1.2.0 (2026075598)

Note

New builds have been pushed under the 1.2.0 version number:

• 2026072670: Expose about:config
• 2026074417: Make sure Sentry only initialises after a crash is detected
• 2026075601: Disable isolated content processes and app zygote preloading due to crashes, page reloading, and broken media playback on certain websites

Highlights

• Removed unused and redundant libraries.
• More personalisation options for themes.

Known Issues

• Isolated content processes and app zygote preloading have been temporarily disabled due to crashes and unexpected page reloading on certain websites. These features will be re-enabled in a future update once the underlying issues are resolved.
• After setting a custom selected wallpaper that is "unified", i.e. is used in both portrait and landscape, then attempt to split the settings to have two differently oriented wallpapers, you'll see an error message.
• A 'Secret Debug Info' menu item is exposed in settings, but it should display nothing as we've removed the underlying telemetry libraries

Changes

• Due to architectural changes made upstream, we no longer support the old menu design.
• 'Secret Settings' in the browser are now exposed, letting you play around with various expirmental settings within the browser.

Updated to Gecko 148

Updated the underlying browser engine from Gecko 140 to 148, incorporating the latest upstream improvements and security patches.

GeckoView Lite enabled

Trims out built-in components the app doesn't use, resulting in a smaller install size and less background overhead.

Isolated content processes (site isolation) - temporarily disabled

Warning

This feature has been temporarily disabled in the latest build due to crashes and unexpected page reloading on certain websites. It will be re-enabled in a future update.

Each website now runs in its own separate, sandboxed operating system process. This is the same Fission architecture used by Firefox desktop, and it provides three key benefits:

• Security: A malicious site can no longer use Spectre class attacks to read data from your other tabs where each process only has access to its own site's data.
• Stability: If a site crashes, only that tab is affected. Your other tabs, the browser UI, and any background work continue running normally.
• Containment: Even if an attacker exploits a bug within a single tab's renderer, the damage is confined to that one site's process.

App zygote preloading - temporarily disabled

Warning

This feature has been temporarily disabled in the latest build due to the same issue affecting isolated content processes. It will be re-enabled in a future update.

The browser engine (libxul.so) is a large library that every content process needs to load. With app zygote preloading, this library is loaded once into a "starter" process, and new tabs fork from it instantly, inheriting the preloaded engine through shared memory rather than loading it from scratch each time.

• Faster tabs: New processes start nearly instantly instead of spending hundreds of milliseconds loading the engine.
• Less memory: Forked processes share read only memory pages, reducing per process memory usage by roughly 33%.
• Better battery life: Less CPU work per new tab means lower power consumption during multi tab browsing.

Requires Android 10 or later.

Note

This will eventually come to mainline Firefox for Android releases, but we'd thought we'd give Waterfox users a head start.

"Dummy" Glean SDK

Mozilla's Glean SDK is a part of the Android Components, and the Waterfox app itself has many references to it. In previous versions, we'd disable the calls to Glean, but with a little bit of effort, we've now replaced the library with a "dummy" version, for peace of mind. The codebase still makes calls to the Glean SDK, but since it's our "dummy" version, it does absolutely nothing. Thanks to the Tor Project for showing us how to get there.

Adjust SDK removed

The Adjust SDK is a third party advertising attribution tool that Firefox for Android uses to track which ad campaigns drive installs. The SDK was disabled in Waterfox, but this version round we've entirely removed it from Waterfox, which should shave some KiB's off the final app size.

Sentry crash reporting

Waterfox includes Sentry for crash reporting, but with significant changes from the upstream Firefox behaviour. Sentry does not initialise at startup; it only loads when a crash has actually occurred. When it does, you'll always be shown a prompt before any data is sent so there is no silent automatic reporting. Session tracking and caught exception reporting are also disabled.

Theme customization expanded

Theme settings have moved to Settings > Customize, with separate light and dark colour options and an automatic mode that matches your device theme.

1.2.0 (2026074414)

Please use newer build (2026075601)

1.2.0 (2026072670)

Please use newer build (2026075601)

1.2.0 (2026072610)

Please use newer build (2026075601)

1.1.9 (2026016869)

Fixes

• (MFSA 2026-03) Security Vulnerabilities fixed in Firefox ESR 140.7
• (MFSA 2025-94) Security Vulnerabilities fixed in Firefox ESR 140.6

1.1.8 (2025502022)

• Fixes for Mozilla Foundation Security Advisory 2025-94

1.1.7 (2025468809)

Fixes

• Fixed crashes/ANR on startup for certain devices.

1.1.6 (2025462850)

Changes

• Due to popular demand, Startpage has now been changed back to the default search. (Note: If you have changed your default search provider manually, this will not affect you)

Fixes

• All security fixes from Mozilla Foundation Security Advisory 2025-88

1.1.5 (2025412524)

This release updates search defaults on Android and brings important fixes and security updates.

🌳 Ecosia partnership

I'm also happy to announce a renewed partnership with Ecosia, the search engine that uses its profits to fund climate-positive projects. Keeping Ecosia as your default helps create tangible impact while you browse.

If you already use an alternative default, this will not be changed.

• Real-world impact: Ecosia invests the majority of its profits into tree planting, biodiversity, and broader climate solutions, with transparent monthly reports.
• More privacy by default: Ecosia does not build cross-platform personal profiles for ad targeting. Personalization features and cookies are opt-in and require your consent.
• Greener infrastructure: Ecosia runs on renewable energy and is steward-owned to protect its mission for the long term.
• Quality results you expect: Ecosia is rolling out Google-powered results and ads for a growing number of users by default; otherwise results come via Microsoft Bing. You can choose Microsoft Bing instead within Ecosia’s settings.
• Consent and cookies: In the EU, UK, and certain US states, Google will not set additional cookies without your consent. In other locations, additional cookies may apply depending on your Google account and settings. You are also free to adjust your cookie preferences anytime via the settings page. Learn more in Ecosia’s privacy policy.

Fixed

• Fixed malformed search queries when using Mojeek.

Security

• Updated to GeckoView ESR 140.4 and Android Components 140.4, bringing upstream security and stability fixes.

1.1.4 (2025346585)

New Features

• Added Black theme, specifically designed for OLED devices

Misc

• Updated to the latest development libraries for the latest security and performance fixes