Everything Husk ships with.
Privacy as a default, not a setting. Each of these is enabled out of the box — no checklist to walk through after install.
Disk-level privacy. What lives on your machine, encrypted.
Encrypted profiles
Argon2id (64 MB · 3 iters · 4 lanes) derives a key, ChaCha20-Poly1305 seals the profile blob. Phrase only — no recovery email, no backdoor. Forget the phrase, the profile is gone.
Multi-profile, mix-and-match
Run as many profiles as you want, side by side. Some encrypted (sealed with a phrase), some not (faster, day-to-day). Each gets its own bookmarks, history, cookies, vault — its own everything.
Vault + duress slot
Built-in credential manager. Same crypto as profiles. Generate strong passwords inline at the focused field. A secondary 'duress' phrase opens a decoy vault — for the moment someone insists you unlock it.
Encrypted notes & notebooks
Markdown notes grouped into notebooks. Each notebook can carry its own phrase — even inside a sealed profile — for an extra trust layer on the things that really matter.
Encrypted-at-rest temp dir
Unlock materializes the profile in a temp directory; the moment you lock or close, every file is wiped. A boot-time sweep catches anything left behind by a crash.
Portable mode
The portable zip ships with the marker file already inside. Extract it anywhere, run Husk.exe — every byte (bookmarks, history, profiles, WebView cache) lives next to the binary. USB-stick clean.
Network-level privacy. What leaves your machine, and what it carries.
DNS-over-HTTPS
Built-in local DoH proxy. Choose AdGuard (ad-blocking by default), Cloudflare, Quad9, NextDNS, Mullvad ad-block, or custom. Auto-fallback if your network blocks it.
Adblock
Native blocker on the request hot-path. EasyList + EasyPrivacy + cosmetic rules. Toggle global or per-site from the shield icon.
Anti-fingerprint
Canvas, audio, fonts and user-agent spoofed per session. Long-press the reload button to rotate the seed — sites see a brand-new visitor on demand.
Cookie manager
View, edit, delete cookies for the current site or globally. Surface HttpOnly, Secure and SameSite. Block third-party cookies per origin.
Three modes, three trust levels. Pick how much of you the site gets to keep.
Normal tab
Persistent. Bookmarks, history, cookies. The browser you actually use day to day.
Private tab
Shared incognito context across all private tabs. Wiped when the last one closes.
Paranoia tab
Isolated storage context per tab. Auto-shreds after N minutes idle, or instantly on close. Each Paranoia tab is its own short-lived stranger.
Dev-style instruments built into the browser so you can see — and break — what a site is doing.
Request interceptor
Live list of every request. Pause, edit method/URL/headers, forward or drop. Replay with one click. Filter by type. Pop out into its own window.
Response interceptor
Pause every fetch/XHR response before the page reads it. Edit the body, forward modified, or drop. Useful for client-trust audits (`is_admin: false` → `true`).
Screenshot tool + editor
Capture the full page or a rectangle selection. Built-in editor for crops, arrows and redactions. Save to disk, copy to clipboard, or paste straight into Notes.
Multi-window per profile
Open N windows on the same profile (Chrome-style). Single-process per profile, so no data-race on bookmarks.json.
Pop-out panels
Detach the interceptor or cookie editor into its own window so it doesn't fight the page for space.
Features for when someone is looking over your shoulder, or might be later.
Boss key F9
Hides every Husk window behind a working calculator. Window title becomes 'Calculator'. Audio mutes. Alt-Tab is clean. F9 again to come back.
Fake vault under duress
Your vault has two phrases: real and duress. The duress phrase unlocks a decoy vault with plausible-looking credentials and zero connection to the real one. Even an empty vault has a duress slot, so its absence doesn't prove anything.
Encrypted profile, no preview
Locked profiles show no avatar, no bookmarks preview, no history hint. From outside the unlock screen, they're indistinguishable from each other.
Delete requires the phrase
Even wiping an encrypted profile asks for the phrase. A passer-by can't destroy a profile they couldn't read.
Wipe global identity
One click clears cookies + storage + UA + fingerprint and respawns a fresh tab. The site you were on doesn't know you anymore.