Most people are not indifferent to privacy; they simply do not want to spend an evening on it. Installing three extensions, hunting through settings, clearing cookies by hand, and the browsing experience is ruined before the first page loads. The DuckDuckGo browser puts that work into the factory defaults. It is installed and it is already doing the job: third-party trackers are blocked, connections are upgraded to an encrypted form, and most advertisements and cookie notices are kept off the page entirely. As of 2026-09 the browser covers Windows, macOS and mobile, is updated frequently, and is free for individual use.

It comes from an independent company known chiefly for one promise, that it does not track its users. Search goes through its own engine, which does not profile the person typing, and the protection during browsing happens quietly in the background. There is almost nothing to learn, which for a privacy tool is unusual and is exactly the point: protection that requires expertise only protects the experts.

Secure by default, from trackers to cookie notices

The organising idea is that the safe state is the default state. Tracker blocking works before the scripts load rather than after they have phoned home, which removes the chance of collection at the source instead of cleaning up afterwards. Privacy preference signals are sent to every site automatically, and tracking parameters are stripped out of links as they are followed.

On the encryption side, a smart feature upgrades a large share of the plain HTTP connections the web still contains to HTTPS, which reduces the chance of anything being read in transit. Fingerprint protection stops a site from assembling a profile out of the combination of browser and device details, a technique that survives the removal of cookies and is therefore worth blocking separately. For mail, an optional protection hides the real address behind an alias and blocks most of the tracking pixels that arrive with messages.

The handling of advertisements and cookie notices is the part anyone notices within a minute. Most ads are stopped before the page renders, including those inside pages and those inside video players, so the result is not merely a cleaner screen but a faster one. Cookie notices are recognised as they appear and answered on the reader behalf, which means the popup frequently never appears at all.

Watching video without feeding the profile

Duck Player is built into the desktop version and is a genuinely practical piece of design. A video opened through it is loaded in the strictest privacy mode available, so what is watched does not influence the personalised recommendations and the advertising profile attached to the account, and in the manufacturer own testing most advertisements in those videos are blocked.

It is fair to be precise about what this is. It reduces interference rather than making anyone invisible: the platform can still record that a playback event happened, and its own countermeasures may change at any time. For the ordinary wish to watch something without being sold to afterwards, however, it removes the overwhelming majority of the annoyance, and that is the standard most people actually apply.

One button that sweeps the trail away

The Fire Button is the feature shared computers were waiting for. A single press closes the open tabs and clears the back history, the visit history, cookies, site caches, site icons and even the permissions granted to sites, camera, microphone and location among them. Bookmarks and downloaded files are left alone, and search preferences are kept separately, so the sweep does not punish the person for having personalised what should stay personalised.

Sites that are logged into constantly can be marked as fireproof, and their sessions survive the clearing, which removes the usual objection that this kind of feature is unusable in practice. A password manager is built in and keeps credentials locally, filling passwords and payment card details when asked. For people working across several machines, synchronisation and backup are end-to-end encrypted, so bookmarks and passwords move between devices while remaining unreadable on the provider side.

An optional assistant, and an optional subscription

A chat function is built in and offers private conversations with several mainstream AI models. The conversations are anonymised, are not used to train anything, and the whole feature can be switched off whenever the user prefers. Browsing and protection are free in full, which is worth stating clearly because it is unusual. A paid subscription exists on top, adding a VPN connection, access to more advanced models, removal of personal information from data brokers and help with identity theft recovery. Not subscribing does not weaken the protection of the browser itself, which is the right way round.

Who it suits

Four kinds of people, roughly. Those who care about privacy but will not maintain it: the defaults do the work. Those worn down by advertisements and cookie notices: both are blocked ahead of time, so pages are cleaner and load quicker. Those who watch a lot of video: Duck Player takes the viewing out of the recommendation and advertising profile. And those using a shared or public machine: one press and the trail is gone.

Moving over takes minutes rather than an afternoon. Bookmarks and passwords can be carried from whatever browser was used before, so nothing has to be rebuilt by hand, and because the software asks for no money from an individual there is no cost to finding out whether the defaults suit the way one actually browses.