Protecting Your Privacy in Safari for OS X El Capitan

by

safari-iconEvery time you visit a website you are sharing information about yourself with the outside world. This article runs through a number of methods you can use to gain more control over what gets shared, and who it gets shared with, whenever you use Apple's Safari browser to access the web on a Mac.

It also covers methods you can use to prevent traces of your browsing history from showing up on your computer. While you may trust friends and family not to go searching through your web history, it's possible for them to unintentionally discover what you've been looking at, just by using Safari or performing an innocent search on your Mac. If you're interested in a similar overview covering Safari on iOS, check out this guide.

This guide assumes you are using the latest public release of OS X El Capitan (10.11.6 as of initial writing), which you can check by clicking the  symbol in the menu bar at the top left of your screen and selecting "About This Mac". The version number appears beneath the OS X version name. If you're not up to date, you can download and install the latest version of OS X via the Mac App Store located on the Dock or in the Applications folder.

Cookies, Location Services, and Tracking

Many websites attempt to store cookies and other web page data on computers used to access online content. Cookies are small data files that can include things like your IP address, operating system, web browser version, the date you last visited the site, as well as any personal information you may have provided, such as your name, email address, and any relevant preferences. This information is used to identify you when you revisit a site, so that it can offer tailored services, provide specific content, or display targeted ads.

Websites are increasingly upfront about their use of cookies – you've probably seen notices on popular sites requesting that you acknowledge their use. That's largely because EU law requires sites based within its borders to get consent from visitors to store or retrieve cookie data, and as of September 2015, Google requires that any website using its advertising products complies with the law if any of its visitors are inside the EU, regardless of where the site itself is based.

Safari 9 El Capitan
By default, Safari accepts cookies and website data only from websites you visit, and attempts to block third-party cookies that try to target you with ads or create a profile of your online activities. If you don't like the idea of being tracked at all, you can selectively block the use of cookies by following the steps below. Note however that some pages might not work unless you allow the use of cookies, so if you run into login problems or other issues on familiar sites after adjusting these settings, then you might want to dial back the changes.

Additionally, you may have noticed how Safari asks if you want to share your location whenever you visit a geolocation-enabled website. If you don't expect the site to provide helpful location-based services such as regional weather information or local amenities, you can deny the request and continue to do so like this on a case-by-case basis. Alternatively, you can change Safari's behavior whenever it encounters such a site, as described in the following steps.

Lastly, Do Not Track is a feature you can enable to prevent websites from tracking your site visits across the web. With the feature turned on, Safari specifically asks sites and their third party content providers (including advertisers) not to track you. In reality, it's up to the website to honor this request, but it's an option worth enabling for a potential extra layer of privacy.

Here's how to change Safari settings for cookies, location services, and tracking:

Safari Privacy tab

  1. From Safari's menu bar, select Safari -> Preferences..., and click on the Privacy tab.
  2. Select how Safari should deal with cookies and website data by clicking on the relevant button. Your options are: Always block, Allow from current website only, Allow from websites I visit (the default setting), and Always allow.
  3. This tab also lets you check any existing website data stored in your browser cache. You can get more information on it, as well as remove data for individual websites, by clicking the "Details..." button.
  4. To remove all data completely, press the button on the Privacy tab labeled "Remove All Website Data..." and confirm with "Remove Now", or click "Remove All" from within the "Details..." dialog.
  5. In the section labeled "Website use of location services", choose from: Prompt for each website once each day; Prompt for each website one time only; and Deny without prompting.
  6. To enable the Do Not Track feature, check the box at the bottom of the Privacy tab next to "Ask websites not to track me".

Enable Private Browsing

By enabling Private Browsing, you can prevent Safari from remembering the pages you visit and any AutoFill information, while any tabs you open within a private window won't be stored in iCloud. Safari also automatically asks sites and third-party content providers not to track you, prevents sites from modifying any information stored on your Mac, and deletes cookies when you close the related tab or window.

In Safari's menu bar, select File -> New Private Window. You'll notice the Safari address bar appears dark instead of light in a private window, indicating that Safari will not cache your browsing history, store snapshots of pages you visited or save your search history, and any AutoFill information will be lost after the window (or tab) is closed.

If you want to default to private browsing, you can set Safari to open a new Private Browsing window every time the app is launched. Choose Safari -> Preferences..., click General, select the "Safari opens with" pop-up menu, then choose "A new private window".

Safari General tab

Clear Browsing History

Safari for Mac enables you to remove all records of your browsing history including cookies and other cached website data over a specific timeframe of your choosing.

Browsing records that are cleared using the first method described below include any Top Sites not marked as permanent, your Frequently Visited Sites list, recent searches typed into the Safari search bar, web page snapshots shown in the open tab preview screen, download lists (but not downloads), sites you asked to send you notifications, and sites supporting Quick Website Search (the ability to search within specific sites from the Safari search bar).

Note that this method also clears history and web data from any devices logged into the same iCloud account.

  1. To clear all history including cached website data and cookies, select Safari -> Clear History... from the Safari menu bar.
  2. In the dialog window that appears, select the timeframe that you'd like to clear from the dropdown menu. Your options are: the last hour, today, today and yesterday, and all history. Click "Clear History" to confirm.

Safari Clear History 2If you want to clear your history but keep cached website data and cookies, hold the Alt/Option key on your keyboard during step 1 above, and the "Clear History..." menu option will change to "Clear History and Keep Website Data". Choose this description instead and continue on to select your clearance timeframe.

Safari Clear HistoryIf you only want to remove specific websites from your history, ignore the steps above and instead click "History" in the Safari menu bar, select "Show History", right-click a site in the list, and then select "Remove" from the contextual menu.

Exclude Browsing History From Spotlight Searches

If you'd rather retain your browsing history but don't want web pages you've visited to appear in system-wide Spotlight Search results, follow these steps.

  1. Open System Preferences and select the Spotlight pane.
  2. In the Search Results tab, uncheck the box next to "Bookmarks & History" (and "Bing Web Searches", if this is your default search engine).

Spotlight Safari search

Switch Search Engine and Disable Safari Suggestions

Just because you cleared your browsing history and web data in Safari or browsed in a Private window, doesn't mean your searches aren't still recorded elsewhere. For example, if you logged into a Google account during the session, searches you performed may be logged by Google and later show up as search suggestions when you start typing in the Google search bar in the same account. In fact, your search and ad results may be customized based on your search-related activity, even if you're signed out of your account.

To get around this issue, either consult the privacy help page of your preferred search engine to learn how to turn off tracking settings, or set a non-tracking search engine such as StartPage as your home page (using the General tab in Safari -> Preferences...). The next series of steps shows you how to set up Safari to use the non-tracking search engine DuckDuckGo when you type search queries into the address bar.

Another thing to reconsider is your use of Safari Suggestions. With this option enabled, your search queries, the Safari Suggestions you select, and related usage data are sent to Apple. Additionally, if you have Location Services turned on, when you make a search query in Safari with Safari Suggestions enabled your location is also sent to Apple. If you don't want this information shared, turn off Safari Suggestions as shown below.

  1. From the Safari menu bar, select Safari -> Preferences..., and click on the Search tab.
  2. Select the DuckDuckGo search engine from the dropdown menu. You can also choose whether you want search engine suggestions appearing in the Safari search bar using the checkbox immediately below.
  3. Uncheck the box next to "Include Safari Suggestions" in the Smart Search Field options; you can also disable the Quick Website Search function if you prefer by using the checkbox below.

Safari Search os x

Disable Frequently Visited Sites

By default, Frequently Visited Sites appear below your Favorites whenever you open a new tab or a new Safari window. You can turn this feature off.

There are two ways to prevent frequently visited sites from appearing in new tabs and windows. The simplest way is to click Bookmarks in the Safari menu bar and untick "Show Frequently Visited in Favorites". The second method described below prevents Favorites from appearing in new tabs and windows altogether, but removes the option to display your Top Sites as well.

  1. From the Safari menu bar, select Safari -> Preferences..., and select the General tab.
  2. In the dropdown menus for "New windows open with:" and "New tabs open with:", select an option other than Favorites, such as "Empty Page".

Safari general tab

Turn Off AutoFill

Safari's AutoFill feature remembers text and values you enter into online forms, and can be useful for speeding up logins and registrations as well as online purchases. If other people use your Mac, you might not want this information to show up when websites are revisited. Here's how to disable AutoFill.

  1. In the Safari menu bar, select Safari -> Preferences... and click on the AutoFill tab.
  2. Uncheck the boxes next to the details you wish to prevent Safari from autocompleting in web forms. You can also edit already saved information by clicking the "Edit..." buttons.

AutoFill Safari

Finally...

If your web privacy concerns extend to a desire for enhanced security and comprehensive end-to-end encryption, consider subscribing to a Virtual Private Network (VPN) service (Private Internet Access and IPVanish are two popular choices) and using Tor browser for OS X.

Top Rated Comments

KALLT Avatar
58 months ago

I got tired of managing tracking cookies (yes, they DO get set even with "do not track" activated!) with an external app named Cookie. Deleting cookies also removes useful cookies like logins.

Do not track is nothing more than a signal that your browser sends along. Whether websites honour this setting is up to them and most do not even pay attention to it.

What is so tiring about Cookie though? You set it up once and mark your favourite websites. Cookie takes care of the rest and deletes all non-favourites and tracking cookies automatically. It even gets rid of Flash and Silverlight cookies.

The problem with cookies is that websites can detect if you are blocking cookies or not. It is thus better to let them set cookies and just remove them periodically.
[doublepost=1470423198][/doublepost]

There is no such thing as privacy any longer if you are connected to the web. You can practice safer browsing techniques but if you are connected and chose a digital life you are volnerable.

That depends on your definition of privacy as well as the persons you want to protect yourself against. It is certainly impossible to shield yourself completely, but it is relatively easy to keep certain groups out.
Score: 2 Votes (Like | Disagree)
SteveW928 Avatar
58 months ago

There is no such thing as privacy any longer if you are connected to the web. You can practice safer browsing techniques but if you are connected and chose a digital life you are volnerable.

Yea, for the most part, unless you have a clean everything through a VPN... then you're pretty safe if the VPN provider isn't compromised.

But, the more of these kind of techniques you implement, the more work it makes to track everything related to you. Or, at least it keeps you a bit anonymous from provider to provider. The gov't is a whole other matter (and, unfortunately, the biggest threat).

I got tired of managing tracking cookies (yes, they DO get set even with "do not track" activated!) with an external app named Cookie. Deleting cookies also removes useful cookies like logins.

Yea, that's the problem. Cookies are generally a good thing, they can just be used to track things beyond what a person might want. Managing them is more trouble than it's worth, I'd think.

The other issue is that someone like the gov't could aggregate info across providers, so even a VPN won't do much good with modern OSs. Since modern OSs constantly log into various accounts from various apps, even when you're connected to a VPN, it would be quite easy to connect an IP at point in time, with a person.
Score: 2 Votes (Like | Disagree)
iapplelove Avatar
58 months ago
There is no such thing as privacy any longer if you are connected to the web. You can practice safer browsing techniques but if you are connected and chose a digital life you are volnerable.
Score: 1 Votes (Like | Disagree)
modemthug Avatar
58 months ago
Meanwhile Windows 10 just sends all of your keystrokes to Microsoft/the NSA
Score: 1 Votes (Like | Disagree)
jdillings Avatar
58 months ago
This is another great article reminding consumers of the privacy safeguards available to them in Apple products.
Score: 1 Votes (Like | Disagree)
SteveW928 Avatar
58 months ago

Nowadays, a VPN will not make you very anonymous. Only enough to protect your anonymity against the bottom feeders (that don't have state-level resources and freedoms) in the global PII-market ...

One of the reasons is that the combination of meta data that every browser shares when connecting to a web-server is unique. Go to EFF Panopticklick ('https://panopticlick.eff.org') and test your browser. Based on this profiling can be made (and is made) by actors having the necessary resources.

No doubt.... if the Feds come after you, you're pretty much screwed. I guess I was thinking of a form of profiling to someone who had data across services. But, I'd forgotten about machine-build profiling and such. Macs are probably a bit more secure (i.e.: less unique) in that regard, but once you combine stuff like software, plugins, and fonts installed, there's a pretty big heap of circumstantial evidence there.

Meanwhile Windows 10 just sends all of your keystrokes to Microsoft/the NSA

Heh, yea. We're talking about many levels/layers of privacy here. If the NSA is after you, you'd best stay off the 'Net. But, that said, why make things any easier for any of these folks... site-owner/advertiser to gov't agency? Most end up going after the low-hanging fruit, unless you're specifically targeted.
Score: 1 Votes (Like | Disagree)

Top Stories

lg wing

LG Considering Exit From Smartphone Business, Halts LCD Production for iPhone

Wednesday January 20, 2021 5:38 am PST by
LG is considering exiting the smartphone business entirely amid declining shipments and accrued losses of $4.5 billion over the past five years (via The Korea Herald). LG CEO Kwon Bong-Seok cautioned staff earlier today that the company is re-evaluating its presence in the smartphone industry: Since the competition in the global market for mobile devices is getting fiercer, it is about...
google maps detailed street level e1611052089473

Google Maps Gains Enhanced Street-Level Detail in Four Major Cities

Tuesday January 19, 2021 2:34 am PST by
Google Maps has quietly been updated to include significantly more detailed street-level information in a handful of key cities around the world. Upon zooming in, Google's maps for Central London, Tokyo, San Francisco, and New York now benefit from shapes and widths that match the scale of roads more accurately. Meanwhile, enhanced graphical representations of sidewalks, crosswalks,...
2019 mac pro side and front

Tim Cook Gifted Donald Trump 'First' 2019 Mac Pro

Wednesday January 20, 2021 5:45 pm PST by
Apple CEO Tim Cook gifted former United States President Donald Trump with the first 2019 Mac Pro that came off of the assembly line in Austin, Texas, according to a financial disclosure report that was released today (via The Verge). "Mac Pro Computer, the first created at the Flex Factory in Austin, Texas," reads the entry, which values the machine at $5,999, the base price for a Mac Pro....
airpods max sim ejector

AirPods Max Headband Removable With Just a SIM Ejector Tool, Hinting at Interchangeable Headbands

Tuesday January 19, 2021 8:25 am PST by
It is possible to remove the headband of AirPods Max with just a standard SIM card ejector tool, hinting at the possibility of interchanging headbands to achieve a different colorway. Image via Prelook In December, MacRumors revealed the large variety of AirPods Max ear cushion color combinations when it became clear that they were magnetically attatched and available for sale separately....
iphone 5s black slate

Images of Unreleased iPhone 5s in Black and Slate Shared Online

Sunday January 17, 2021 9:47 am PST by
Twitter user @DongleBookPro has today shared images of a prototype iPhone 5s in an unreleased Black and Slate color. The iPhone 5s was launched in September 2013. The device featured Touch ID, a 64-bit processor, and a True Tone LED flash for the first time. Other new features included a five-element lens with an f/2.2 aperture, a 15 percent larger camera sensor, Burst Mode, and Slo-Mo...
iphone 12 vs iphone 12 mini

Apple Shifting Some Production From iPhone 12 mini to iPhone 12 Pro to Meet Demand

Wednesday January 20, 2021 8:12 am PST by
Apple has reportedly cut production of the iPhone 12 mini by two million units to create more manufacturing capacity for the iPhone 12 Pro, according to a new Morgan Stanley investment note seen by PED30. Apple is believed to have made the switch for the first quarter of 2021 in an effort to combat continuing lead times for the more popular iPhone 12 Pro. iPhone 12 Pro lead times remain ...
Apple VR Feature

Bloomberg: Apple's First AR/VR Headset 'Pricey, Niche Precursor' to More Ambitious AR Glasses and Could Launch Next Year

Thursday January 21, 2021 3:27 am PST by
Apple's first virtual reality headset will be a "pricey, niche precursor" to a more ambitious augmented reality product, according to a new report from Bloomberg's Mark Gurman. As a mostly virtual reality device, it will display an all-encompassing 3-D digital environment for gaming, watching video and communicating. AR functionality, the ability to overlay images and information over a view...
shot on iphone 12 apple

Apple Highlights Photos Shot by iPhone 12 Users: Portraits, Cityscapes, and More

Tuesday January 19, 2021 6:05 am PST by
Apple today shared a gallery of photos shot by customers using the iPhone 12 mini, iPhone 12, iPhone 12 Pro, and iPhone 12 Pro Max, with scenes including cityscapes, landscapes, portraits of people, and more at day and night. Shot on iPhone 12 Pro Max by "NKCHU" in China (top) and shot on iPhone 12 Pro Max by Rohit Vohra in India (bottom) iPhone 12 mini and iPhone 12 models have a dual camera ...
Apple and Hyundai feature

Apple Car Production Again Linked to Kia Motor's US Plant in Georgia

Tuesday January 19, 2021 4:19 am PST by
Hyundai intends to transition the company's Apple Car involvement to its Kia brand as part of an internal arrangement that could see production move to the U.S., according to a new report today. On Sunday, Korea IT News reported that Apple and Hyundai are seeking a partnership agreement for the upcoming Apple Car by March, and that the electric vehicles could be made at a Georgia factory...
iPhone 13 Notch Feature

iPhone 13 Rumored to Feature Smaller Notch, Pro Model Cameras to Use Larger Image Sensor

Thursday January 21, 2021 1:38 am PST by
Apple's iPhone 13 series will feature a redesigned Face ID system that will allow for a smaller notch at the top of the screen, according to a new report today. The rumor comes via hit-and-miss Taiwanese industry publication DigiTimes, whose supply chain sources also claim that the ultra wide-angle lens in Apple's next-generation iPhones is due for an upgrade. The next-generation iPhones'...