Mozilla rounds up Firefox's free security tools

Mozilla has used Cybersecurity Awareness Month to gather up the protections Firefox ships at no cost. The browser's free password manager generates and stores a unique password for each site, and Relay hands out disposable email masks, so a real address does not end up on a mailing list after an online purchase or a new sign-up.

The round-up, published on 6 October, also points at the parts that run whether or not anyone switches anything on: enhanced tracking protection, which blocks known trackers and hidden scripts, and browser fingerprinting protection, which limits the traits a site can read to build a profile of a visitor.

The free tier is the whole argument

Mozilla's framing is aimed at the gap between knowing the advice and following it. Reused passwords remain one of the cheapest ways into a set of accounts, because a single breached site can hand attackers a login that still works somewhere else. The remedy Mozilla is pushing is the one already sitting in the browser rather than a separate subscription: the password manager and Relay are the two opt-in pieces, while the tracking and fingerprinting defences are on by default.

Our opinion

Cybersecurity Awareness Month produces a lot of posts that amount to a poster, and Mozilla's is more useful than most because the tools it names cost nothing and install with the browser. Relay is the underrated one: the sign-up spam problem is a data-minimisation problem, and handing a different address to every shop is a cleaner fix than unsubscribing later. The honest limit is that defaults only help people who leave them alone, and the users most likely to reuse a password are the least likely to read a blog post explaining why they should not. Mozilla's own habits here are better than its rhetoric: shipping the basics on by default is the part that actually reaches the people the advice is written for.