Passkeys
Passkeys replace passwords with an easier and safer sign-in method. Your private key is never kept on a web server, so you don’t have to worry about website leaks compromising your accounts. And passkeys never leave your device and are specific to the site you created them for, making it almost impossible for them to be phished. Passkeys are end-to-end encrypted and sync across your Apple devices through iCloud Keychain. On Apple devices, simply use Face ID or Touch ID to sign in. For websites or apps on non-Apple devices, use your saved passkey by scanning the QR code with your iPhone and iPad and using Face ID or Touch ID to authenticate.
Intelligent Tracking Prevention
You may have noticed that when you look at something to buy online, you suddenly start seeing it everywhere else you go on the web. This happens when a third party tracks cookies and other website data to show you ads across various websites.
Intelligent Tracking Prevention uses the latest in machine learning and on-device intelligence to fight this cross-site tracking. It hides your IP address from trackers so what you look at on the web remains your business — not an advertiser’s. And you don’t have to change any settings for these protections because Intelligent Tracking Prevention is on by default.
Privacy Report
Your Privacy Report shows you all the cross-site trackers that are being blocked by Intelligent Tracking Prevention in Safari. You can access your report from the Safari toolbar and the Safari start page.
Password monitoring
Safari checks to see whether your saved Keychain passwords have been compromised in data breaches. It uses secure and private cryptographic techniques to regularly check derivations of your passwords against a publicly available list of breached passwords. If Safari identifies a potentially compromised password, your device will notify you. Your password information is never revealed as part of this process — not even to Apple.
Social widget tracking prevention
Social widgets embedded on websites, such as like buttons, share buttons and comment fields, can be used to track you even if you don’t click them or use them. Safari blocks this tracking by default, and it prevents social widgets from accessing your identity unless you grant them permission.
Fingerprinting defence
Safari works to prevent advertisers and websites from using the unique combination of characteristics of your device to create a “fingerprint” to track you. These characteristics include the device and browser configuration, and fonts and plug-ins you have installed. To combat fingerprinting, Safari presents a simplified version of the system configuration so more devices look identical to trackers, making it harder to single yours out. This protection is on by default, so there are no extra steps for you to take.
Private Browsing
When you turn on Private Browsing, Safari won’t add the sites you visit to your history, remember your searches or save any information from forms you fill out online. You can use content blockers to control what’s loaded onto your browser and to prevent anyone from attempting to track your activity on a website or across websites. Content blocker support is designed so that it can’t send developers information about what you’re looking at.
Search
With the Smart Search field in Safari, you can type website names, web addresses and search queries all in one place. Safari minimises the amount of data sent to third-party search engines — for example, it won’t share cookies or your precise location, which may happen if you search by other means. Safari also offers the option to set DuckDuckGo as your default search engine, allowing you to search the web without being tracked.
Extension controls
Browser extensions can help you do many things, like saving money on purchases or improving your grammar. However, they can also be used to track you, taking note of what you browse and even what you type. With Safari extension controls, you can grant extensions access to your information just for one day, just for this current website or always.