Firefox 149 comes with new ideas for users concerned about privacy and, at the same time, practical improvements for daily navigation. The most striking novelty is a VPN tool directly integrated into the browser that offers up to 50 GB of monthly traffic to those who log in with a Mozilla account. Unlike the commercial product of the foundation, which covers all the traffic of the equipment, this function acts as a safe proxy that only links the traffic generated by the Firefox tabs, an important difference in choosing between time protection and system-to-system coverage. You can see the official details in the notes to the Mozilla version: Firefox notes 149 and compare the offer with the VPN paid on the product page: Mozilla VPN.
Activating the function is simple: there is a switch on the top right of the browser that allows the service to turn on and off. There is also an option to limit the use of the VPN to a maximum of five specific sites, which is useful if you want to preserve the 50 GB for specific moments, for example when you connect to public Wi-Fi networks or when you visit services where you prefer to hide your location. Mozilla has published help instructions on the use of the proxy integrated into its technical support: how to activate integrated VPN.

It is important to understand what type of data Mozilla handles with this function. The company indicates that it will collect minimum technical information necessary to maintain the functional service and study use patterns: for example, if a connection was successful or failure and large daily consumption aggregates. This does not amount to recording the content of the pages visited, but it does mean that the status and volume of the connections for service maintenance are monitored. The server that links the connections is located in the United States and its selection prioritizes location and performance, which can have implications in latency and in the legal framework under which these teams operate. To understand how Mozilla manages the data together, its privacy policy offers additional context: Mozilla privacy policy.
Implementation also includes practical care: some essential sites and services are excluded from the proxy tunnel to avoid problems with early session or with the reconnection of the VPN itself. In addition, the browser will warn from within the interface when you approach the monthly traffic limit, so you don't get surprises in the middle of the navigation session.
Beyond the VPN, Firefox 149 incorporates other improvements designed for productivity and safety. The Split View function comes in, which allows you to place side-by-side tabs inside the same browser window, a solution that already has other browsers and that Mozilla proposes as useful to compare texts, plan travel, take notes or make administrative efforts without constantly changing the window. Mozilla explains cases of use and how it helps organize the work on her blog: Split View on Firefox.
In terms of active security, Firefox now automatically blocks requests for notifications and revokes permissions from sites that have been identified as malicious by its SafeBrowsing protection system. This reduces friction and, above all, the risk of compromised sites maintaining persistent permissions to show intrusive content or perform abusive behaviors.
The update also closes a significant amount of vulnerabilities: Mozilla fixes 46 security problems, more than half with high-gravity rating. These include use-after-free, off-limits errors, JIT engine problems and possible vulnerabilities that could allow you to escape from the browser sandbox. The complete list and technical details are available in the official security notice: MFSA security notice. Keeping the browser up-to-date is key: many of these vulnerabilities can be exploited on the web and their parking reduces real risks to any user.

For now, the deployment of the integrated NPV will be undertaken gradually in the United States, the United Kingdom, Germany and France; Mozilla has not set a timetable for its expansion to other territories. This means that, if you live outside those regions, you may not yet see the option in your Firefox installation.
For whom does this new integrated VPN make sense? It is a good option for those looking for an additional layer of protection when browsing from the browser itself - for example on public networks or when consulting sensitive services - without the cost and complexity of a payment VPN covering the entire system. However, it should not be seen as an absolute replacement of a complete VPN if your objective is to protect all device connections or access services with wide geo-restrictions. In addition, the limitation of 50 GB per month and the location of the servers in the US. UU are factors to consider for those who prioritize total anonymity or lower court exposure.
In short, Firefox 149 strengthens Mozilla's bet to integrate privacy-oriented tools into your browser, without losing sight of usability. It is a comfortable alternative to protect navigation in specific contexts and at the same time brings productivity improvements and safety patches that justify immediate updating. If you want to deepen each technical aspect or set up the new VPN, the help pages and notes of the Mozilla version are the best starting point: version notes and integrated VPN support.
Related
More news on the same subject.

18-year-old Ukrainian youth leads a network of infostealers that violated 28,000 accounts and left $250,000 in losses
The Ukrainian authorities, in coordination with US agents. They have focused on an operation of infostealer which, according to the Ukrainian Cyber Police, was allegedly adminis...

RAMPART and Clarity redefine the safety of IA agents with reproducible testing and governance from the start
Microsoft has presented two open source tools, RAMPART and Clarity, aimed at changing the way the safety of IA agents is tested: one that automates and standardizes technical te...

The digital signature is in check: Microsoft dismands a service that turned malware into apparently legitimate software
Microsoft announced the disarticulation of a "malware-signing-as-a-service" operation that exploited its device signature system to convert malicious code into seemingly legitim...

A single GitHub workflow token opened the door to the software supply chain
A single GitHub workflow token failed in the rotation and opened the door. This is the central conclusion of the incident in Grafana Labs following the recent wave of malicious ...

WebWorm 2025: the malware that is hidden in Discord and Microsoft Graphh to evade detection
The latest observations by cyber security researchers point to a change in worrying tactics of an actor linked to China known as WebWorm: in 2025 it has incorporated back doors ...

Identity is no longer enough: continuous verification of the device for real-time security
Identity remains the backbone of many security architectures, but today that column is cracking under new pressures: advanced phishing, real-time proxyan authentication kits and...

The dark matter of identity is changing the rules of corporate security
The Identity Gap: Snapshot 2026 report published by Orchid Security puts numbers to a dangerous trend: the "dark matter" of identity - accounts and credentials that are neither ...