Mozilla rolled out Firefox 149.0 to its release channel on March 24, 2026, and this update is not a minor patch. The company packed it with a free built-in VPN, tougher security defenses, and a suite of productivity tools that fundamentally change how users interact with the browser.
Firefox 149.0 ships free native VPN for millions of users
The headline feature in Firefox 149.0 is a native, free VPN service baked directly into the browser, no third-party app required.
Once a user signs in and activates the feature, Firefox routes all web traffic through an encrypted proxy server. This process hides the user’s IP address and physical location, cutting off internet service providers and third-party trackers from monitoring browsing activity.
Mozilla caps the service at 50 GB of protected data per month, making it particularly useful for users who frequently connect to unsecured public Wi-Fi networks or conduct sensitive sessions like banking or health research.
Mozilla is currently rolling the feature out to users in the United States, the United Kingdom, Germany, and France before expanding it globally. The company is using a staged release strategy to catch bugs early and refine overall behavior before a full worldwide launch. Users also retain granular control, they can toggle the VPN on or off for individual websites as needed.
Automatic security blocks and a unified privacy dashboard now live
Beyond the VPN, Mozilla significantly hardened Firefox against emerging web threats in this release.
Firefox 149.0 now automatically blocks notifications and permanently revokes permissions for any website that SafeBrowsing flags as malicious. This stops dangerous sites from pushing background spam or phishing alerts without requiring the user to lift a finger.
Mozilla also introduced the new TrustPanel to make security auditing simpler for everyday users. Accessible directly from the address bar, the TrustPanel merges the browser’s previous privacy and security menus into a single, unified dashboard. Users can now instantly verify whether their connection is secure and check exactly which tracking elements Firefox is blocking on any given page.
Firefox isn’t the only browser beefing up privacy features, our guide to browsers with built-in VPNs compares the top contenders, helping you choose the one that best balances security, convenience, and data limits.
Under the hood, Mozilla’s engineers tightened execution requirements for JavaScript files loaded within the browser’s parent process, a defense-in-depth measure designed to reduce the attack surface available to malicious scripts.
Split view, faster PDFs, and new developer tools round out the release
Firefox 149.0 does not stop at security. Mozilla completely overhauled the user workflow with several tools that boost day-to-day productivity.
The new Split View feature lets users open two web pages side by side inside a single window, making research and content comparison significantly faster. PDF performance also received a major boost, hardware acceleration now makes PDF files load up to three times faster than in previous versions.
Mozilla also activated an experimental Tab Notes feature inside Firefox Labs, allowing users to attach personal reminders and notes directly to specific web pages for later reference.
On-device translation support now extends to Bosnian, Norwegian Bokmål, Serbian, and Thai, and crucially, the browser handles all translation locally without sending any data to external servers.
Users in Australia, India, Italy, Poland, and Austria also gained access to the Address Autofill feature with this release, while a new Share button in the toolbar lets users push tabs directly through built-in Windows or macOS system sharing options.
For developers, Mozilla activated the new Reporting API in this release, giving teams a standardized mechanism to monitor Content Security Policy violations and catch security misconfigurations before they become exploitable gaps.
Firefox 149.0 represents one of Mozilla’s most ambitious updates in recent memory, one that positions the browser not just as a tool for navigating the web, but as an active layer of defense against the threats that come with it.
