Firefox gets a privacy boost as Total Cookie Protection becomes the default for all users


Firefox logo, Mozilla
Image Credits: Mozilla

While the ad tech industry tries to function in a less cookie-filled environment, browsers like Mozilla Firefox are jumping on the opportunity to grow its user base with features such as Total Cookie Protection (TCP). The feature was first introduced in February 2021 and was initially restricted to Firefox’s tracking protection feature — Enhanced Tracking Protection Strict Mode. It was then enabled by default in private browsing windows with the launch of Firefox 89 later that year. As of today, Total Cookie Protection will now be the default for all users worldwide, not just in private windows or if you opt into stricter settings.

Compared to its competitors such as Google Chrome and Microsoft Edge, Mozilla Firefox claims to be “the most private and secure major browser available across Windows and Mac,” and Marshall Erwin, Mozilla’s chief security officer, tells TechCrunch that Total Cookie Protection is Firefox’s “strongest privacy protection to date.”

Mozilla hopes that making TCP the default for all users will ensure they are kept safe online.

Mozilla beefs up anti-cross-site tracking in Firefox, as Chrome still lags on privacy

“Internet users today are stuck in a vicious cycle in which their data is collected without their knowledge, sold and used to manipulate them. Total Cookie Protection breaks that cycle, putting people first, protecting their privacy, giving them a choice and cutting off Big Tech from the data it vacuums up every day,” Erwin added.

Here’s how it works. The TCP feature creates a separate “cookie jar” for each website you visit and confines the cookies to the site where they were created. The trackers can only see your behavior on that individual site. This, in turn, prevents tracking companies from using these cookies to track your browsing from site to site. So, the amount of information that companies gather from you is reduced as well as all the invasive and sometimes too-close-to-home advertisements you might see on a daily basis.

Image Credits: Mozilla

In addition, Total Cookie Protection offers additional privacy protections provided by existing anti-tracking features such as Enhanced Tracking Protection (ETP), which Mozilla launched in 2018 and became default to all Firefox users in 2019. ETP blocks trackers based on a list yet had some shortcomings as there were still ways for trackers to evade being blocked. For instance, many just set up a new tracking domain that wasn’t on the list. Meanwhile, TCP restricts the functionality of all cookies no matter what.

Mozilla flips the default switch on Firefox tracker cookie blocking

When third-party cookies are blocked outright, this can break some site functionality. So this is part of the reason why Firefox’s Total Cookie Protection doesn’t completely eliminate third-party cookies. Access to these cookies is only restricted. That way, the browser experience isn’t affected as TCP continues to offer strong protection against tracking.

Plus, cross-site cookies are an exception as they are needed for non-tracking purposes, such as those used by popular third-party login providers. This means the website and the login provider will access the same cookie jar so the user can sign in conveniently. Firefox will remember the user’s preference for 30 days.

It’s important to note that TCP in Firefox doesn’t protect users from all cookie pop-ups. The company informed TechCrunch that while it protects users from the third-party tracking that might occur on the websites that ask you to accept or decline their privacy policy in a cookie banner, TCP, however, does not protect against first-party tracking, so choosing to click either “accept” or “decline” is still required for first-party cookies.

When Mozilla was first testing the feature in February, the company monitored for breakage and even collaborated with websites to restructure their site to work with cookie storage isolation technologies like TCP, often by encouraging the use of the Storage Access API, the company told TechCrunch. The Storage Access API offers a way for embedded resources to see if they currently have access to their first-party storage and then gives them the ability to request access from the user agent.

As Mozilla became more aware of common breakage patterns, the company developed heuristics and SmartBlock in Firefox that allow sites using these patterns to continue working without breakage while still enabling the privacy benefits of TCP. Overall, the amount of breakage was limited, according to Mozilla.

In total, the Firefox browser has more than 200 million monthly active users, per its own data, and is known to be a popular browser among users with privacy concerns. However, by the beginning of 2021, Firefox reported having lost up to 12% of its user base, according to StatCounter.

It is likely that this decline was due to complaints that the Firefox design introduced in version 89 was “slow and buggy,” a Reddit user wrote. In May 2022, Firefox 100 was then hacked in seven seconds, but Mozilla quickly released 100.0.2 within 48 hours. This month, Firefox 101.0.1 was released with no zero-day security holes fixed, and no patches deemed critical, so maybe users will flock to the browser.

Earlier this month, Safari reached one billion worldwide users, whereas Google Chrome has over three billion. Microsoft Edge has 212 million users, according to Atlas VPN’s findings.

Even though the browser struggles to retain as many users as its competitors — and had some road bumps with updates — Firefox’s tracking protection is far more comprehensive than Microsoft Edge and Google Chrome, which do not disable third-party cookies by default. Meanwhile, Apple’s Safari browser and Firefox have blocked third-party cookies since 2013. In addition, privacy-focused browsers Tor, Brave, Epic and Min also block third-party cookies by default.

In 2020, Google announced that it plans to phase out support for third-party cookies in Chrome within the next two years. This was delayed until 2023.

Google has argued with Mozilla’s approach to blocking third-party cookies and has said that this will only drive the industry to find workarounds. Mozilla believes that while advertising is central to the internet economy, it also believes that consumer privacy should not be optional. The nonprofit company never sells or buys your data — it still collects it, however — and Firefox developers are driven to work toward a more “healthy internet,” the company once wrote.

More TechCrunch

“When I heard the released demo, I was shocked, angered and in disbelief that Mr. Altman would pursue a voice that sounded so eerily similar to mine.”

Scarlett Johansson says that OpenAI approached her to use her voice

The European venture capital firm raised its fourth fund as fund as climate tech “comes of age.”

ETF Partners raises €284M for climate startups that will be effective quickly — not 20 years down the road

Copilot, Microsoft’s brand of generative AI, will soon be far more deeply integrated into the Windows 11 experience.

Microsoft wants to make Windows an AI operating system, launches Copilot+ PCs

Hello and welcome back to TechCrunch Space. For those who haven’t heard, the first crewed launch of Boeing’s Starliner capsule has been pushed back yet again to no earlier than…

TechCrunch Space: Star(side)liner

When I attended Automate in Chicago a few weeks back, multiple people thanked me for TechCrunch’s semi-regular robotics job report. It’s always edifying to get that feedback in person. While…

These 81 robotics companies are hiring

The top vehicle safety regulator in the U.S. has launched a formal probe into an April crash involving the all-electric VinFast VF8 SUV that claimed the lives of a family…

VinFast crash that killed family of four now under federal investigation

When putting a video portal in a public park in the middle of New York City, some inappropriate behavior will likely occur. The Portal, the vision of Lithuanian artist and…

NYC-Dublin real-time video portal reopens with some fixes to prevent inappropriate behavior

Longtime New York-based seed investor, Contour Venture Partners, is making progress on its latest flagship fund after lowering its target. The firm closed on $42 million, raised from 64 backers,…

Contour Venture Partners, an early investor in Datadog and Movable Ink, lowers the target for its fifth fund

Meta’s Oversight Board has now extended its scope to include the company’s newest platform, Instagram Threads, and has begun hearing cases from Threads.

Meta’s Oversight Board takes its first Threads case

The company says it’s refocusing and prioritizing fewer initiatives that will have the biggest impact on customers and add value to the business.

SeekOut, a recruiting startup last valued at $1.2 billion, lays off 30% of its workforce

The U.K.’s self-proclaimed “world-leading” regulations for self-driving cars are now official, after the Automated Vehicles (AV) Act received royal assent — the final rubber stamp any legislation must go through…

UK’s autonomous vehicle legislation becomes law, paving the way for first driverless cars by 2026

ChatGPT, OpenAI’s text-generating AI chatbot, has taken the world by storm. What started as a tool to hyper-charge productivity through writing essays and code with short text prompts has evolved…

ChatGPT: Everything you need to know about the AI-powered chatbot

SoLo Funds CEO Travis Holoway: “Regulators seem driven by press releases when they should be motivated by true consumer protection and empowering equitable solutions.”

Fintech lender SoLo Funds is being sued again by the government over its lending practices

Hard tech startups generate a lot of buzz, but there’s a growing cohort of companies building digital tools squarely focused on making hard tech development faster, more efficient and —…

Rollup wants to be the hardware engineer’s workhorse

TechCrunch Disrupt 2024 is not just about groundbreaking innovations, insightful panels, and visionary speakers — it’s also about listening to YOU, the audience, and what you feel is top of…

Disrupt Audience Choice vote closes Friday

Google says the new SDK would help Google expand on its core mission of connecting the right audience to the right content at the right time.

Google is launching a new Android feature to drive users back into their installed apps

Jolla has taken the official wraps off the first version of its personal server-based AI assistant in the making. The reborn startup is building a privacy-focused AI device — aka…

Jolla debuts privacy-focused AI hardware

The ChatGPT mobile app’s net revenue first jumped 22% on the day of the GPT-4o launch and continued to grow in the following days.

ChatGPT’s mobile app revenue saw its biggest spike yet following GPT-4o launch

Dating app maker Bumble has acquired Geneva, an online platform built around forming real-world groups and clubs. The company said that the deal is designed to help it expand its…

Bumble buys community building app Geneva to expand further into friendships

CyberArk — one of the army of larger security companies founded out of Israel — is acquiring Venafi, a specialist in machine identity, for $1.54 billion. 

CyberArk snaps up Venafi for $1.54B to ramp up in machine-to-machine security

Founder-market fit is one of the most crucial factors in a startup’s success, and operators (someone involved in the day-to-day operations of a startup) turned founders have an almost unfair advantage…

OpenseedVC, which backs operators in Africa and Europe starting their companies, reaches first close of $10M fund

A Singapore High Court has effectively approved Pine Labs’ request to shift its operations to India.

Pine Labs gets Singapore court approval to shift base to India

The AI Safety Institute, a U.K. body that aims to assess and address risks in AI platforms, has said it will open a second location in San Francisco. 

UK opens office in San Francisco to tackle AI risk

Companies are always looking for an edge, and searching for ways to encourage their employees to innovate. One way to do that is by running an internal hackathon around a…

Why companies are turning to internal hackathons

Featured Article

I’m rooting for Melinda French Gates to fix tech’s broken ‘brilliant jerk’ culture

Women in tech still face a shocking level of mistreatment at work. Melinda French Gates is one of the few working to change that.

1 day ago
I’m rooting for Melinda French Gates to fix tech’s  broken ‘brilliant jerk’ culture

Blue Origin has successfully completed its NS-25 mission, resuming crewed flights for the first time in nearly two years. The mission brought six tourist crew members to the edge of…

Blue Origin successfully launches its first crewed mission since 2022

Creative Artists Agency (CAA), one of the top entertainment and sports talent agencies, is hoping to be at the forefront of AI protection services for celebrities in Hollywood. With many…

Hollywood agency CAA aims to help stars manage their own AI likenesses

Expedia says Rathi Murthy and Sreenivas Rachamadugu, respectively its CTO and senior vice president of core services product & engineering, are no longer employed at the travel booking company. In…

Expedia says two execs dismissed after ‘violation of company policy’

Welcome back to TechCrunch’s Week in Review. This week had two major events from OpenAI and Google. OpenAI’s spring update event saw the reveal of its new model, GPT-4o, which…

OpenAI and Google lay out their competing AI visions

When Jeffrey Wang posted to X asking if anyone wanted to go in on an order of fancy-but-affordable office nap pods, he didn’t expect the post to go viral.

With AI startups booming, nap pods and Silicon Valley hustle culture are back