Security & Infrastructure Tools
Firefox now has a free built-in VPN with 50GB monthly data limit
Firefox 149 introduces a free built‑in VPN that lets users hide their location and IP address for up to 50 GB of browser traffic each month. The VPN is activated via a toggle in the browser, can be limited to specific sites, and only routes Firefox traffic—not system-wide traffic like Mozilla’s commercial VPN. It’s available initially in the U.S., UK, Germany, and France, with notifications when the limit approaches. Alongside the VPN, Firefox 149 adds Split View for side‑by‑side tabs, automatically blocks malicious sites through SafeBrowsing, and patches over 40 security vulnerabilities.

Firefox 149 arrives with a free built-in VPN that offers up to 50GB of monthly data, marking a notable shift in how privacy is delivered inside the browser. The new feature uses a secure proxy to route only the traffic that goes through the Firefox browser, not the entire device’s network traffic. In practice, this means you can browse more privately while still using your regular apps and services outside of Firefox.
The VPN is designed to be easy to use. After signing in with a Mozilla account, you can switch the VPN on or off with a simple toggle in the browser’s top-right corner. A key detail is that this VPN is browser-specific rather than a system-wide solution, which differentiates it from Mozilla’s full VPN product that covers all device traffic. This makes the built-in option a lightweight privacy tool suitable for public Wi‑Fi, private searches for sensitive information, or discreet online shopping.
Traffic allowances and site behavior are carefully managed. Firefox users with a Mozilla account will receive 50GB of monthly data, and the browser will notify you as you approach the limit. There’s also the option to limit VPN use to a subset of sites—up to five—so you can reserve bandwidth for the sites where privacy matters most. Several websites and essential services are excluded from VPN routing to avoid login problems and to ensure the VPN reconnects reliably when needed.
From a privacy perspective, Mozilla emphasizes that data collection is narrowly scoped. Technical data relevant to maintaining performance and stability may be logged, along with interaction data to understand usage. For example, Mozilla might record whether a connection succeeded or failed, or note that a certain amount of data was used on a given day. The routing server is based in the United States and is chosen to optimize location and performance for the best user experience.
Rollout details indicate a phased launch beginning today in the United States, with expansion planned for the United Kingdom, Germany, and France. At the moment, there is no published timeline for extending the service to additional regions.
In addition to the VPN, Firefox 149 introduces Split View, a feature that places tabs side by side in the same window. This can be handy for planning, comparing information, taking notes, or handling small administrative tasks like tax filing, all without leaving the browser. Mozilla describes Split View as useful for tasks that benefit from quick, side-by-side reference.
Security improvements are a major part of this release as well. Firefox 149 automatically blocks notifications and revokes permissions from sites that SafeBrowsing has flagged as malicious. The update also addresses a broad set of vulnerabilities—Forty-six issues in total—with more than half categorized as high severity. The list includes user-after-free vulnerabilities, out-of-bounds errors, JIT engine flaws, and sandbox escape risks, all of which Mozilla has patched to strengthen browser security.
Separately, a Red Report from 2026 highlights how ransomware encryption techniques have evolved, noting that new threats use math-like methods to detect sandboxes and blend into normal activity. The report analyzes a large sample of malicious files to reveal the top techniques and to help readers assess whether their security stacks can detect these evolving threats.
Overall, Firefox 149 blends a lightweight, user-controlled built-in VPN with broader privacy enhancements and stronger defenses against web-based threats, while also offering productivity-oriented features like Split View. The combination underscores Mozilla’s ongoing strategy to broaden privacy protections directly within the browser, without requiring users to adopt a separate system-wide solution.