Built-in ad blocker
uBlock-parity filter lists run in the engine, not as a fragile extension. Ads and the requests behind them never load.
Security & Privacy
Private by default. Verifiable by design.
Plantel Browser is built on the Plantel Chromium fork — site isolation, a strict process model, and the privacy defenses baked into the engine instead of bolted on after.
The engine does the heavy lifting.
Plantel Browser runs on the Plantel Chromium fork — a maintained fork of the same engine the modern web is tested against. You inherit Chromium's web-standards parity and its security model, and we keep the fork current with upstream fixes.
Every site renders in its own sandboxed process under strict site isolation, so a hostile page cannot read another origin's memory. The strict process model is the foundation everything below builds on — not a setting you have to find and turn on.
Defenses on by default.
No add-ons to install, no allowlist to curate before you are protected. These ship in every build and apply from the first tab.
Tracker blocker
Cross-site trackers and analytics beacons are dropped before the page can reach them. On by default, per-site overridable.
Fingerprint protection
Canvas, audio, font, and hardware signals are normalized so sites see a generic, non-unique device instead of you.
HTTPS-only
Every navigation is upgraded to HTTPS. Plain-HTTP loads hit an interstitial first — you opt in, you are never silently downgraded.
DNS-over-HTTPS
Domain lookups are encrypted, so your network and ISP cannot read or log the sites you visit from DNS traffic.
Per-site permissions
Camera, microphone, location, notifications, and clipboard are prompted per site and listed in one place you can revoke from.
Encrypted before it leaves your computer.
What you sync is encrypted on your computer before it is sent, with a key that is unlocked by your Plantel password. Plantel's servers store only the encrypted form. Sync between computers is rolling out now; phones follow.
These are synced encrypted, with conflicts settled on your devices:
- Bookmarks
- History
- Reading list
- Quick links
- Settings
- Spaces
- Open tabs
- Sent tabs
The vault behind Plantel Access is encrypted the same way — item by item on your device, and what is stored is the encrypted form.
Locked to you, not to a password.
Biometric unlock
Touch ID or your Mac's password, Face ID, Windows Hello, and Linux fprintd unlock the browser when you switch it on, and every saved password before it is filled. Passkeys and WebAuthn replace passwords where the site supports them.
Locks when you choose
You stay signed in. The browser locks after a few minutes away, when your computer locks, or never — your choice, or your company's rule for everyone, set in Company Admin. Your tabs stay open behind the lock, and per-Space lock keeps a private Space closed.
Where we are, honestly.
Plantel Browser is in early access (v0.3.0-alpha). The security architecture above — site isolation, the in-engine defenses, and on-device encryption — is what the product is built around, and we will not claim certifications or audits we have not earned.
For audit-grade, continuously verified controls across the wider Plantel platform, see Plantel Compliance. Found something? Reach the security team at [email protected] and read our privacy policy.
A browser that protects you out of the box.
Native for macOS, Windows, and Linux. Privacy on by default.