter

Your browser is where most online risks meet you: tracking cookies, fake pop-ups, notification spam, requests for your location, camera or microphone, and extensions that can read everything you do. The defaults are a compromise between convenience and protection, and they differ between browsers. Ten minutes in the settings removes most of the everyday risk, with no extra software.

The eight settings that do the most

  • Block third-party cookies and trackers. Stops companies following you across unrelated sites.
  • Keep phishing and malware warnings on. Browsers check addresses against lists of dangerous sites. Leave this switched on and never click through a red warning.
  • Review site permissions. One page lists every site you have given access to your location, camera, microphone or notifications. Remove what you do not recognise.
  • Block pop-ups and redirects. Fake virus warnings and prize pop-ups depend on them.
  • Stop notification requests. One mistaken "Allow" lets a scam site push alerts to your screen indefinitely.
  • Ask before sharing location. Most sites never need it.
  • Ask before camera and microphone access. Allow it per call, not forever.
  • Prune extensions. Every extension can see the pages you visit. Fewer is safer.

What we detect and what you check

ItemWho checks it
Which browser you useDetected automatically from your browser's own description (can be wrong; you can change it)
Global Privacy Control signalDetected automatically
Third-party cookie blocking, tracker blockingYou, in settings
Safe browsing and phishing warningsYou, in settings
Site permissions and notificationsYou, in settings
ExtensionsYou, in the extensions page
UpdatesYou, in the browser's About page

What these settings do not do

Settings reduce exposure; they do not make you invisible or immune. Blocking cookies does not stop browser fingerprinting (see our fingerprint test), and permission settings do not protect you from typing your password into a convincing fake. Pair them with the habits in the personal security checkup: updates, a password manager and two-step verification.

Keep your browser updated

Browser vendors fix serious security holes in updates, often within days of discovery. Chrome, Edge, Firefox and Brave update themselves when restarted; Safari updates with macOS and iOS. If you rarely close your browser, restart it when it shows an update prompt, because an open but outdated browser keeps the old vulnerabilities.

About these instructions

Menus change between browser versions, so each step also gives the settings address that jumps straight to the right page where the browser supports one. Address-bar pages such as chrome://settings cannot be opened by a link on a website, so copy the address into the bar yourself. If you find a step that no longer matches, please report a correction.

Last reviewed 2026-10-29. Found a mistake? Report a correction (how we handle them).

Fix it and learn more

Fake virus warnings and malicious popups: what to doPopups claiming your device is infected are scams. Learn to spot them, close them safely and clean up notification and extension settings.How to Prevent Browser FingerprintingPractical ways to reduce browser fingerprinting: the browsers and settings that help, the tricks that backfire, and how to test whether your changes worked.How Websites Track You Without CookiesCookies are only one way sites follow you. IP addresses, fingerprints, tracking IDs and logins work too. What they are and how to limit them.

Also check your…

Personal Security CheckupAnswer a few questions and get a personalised, prioritised action plan.WebRTC Leak TestFind out if your browser reveals your real IP behind a VPN.Browser Fingerprint TestHow unique is your browser? Computed on your device, never uploaded.Suspicious Link CheckerPaste a link to spot look-alike domains, misleading subdomains and other warning signs. Runs on your device.

Frequently asked questions

Which browser is the most private?

Brave and Firefox have the strongest tracking protection out of the box, and Safari is strong on iPhone and Mac. Chrome and Edge can be configured well but need the settings on this page changed. The best browser is the one you keep updated and configure.

Will blocking third-party cookies break websites?

Occasionally a site that embeds a login or payment from another company misbehaves. Most browsers let you allow cookies for a single site while keeping the block everywhere else.

Is private or incognito mode enough?

No. It only stops your browser saving history and cookies on your device. Websites, your network and your internet provider still see your activity.

How do I know if an extension is safe?

Install extensions only from your browser's official store, prefer well-known publishers with many users and recent updates, read what permissions it asks for, and remove any you do not use. No review can guarantee safety, so fewer is better.

Does this guide read my browser settings?

No. It cannot see your settings. Your browser name is used only to show the right tab and is never sent to us.