Is Vivaldi Browser Safe? A Cyber Security Expert‘s Analysis
In today‘s digital threat landscape, marked by ever-increasing surveillance, data harvesting, and online exploitation, the browser you entrust with your most intimate data is no trivial choice. Mainstream options like Google Chrome may boast the largest market share, but they often fall short in the realm of privacy. For the discerning user unwilling to compromise between security, customization, and convenience, the Vivaldi browser has emerged as an increasingly compelling alternative.
As a cyber security professional with over a decade of experience in data protection, I‘ve thoroughly examined Vivaldi through the lens of its privacy merits and potential shortcomings. In this in-depth guide, I‘ll equip you with the insights to determine if Vivaldi aligns with your personal threat model and privacy needs.
Vivaldi‘s Robust Privacy and Security Features
Central to Vivaldi‘s value proposition is its fusion of detailed user control with a host of built-in privacy-preserving features. Let‘s unpack the key components of Vivaldi‘s security arsenal:
Tracker and Ad Blocking
One of Vivaldi‘s strongest bulwarks against privacy erosion is its baked-in tracker and ad blocking functionality. Far from mere annoyances, trackers and ads serve as the lifeblood of the data economy, silently harvesting information about your every click to compile uncomfortably intimate user profiles.
Vivaldi empowers you to thwart these privacy intrusions with three escalating tiers of protection:
- No blocking
- Tracker blocking
- Tracker and ad blocking
By default, Vivaldi blocks trackers on sites known to harbor abusive ads or employ deceptive tactics. For most users, enabling tracker and ad blocking across all sites and judiciously allowing exceptions strikes an optimal balance between privacy and usability. Vivaldi‘s intuitive interface streamlines this process.
A 2020 study by researchers at the University of Michigan and Universidad Carlos III de Madrid found that Vivaldi‘s built-in ad-blocking reduced data usage by 18.9% compared to Chrome with no ad blocking[^1]. This has the ancillary benefit of improving page load times and responsiveness.
Anti-Fingerprinting
Browser fingerprinting is an especially pernicious tracking technique that uses your browser‘s unique configuration details (screen size, installed fonts, extensions, etc.) to assign you a distinctive identifier. This ID can then be used to follow you across the web, even if you block cookies.
According to a 2021 report from the cyber security firm Avast, as many as 30% of the web‘s 100,000 most popular sites employ fingerprinting[^2]. Vivaldi helps stymie this by automatically blocking known fingerprinting scripts and allowing users to spoof their time zone and user agent.
While no browser can completely prevent fingerprinting without impeding core functionality, Vivaldi‘s countermeasures help diminish your digital footprint.
Cookie Controls
HTTP cookies are the double-edged sword of the modern web. While they enable convenient features like persistent logins and shopping carts, they‘re also the primary vessel for advertisers to monitor your cross-site activity.
Vivaldi furnishes users with fine-grained control over cookies, allowing you to:
- Accept no cookies
- Accept only first-party cookies (typically necessary for sites to function properly)
- Accept all cookies but isolate third-party cookies when using private windows
- Accept all cookies
For most users, only permitting first-party cookies offers the best balance of privacy and functionality. The ability to containerize third-party cookies in private windows is also a nice touch for those occasional scenarios where you need them enabled.
Private Browsing and Guest Mode
Like its peers, Vivaldi offers a private browsing mode to help curb trailing data. When you use a private window:
- Vivaldi won‘t save your browsing history, searched terms, or login details
- Cookies and site data are sequestered and wiped after you close the window
- Third-party cookies are blocked by default
Vivaldi‘s guest mode goes a step further by not saving any browsing data and ignoring any extensions you have installed. This can be handy when using a shared device or logging into sensitive accounts on an untrusted machine.
It‘s crucial to understand that private browsing does not make you anonymous online. Your internet service provider and the websites you visit can still see your IP address and activity. For true anonymity, you‘ll need to layer on a trusted VPN or use a hardened privacy solution like Tor Browser.
Potential Privacy Shortcomings
While Vivaldi‘s privacy feature-set is undeniably robust, there are a few areas where it lags behind some of its privacy-focused competitors:
No Integrated VPN
Virtual private networks, or VPNs, have become an indispensable tool for shielding your online activity from snooping ISPs and safeguarding your traffic on public WiFi. Some browsers like Opera and Epic have taken the step of building in VPN functionality.
Vivaldi, however, does not currently offer an integrated VPN solution. For full protection, you‘ll need to use a separate VPN app in tandem with Vivaldi. Fortunately, Vivaldi plays well with most reputable VPN services.
Lacks Tor Integration
For the ultimate in online anonymity, nothing beats the Tor network. By routing your traffic through multiple intermediary servers, Tor makes it extremely difficult for observers to trace activity back to your real IP address and location.
While Vivaldi provides many privacy enhancements, it does not incorporate Tor. For highly sensitive browsing, you may want to use the hardened Tor Browser instead of (or in addition to) Vivaldi.
No Built-in Password Manager
Using strong, unique passwords across all your accounts is password management 101. While Vivaldi can save your login details, it doesn‘t offer a full-fledged password manager like some other browsers (e.g. Firefox).
For optimal security, I recommend using a dedicated password manager that encrypts and syncs your credentials across all your devices. Many top password managers offer browser extensions that work seamlessly with Vivaldi.
Putting It All Together: Is Vivaldi Safe?
Vivaldi‘s impressive suite of privacy-preserving features, combined with its highly customizable interface and performant Chromium foundation, make it a compelling option for security-conscious users at all skill levels.
Its key privacy advantages include:
- Robust tracker and ad blocking that thwarts profiling and data harvesting
- Anti-fingerprinting measures that help mask your unique browser signature
- Granular control over cookies, allowing you to reap their benefits while minimizing privacy risks
- A thoughtful private browsing mode that isolates your sensitive activities
- A transparent privacy policy that clearly delineates what minimal data is collected
- A business model that doesn‘t hinge on violating user privacy
That said, Vivaldi isn‘t a privacy panacea. Its lack of integrated VPN and Tor support means it falls slightly short of some rivals in preserving anonymity. It‘s privacy doesn‘t prevent your ISP from monitoring your traffic (a VPN can help with that) nor does it completely mask your identity from websites you log into (you‘ll need Tor for that).
Additionally, Vivaldi‘s smaller user base means it may receive less scrutiny than bigger targets like Chrome when new vulnerabilities surface. You‘ll need to stay vigilant about applying updates.
Personally, I‘ve found Vivaldi to be a trusty daily driver for all but the most sensitive of online activities. By configuring it properly and layering on a few key security extensions and tools, you can achieve a robust level of protection against most common privacy threats.
Some of my top recommendations for fortifying Vivaldi include:
- In Settings > Privacy, enable "Prevent WebRTC from leaking local IP address" and set "Referrer Policy" to "No referrer"
- Install the uBlock Origin extension for additional ad and tracker blocking
- Use a reputable VPN service to encrypt your traffic (NordVPN and Proton VPN are solid choices)
- Manage your passwords with an encrypted password manager like Bitwarden or 1Password
- For sensitive transactions, combine Vivaldi with Tor Browser
Ultimately, online privacy is a spectrum rather than a binary switch. No single tool can make you completely invulnerable. By leveraging Vivaldi as the foundation of a larger privacy toolkit, you can significantly reduce your attack surface and reclaim control over your data.
Vivaldi‘s thoughtful melding of privacy and usability make it a fantastic springboard for anyone embarking on the path towards greater digital agency. While not an endpoint in itself, it‘s an admirable step in the right direction. Here‘s to a more privacy-respecting future for the web.
[^1]: S. Englehardt, A. Farahat, K. Lerner. "Performance and Privacy Tradeoffs of Browser Tracking Protection". In Proceedings of the 2020 Web Conference (WWW ‘20), April 2020, Pages 488–494. https://doi.org/10.1145/3366423.3380106 [^2]: Avast. "Browser Fingerprinting Continues to Pose Significant Risks to Privacy". Published May 2021, accessed Dec 2022. https://blog.avast.com/browser-fingerprinting-risks-avast