Lyra is under active development and not ready for production.

An actual private and secure browser

Lyra is not just another fork of Firefox ESR but an anti-convenience one tailored for people who really care about their privacy and security on the modern web.

Download Lyra BrowserLinuxWindowsAndroidSoon

Free · Source on GitHub

What is on when you first open it

Seek in the address bar. Ads blocked. Location off. LAN probes off. Maps still load.

Seek is the default engine

Queries go to Seek. Brave Search and DuckDuckGo are in the list if you want them. Google, Bing, Amazon, eBay, and Twitter are not.

Ads and popups are already blocked

uBlock Origin is already installed. You do not hunt for an extension.

Location and your home network stay closed

GPS is blocked. A spoof option reports Reykjavik. Public pages cannot reach devices on your LAN. WebRTC hides local IPs.

Shipped defaults
  • Seek

    Default engine.

    On
  • Block ads and trackers

    uBlock Origin is already in.

    On
  • Share your location

    Off. Optional Reykjavik spoof in Settings.

    Off
  • Let sites scan your LAN

    Off. Public pages cannot poke home devices.

    Off
  • Keep maps and video working

    WebGL on. WebGPU off until you allow a site.

    On

What ships with it

This is the browser you download, not a checklist to rebuild in Settings.

Seek
Seek is the default. Brave Search and DuckDuckGo are in the list if you want them. Google is not.
GPS stays off
Sites cannot read GPS. Settings can fake Reykjavik instead, which matches the UTC timezone spoof. Ask mode uses BeaconDB, not Google.
LAN probes stay blocked
A page on the public internet cannot reach 192.168.x, 10.x, or localhost. That stops the usual home-network scans.
WebGL on, WebGPU off
WebGL stays on so maps and Cloudflare checks still load. WebGPU is off unless you allow a site. You can restrict WebGL the same way.
Sync
No Mozilla account. Pair two machines with a code. Ciphertext goes through a relay you can self-host.
Encrypted cookies
Settings can encrypt cookies.sqlite and the other profile databases on disk. Turn it on, restart, and it stays on for that profile.
History search on this machine
A few KB of text from pages you visited stays here so you can search inside them. Private windows are skipped. Nothing is uploaded.
DNS over HTTPS
DNS goes to DNS.SB over HTTPS, with the system resolver as backup. Tracking junk is stripped off links. Global Privacy Control is on.

Resolver

DNS.SB

Lyra Browser sends DNS lookups over HTTPS to DNS.SB. The query URL is https://doh.dns.sb/dns-query. If that path fails, the operating system resolver is used. You can change this in Settings.

Protocol
DNS over HTTPS
Fallback
System DNS
Operator
dns.sb

Usual browsers, extra-hard ones, and Lyra Browser

Lyra Browser keeps private defaults that still pass a bot check.

Defaults compared with usual browsers and extra-hard forks
SettingUsualExtra-hardLyra Browser
Default searchGoogleOften DuckDuckGoSeek
Ads and trackersYou add a blockerUsually blockeduBlock Origin already in
GPSAsks, then sharesOften blockedBlocked, or Reykjavik spoof
Home network scansAllowedVariesBlocked
Maps, video, loginsWorksOften failsWorks
UpdatesInstalls itselfUsually noneYou choose

Who the browser still talks to

Some connections stay on purpose, so security lists and the ad blocker stay current. Search goes to Seek when you use the address bar. Update checks only run if you turn them on.

Read the full list
  • Usage data, studies, accountsClosed
  • Google Safe BrowsingOff
  • SeekDefault
  • DNS.SBDoH
  • Security and tracker listsKept
  • Update checkOnly if you turn it on

Get Lyra Browser

LinuxWindowsAndroidSoon

Download