HUSK

RUN HUSK.  ·  PRIVACY-FIRST BROWSER

A browser that forgets.

Husk encrypts your profile at rest, spoofs your fingerprint, blocks ads and trackers at the DNS layer, and shreds itself when you close it. Built in Rust around a battle-tested rendering engine — auditable crypto, no telemetry, no account.

v0.1 · Windows 10/11 · 4 MB binary · portable build available

Why Husk

The browser settings page is not a privacy policy.

Mainstream browsers expose privacy as toggles buried six clicks deep. Husk ships them as defaults — and adds the ones that don't exist anywhere else.

Encrypted profiles, vault & notes

Profiles, vault and notes are sealed with Argon2id-derived ChaCha20-Poly1305. Run as many profiles as you want — encrypted or not — side by side, each with its own everything.

DNS-over-HTTPS + adblock

Built-in DoH proxy with AdGuard, Cloudflare, Quad9, NextDNS and Mullvad. Pair it with native adblock and you cut both the tracker JS and the DNS query that fetches it.

Anti-fingerprint

Canvas, fonts, user-agent and audio context are spoofed per session. Long-press reload rotates the spoof seed — every reload, a fresh identity to the site.

Paranoia tabs

Each Paranoia tab gets its own isolated storage context, wiped the moment you close it. Auto-shred after N minutes of inactivity, configurable.

Interceptor + cookie editor

Burp Suite, built in. Pause, edit and forward any request or fetch/XHR response. View, edit and wipe cookies per site or globally. Pop-out into its own window.

Boss key & duress vault

F9 turns every Husk window into a calculator — title, audio and Alt-Tab included. A second 'duress' phrase opens a decoy vault. For when looking innocent isn't optional.

Footprint

4 MB on disk. A few MB of RAM at idle.

Most "lightweight" browsers ship hundreds of MB of binary and burn gigabytes of RAM. Husk's release build is a single 4 MB husk.exe — and at idle it sits in the low single-digit MB. There's no extension framework, no sync engine, no telemetry agent. Just the Rust core wrapped around a shared WebView2 process.

Husk idle · one window · no tab
3 MB
Google Chrome idle · one window · no tab
225 MB

Real numbers, measured side-by-side on the same machine, both at idle with a single empty window. Roughly 70× less RAM at rest. The gap narrows under load (a tab is still a tab), but Husk never grows the way a Chromium-based browser does once extensions, sync, telemetry and helper processes spin up.

Trust, but verify

The crypto is open. Audit it before you trust it.

Husk's vault and profile-encryption code is published on GitHub. That's the trust-critical surface — the part where "it's encrypted" either holds up under inspection or it doesn't.

KDF Argon2id · 64 MB, 3 iters, 4 lanes
Cipher ChaCha20-Poly1305 (AEAD)
AAD husk-profile-v1
Format HPRF magic header + nonce + ct + tag
Recovery Phrase only · no backdoor · no reset
View on GitHub →

Run Husk.

Free. No account. No telemetry. Just download the binary.

Husk is free because nobody is paying with their attention. If it's useful to you, a one-off tip keeps it that way.