Mozilla strengthens browser privacy with a built-in VPN, but limits and regional rollout raise key security considerations.

What’s New in Firefox 149
Mozilla has released Firefox 149 with a new built-in VPN feature. It offers users up to 50GB of free monthly data. This feature improves privacy directly inside the browser.
Unlike traditional VPNs, it works only within Firefox. It protects browser traffic but does not cover the entire device. As a result, other apps remain exposed.
Mozilla designed this feature for everyday use. For example, users can browse safely on public Wi-Fi. They can also hide their IP address while searching sensitive topics or shopping online.
How the Built-In VPN Works
The VPN uses a secure proxy server. It routes browser traffic through a protected connection. This helps mask the user’s location and identity.
Users can turn it on using a simple toggle in the browser. In addition, Firefox allows selective usage. You can enable the VPN for up to five specific websites. This helps save data.
Firefox also excludes certain websites from VPN routing. This prevents login failures and ensures stable connections.
Privacy and Data Handling
Mozilla states that it collects only limited technical data. For example, it may track connection success or failure. It may also log daily data usage.
However, users should still review this carefully. Even minimal data collection can raise concerns in sensitive environments.
Another important point is server location. The routing server is based in the United States. Therefore, users in other regions may face latency or compliance concerns.
Security Updates and Improvements
Firefox 149 includes major security fixes. Mozilla has patched 46 vulnerabilities in this release. More than half are rated high severity.
These include:
- Use-after-free vulnerabilities
- Out-of-bounds memory errors
- JIT engine flaws
- Sandbox escape issues
Attackers often exploit these flaws. Therefore, updating the browser is critical.
In addition, Firefox now blocks notifications from malicious websites. It also removes permissions from unsafe sites flagged by SafeBrowsing.
Availability and Limitations
The VPN feature is rolling out gradually. It is currently available in:
- United States
- United Kingdom
- Germany
- France
There is no confirmed timeline for UAE or GCC regions yet.
What This Means for Users and Businesses
This update shows a clear trend. Browsers are becoming more security-focused.
However, this VPN is not a full replacement for enterprise solutions. It protects only browser traffic. It also routes data through external servers.
For businesses, this creates key concerns:
- Reduced network visibility
- Possible compliance risks
- Limited endpoint protection
Therefore, organizations should treat this as an added layer. It should not replace existing security controls.