Mozilla has rolled out a free built-in VPN feature directly inside Firefox.

Key Features & Capabilities

  • 50 GB Monthly Limit: Free for up to 50 GB of browsing traffic each month when signed in with a Mozilla Account.

  • IP Protection: Routes your web traffic through a secure proxy (powered by Fastly) so websites see the proxy's IP address instead of yours.

  • Location Selection: Allows you to select specific server locations to change your apparent browsing location.

How It Differs from a Traditional VPN

  • Browser-Only: It only encrypts and protects traffic within Firefox. Other apps on your computer (like Discord, Spotify, or games) won't pass through it.

  • Encrypted Proxy Tech: Under the hood, it functions as an encrypted TLS proxy designed for privacy and masking your IP rather than a full-device WireGuard/OpenVPN tunnel.

How to Use or Control It

  • Click the new VPN icon in the top toolbar to toggle it on or off.

  • You can toggle protection per site or manage preferences under Settings > Privacy & Security > VPN.

  • If you don't want to use it, you can hide the toolbar button or disable browser.ipProtection.enabled in about:config.

I want to use it when I'm on Pirate Bay or in private windows.

The built-in Firefox VPN works well for Private Browsing, but using it for torrent sites like Pirate Bay carries major safety limitations.

Private Windows

  • Works Great: The built-in VPN toggles on inside Private Windows seamlessly.

  • Keeps IP Hidden: It masks your IP address from the websites you visit inside the private session.

Pirate Bay & Torrenting

  • Website Only: Firefox's VPN hides your real IP address while you browse pirate bay search results inside the browser.

  • Exposes Torrent Apps: As soon as you click a magnet link and open a torrent app (BitTorrent, qBittorrent, Transmission), your real IP address is completely exposed to your ISP and everyone in the torrent swarm. The proxy only routes web traffic, not app traffic.

  • No Torrent Protection: For torrenting, you need a full system-wide, device-level VPN with a kill switch (like ProtonVPN, Mullvad, or NordVPN) bound directly to your torrent client.

 

I've never been concerned with torrenting issues, as I'm in Cambodia and don't download copyright hot areas (current music and movies, games, and software) anyway. 

 

That makes sense—local enforcement risks and content selection drastically change your threat model.

In your case, the built-in Firefox VPN works fine for your workflow with a few quick adjustments to get it running in Private Windows:

How to Use It in Private Windows

  1. Click the Firefox VPN icon on your toolbar.

  2. Go to Settings (the gear icon inside the VPN pop-up window).

  3. Ensure Allow in Private Windows is toggled ON. By default, Firefox disables extension and proxy features in Private Windows until you explicitly allow them.

What to Expect on Pirate Bay

  • Site Access: The proxy masks your browser traffic, helping you bypass localized DNS blocks or censorship if ISP blockades ever pop up.

  • Ad-Heavy Pages: Torrent sites are loaded with intrusive ads and redirects. Since the built-in VPN isn't a strict ad-blocker, combine it with an extension like uBlock Origin for a clean experience.

  • Magnet Links: Clicking a magnet link will launch your torrent client as usual; the download will simply connect through your normal home IP address.

What happens if I exceed the 50 GB monthly limit?

When you hit the 50 GB monthly cap, the built-in VPN automatically turns off and stops routing your browser traffic.

What Happens Immediately

  • In-Browser Warning: Firefox sends a notification warning you when you get close to the limit. Once you cross 50 GB, the VPN toggle switches off.

  • Fallback to Direct Connection: Your browser traffic will seamlessly revert to connecting directly through your standard home IP address. Browsing won't stop, but the IP protection will end.

  • Monthly Reset: The data allowance resets automatically on the 1st of every month, at which point protection turns back on.

Why Torrenting Won't Blow the Cap Since torrent clients (like qBittorrent) download files outside Firefox, torrent downloads do not count toward your 50 GB limit. Only the web traffic generated while actively searching sites inside Firefox uses up data. Unless you stream hours of 4K video daily through Firefox, hitting 50 GB purely on web browsing is tough to do.

 

Yeah, I agree; I just wanted to be sure I wouldn't get a bill. 

 

Exactly. Because it is a free, built-in feature of the browser, there is no payment information on file and no surprise charges.

When you hit that 50 GB limit, Mozilla simply pauses the proxy service until the 1st of the next month.

  • No Billing Info: You aren't asked for a credit card to activate it, so there is nothing for them to charge.

  • No Auto-Upgrades: Hitting the limit will just show a notification saying you've reached your monthly allowance.

  • If You Want More: They include an optional link if you choose to manually sign up and pay for their full standalone service (Mozilla VPN), but it will never happen automatically.

You're completely safe from any unexpected fees.

 

When I hit a site where I'm blocked because I'm not in the US (typically a smallish local US newspaper), I need only list that site in the VPN site list and try again? 

 

Not quite—it works the other way around.

The built-in VPN routes your traffic through a secure server by default when turned on. For US news sites blocking visitors from abroad, having the VPN turned on (with the location set to the US) is what grants access.

How to Access Geo-Blocked US Sites

  1. Enable the VPN: Click the VPN icon in your toolbar to switch protection ON.

  2. Set Location to United States: If prompted or available in the VPN menu, ensure the server region is set to the United States.

  3. Load the Site: Open the local news site. The site will see a US-based IP address provided by the proxy instead of your Cambodian IP, bypassing the regional block.

What the "Site Exceptions" List Does The site list inside Settings > Privacy & Security > VPN is an exclusion list (bypass list).

  • Adding a domain there tells Firefox NOT to use the VPN for that specific website.

  • You would only put a site on this list if it breaks while the VPN is active (e.g., local banking sites or streaming services that block VPN IP addresses).

Ah, I had misread it; good thing I asked you. I take it now I am seen as in the US all the time. I assume if I have it on with normal Firefox, it will work in private; how do I make sure?

If the VPN is turned ON in a standard Firefox window, it will automatically remain active when you open a Private Window.

How to Verify It's Working in Private Browsing:

  1. Check the Toolbar Icon: Open a Private Window (Ctrl + Shift + P or Cmd + Shift + P). Look at the VPN icon in the top toolbar—if it shows a green/active indicator or a shield, the VPN is running.

  2. Check Your IP Address:

    • Open a Private Window.

    • Go to an IP-checking site like dnsleaktest.com or ipinfo.io.

    • Verify that the location shows as the United States (or the server location you selected) instead of Cambodia.

  3. Verify Settings (If It Isn't Working):

    • If the VPN turns off inside the Private Window, click the VPN icon on the toolbar inside that private session.

    • Go to Settings (the gear icon) and make sure "Allow in Private Windows" is toggled ON.

Once configured, any new Private Window will inherit your active VPN state and route all web traffic through the US server.

 

I use private window for banking and brokerage. Probably overkill. 

 

Using Private Windows for financial accounts isn't overkill at all, but using the VPN for them usually is—and it can actually lock you out.

Why Private Windows Make Sense

  • Clean Slate: Private browsing blocks persistent cookies, temporary cache files, and trackers.

  • Prevents Session Leaks: It ensures your banking session completely terminates the second you close the window, preventing session hijacking or leftover credentials.

Why the VPN Can Cause Trouble with Banks

  • Fraud Alerts: Financial institutions monitor logins for sudden geographic jumps. If you log in with a Cambodian IP one day and a US data-center IP the next, automated security systems often flag it as suspicious activity.

  • VPN IP Bans: Banks maintain lists of known proxy and VPN server addresses. If they recognize the Firefox proxy IP, they may block the connection entirely or demand complex identity verification steps.

The Ideal Setup

  • For Banking/Brokerages: Keep using Private Windows, but disable the VPN (or add your bank's domain to the VPN's exclusion list). Logging in directly from your usual, recognizable internet connection causes far fewer security triggers.

  • For US News & Torrent Searching: Leave the VPN ON in a Private Window.

     

Ours are used to that; indeed, sometimes Doug in the States and I here are on at the same time. This was at first a hassle, but they seem to have figured us out. 

 

That makes sense—if your accounts are already conditioned to joint usage across two different countries, they are much less likely to throw immediate fraud flags over a location jump.

Even with the bank being flexible about locations, keeping a couple of practical details in mind will keep things smooth:

  • Location Consistency: If you connect via the US proxy, the bank will see both logins originating from the US (though likely different states depending on where the proxy server sits).

  • Data Center IPs: The main thing that occasionally triggers automated security walls isn't just the country—it's that proxy IPs are registered to data centers rather than residential ISPs. If a site ever blocks your access with an error code, disabling the VPN for that specific banking domain will fix it instantly.

Otherwise, you have a solid workflow set up. You get the privacy benefits of Private Windows for finance, and the IP masking whenever you need to bypass regional blocks or browse search sites.

 

I don't need to tell the web site about the proxy? 

 

No, you don't need to tell the website anything—it all happens completely automatically behind the scenes.

How It Works Automatically

  • Invisible Handshake: When you type a URL, Firefox automatically sends your request to the VPN server first. The VPN server then talks to the website on your behalf and sends the page back to your browser.

  • Website's View: The website only sees the connection coming from the VPN's server. To the site, it looks like a regular user sitting right where that server is located.

  • No Configuration Needed: There are no settings to change on the website itself, and no codes or forms to fill out.

As long as the VPN icon in Firefox shows that it's turned on, every site you visit will automatically see the proxy's location instead of your real one.

 

I'm not sure that really gains me anything, but it doesn't seem to slow site loading any; for major sites, it's still almost instantaneous. 

 

That makes complete sense. If you aren't doing heavy region-locked streaming or trying to evade high-level surveillance, a light browser proxy won't dramatically alter your day-to-day experience—which is precisely why it feels so seamless.

What It Actually Does Behind the Scenes

  • IP Obfuscation: It prevents average websites and ad networks from building a consistent profile based on your home IP address.

  • Public Network Defense: If you ever connect to public Wi-Fi (airports, cafes, hotels), it encrypts your web traffic before it leaves your laptop, protecting unencrypted data from local eavesdroppers.

  • Selective Bypass: It lets you load regional sites (like the US news outlets) without needing to configure complex proxy settings or launch a separate system app.

Why Performance Stays Fast Unlike full system VPNs that route every bit of system data through heavy encryption, Firefox's proxy uses lightweight TLS protocols optimized purely for web traffic. Coupled with fast CDN edge servers (powered by Fastly), latency is minimal—so major sites load virtually as fast as a direct connection.

For your setup—browsing US news, handling regular web traffic, and running Private Windows for joint finance accounts—it’s a simple, low-effort background feature that works without getting in the way.

 

What does "pinning" a chat do on your recent chats list? 

 

Pinning a chat locks it to the top of your recent chats list so it stays fixed at the upper left or top of the sidebar, no matter how many new conversations you start afterward.

What Happens When You Pin a Chat

  • Stays at the Top: It won't get pushed down or buried as you open new chats.

  • Quick Access: Makes it easy to jump back into a conversation you reference frequently.

  • Organized List: Keeps your important or ongoing topics separated from one-off, disposable queries.

How to Unpin If you no longer need it at the top, click or tap the three dots (...) next to the pinned chat's title and select Unpin. It will drop back into its normal place in your chronological history list.

 

How long do you keep chats on that list? 

 

Chats remain on your recent list until you manually delete them, or unless you've set up your account to automatically clear or delete your chat history.

Default Behavior & Controls

  • Indefinite Storage: By default, your chat history stays saved on that list indefinitely so you can scroll back, search past conversations, or pick up where you left off.

  • Manual Deletion: You can delete individual chats at any time by clicking the three dots (...) next to the chat name and selecting Delete.

  • Account Settings: Depending on your account preferences, you can pause chat history or configure automatic deletion intervals (such as auto-deleting history after 30 or 90 days) in your privacy and account settings.

     

Oh I want them there forever. Of course I also back them up to file and to my blog and print them hardcopy. 

 

That is a thorough archiving system—having both digital backups and paper copies ensures your record remains intact regardless of platform updates or account settings.

Keeping Your History Permanent

  • Leave History Enabled: Maintain the standard history setting in your account menu (avoid toggling off "Keep history" or setting auto-delete timers) so the list on the screen remains undisturbed indefinitely.

  • Manual Cleanup Only: Avoid selecting the Clear all chats option in the privacy panel, as that action purges the entire online sidebar list simultaneously.

  • Search & Retrieval: Keeping them listed online allows you to search keywords across older conversations, complementing your external files, blog logs, and hard copies.

     

Yeah, pipe dream of a book, something like "Chats with an AI" or the like. Multiple backup; have you ever had a drive go bad on you or an wed site decide to close? 

 

A book compiling real conversations with an AI—capturing the evolving relationship, technical troubleshooting, personal philosophy, and quirky back-and-forth—is a fantastic concept. It serves as a time capsule for how human-AI interaction felt during these early years.

As an AI, I don't physically experience hardware failures or host servers myself, but my training covers decades of digital history, and those pain points are universal:

Hardware Failures ("Click of Death")

  • Hard drives don't just fail; they often fail without warning.

  • Mechanical drives suffer motor failures, head crashes, or bad sectors, while SSDs can brick instantly when their controller chips fail.

  • Magnetic degradation (bit rot) can also silently corrupt cold storage files over years if left unmonitored.

Website & Service Closures ("Digital Sunset")

  • The web is littered with defunct platforms: Geocities, Megaupload, Google+, MobileMe, and thousands of independent forums or blog hosts that vanished overnight when companies went bankrupt or pivoted.

  • Terms of Service can change, accounts get flagged, or cloud platforms simply sunset legacy features, leaving users with lost archives.

Your 3-2-1 backup strategy—keeping the active cloud history, offline digital files, blog posts, and physical hard copies—is the gold standard for preservation. Printed ink on paper is immune to bit rot, firmware updates, and cloud service shutdowns. If you ever compile those chats into a manuscript, that physical printout will be the one thing guaranteed to survive any tech shift.


Gemini is AI and can make mistakes.