Privacy-Focused Browsers and Applications

In the context of Iran's "Filternet," selecting the right software is about more than just avoiding advertisements; it is a critical component of safety and access. The Iranian regime employs sophisticated Deep Packet Inspection (DPI), DNS hijacking, and bandwidth throttling. Furthermore, international sanctions often block Iranians from accessing essential global services.

This guide provides a curated list of browsers and applications designed to minimize data collection, bypass censorship, and resist surveillance.

---

I. Desktop Web Browsers (Windows, macOS, Linux)

Your web browser is your primary window to the internet and the most common vector for tracking. For Iranian users, a browser must support robust proxy configurations and anti-fingerprinting measures.

1. Tor Browser (Anonymity & Circumvention)

Status: Essential for high-risk activity and bypassing severe censorship.

Tor Browser routes your traffic through the Tor network, anonymizing your location and identity.

• Iran Context: You must configure Bridges (specifically Snowflake or Obfs4) to bypass the state blockage of the Tor network.
• Best For: Accessing blocked news, whistleblowing, and anonymous communication.
• Warning: Do not install plugins or maximize the window, as this alters your digital fingerprint.

2. Mullvad Browser (Privacy & Anti-Fingerprinting)

Status: Recommended for daily browsing with a VPN.

Developed by the Tor Project in collaboration with Mullvad VPN. It offers the anti-fingerprinting protections of Tor Browser but operates over your standard internet connection (or VPN).

• Why use it: It blends your "fingerprint" with all other Mullvad Browser users, making it difficult for trackers to single you out.
• Requirement: Must be used with a trustworthy VPN (like Mullvad or IVPN) to hide your IP address.

3. Firefox (Customizability)

Status: Recommended (with configuration).

Firefox is the most flexible browser for privacy, but it requires tuning.

• Configuration:
  • Settings: Set "Enhanced Tracking Protection" to Strict.
  • Sanitization: Enable "Delete cookies and site data when Firefox is closed."
  • DNS: Enable DNS over HTTPS (DoH) to bypass basic DNS censorship (use providers like Cloudflare or NextDNS).
  • Advanced: Use Arkenfox user.js for advanced hardening.

4. Brave (Chromium Compatibility)

Status: Good alternative to Google Chrome.

Brave works well out-of-the-box for users who need Chromium compatibility (often required for specific government or banking portals).

• Shields Settings: Set Trackers & Ads Blocking to Aggressive.
• Web3/Crypto: Disable "Brave Rewards" and "Wallet" features to reduce bloat and network noise.
• Snowflake: Brave allows you to run a Tor Snowflake proxy extension to help others bypass censorship.

---

II. Mobile Web Browsers (Android & iOS)

Mobile devices are uniquely vulnerable due to precise location tracking and operating system constraints.

Android Recommendations

iOS Recommendations

Apple forces all browsers to use the WebKit engine, limiting privacy innovations. However, configuration matters.

• Brave (iOS): Enable "Block Fingerprinting" and set "Trackers & Ads Blocking" to Aggressive.
• Safari (Hardened):
  • Disable "Privacy Preserving Ad Measurement."
  • Enable "Prevent Cross-Site Tracking."
  • Use "Lockdown Mode" (Settings → Privacy & Security) if you are a high-risk target (activist/journalist).

---

III. Obtaining Applications (Sanctions & Security)

Google Play Store is often restricted in Iran, or specific apps are "not available in your region" due to US sanctions. Furthermore, using a Google account links your app history to your real identity.

1. Aurora Store (Google Play Alternative)

Platform: Android Why: Allows you to download apps from the Google Play Store without a Google Account and bypasses region blocks.

• Features: Spoofs device information and location to access sanctioned apps.
• Privacy: Anonymous login available (though recently rate-limited; using a "burner" Google account is a backup option).

2. F-Droid (Open Source Repository)

Platform: Android Why: Repository for Free and Open Source Software (FOSS). Apps here generally have no tracking or ads.

• Recommendation: Use the F-Droid Basic client or Droid-ify for a modern experience and faster updates.
• IzzyOnDroid: Add the IzzyOnDroid repository to access newer apps that haven't made it to the main F-Droid repo yet.

3. Obtainium (Direct Updates)

Platform: Android Why: Gets apps directly from the developer (GitHub, GitLab, website), bypassing app stores entirely.

• Use Case: Ideal for updating tools like Signal, Cromite, or VPN apps directly from their source code repositories, ensuring you get security patches immediately without waiting for store approval.

---

IV. Essential Privacy Applications

1. Communication

• Signal: The gold standard for encrypted communication.
  • Iran Context: Signal is frequently blocked. Use the built-in "Censorship Circumvention" (Proxy) feature in Signal settings.
  • Security: Enable "Registration Lock" to prevent SIM swapping attacks. Set "Disappearing Messages" by default.

2. App Isolation (Android)

• Shelter:
  • Function: Uses Android's "Work Profile" to isolate apps.
  • Iran Use Case: If you are forced to install invasive domestic apps (e.g., Iranian banking apps, Snapp, or government service apps) that demand excessive permissions, install them inside Shelter. You can "freeze" them when not in use, preventing them from running in the background or accessing your main profile's data (contacts, photos).

3. Privacy Frontends (YouTube & Media)

Accessing western media often requires heavy bandwidth and exposes you to Google tracking. Frontends provide a lightweight, private interface.

• NewPipe / Tubular (Android): Watch YouTube without a Google account, without ads, and with background play. useful for saving bandwidth.
• LibreTube (Android): Uses Piped instances to proxy YouTube content.
• Invidious / Piped (Web): Web-based YouTube frontends.

4. Metadata Removal

• Secure Camera (GrapheneOS): A camera app that strips EXIF metadata (location, device model) from photos by default. Essential before sharing photos of protests or sensitive locations on social media.
• ObscuraCam: Pixelate faces and remove metadata from photos.

5. Document Security

• Secure PDF Viewer: A sandboxed PDF viewer (from GrapheneOS) that prevents malicious code embedded in PDF files from exploiting your device.

---

V. Health & Wellness (Local Data)

For users tracking sensitive health data (e.g., menstrual cycles), avoiding cloud-based apps is critical, as data could be subpoenaed or leaked.

• Drip: Open-source cycle tracking. All data is stored locally on your device.
• Euki: Sexual health and cycle tracking with a focus on privacy and local storage.

---

Summary of Recommendations

Final Note for Iranian Users: Always verify the digital signature (SHA-256) of APKs when downloading from third-party sources to ensure the file has not been tampered with by intermediaries.