Most Secure and Private Browser for Mobile | Vanadium

Good privacy starts with great security. Vanadium, a Chromium-based browser, offers the best sandbox implementation among the competition. The sandbox offers much more than just serving as a deterrent against compromising the rest of the OS; it is far more difficult to escape from it. By placing each site into a separate sandbox, site isolation imposes security boundaries around each sandboxed site. Given that the browser must apply these regulations to all IPC APIs, a significant browser redesign was necessary.
Vanadium serves as both the OS's built-in user-facing browser and the supplier of the WebView that other apps utilize to display web material. Nearly all other apps that embed web content or use web technology for additional purposes use the WebView browser engine. Numerous smaller web browsers that did not clone Chromium as a whole also use it. These WebView-based apps profit from a portion of the Vanadium hardening.
//SUPPORT THE CHANNEL:
☕ There's no obligation, but if you want to support the channel and what I create, click the link below to buy me a coffee, so I can stay awake while researching topics for future videos.
support.sideofburritos.com
//LINKS REFERENCED IN VIDEO:
sideofburritos.com/blog/secur...
//NEWSLETTER SIGNUP:
sideofburritos.com/newsletter/
//MOBILE PRIVACY GUIDE
sideofburritos.com/docs/setup...
//CHAPTERS:
Intro - 00:00
What is WebView - 00:25
Features - 00:57
JavaScript JIT - 01:15
AdBlocker - 02:02
Browser Customizations - 02:50
Add custom search engine - 03:45
//DISCLAIMER:
Links included in this description might be affiliate links. If you purchase a product or service with the links that I provide I may receive a small commission. There is no additional charge to you! Thank you for supporting my channel, so I can continue to provide you with free content each week!
This video is for educational purposes only.
#privacy #browser #security #MostSecureWebBrowsers #SecureWebBrowsers #TopSecureBrowsers #bestandsafestwebbrowsers

[@fug69]

This is the best channel I found in 2022 :) (Came here from rss feed, More youtubers should do the rss+blogposts, It is better than turning notifications on)

[@sideofburritos]

I'm glad to hear that! If anyone is looking for the RSS feed for blog posts, here it is - sideofburritos.com/blog/atom.xml You can also get an RSS feed of any KZbin channel like this - kzbin.infovideos.xml?channel_id=CHANNEL_ID_GOES_HERE For this channel, it would be - kzbin.infovideos.xml?channel_id=UCij1VEjDb88RCbqsvZ1gqaw

[@luckysxm]

No bullshit video, straight to the point. Just like I like them. Thanks.

[@sideofburritos]

⛔🐂💩

[@TheMichaelGrace]

Excellent note on the ad blocking dns. That was my biggest issue moving away from brave. I've been using Graphene OS for a full week now. You were a huge influence in me feeling confident to switch from iOS to Graphene OS and having it be a good experience. I love it so far.

[@sideofburritos]

The ad blocking DNS definitely improves the experience. I'm glad to hear you're loving it so far! It can take a little adjustment at first, but once you're used to it, you don't want to go back. Glad I was able to motivate you to make the switch!

[@CodeOnBlocks]

What's wrong with Brave?

[@TheBoomshine]

Love the concise videos on my favorite OS!

[@DavidJacksonphunman1]

Really appreciate the SOLID content, Happy New Year from Boston!

[@sideofburritos]

Happy to provide it! Happy New Year!

[@jsnjyn]

Good stuff. Keep it coming!👍

[@sideofburritos]

Thanks! Will do!

[@TangDynasty1983]

Josh, I really appreciate you for speeding time of sharing these knowledge with us! I would like to get your opinion on Ubuntu Touch OS on mobile phones, from the security and daily use practicability perspective. Thanks again.

[@iTheGeo]

Very good idea for making a dedicated video, thanks!

[@sideofburritos]

Thanks!

[@kimhbryan]

1:53 I'm really looking forward to these demonstrations!

[@jgn2112]

You are the Bob Ross of privacy and security. I never miss your videos! I've been running GrapheneOS for about 8 months now and I love it, but your videos are an invaluable addition to supplement my experience. I've enjoyed Vanadium but really appreciate your tips on here! As an aside, I switched to startpage but prefer Brave search. It doesn't look like Brave can be made a default search engine. I could be wrong. Start page is still better than DDG though. Thanks again!

[@TheMichaelGrace]

Happy security trees!

[@snook.1]

I fully agree! This man easily beats the docs and the matrix server.

[@ArtOfHealth]

Have you or can you get Bromite? They have been working on it.

[@sideofburritos]

I don't feel worthy of that comparison 🤣🌳⛰️. I'm glad to hear you're finding them that beneficial! I did some checking, and you're correct. Visiting search.brave.com/default shows "Instructions are not available for chrome mobile".

[@emanonmuc7762]

Straight & great. Thanks a lot.

[@sideofburritos]

Thanks! I try to keep them that way.

[@joannaconnelly4701]

I asked some questions in the GraphneOS Matrix Channel. If I had a second user on my phone, and if this space had Google Play Services installed, would there would be back-and-forth communication for apps with the first space and vice versa. At first, I got multiple responses saying that yes, in fact, this happened. I then kept asking and got this, whatever it means: ( If app A in the first profile has a server that can be accessed via localhost, then app B in the second profile can access that server, and vice versa (if they both have network permission). Does this mean that apps in the second user account not work profile can read the apps and other settings on the first user account that does not have gplay installed? I am confused. Can you help clear this up please.

[@overbet56]

Burrito, I would love to see videos demoing how you would install specific apps like Twitter, KZbin, google maps, on graphine OS both for a standard threat model and an extreme threat model.

[@sideofburritos]

I have a couple of videos planned in the near future on some different ways I'll be setting up my Pixel 7. I'll be covering some of that in there and how I make use of profiles and such. Stay tuned!

[@DevaPoints]

Does GrapheneOS vanadium or lineageOS only works with certain phone models, or any models including Samsung S23 ultra?

[@torinn3618]

is there an option to move the search bar and tab thing to the bottom? and have it always active?

[@MNRKR74]

Thanks again for the video. Out of interest, how did you put Mastodon onto your Pixel? Was it the Github release?

[@somebodyirrelevant141]

He most likely grabbed the APK file, or downloaded it from the Aurora Store.

[@sideofburritos]

The second option @somebodyirrelevant9515 said, Aurora Store.

[@torinn3618]

is there any way I can delete all browsing history and site data upon closing the browser?

[@infotruther]

Need a series of videos comparing all of the smartphones that do not use googleplay services ya know like graphene os

[@sideofburritos]

GrapheneOS is the only OS I recommend at this time.

[@valiantzest]

Side note but do you host your email with a custom domain? If so, would you consider making a video on the topic as there is not alot of resources on how to do so with privacy in mind.

[@mrcvry]

The mail provider Mailbox for example has good instructions how to set up your own domain with dmarc, spif and dkim.

[@sideofburritos]

No, I use ProtonMail with the custom domain option. I used to host my own email server, but it can be a pain to get a clean IP (and keep it clean) that isn't marked as SPAMmy. I may do this topic in the future, but I don't see a ton of benefit for it at this time. Email is inherently insecure, so I'm not overly concerned with hosting it myself. ProtonMail has worked well for me, and they say it's all encrypted server side + other benefits. If I have something I need to transmit securely, I use other means instead of email. Email + PGP does help, but it's still very dated technology.

[@mrcvry]

Dated but proven. 😉 The problem is that not everybody is using PGP. Using something like Threema or Signal is easier.

[@marko69j93]

ey bro i have question for you, i seen your first google play services video, Im on huawei nova 9 trying to download google play services, can you give me apps so i try downloading on my huawei nova 9

[@Provocateur3]

What's the procedure for installing Vanadium in stock android?

[@developeroptions]

Adblocking is not working anymore,is there any alternative sir?

[@tharun8393]

Can I install vanadium browser on my Samsung galaxy A22 5g android 13 ?

[@basedkiarash8834]

Does native autofill work? Id love to switch but i cant give up bitwarden. Havent been able to get it working

[@tokisaki.kurumi]

If I remember correctly, Chromium use autofill provided by Google Play Services. And I don't think Vanadium changes that.

[@sideofburritos]

It looks like once these changes are merged into a release, autofill will work with Vanadium - github.com/bitwarden/mobile/pull/2199

[@torinn3618]

I can't add ublock origin without logging in to a chrome account I don't want to make one or do that

[@theovanveen975]

Can I dawload Vanadium on my andriod phone?

[@starboy7151]

does it have background play

[@vadymosadchyi]

Does Vanadium browser support extensions? Like Google Chrome on PC. I am planning to buy a new Pixel phone and would like to know that in advance. Thank you!

[@abukitty]

Extensions increase the attack surface. No chromium browsers for Android support extensions except the pathetic kiwi browser

[@juliotechmx]

What do You think about Vanadium vs. Brave Mobile version?

[@sideofburritos]

I use vanadium. If vanadium was available on the desktop, I would use that.

[@pritom_roy]

Where can i download vanadium from????

[@anandjha3568]

Is bromite and vanadium equally good..... which one is better

[@sideofburritos]

Vanadium. It has regular updates and other security features - grapheneos.org/features#vanadium

[@benf101]

Slightly on topic... 1password doesn't recognize any login fields in Vanadium. It works in Vivaldi, but not Vanadium. Conversely, Bitwarden works fine with Vanadium. I noticed you have to grant an extra permission to Bitwarden that 1password doesn't ask for. Maybe this indicates that Vanadium hides itself better from outside apps? I don't know. I want the convenience but maybe the added security is more important.

[@Wer_baut_dann_die_Strassen]

It doesn’t work with keepaas too. Out of my understanding it’s because it’s chromium based and the google team needs to approve an interface. But I am not sure. It’s annoying that Bitwarden and keepaas are not working with vanadium.

[@benf101]

@@Wer_baut_dann_die_Strassen Bitwarden DOES work with vanadium. 1Password does not.

[@Wer_baut_dann_die_Strassen]

@@benf101 okay. Can you tell me where I can grant the permission in GOS? I don’t know where.

[@benf101]

@@Wer_baut_dann_die_Strassen I think it's the "display over other apps" section. If you search for that or go to Settings > Apps > Special app access > Display over other apps, you can select Bitwarden there.

[@Wer_baut_dann_die_Strassen]

@@benf101 thanks for the prompt answer. It’s was already enabled and still doesn’t work☹️

[@MrTreb88]

Can you not install vanadium without grapheneOS? In android?

[@sideofburritos]

At this time, Vanadium is only supported on GrapheneOS - discuss.grapheneos.org/d/105-can-we-have-vanadium-in-playstore/6

[@sparrowcide]

No matter how good vanadium is, I still use Firefox as my default browser since Google has a huge dominance on android browser.

[@sideofburritos]

I can understand the sentiment, but I can't in good faith recommend a Mozilla-based browser when Chromium-based browsers are more secure. Unless it serves a specific purpose, like TOR browser.

[@ThunderFarter]

Why isn't it brave?

[@sideofburritos]

Vanadium has additional features that make it superior - grapheneos.org/usage#web-browsing

[@ArtOfHealth]

AdAway, Blokk?

[@sideofburritos]

I just checked into AdAway. The two option they provide are root, which is not something available on GrapheneOS and VPN ad based blocking. While the second would work, I would prefer the DNS ad blocking method vs. having to use an always on VPN.

[@Sanaduzzabaniah]

i prefer mull fenix browser no telemetry arkenfox .

[@Emre-24]

Thanks! Only two things are me annonying on GOS. NO Adblocking in Vanadium and the gesture bare which is always visible. On Problem now fixed with a DNS service

[@1Three8Fiver]

The reason that GrapheneOS doesn't include an ad blocker in the browser from what I gather is an attempt at fingerprint reduction. Whenever you start tacking on add-ons you increase your fingerprintable surface and begin to stand out. By using Vanadium in it's vanilla setup you blend in with all other GrapheneOS users on Vanadium and to a further degree all other Chromium based browsers. Utilising the other tools as you have done is likely the better approach.

[@sideofburritos]

I think it's more so related to other tasks related to the OS being higher priority. There's an issue open on GitHub for a content filtering option - github.com/GrapheneOS/Vanadium/issues/10. It wouldn't be done through an extension/add-on which make you easier to fingerprint when you start piling them on. It would be done in a way similar to how Brave browser does it, using filter lists instead of the API that extensions rely on. This is just me inferring from what I've read, I don't know 100% either way.

[@sideofburritos]

@user-iz2ut1vx7z I never realized the gestures bar until you mentioned it today 😂, I think my brain was ignoring it.