The Chiang Mai Incident
Got hacked at a hostel in Chiang Mai three years ago. Someone on the shared WiFi grabbed my login cookies for two different accounts. Lost access to my email for about six hours before I got it back. The scary part? I was using Chrome with zero protection. Just raw browsing like an idiot.
That pushed me to actually learn about browser privacy. Tested probably fifteen different extensions over the past few years. Most are fine. A handful actually matter. This is what's currently running on my laptop.
If you're in a hurry: uBlock Origin for ads and trackers, Privacy Badger to catch the sneaky stuff that slips through, and a password manager. Still reusing the same password everywhere? Yeah, we need to talk about that.
Quick Picks
Three extensions that cover 95% of what you need:
| Extension | Best For | Price | Type |
|---|---|---|---|
| uBlock Origin | Ad & tracker blocking | Free | Ad blocker |
| Privacy Badger | Learning to block trackers | Free | Tracker blocker |
| Bitwarden | Free password management | Free/$10/yr | Password manager |
All free. All open source. Ten minutes to install everything.
Why This Matters When You're On Random WiFi
Your browser leaks more data than you probably realize. Every site you visit tracks you. Advertisers follow you around the internet. Your search history gets packaged and sold.
Working from random WiFi in hostels and coffee shops makes this worse. Public networks are hunting grounds for anyone wanting to grab your session cookies or watch your traffic. I learned this in Thailand the expensive way. Like, lost-access-to-two-accounts expensive.
Browser extensions fix most of this without requiring a PhD in security. They run quietly in the background and block the bad stuff automatically.
What they actually stop:
- Third-party trackers following you across websites
- Ads that slow down pages and sometimes carry malware
- Fingerprinting attempts that identify your browser uniquely
- Cookie tracking that builds profiles about your browsing habits
- Crypto miners that some sketchy sites try to run in your browser
Seriously. These are free. Ten minutes to install. No excuse not to do this.
uBlock Origin
This one runs on every machine I own. Has been since about 2021.
uBlock Origin does the heavy lifting for ad and tracker blocking. The code is open source, so security researchers can actually verify nothing weird is happening under the hood. One 2026 caveat: Chrome killed the technology the full version relies on, so on Chrome you get uBlock Origin Lite instead. Still good, slightly less capable. Firefox runs the full version with no issues. And here's something I didn't expect: my browser runs faster with it installed. All those tracking scripts and video ads consume serious resources.
What I use it for:
- Killing those autoplay video ads on news sites (the worst)
- Blocking trackers that follow me from site to site
- Stopping malware domains before they even load
- Getting rid of cookie consent popups (with the right filter list)
- Making pages load faster since they're not downloading megabytes of garbage
The default settings handle 90% of what you need. Install it and move on with your life. But if you want to go deeper, it offers blocking modes from "barely there" to "burn it all down."
One thing that frustrated me last year: Google introduced Manifest V3, which basically handicaps powerful extensions. The full version of uBlock got crippled on Chrome. There's a stripped-down Lite version now, but I ran it for two weeks and it missed a lot of stuff. That's when Firefox became my daily driver for anything involving money or logins.
Price: Zero dollars. The developer accepts donations but doesn't require them.
Runs on: Firefox, Edge, Brave, Opera. Chrome gets the weaker Lite version only.
Privacy Badger
The EFF built this one. That's the Electronic Frontier Foundation, the folks who've been suing the government over surveillance since the 90s. Basically the ACLU of the internet.
What makes Privacy Badger interesting is the approach. Most blockers use preset lists of known bad domains. These lists need constant updating. By the time a new tracker gets added, it might have followed you for weeks.
Privacy Badger learns instead. It watches how trackers behave across sites. When it sees the same tracker appearing on three different websites you visit, it starts blocking. This catches new trackers that haven't made anyone's list yet.
Reasons I keep it installed:
- Adapts to new trackers without waiting for list updates
- Breaks fewer websites than aggressive blockers (though still breaks some)
- Shows exactly who's trying to track you with a little slider interface
- Built by a nonprofit that actually gives a damn about privacy
- Plays nice with uBlock Origin, no conflicts
The downside is real though. Sometimes it blocks things that break website functionality. I've had checkout forms stop working, login buttons disappear, that kind of thing. Usually takes five seconds to whitelist the site and move on. Annoying but manageable.
Price: Also free. EFF takes donations.
Runs on: Firefox, Chrome, Edge, Opera.
Password Manager Extensions
Okay, this section matters more than the ad blocking stuff. No password manager means you're a sitting duck. I've watched other nomads get their accounts hijacked at least eight or nine times over the years. Usually starts with an old breached password.
Here's the thing nobody wants to admit: almost everyone reuses passwords. That login you used for some random forum back in 2019? When that site got breached (and odds are it did), attackers fed those credentials into automated tools. These things test thousands of stolen password combinations per hour. Your Netflix login is probably floating around in a database right now.
Password managers solve this by generating random unique passwords for every single account. You memorize one master password. The extension handles everything else.
Bitwarden
What I've been using for about four years. Open source code, functional free tier, works on every device. Haven't felt the need to switch.
What Bitwarden handles for me:
- Generates random 24-character passwords I never have to remember
- Fills login forms automatically
- Stores credit cards and secure notes
- Syncs across laptop, phone, tablet
- Warns me when passwords appear in known breaches
The free version covers everything except some advanced two-factor options and encrypted file storage. Premium costs ten bucks a year. That's less than a mediocre lunch in Lisbon.
Other Options I've Tried
NordPass charges about $24 yearly. Interface is cleaner than Bitwarden, I'll give it that. The autofill felt a bit smoother when I tested it. Solid choice if the Bitwarden interface bothers you.
Try NordPass - 50% OffProton Pass is newer but comes from the Proton Mail team, and those people take privacy seriously. The free tier is surprisingly generous. Paid version runs around $48 yearly but bundles in their VPN and encrypted email, so it's not really a fair comparison.
Get Proton Pass - Swiss Privacy1Password charges around $36 per year. Some people absolutely swear by the interface. I found Bitwarden did what I needed and preferred the open source aspect.
Pricing ranges: Free to $48/year depending on which service and tier.
Other Extensions Worth Knowing About
These aren't in my essential stack but they solve specific problems.
HTTPS Everywhere used to be non-negotiable. It forced websites to use encrypted connections. The EFF officially retired it in 2023 because browsers now ship that protection built in. If you still have it installed, you can delete it. Your browser already does the job.
DuckDuckGo Privacy Essentials combines tracker blocking with their private search. Not bad as an all-in-one if you don't want to manage multiple extensions. Less thorough than running uBlock plus Privacy Badger separately though.
Cookie AutoDelete wipes cookies when you close tabs. Stops long-term tracking. But it also logs you out of everything constantly. I lasted about a week before turning it off.
NoScript blocks JavaScript entirely until you explicitly allow it. Maximum paranoia mode. Also completely breaks the modern web. I use it occasionally for sketchy sites but not daily.
Decentraleyes blocks tracking through content delivery networks. A lot of tracking happens when sites load fonts and scripts from Google or Facebook CDNs. This catches that. Honestly not sure how much it helps in practice, but I keep it running.
My Actual Setup
After testing all this stuff, here's what I actually use:
Firefox with three extensions:
- uBlock Origin (the real one, not Lite)
- Privacy Badger
- Bitwarden
Three extensions. That's it. They work together without conflicts and handle maybe 95% of tracking and security concerns.
I used to run more. At one point I had six or seven privacy extensions installed. Pages loaded slowly. Sites broke constantly. I spent more time tweaking settings than actually getting work done. Totally not worth the hassle.
The three-extension approach works better. uBlock catches the obvious ads and trackers. Privacy Badger catches the sneaky ones that learn to dodge blocklists. Bitwarden keeps my passwords unique and secure. Everything else is marginal gains at best.
The Browser Choice Actually Matters
Quick note because this comes up constantly.
Chrome is built by an advertising company. Google makes money by tracking you and showing targeted ads. That's not conspiracy theory stuff, that's literally their business model. Running privacy extensions on Chrome is like... I don't know, wearing a seatbelt while driving off a cliff. Helps a little, sure. Misses the point though.
Firefox is what I recommend. Mozilla is a nonprofit that doesn't make money selling your data. The full version of uBlock Origin works properly there. Plus the built-in tracking protection is actually decent.
Brave gets mentioned a lot. Same underlying code as Chrome but with Google's tracking ripped out. Built-in ad blocking that works okay. I tested it for about two months. Found it slightly slower than Firefox and ran into some weird site compatibility issues. Also not crazy about how hard they push their cryptocurrency stuff. Personal preference.
If work requires Chrome for specific web apps or whatever, at least throw uBlock Origin Lite and Privacy Badger on there. Damage mitigation.
Setting Everything Up
Whole process takes about fifteen minutes, including creating a password manager account.
First: Get Firefox from mozilla.org. The installer is straightforward. Make a Firefox account if you want settings synced across devices.
Then: Open the Firefox add-ons page. Search for uBlock Origin. Hit the Add to Firefox button. It asks for permissions. Grant them. Move on.
Next: Search Privacy Badger in the same add-ons page. Same process. Install, grant permissions.
Finally: Search Bitwarden, install it, create an account at bitwarden.com. Start migrating your important passwords. Do the critical ones first: email, banking, anything touching payment info. This part takes longer but you can spread it out over a few days.
Fifteen minutes for the extensions. Maybe an hour total if you're setting up the password manager properly.
Frequently Asked Questions
Occasionally. uBlock Origin blocks something a site needs, or Privacy Badger gets overzealous. When it happens, click the extension icon and whitelist that specific site. Five seconds. Happens maybe once a week in my experience.
uBlock Origin alone handles most problems. Privacy Badger catches stuff that slips through. The password manager isn't optional in my opinion. Running all three gives you solid protection without making browsing miserable.
Firefox mobile supports uBlock Origin. That's honestly the main reason I switched to Firefox on my phone too. Chrome mobile won't allow ad blockers at all. Safari on iOS has content blockers but they're more limited than desktop extensions.
Opposite. Blocking ads and trackers means less stuff downloading. I've actually timed this. News sites load way faster with uBlock running because they're not pulling in megabytes of tracking scripts and video ads.
Different problems. Extensions stop tracking and ads at the browser level. VPNs encrypt your whole connection and mask your location from networks. You probably want both, especially on public WiFi. Check out our VPN guide for recommendations.
Brave's blocking is decent out of the box but uBlock Origin on Firefox catches more. Plus I don't love Brave's crypto integration. Personal call though.
These specific ones? Yeah. Open source code that security researchers have actually audited. uBlock Origin, Privacy Badger, Bitwarden, all been reviewed by independent people. Random free extensions from unknown developers? Way more sketchy. Stick to the big names.
uBlock Origin. Most protection for least effort. But seriously, all three takes fifteen minutes. Just do it.
Wrapping Up
Three years of paranoid browsing since that Chiang Mai incident. What I've figured out: you don't need to go crazy with this stuff. uBlock plus Privacy Badger plus a password manager. Firefox instead of Chrome. That combo stops most tracking and makes you dramatically harder to compromise.
Could you do more? Sure. VPNs, Tor browser, dedicated security-focused operating systems. At some point you're trading so much convenience for such marginal gains that it stops making sense.
The three-extension setup hits the sweet spot. Good enough protection without breaking your workflow.
Took getting hacked to make me take this seriously. Hopefully you can skip that part and just install the extensions now. Takes less time than reading this whole thing did.
Get NordPass - Best Password Manager


