Ungoogled Chromium Hardening
This guide is to help you configure Ungoogled Chromium to be as hardened as possible for privacy and security.
Chromium is an open source browser project that is developed and maintained by the Chromium project, who is funded primarily by Google. Even though Chromium is open source, this doesn't mean that it's free from Google and their tracking — this is where Ungoogled Chromium comes in. Ungoogled Chromium takes Chromium and removes all Google dependencies and tracking while retaining the extremely strong security model of Chromium.
Only download Ungoogled Chromium from it's official repository or one of it's officially supplied binaries, all of which can be found here.
Making a new profile
First, we'll create a new profile for this hardening. It can be called anything and have any icon, whatever icon or name you choose for the profile has no effect on your privacy, it is solely for aesthetic purposes.
Creating the new profile
Click the default user icon, which should be located between your search bar the the control pane.
Under “Other people” click “Add”
Give this profile any name and icon
Removing the old profile
Click the icon of your new profile in the top right of Ungoogled Chromium.
Click the settings gear (this should be located to the right of 'Other people')
Hover over your original profile, this will likely be called something like 'Default' or 'Person 1'.
Click the three vertical dots.
Click 'Remove this person'.
Close the menu.
Hardening normal settings
Getting to the settings menu
Ensure that you're in the new profile that you just created.
Click the three vertical dots in the top right of Ungoogled Chromium.
You're now in the settings menu.
'Offer to save passwords' ~> Off
'Auto Sign-in' ~> Off
'Save and fill payment methods' ~> Off
'Allow sites to check if you have payment methods saved' ~> Off
Addresses and more
Save and fill addresses ~> Off
Privacy and security
Clear browsing data
There is no way to have Ungoogled Chromium either never store browsing data or delete it on exit without using Incognito Mode, this means that you will need to do this manually. Remember to repeat this process frequently.
Set the 'Time range' field to 'All time'
Tick all of the boxes
Click 'Clear data'
Cookies and other site data
Select 'Block third-party cookies'
'Clear cookies and site data when you quit Chromium' ~> On
'Send a “Do Not Track” request with your browsing traffic' ~> On
'Preload pages for faster browsing and searching' ~> Off
'Location' ~> Blocked
'Camera' ~> Blocked
'Microphone' ~> Blocked
'Notifications' ~> Blocked
'Background sync' ~> Block closed sites from sending and receiving data
'Motion sensors' ~> Block sites from using motion sensors
'Automatic downloads' ~> Do not allow any site to download multiple files automatically
'Unsandboxed plugin access' ~> Do not allow any site to use a plugin to access your computer
'Handlers' ~> Do not allow any site to handle protocols
'MIDI devices' ~> Do not allow any sites to use system exclusive messages to access MIDI devices
'USB devices' ~> Do not allow any sites to access USB devices
'Serial ports' ~> Do not allow any sites to access serial ports
'File editing' ~> Do not allow any sites to edit files or folders on your device
'HID devices' ~> Do not allow any sites to access HID devices
'Clipboard' ~> Blocked
'Payment Handlers' ~> Do not allow any site to install payment handlers
'Augmented reality' ~> Do not allow sites to create a 3D map of your surroundings or track camera position
'Virtual reality' ~> Do not allow sites to use your virtual reality devices and data
'User presence' ~> Block sites from knowing when you're present
'Flash' ~> Block sites from running Flash
'Protected content' ~> Blocked
Click the twirl-down menu in the search engine section, it should say 'No Search'. Change this to the search engine of your choosing, preferably a privacy-respecting one such as DuckDuckGo.
Select 'Open the New Tab page'
Chrome has a page that is essentially just a list of additional settings that can't be found in the normal settings page, which can be found by typing 'chrome://flags' into your address bar and pressing enter.
Search for the following settings and set them to the value listed after them.
'Handling of extension MIME type requests' ~> Always prompt for install >Necessary for installing extensions later in the guide.
'Smooth Scrolling' ~> Enabled >Removes the jolting, choppy scrolling and replaces it with a much smoother scrolling animation.
'Parallel downloading' ~> Enabled >This allows the multiple connections to be made to download a file in multiple different smaller chunks. This greatly increases download speeds of almost any file that you download.
While adding extensions to your browser can greatly increase your privacy and protections from websites, the more you add also makes your browser fingerprint more unique. This is why you need to evaluate each extension and find the right combination for your use. Below are some of the best plugins to increase your privacy.
Once you've found your preferred combination of extensions, we have to install them. Installing extensions to Ungoogled Chromium isn't quite as easy as just installing them to normal Chromium or Chromium-based browsers like Brave. Since Ungoogled Chromium is stripped of all Google tracking and dependencies, the Chrome Web Store doesn't allow us to install extensions through a convenient button, because of this we have to use one of two workarounds.
The first method is slightly easier albeit more risky, we'll use an external site called CRXExtractor to install extensions. All you have to do it go to the website, click on “Start for free”, paste in the URL of the extension from the Chrome Web Store, Click 'Download', Click 'Get .CRX', then select 'Add extension' when your browser prompts you.
Method two uses Google's official URL to extract the .crx file from the extension on the Chrome Web Store, allowing you to install the extension. First, you have to open the extension on the Chrome Web Store and copy it's ID (the ID is the long string of letters normally found at the end of the url after the last '/'), put this somewhere where you'll be able to get it later. Next, click the three vertical dots in the top right of Ungoogled Chromium, then click 'About Chromium'. This should present you with, among other things, your version number — this number is also important so make sure to copy it and paste it somewhere you'll be able to retrieve later. Now, the link is 'https://clients2.google.com/service/update2/crx?response=redirect&acceptformat=crx2,crx3&prodversion=[VERSION]&x=id%3D[EXTENSION_ID]%26installsource%3Dondemand%26uc', you have to replace [VERSION] with your version number to the second '.' (so something like 87.0, not 87.0.4147.88), and [EXTENSION_ID] with the extension ID from earlier. With this new URL, you'll paste it into your search bar and press enter on your keyboard. You should now get a prompt to install the extension, just click 'Add extension' and it should be added to Ungoogled Chromium.
And that's it!
You've now fully configured Ungoogled Chromium for privacy and security, good job!
This article is still being revised, so it's important to check back every once in a while to make sure nothing new was added.