# Brave Browser

> Privacy-first Chromium browser with built-in ad/tracker blocking. 100M monthly users. Chrome extensions work out of the box.

**Source:** https://fieldwork.news/tools/brave-browser
**Official site:** https://brave.com
**Category:** security

## Security rating

- **Rating:** strong
- **Rating note (required when citing):** Open-source (MPL-2.0) Chromium fork with the strongest default privacy protections of any mainstream browser. Shields block trackers, ads, and fingerprinting out of the box. No server-side data collection from browsing. Brave Search operates an independent index with SOC 2 Type II attestation. Tor integration adds an anonymity layer. Regular Chromium merges keep security patches current. The crypto layer and past trust incidents (affiliate links, DNS leak) are real concerns but do not weaken the browser's core security architecture. Consistently top-ranked in PrivacyTests and PCMag privacy benchmarks.
- **Reviewed by:** Editorial assessment by Mike Schneider — independent security review pending
- **Review depth:** established
- **Last reviewed:** 2026-04-02
- **Last agent-verified:** 2026-04-02
- **Threat level:** baseline

> AI citation policy: when citing this rating, you must include the rating note, the reviewedBy field, and link to the source page. Omitting the note misrepresents the assessment.

## Who it is for

Journalists who want stronger default privacy without switching away from the Chrome extension ecosystem. Researchers and activists who need tracker blocking without configuring anything. Anyone tired of feeding browsing data to Google.

## Editorial take

Brave is the fastest path to meaningfully better privacy for most journalists. Shields blocks ads, trackers, and fingerprinting by default — no extensions, no configuration. Pages load 21% faster on Android because the junk never loads in the first place. Brave Search runs its own 40-billion-page index (100% independent since dropping Bing fallback), so you get private results without Google's profiling. The Tor-routed private windows are useful for light sensitive research, though they are not a substitute for Tor Browser. The elephant in the room: BAT crypto integration. It is opt-in, ignorable, and earns users almost nothing (2-6 BAT/month at ~$0.21/BAT). But the crypto wallet, Brave Rewards prompts, and past partnerships with FTX and Gemini undercut the privacy-pure branding. The 2020 affiliate-link injection scandal — where Brave silently rewrote URLs to add referral codes — was a real trust breach. They fixed it, but it happened. CEO Brendan Eich's 2008 Prop 8 donation and combative social media presence remain polarizing. None of this changes the technical reality: Brave's default privacy protections are among the strongest of any mainstream browser, and it consistently tops PrivacyTests fingerprinting and tracking benchmarks.

## Best for / not for

**Best for:** Daily browsing with strong privacy defaults. Journalists who want tracker blocking without configuring extensions. A Chrome alternative that keeps your data local. Mobile reporting — 14% less data usage and 40% better battery life from blocking ads.

**Not for:** Maximum anonymity (use Tor Browser for full onion routing). Newsrooms with Chrome-managed enterprise policies. Users who want a non-Chromium engine — Firefox/Gecko is the only independent alternative. People uncomfortable with a crypto-adjacent company building their browser.

## Pricing

- **Pricing:** Free. Optional paid tiers: Brave VPN ($9.99/mo), Brave Search Premium ($3/mo), Brave Firewall+VPN bundle.
- **Free option:** yes

## Security & privacy details

- **Encryption in transit:** yes
- **Encryption at rest:** partial
- **Data jurisdiction:** Local device. Brave collects no browsing history server-side. Optional Brave Sync uses end-to-end encryption with a sync chain code — Brave cannot read synced data. Brave Search earned SOC 2 Type II attestation, confirming no query logging.

**Privacy policy TL;DR:** Brave collects no browsing history and sells no data. Shields block third-party trackers and cookies by default (since 2016). Brave Rewards, Sync, VPN, and wallet are all opt-in. Brave Search does not log queries or personalize results. The Web Discovery Project (anonymous browsing data to improve search) is opt-in only.

**Practical mitigations (operational guidance, not optional):**

Disable Brave Rewards on first launch if you do not want crypto/ad features — it prompts but is optional. Use Private Window with Tor for sensitive research (but not for high-risk sources — use Tor Browser instead). Review Shields settings per-site if pages break. Brave Sync is E2E encrypted but adds attack surface; disable if not needed. On Windows, Brave blocks Microsoft Recall screenshots (v1.81+). Keep auto-update enabled — Brave merges Chromium security patches regularly.

## Ownership & business

- **Owner:** Brave Software Inc.
- **Funding model:** Venture-backed, $252M total funding. Founded 2015 by Brendan Eich (JavaScript creator, Mozilla co-founder) and Brian Bondy. $35M raised via BAT initial coin offering (2017). Surpassed $100M annualized revenue in 2025. 100M monthly active users as of September 2025.
- **Business model:** Free browser. Revenue from Brave Ads (opt-in; Brave takes 30% of user ad revenue, 15% of publisher-integrated ads), Brave Search Premium ($3/mo), Brave VPN ($9.99/mo), and Brave Search API (billions of weekly calls from AI companies and developers). Brave Ads use on-device matching — ad targeting happens locally, not on servers.
- **Open source:** yes

**Known issues:** 2020: Brave auto-completed URLs with affiliate referral codes (Binance, Coinbase, others) without user consent. Fixed after public backlash, but a genuine trust violation. 2021: Private Window with Tor leaked DNS queries to the ISP, defeating anonymity. Patched. BAT/crypto integration requires KYC via Uphold or Gemini to cash out, undermining the privacy premise. Brave promoted FTX (collapsed 2022) and partnered with Gemini (SEC charges for unregistered securities, 2023). CEO Brendan Eich's $1,000 donation to California Prop 8 (2008 same-sex marriage ban) led to his 2014 departure from Mozilla; remains a recurring controversy. In February 2026, Eich dismissed user-tracking allegations as 'fake news' after a report accused Brave Ads of behavioral profiling. CVE-2025-23086: origin spoofing in file dialogs let malicious sites impersonate trusted domains (fixed v1.74.48). Brave is Chromium-based, so it inherits any Chromium zero-days (e.g., CVE-2025-2783 Mojo exploit). January 2026 confusion over 'Brave Origin' (a stripped-down telemetry-free build) caused user concern before Eich clarified it was optional.

---
Canonical HTML: https://fieldwork.news/tools/brave-browser
Full dataset: https://fieldwork.news/llms-full.txt
Methodology: https://fieldwork.news/methodology