Short answer: Use Google Chrome, and sign in to it with your @partnership.place account. That automatically turns on the office’s security settings. Don’t install browser extensions, except Bitwarden.
Officially Supported
Vanadium/Trivalent
Hardened Chromium-based browsers: Vanadium ships with GrapheneOS, and Trivalent is available on Fedora-based distributions such as Secureblue. Use one of these if you can.
Microsoft Edge
On Windows 11, Edge provides excellent defense-in-depth if configured correctly. However, it is tightly integrated with Microsoft’s upsells and promotions, and Chrome’s security is equal or better. If you use Edge, we recommend also using HotCakeX’s Harden System Security.
Google Chrome
The most widely used browser. Secure out of the box, and very secure with the right settings. Security patches are released quickly. Recommended for most users. We recommend taking a look at RKNF404’s Chromium Hardening Guide. Most of these policies are applied through the @partnership.place Google Workspace and take effect when you sign in to a Chrome profile with your @partnership.place account.
Unofficial Recommendations
Safari
Safari is reasonably secure as long as you keep it updated. If your Mac is old enough that it no longer receives macOS updates, use Chrome instead.
DO NOT USE
Flatpak Browsers
Flatpak weakens the sandboxing that Chromium-based browsers rely on, making them significantly less secure. Your web browser is the only application we recommend not installing with Flatpak.
Opera
Mandatory telemetry. Poor update cycle. Feature bloat. Offers no advantages over Chrome.
Brave
Brave’s added features are either already available in upstream Chromium or reduce security (e.g. continued support for Manifest V2 extensions). Bundles cryptocurrency features, and the company has been the subject of several controversies over its business practices.
Vivaldi
Slow to ship security updates. Proprietary code without significant third-party security audits.
Ungoogled Chromium
Inconsistent update schedule. Offers no advantages over upstream Chromium that cannot be gained with policies and flags.
Firefox
Weaker site isolation and sandboxing than Chromium-based browsers, and slower to adopt modern security hardening.
Browser Extensions
Extensions significantly increase security risk. The only extension worth considering is Bitwarden; the Web Vault is less convenient but more secure.
What about uBlock Origin?
uBlock Origin is a Manifest V2 extension; MV2 is a security risk and has been deprecated by Chromium. uBlock Origin Lite is a lower-risk MV3 alternative, but its main advantage over DNS-level filtering is blocking YouTube ads, which is generally not worth the added attack surface.