Redoubt
A privacy-hardened Android browser, built from Firefox’s source and LibreWolf’s privacy configuration.
Redoubt is not LibreWolf, and not Firefox. It is an independent fork of LibreWolf’s source, maintained by someone who is not a LibreWolf developer. Neither the LibreWolf project nor Mozilla has built, reviewed, endorsed or supported it. Please do not report Redoubt problems to LibreWolf or Mozilla.
Redoubt ships the same privacy configuration and the same Gecko-level security patches as LibreWolf desktop, on a platform whose process containment is weaker — and we publish exactly where.
That “where” is the measured, dated parity table in PARITY.md, summarised on Privacy & limits. The largest gap first: Android has no Gecko content-process sandbox, so Redoubt’s process containment is weaker than LibreWolf on the desktop.
Status: beta
Each beta is published as the latest release on GitHub Releases. The current betas are based on Firefox 157 (Firefox’s regular release track), need Android 8.0 or later, and install over the previous beta as an update.
Redoubt is not on F-Droid, Accrescent or any app store yet. Automated device testing so far covers an x86_64 emulator only; ARM builds are checked but have not been run on a physical phone by the project. Reports from real devices are welcome.
Download
| file | for |
|---|---|
fenix-arm64-v8a-release.apk | almost any phone from the last several years |
fenix-armeabi-v7a-release.apk | older 32-bit devices |
fenix-x86_64-release.apk | emulators |
fenix-universal-release.apk | all three ABIs; much larger, prefer a per-ABI APK |
The fenix- prefix is the file name of the Android app build Redoubt is made from; the installed app is Redoubt, org.redoubtbrowser. Installing, and staying up to date (including with Obtainium), is on Install & updates.
Verify before installing
From the folder you downloaded the APK and SHA256SUMS.signed into:
sha256sum -c --ignore-missing SHA256SUMS.signed
apksigner verify --print-certs fenix-<abi>-release.apk | grep -i SHA-256The signing certificate’s SHA-256 digest must be:
64:14:EB:33:46:81:CF:6E:92:90:34:B5:6A:06:2D:2B:8D:A0:90:82:21:72:F7:A3:95:2C:85:FD:D1:28:3B:D0Every Redoubt APK is signed with this one key (APK signature schemes v2 and v3). If the digest differs, do not install it, and report it privately. The key and its custody are documented in SIGNING.md.
What it is
- Built from source. Gecko and the Android app are compiled from Firefox’s source with LibreWolf’s shared patch set and preference configuration applied, rather than patching a prebuilt browser.
- Telemetry and experiments removed, plus Google Play Services; sponsored shortcuts removed, search suggestions off by default.
- LibreWolf’s privacy defaults, uBlock Origin preinstalled, and stronger site isolation than stock Firefox for Android.
The details, and what is not yet proven, are on Privacy & limits. If you want a mature, widely used hardened Firefox for Android today, IronFox is that, and it is the browser LibreWolf itself recommends to Android users. How Redoubt differs is in POSITIONING.md.
Attribution
Redoubt is built on LibreWolf’s work. The privacy configuration that is the point of this browser, and the patch set that enforces it, were written by the LibreWolf project. Redoubt is a fork of LibreWolf’s source under MPL-2.0 and ports that work to Android, a platform LibreWolf does not ship. Redoubt does not publish desktop builds: for LibreWolf on the desktop, use librewolf.net.