What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Firefox already enables Standard Enhanced Tracking Protection by default, so most desktop users do not need to hunt for a hidden switch to get baseline tracker blocking. The most useful next steps are to understand what Standard covers, decide whether Strict suits your sites, and review HTTPS-Only Mode and secure DNS. These settings reduce particular kinds of exposure; they do not make browsing anonymous or stop every form of tracking.
1. Check Enhanced Tracking Protection first
In desktop Firefox, open Settings → Privacy & Security and find Enhanced Tracking Protection. Mozilla’s desktop guide describes three modes:
| Mode | What it blocks | When to choose it |
|---|---|---|
| Standard | Blocks social media trackers, cross-site tracking cookies, fingerprinters, and cryptominers. Tracking content is blocked only in Private Windows. Total Cookie Protection is also enabled. | The default and a sensible starting point for most people. |
| Strict | Blocks all cross-site cookies and tracking content in all windows, in addition to the listed tracker categories. | For broader blocking if you are prepared to troubleshoot site features that may stop working. |
| Custom | Lets you select protections individually; the exact combination depends on the options selected. | When you want to tune protections rather than use a preset. |
To change the mode, select it on the Privacy & Security page. Strict is not automatically the best choice for everyone: stronger restrictions can interfere with logins, embedded content, or other site features. If a particular site breaks, use the shield icon beside the address bar to turn protection off for that site, test the feature, and restore protection afterward if practical. Prefer this site-specific exception to weakening protections across Firefox.
2. Keep Total Cookie Protection on
Total Cookie Protection separates cookies by the site that created them, limiting their use for tracking you across unrelated sites. Mozilla says it is enabled by default for Firefox users worldwide; it works alongside Enhanced Tracking Protection rather than replacing it. See Mozilla’s Total Cookie Protection and website breakage FAQ.
#1 Best Overall
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
If a site feature fails, first try the site-specific shield-panel exception described above. Disabling Total Cookie Protection more broadly is a larger privacy trade-off because it can make cross-site tracking easier. Blocking third-party cookies alone also does not prevent every kind of tracking; sites and trackers can use other techniques.
3. Enable HTTPS-Only Mode
HTTPS encrypts the connection between Firefox and a website when that site supports it. HTTPS-Only Mode makes Firefox use HTTPS where available, rather than silently connecting over unencrypted HTTP. In desktop Firefox, look under Settings → Privacy & Security → HTTPS-Only Mode and choose whether to apply it in all windows or only Private Windows. Mozilla explains the feature in its privacy and security overview.
Rank #2
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
This protects data in transit on the connection; it does not stop the site you visit from collecting information you provide or observe through that connection. HTTPS-Only Mode, cookie partitioning, and tracker blocking address different privacy risks.
Recommended Free Tools
4. Review DNS over HTTPS protection
DNS over HTTPS (DoH) encrypts DNS lookups between Firefox and the resolver it uses. It can make those lookups harder for others on the network to read, but it does not hide all browsing activity. The resolver matters: choose one you understand and trust.
Rank #3
- SECURITY KEY FOR ENTERPRISE ACCESS: Supports FIDO2 passkeys and U2F for secure authentication across enterprise IT systems.
- PHISHING-RESISTANT AUTHENTICATION: Enables passwordless login with secure on-device credential storage and PIN-based user verification.
- COMPATIBLE WITH ENTERPRISE SYSTEMS: Works with FIDO2, WebAuthn, and U2F across enterprise, cloud, and modern IT environments.
- DRIVERLESS FIDO2 AUTHENTICATION: FIDO2 works natively with modern browsers and platforms. No drivers required.
- USB AND NFC CONNECTIVITY: Supports authentication via USB-C and NFC. No batteries required.
Open Settings → Privacy & Security, scroll to DNS over HTTPS, and review the protection level and provider. Mozilla’s DoH protection-level guide distinguishes the trade-offs:
- Default: Firefox can use secure DNS when available and may fall back or disable DoH when network conditions or policies indicate that it should not be used. This behavior can matter on networks with filtering, parental controls, VPNs, or enterprise management.
- Increased or Custom: These options use the selected provider more consistently, with a backup option if there are problems. Review the provider and settings before choosing them.
- Max: Firefox warns if the resolver cannot be reached or returns no address, rather than quietly switching to ordinary DNS. That can mean a site will not load until the problem is resolved.
If you use a managed, filtered, or otherwise specialized network, Default may be the more compatible choice. A stricter mode is not necessarily better if it disrupts the network services you rely on.
Rank #4
![FIDO2 Security Key [Folding Design] Thetis Universal Two Factor Authentication USB (Type A) for Multi-Layered Protection (HOTP) in Windows/Linux/Mac OS,Gmail,Facebook,Dropbox,SalesForce,GitHub](https://m.media-amazon.com/images/I/319b82vXgEL._SL160_.jpg)
- Passwordless World - A revolutionary new way to protect your account info. By being FIDO2 certified by the world’s largest ecosystem for standard-based, interoperable authentication, FIDO2 makes everyday log-in experience effortless and passwordless yet more secure than generic password style security. **Note: FIDO2 does NOT support Mac log-in.
- Online Account Protection - FIDO2 key is backward compatible with U2F protocol and works with the newest Chrome browser with operating systems such as: Windows, macOS, or Linux. U2F can be supported and protected on all websites that follow U2F protocols.
- Multi-factored Authentication - Built-in, advanced HOTP (One Time Password) technology that completes the unique multi-factored authentication process. Eliminate worry and help prevent losing your account info to theft, phishing, hacking, or other online scams. Note: Only Enterprise Users using Azure Active Directory can access Windows Hello log-in via Thetis FIDO2 Security Key.
- Compact And Durable - 360° design with rotating aluminum alloy cover that shields the USB connector when not in use. Tough and durable alloy protects FIDO2 key from daily wear-and-tear, accidental drops, and scratches.
- Portable Design - ultra-portable design allows you to take your FIDO key anywhere you need it.
5. Use Multi-Account Containers for separate browsing contexts
Multi-Account Containers keep cookies separated by container. They can help you maintain distinct contexts—for example, work and personal accounts on the same service—without mixing those sites’ container cookies. Mozilla’s Privacy and security Firefox Help topic links to its container guidance.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Containers are optional, not a replacement for Enhanced Tracking Protection. They organize browsing contexts; tracker blocking and cookie partitioning remain separate protections. Use containers when keeping accounts apart is useful to you, rather than treating them as a required privacy switch.
6. Understand what fingerprinting protection does—and does not establish
Firefox lists fingerprinters among the categories blocked by Enhanced Tracking Protection. Fingerprinting refers to attempts to distinguish a browser using characteristics of its configuration or behavior, rather than relying only on cookies. The documented protections establish that Firefox addresses this category; they do not establish that every fingerprinting method is prevented.
Mozilla’s reviewed feature descriptions do not establish one identical setting path for every platform and release. The steps above focus on desktop Firefox; labels and availability can vary with version, platform, or device policy.
Quick Recap
A practical setup for most desktop users
- Leave Enhanced Tracking Protection on Standard unless you have a reason to test stricter blocking.
- Keep Total Cookie Protection enabled; if a site breaks, test a site-specific exception before changing broader settings.
- Enable HTTPS-Only Mode for the windows where you want Firefox to require HTTPS when a site supports it.
- Review DNS over HTTPS and select a protection level that fits your resolver trust and network needs.
- Add Multi-Account Containers if you want separate cookie contexts for different accounts.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
