Firefox 149 Ships a Free Built-In VPN With 50 GB Monthly Limit, Making Mozilla the First Major Browser Maker to Bundle IP Protection at No Cost
Firefox 149 routes browser traffic through a proxy network to mask IP addresses, offering 50 GB of free monthly data in four countries with no extension required.
Overview
Mozilla released Firefox 149 on March 24, 2026, shipping a free built-in VPN that routes browser traffic through a proxy network to mask users’ IP addresses and locations. The feature, which requires no separate extension or application, makes Firefox the first major browser to offer integrated IP-level privacy protection at no cost, according to BleepingComputer.
The VPN is rolling out progressively to desktop users in the United States, United Kingdom, Germany, and France, with plans to expand to additional countries in subsequent releases.
What We Know
The built-in VPN works by routing Firefox browser traffic through a proxy server before it reaches the destination website, as reported by TechRadar. Sites see the proxy’s IP address rather than the user’s own, providing a layer of anonymity during browsing. Users with a Mozilla account receive 50 GB of free data per month, and in-browser notifications alert users as they approach the limit.
The feature is activated through a single toggle in the browser’s top-right corner. Users can also configure it to activate automatically on specific websites — up to five — to conserve their monthly data allowance, according to BleepingComputer. Certain services, including account sign-in flows, bypass VPN routing to prevent authentication issues.
Mozilla told Tom’s Guide that the built-in VPN is a separate product from the existing paid Mozilla VPN subscription. “The built-in VPN is a separate proxy that protects users’ traffic while browsing in Firefox. We will continue to offer users choice with the Mozilla VPN if they would like full device protection, unlimited bandwidth, and a choice of over 500 servers in 30+ countries,” the company said.
On data collection, Mozilla stated that it collects only technical data to maintain service performance and stability. The company confirmed to Tom’s Guide that it only receives data volume information from its proxy provider, not records of which sites users visit.
Firefox 149 also patched 46 security vulnerabilities, including use-after-free flaws and sandbox escape issues, and introduced Split View for side-by-side tab viewing, according to BleepingComputer.
What We Don’t Know
Mozilla has not disclosed the identity of the proxy provider powering the built-in VPN, nor has it published details about which encryption protocols the service uses. The routing server is described only as U.S.-based, which may raise questions for privacy-conscious users in European jurisdictions subject to different data protection regimes.
The company has not provided a timeline for expanding availability beyond the initial four countries. It also remains unclear how the 50 GB monthly cap will interact with increasingly data-heavy browsing patterns driven by video streaming and large web applications, though Mozilla has indicated it plans to introduce additional controls and safeguards in future releases.
Whether the feature will cannibalize subscriptions to Mozilla’s paid VPN product — which offers system-wide coverage, unlimited bandwidth, and server selection across 30 countries — is an open question. Mozilla’s framing of the two products as complementary suggests the company sees the built-in proxy as a gateway to its premium offering rather than a replacement.
Analysis
The decision to bundle IP protection directly into the browser reflects a broader industry reckoning with user privacy expectations. Opera has offered a built-in VPN since 2016, but Mozilla’s approach is notable for its integration with a browser that has historically positioned itself as the privacy-first alternative to Chrome. The move follows Firefox 148’s introduction of a master AI kill switch, as previously reported, signaling that Mozilla is doubling down on user-controlled privacy as a competitive differentiator.
The distinction between a proxy and a full VPN matters. The built-in feature protects only browser traffic, leaving other applications on the device exposed. For users seeking comprehensive network-level protection, the paid Mozilla VPN or third-party alternatives remain necessary. But for the majority of users whose primary exposure to tracking and surveillance occurs through web browsing, a zero-configuration proxy integrated at the browser level lowers the barrier to meaningful privacy protection significantly.
The 50 GB monthly cap positions the feature squarely as a casual privacy tool rather than a replacement for dedicated VPN services. That said, 50 GB exceeds the browsing traffic generated by most users in a month when video streaming is excluded, making it a practical default for everyday web activity.