Here's What the New Safari Will (and Won't) Do to Protect Your Privacy

At WWDC 2018 yesterday (June 4), Apple gave thousands of developers a sneak peek at upcoming Safari features. The next version of Apple's browser on macOS 10.14 Mojave and iOS 12 will aim to push back against the ad-tracking and browser-fingerprinting techniques that, in the wake of Facebook's Cambridge Analytica scandal, the internet is so afraid of.

Some of the new features in macOS Mojave, displayed onstage at WWDC 2018. Credit: Tom's Guide

(Image credit: Some of the new features in macOS Mojave, displayed onstage at WWDC 2018. Credit: Tom's Guide)

The new features are a big deal -- but perhaps not as big of a deal as Apple says they are.

The most noticeable change is that users will receive popups prompting them to grant (or revoke) permission for websites (such as, ahem, Facebook) to use cookies while they browse.

"You can decide to keep your information private," explained Apple VP Craig Federighi onstage.

MORE: 10 Worst Data Breaches of All Time

Apple also announced that Safari will try to block advertisers from using browser fingerprinting, which lets them track users who delete their cookies. (All these features involved Safari on Mojave and iOS 12, but there's no indication they won't also be available for earlier Apple OS's.)

Fingerprinting involves using the information that browsers provide web servers about individual devices, including time zones and installed extensions, fonts and ad blockers. Get enough information, and you can identify individual browsers and track them even without tracking cookies.

To combat this, the new Safari will tell web servers only the browser version, operating system, default fonts and generic configurations, making your Mac indistinguishable from many others.

Finally, the new Safari will offer to generate and auto-fill strong passwords and discourage you from using the same password in multiple places. (If you want to save your passwords in more than one browser, try a stand-alone password manager.)

There's no question that these modifications are a good start and may justifiably ease some people's post-Cambridge Analytica fears.

But contrary to what Apple would like you to believe, you can hardly rest easy at this point. For one, as Facebook Chief Security Officer Alex Stamos pointed out on Twitter, the new Safari will still be vulnerable to some other major tracking techniques.

These include tracking pixels, which are tiny invisible images that advertisers can hide in the background of a web page or email message to alert them when you load the content. Safari also won't block sites from using third-party scripts which can also track your browsing.

If you're worried about your browsing data, Firefox and Chrome may still be your best bets.

Mozilla has begun work on integrating a technology called DNS over HTTPS (DoH) into its browser, a technology which encrypts Domain Name Service (DNS) queries to keep ISPs from receiving them (and crooks from tampering with them). Mozilla has also partnered with Cloudflare, an internet infrastructure company known for high standards of security and a publicly available DNS service.

Google is taking a similar approach with Chrome and Android P as well. Its tool of choice, DNS over TLS, uses a protocol called Transport Layer Security (TLS) to establish a secure channel between clients and DNS servers to prevent snoops from obtaining (and tampering with) them. Chrome also features a native ad blocker, but it stops only ads that Google finds too annoying.

Both browsers also support extensions to increase your privacy and security. NoScript on Firefox makes sure no JavaScript runs without your permission, and ScriptSafe offers similar protection in Chrome. Ghostery lets you detect and block trackers on both Firefox and Chrome.

Monica Chin is a writer at The Verge, covering computers. Previously, she was a staff writer for Tom's Guide, where she wrote about everything from artificial intelligence to social media and the internet of things to. She had a particular focus on smart home, reviewing multiple devices. In her downtime, you can usually find her at poetry slams, attempting to exercise, or yelling at people on Twitter.

Latest in Browsers
Google Chrome on Android
How to stop your personal data from appearing in Google searches
Opera Air
I just tested the world’s first mindful browser — it’s calmly convinced me to ditch Google Chrome
A photo of the Google Chrome logo on a white background, displayed on the screen of a large MacBook Pro which is situated on a table with green foliage behind.
Google Chrome just got three new modes — and it's a game changer for performance
Google Calendar app on iPhone
Google Calendar just got the dark mode we’ve been waiting for — here’s how to activate it
Image of an Apple MacBook with a Google Chrome logo on the display
This new Google Chrome upgrade made me say 'whoa' out loud — and it's a game changer
Two Opera Browser Days attendees standing in front of a screen displaying the Opera logo
How Opera is challenging Google by putting privacy first
Latest in News
Prime Gaming's selection of free games for March 2025
Amazon Prime is giving away these 20 games in March — get Fallout, Saints Row 3, and more free games now
Hugh Grant as Mr. Reed in "Heretic"
Max top 10 movies — here’s the 3 worth watching right now
Nintendo Switch 2
Nintendo Switch 2 price rumors and predictions — everything we've heard so far
Samsung Galaxy S25 Edge back
Samsung Galaxy S25 Edge latest leak hints at good news for pricing
Apple Intelligence logo on iPhone
Apple confirms Siri 2.0 is delayed — 'it’s going to take us longer than we thought'
NYTimes Connections
NYT Connections today hints and answers — Saturday, March 8 (#636)