Changes apply immediately and are saved for next time.
Startup
Open previous windows and tabs
Restore the tabs from your last session when Theseus starts.
Appearance
Choose a theme for the browser. System follows your operating system's light/dark setting.
Search
Pick what your address bar and the toolbar dropdown search with.
Default search engine
Used when you type into the address bar.
Additional search engines
These appear in the toolbar dropdown. Drag to reorder. Toggle off to move an engine back to the catalog.
Add from catalog
Discover more engines
Or add a custom URL
Passwords
Local password vault. Set once, unlocked with a master password. Encrypted at rest; nothing leaves your machine.
Master password
Used to unlock the vault every session. This is separate from your Ariadne wallet passphrase — memorize it, we can't recover it.
Seed for deterministic passwords
The "Generate" button in an entry derives a password from this seed. Same seed on another device → same passwords for the same site + username.
The mnemonic is used only to derive the password-purpose subtree (m/1381'/0'). It is not stored — only the derived subtree key is persisted, encrypted with your master password.
Unlock vault
Enter your master password to view or add entries.
Your passwords
Reveal, copy, or edit any entry. The vault re-locks when Theseus quits.
Add an entry
There is no autofill yet (phase 2). Copy the password from an entry and paste it into the site.
Registries
How Theseus picks between the BCNR / BCDN and ICANN / IANA, when a name exists in both.
Collision policy
A name only exists in both registries when its TLD isn't BCNR-unique (e.g. .de). BCNR-unique TLDs (that only exist on BCNR) never conflict.
Remembered choices
"Always use …" picks you made from the switcher or the prompt. Reset them to be asked again.
Performance
Keep Theseus light on resources.
Throttle inactive tabs
Background and inactive tabs use far less CPU. Recommended.
Privacy
Reduce tracking and lock down device access.
WebRTC IP policy
Controls which IP addresses WebRTC may reveal — the same thing the "WebRTC Network Limiter" extension does, built in. Public interface only hides your local IP; Disable non-proxied UDP is strongest. Tor forces the strongest automatically.
Block camera
Deny camera by default — also hides its name from fingerprinting.
Block microphone
Deny microphone by default — also hides its name from fingerprinting.
Hide media devices
Blank the labels and IDs of all cameras, microphones and speakers from enumerateDevices() — closes a WebRTC fingerprinting leak, like Firefox.
Anti-fingerprinting
For each: Show (real), Hide (neutral value), Spoof (a decoy), or Manual (set your own).
Timezone
What sites read via JavaScript (Intl / Date).
Language
navigator.language and the Accept-Language header. Spoof reports a major world language; Manual lets you type any locale.
These reduce tracking and hide your IP, but a custom browser can still be fingerprinted. For maximum anonymity, use the Tor Browser.
Storage
By default Theseus keeps nothing across sessions — everything toggled on here is wiped when you quit. Untoggle a bucket to keep it (e.g. cookies to stay signed in on trusted sites).
Clear cookies on quit
Drops session + persistent cookies. You'll sign in again next launch.
Clear HTTP cache on quit
Drops cached images / scripts / stylesheets. Sites re-download; small disk win.
Clear site storage on quit
Drops localStorage, IndexedDB, service workers, and the cache API. Web-app state resets.
Clear history on quit
Drops navigation history + the saved-tabs session file (overrides "Reopen previous tabs").
There is no persistent password manager — passwords are never stored to disk regardless of these toggles. Use a dedicated password manager (Bitwarden, KeePass, etc.).
Add-ons
Small modules that add capabilities to Theseus. Add-ons live as folders under
%APPDATA%\Theseus Navigator\addons\. Drop a folder in, restart, it's live.
Bundled reference add-ons (like the Notepad) are copied there on first run — you can edit or remove them
without losing anything the browser needs.
Installed
Loading…
Add-ons run with full app access — treat installing one like installing an unsigned executable.
Only load add-ons whose source you trust.