LibreWolf: The Hardened Firefox Fork — What It Changes and When to Use It

LibreWolf is a fork of Firefox with hardened defaults, zero telemetry, and a focus on privacy. If you want Firefox's privacy features without manual configuration, LibreWolf is worth knowing about.

What LibreWolf Changes from Firefox

LibreWolf is Firefox with several default changes:

Removed:

• Firefox Accounts / Sync (no integration)
• Firefox Suggest (sponsored suggestions in address bar)
• Pocket integration
• Telemetry and crash reporting (entirely disabled)
• Studies and experiments
• DRM (Widevine — no Netflix/Disney+ out of the box)

Changed defaults:

• Enhanced Tracking Protection → Strict
• DNS over HTTPS → Cloudflare by default
• privacy.resistFingerprinting = true
• Multiple about:config privacy flags set to hardened values
• Letterboxing enabled (standardizes window size to reduce fingerprint)
• Search default → DuckDuckGo

Kept:

• All Firefox WebExtensions support
• Full AMD capability (GPU acceleration)
• Firefox's rendering engine
• Firefox DevTools

Installing LibreWolf

Linux:

# Flatpak (most portable):
flatpak install flathub io.gitlab.librewolf-community.librewolf

# Arch Linux (AUR):
yay -S librewolf-bin

# Debian/Ubuntu:
# Add the LibreWolf APT repo (from their documentation)

Windows: MSI installer available on librewolf.net

macOS: DMG installer or via Homebrew:

brew install --cask librewolf

What You Gain

Zero telemetry: Firefox sends usage statistics to Mozilla by default (opt-out). LibreWolf removes this entirely from the codebase, not just the setting.

Fingerprinting resistance by default: privacy.resistFingerprinting = true is set, which standardizes dozens of browser properties to make your fingerprint less unique.

Tracking protection: Stricter defaults than Firefox's standard mode.

No commercial integrations: Pocket, Firefox Suggest, sponsored tiles are all removed.

What You Lose

DRM content: Widevine is not bundled. You cannot watch Netflix, Disney+, Amazon Prime, or Spotify without manually installing Widevine.

To add Widevine to LibreWolf:

1. Open LibreWolf
2. Go to about:config
3. Set media.gmp-widevinecdm.enabled = true
4. Visit a site requiring DRM
5. LibreWolf will prompt to install Widevine

Or manually: copy Widevine from a Firefox installation into LibreWolf's plugins directory.

Firefox Sync: No Firefox Account integration. Sessions, bookmarks, and passwords don't sync via Firefox Sync. Use Bitwarden for password sync and manual bookmarks export/import, or a self-hosted sync server.

Compatibility issues: privacy.resistFingerprinting = true causes some site breakage (it spoofs window size, screen resolution, language preferences). Some sites detect inconsistencies and ask you to verify you're human. Generally minor but noticeable on some sites.

Updates lag: LibreWolf ships updates after Firefox does — usually within days, but there's a lag. Security patches may take longer to reach you than Firefox stable.

LibreWolf vs Firefox + Hardening

Choose LibreWolf if:

• You want hardened defaults without configuring anything
• You don't use Firefox Sync
• You don't need DRM-protected streaming regularly
• You prefer zero telemetry at the binary level (not just settings)

Choose Firefox if:

• You use Firefox Sync across devices
• You regularly watch Netflix/Disney+/Spotify
• You want the latest features immediately
• You want Mozilla's full commercial ecosystem support

The key difference: LibreWolf's hardening is in the build, not the settings. You can set the same settings in Firefox, but they can be reverted by updates or accidentally changed. LibreWolf's privacy-hostile features are removed, not configured away.

LibreWolf Settings Worth Reviewing

Even in LibreWolf, some settings deserve review:

about:config → privacy.resistFingerprinting.autoDeclineNoUserInputCanvasPrompts
Whether canvas fingerprinting is blocked silently or with a prompt.

about:config → media.eme.enabled → disable if you never watch DRM content.

about:config → security.ssl3.rsa_des_ede3_sha → false — disable 3DES cipher (already false in LibreWolf builds).

The LibreWolf documentation on librewolf.net includes a settings reference.

LibreWolf on NixOS

environment.systemPackages = [ pkgs.librewolf ];

LibreWolf is in nixpkgs. Home-manager's programs.firefox options don't apply to LibreWolf (different package), but you can configure it via user.js.

Practical Assessment

LibreWolf is excellent for users who want Firefox's core browser with privacy-first defaults and no friction. The limitations (no Sync, DRM requires setup) are real but manageable for its target audience.

If you already manually harden Firefox, LibreWolf may not add much — you've already done the work. If you want hardened defaults on a new machine without configuration, LibreWolf is the faster path.

The project is well-maintained, releases track Firefox versions closely, and the source is auditable at its GitLab repository.