Brave Browser

Privacy-first Chromium browser with built-in ad/tracker blocking. 100M monthly users. Chrome extensions work out of the box.

Personal security

Open source

Strong

https://brave.com · Reviewed 2026-04-02 · Editorial assessment by Mike Schneider — based on public security research and audits

What should journalists know about Brave Browser?

Brave is the fastest path to meaningfully better privacy for most journalists. Shields blocks ads, trackers, and fingerprinting by default — no extensions, no configuration. Pages load 21% faster on Android because the junk never loads in the first place. Brave Search runs its own 40-billion-page index (100% independent since dropping Bing fallback), so you get private results without Google's profiling. The Tor-routed private windows are useful for light sensitive research, though they are not a substitute for Tor Browser. The elephant in the room: BAT crypto integration. It is opt-in, ignorable, and earns users almost nothing (2-6 BAT/month at ~$0.21/BAT). But the crypto wallet, Brave Rewards prompts, and past partnerships with FTX and Gemini undercut the privacy-pure branding. The 2020 affiliate-link injection scandal — where Brave silently rewrote URLs to add referral codes — was a real trust breach. They fixed it, but it happened. CEO Brendan Eich's 2008 Prop 8 donation and combative social media presence remain polarizing. None of this changes the technical reality: Brave's default privacy protections are among the strongest of any mainstream browser, and it consistently tops PrivacyTests fingerprinting and tracking benchmarks.

Best for

Daily browsing with strong privacy defaults. Journalists who want tracker blocking without configuring extensions. A Chrome alternative that keeps your data local. Mobile reporting — 14% less data usage and 40% better battery life from blocking ads.

Not for

Maximum anonymity (use Tor Browser for full onion routing). Newsrooms with Chrome-managed enterprise policies. Users who want a non-Chromium engine — Firefox/Gecko is the only independent alternative. People uncomfortable with a crypto-adjacent company building their browser.

Security & Privacy

Encryption in transit Yes

Data is scrambled while being sent to their servers

Encryption at rest Partial

Data is scrambled when stored on their servers

Data jurisdiction Local device. Brave collects no browsing history server-side. Optional Brave Sync uses end-to-end encryption with a sync chain code — Brave cannot read synced data. Brave Search earned SOC 2 Type II attestation, confirming no query logging.

Where servers are located — affects which governments can request your data

Security rating Strong

Brave collects no browsing history and sells no data. Shields block third-party trackers and cookies by default (since 2016). Brave Rewards, Sync, VPN, and wallet are all opt-in. Brave Search does not log queries or personalize results. The Web Discovery Project (anonymous browsing data to improve search) is opt-in only.

How to protect yourself:

Disable Brave Rewards on first launch if you do not want crypto/ad features — it prompts but is optional. Use Private Window with Tor for sensitive research (but not for high-risk sources — use Tor Browser instead). Review Shields settings per-site if pages break. Brave Sync is E2E encrypted but adds attack surface; disable if not needed. On Windows, Brave blocks Microsoft Recall screenshots (v1.81+). Keep auto-update enabled — Brave merges Chromium security patches regularly.

Open-source (MPL-2.0) Chromium fork with the strongest default privacy protections of any mainstream browser. Shields block trackers, ads, and fingerprinting out of the box. No server-side data collection from browsing. Brave Search operates an independent index with SOC 2 Type II attestation. Tor integration adds an anonymity layer. Regular Chromium merges keep security patches current. The crypto layer and past trust incidents (affiliate links, DNS leak) are real concerns but do not weaken the browser's core security architecture. Consistently top-ranked in PrivacyTests and PCMag privacy benchmarks.

Who Owns This

Owner Brave Software Inc.

Funding Venture-backed, $252M total funding. Founded 2015 by Brendan Eich (JavaScript creator, Mozilla co-founder) and Brian Bondy. $35M raised via BAT initial coin offering (2017). Surpassed $100M annualized revenue in 2025. 100M monthly active users as of September 2025.

Business model Free browser. Revenue from Brave Ads (opt-in; Brave takes 30% of user ad revenue, 15% of publisher-integrated ads), Brave Search Premium ($3/mo), Brave VPN ($9.99/mo), and Brave Search API (billions of weekly calls from AI companies and developers). Brave Ads use on-device matching — ad targeting happens locally, not on servers.

Known issues

2020: Brave auto-completed URLs with affiliate referral codes (Binance, Coinbase, others) without user consent. Fixed after public backlash, but a genuine trust violation. 2021: Private Window with Tor leaked DNS queries to the ISP, defeating anonymity. Patched. BAT/crypto integration requires KYC via Uphold or Gemini to cash out, undermining the privacy premise. Brave promoted FTX (collapsed 2022) and partnered with Gemini (SEC charges for unregistered securities, 2023). CEO Brendan Eich's $1,000 donation to California Prop 8 (2008 same-sex marriage ban) led to his 2014 departure from Mozilla; remains a recurring controversy. In February 2026, Eich dismissed user-tracking allegations as 'fake news' after a report accused Brave Ads of behavioral profiling. CVE-2025-23086: origin spoofing in file dialogs let malicious sites impersonate trusted domains (fixed v1.74.48). Brave is Chromium-based, so it inherits any Chromium zero-days (e.g., CVE-2025-2783 Mojo exploit). January 2026 confusion over 'Brave Origin' (a stripped-down telemetry-free build) caused user concern before Eich clarified it was optional.

Pricing

Free. Optional paid tiers: Brave VPN ($9.99/mo), Brave Search Premium ($3/mo), Brave Firewall+VPN bundle.

This is an editorial assessment based on publicly available information as of 2026-04-02, using our published methodology. Independent security review is pending. Security posture can change at any time. This is not a guarantee of safety.

Something wrong or outdated? Report it.