Vanadium: GrapheneOS's Hardened Browser and Why It's Your Best Default
6 min read
Vanadium is GrapheneOS's maintained fork of Chromium — the same rendering engine that powers Google Chrome, Microsoft Edge, and most modern browsers. The difference is what's been removed and what's been added: no Google telemetry, no account sync, stronger memory safety, and privacy-focused defaults.
It ships as the default browser on every SOVEREIGN device. Here's what it does differently, and when you might want to use something else.
What Vanadium Is
Chromium is the open-source browser that Google Chrome is built on. Google distributes Chromium without most of the Chrome-specific services (no Google account sync, no Crash reporting to Google servers by default), but it still contains various Google-dependent code. Vanadium removes this and adds GrapheneOS-specific hardening on top.
The GrapheneOS team maintains Vanadium and releases updates aligned with Chromium's release schedule. Security patches come quickly — the same team that patches GrapheneOS's OS also patches Vanadium.
How Vanadium Differs From Chrome
- No Google account integration or sync
- No crash reporting or usage telemetry to Google servers
- GrapheneOS's hardened memory allocator applied to the renderer process
- Stronger JIT compiler mitigations
- Enhanced Content Security Policy enforcement
- No Google Safe Browsing (which sends URLs to Google for checking) — you can enable it manually if you prefer the protection over the privacy trade-off
- No Federated Learning of Cohorts (FLoC/Topics) advertising technology
Default Privacy Settings on SOVEREIGN Devices
- DuckDuckGo as default search engine
- HTTPS Upgrades enabled (forces HTTPS on sites that support it)
- Third-party cookies blocked
- Do Not Track header sent
- No auto-signin to Google services
What Vanadium Can and Can't Do for Privacy
Vanadium provides meaningful protection against browser-level tracking: third-party cookies are blocked, storage partitioning prevents cross-site tracking, and Google's advertising technology is absent. This is a substantial improvement over Chrome.
What it doesn't do: Vanadium doesn't prevent fingerprinting as aggressively as Tor Browser. If you log into websites, those sites track you through your account. Your ISP and network can see which domains you visit (domains are visible in DNS queries and TLS SNI, even over HTTPS). Proton VPN covers the network layer — Vanadium covers the browser layer. Neither alone covers everything.
When to Use Something Else
For maximum anonymity — accessing sensitive information you don't want tied to your device's IP or browsing pattern — use Tor Browser. Tor Browser routes traffic through the Tor network, making it significantly harder to trace. Install it from F-Droid or the official Tor Project download. Vanadium should not be used for anonymity-critical browsing.
For Firefox fans: Firefox and Firefox-based browsers (Fennec, Mull) work on GrapheneOS. Firefox uses a different engine (Gecko) which has different security properties. For general browsing, Vanadium's Chromium base provides stronger process isolation — each tab runs in a separate sandboxed process. Firefox's tab isolation is less granular.
Brave browser: also available on GrapheneOS and provides built-in ad blocking with a Chromium base. The main advantage over Vanadium is integrated ad/tracker blocking without extension installation. If you want one-click ad blocking, Brave is a reasonable choice.
Frequently asked questions
- Should I install Chrome as well?
- Only if a specific site requires it. Vanadium handles everything Chrome does, and sites can't distinguish between Vanadium and Chrome (same user agent). If a site insists on Chrome specifically, it's a poorly designed site — but you can install Chrome via sandboxed Play if needed.
- Can I sync bookmarks across devices?
- Not via Google Sync. You can export bookmarks as HTML from Vanadium and import them on another device. For live sync: Floccus (available on F-Droid) syncs bookmarks to a self-hosted server or Nextcloud.
- Does Vanadium support extensions?
- No. Extensions are a Chrome/Firefox feature; Vanadium is a mobile browser and doesn't support the extension API. Content filtering is handled by other means — Proton VPN's DNS-level filtering, or switching to Brave which has built-in ad blocking.
- Is Vanadium updated regularly?
- Yes. Vanadium tracks Chromium's release schedule closely and receives security updates as part of GrapheneOS OS updates. The security patch delay between a Chromium patch and a Vanadium update is minimal.
Still have questions?
We answer personally — no ticket queue.