0.0.0.11

Chromium 157.0.8103.38.

do not use the android release on this release as its broken. use the previous release or wait for the 0.0.0.12 release.

Fixes

• No more white or black flash when you open a new tab with an Iris colour palette.
• The app-lock passphrase box matches the theme when Ubuntu and Iris are set to different light/dark modes.

New

• A third ad-block level: HaGeZi Ultimate, Threat Intelligence Feeds and Fake. Built in, off by default (Iris hardening → Ads and trackers on Ubuntu; Privacy and security on Android).
• Certificate Transparency enforced. Certificate Transparency reports and lookups to Google are off.
• Text measurements and element sizes slightly randomised per site, against font fingerprinting.
• A switch to show web addresses as punycode (off by default).
• No install and update pings from component updates; security lists still update.
• Login codes are no longer read from Gmail. HTML-in-canvas is off.
• Ubuntu: clicks on browser prompts are ignored while a picture-in-picture window covers them.
• Android: Exit in the menu closes Iris completely, deleting your data first if it's set to clear on exit.
• Android: Google Play services, Firebase, Play Core and ML Kit code are left out of the app.
• Android: the lock screen just says "Iris".

Install

sudo apt install ./iris-browser-stable_157.0.8103.38-1_amd64.deb

To verify the download, see the README.

Iris 0.0.0.10, based on Chromium 156.0.8078.47

Iris 0.0.0.10, based on Chromium 156.0.8078.47

A small fix for 0.0.0.9.

Fixes

• The offline game is RUNNER again. In 0.0.0.9, chrome://dino and the offline page showed the classic dinosaur, because one Iris patch wasn't applied
• Every build now checks that all Iris patches are really in the source code, so a missed patch stops the build

Everything else is the same as 0.0.0.9.

Install
sudo apt install ./iris-browser-stable_156.0.8078.47-2_amd64.deb

Android: iris-156.0.8078.47-2-pqc-signed.apk. Snap: see the README.

To verify the download, see the README.

Iris 0.0.0.9, based on Chromium 156.0.8078.47

Iris 0.0.0.9, based on Chromium 156.0.8078.47

Moves Iris to Chromium 156 stable, with its security fixes.

Security

• Chromium 156 stable security fixes
• No trust in eMudhra's emSign certificates, after keys for eight of its certificates were found to be computable from the public certificates. Blocked by key, so later updates can't bring them back
• New: Block copied commands from websites. If a site puts a hidden command on your clipboard, the way "ClickFix" scams do ("press Win+R and paste to prove you are human"), Iris puts a warning there instead. Checked on your device, nothing is sent anywhere. On by default (Settings → Privacy and security → Iris hardening)

New

• The security settings are on the Iris hardening page: HTTPS-Only, secure DNS, strict post-quantum mode, security keys and certificates
• Safe Browsing is off and its setting is gone
• 24 more encrypted DNS providers to choose from, 45 in all
• Optional names under the toolbar buttons (Customize your toolbar → Show button names)

Android

• The shield shows on tablets and unfolded foldables (it showed a share button)
• No Privacy Guide

Install
sudo apt install ./iris-browser-stable_156.0.8078.47-1_amd64.deb

Android: iris-156.0.8078.47-1-pqc-signed.apk. Snap: see the README.

To verify the download, see the README.

Iris 0.0.0.8 (156.0.8078.11-5)

Iris 0.0.0.8, based on Chromium 156.0.8078.11

A small update.

Fixes

• The blocked-count badge on the shield is a small dot in the corner again; it no longer covers the icon
• chrome://flags shows what is really on or off: rows that add a switch say "Default (Enabled)" or "Default (Disabled)", and rows for removed features (WebRTC, camera and microphone, strict site isolation, which is always on) are gone
• Android: "Block screenshots" takes effect at once, without restarting Iris

New on Android

• A switch to hide the shield button (Settings → Appearance → Shield button); blocking keeps working
• No account button on the new tab page

Install
sudo apt install ./iris-browser-stable_156.0.8078.11-5_amd64.deb

Android: iris-156.0.8078.11-5-pqc-signed.apk. Snap: see the README.

To verify the download, see the README.

Iris 0.0.0.7 - 156.0.8078.11.4

Iris 0.0.0.7, based on Chromium 156.0.8078.11.4

New

• Theme editor (Settings → Appearance → Theme editor): your own colour for each part of the window, saved themes, and theme codes to share (Ubuntu)
• Websites drawn in your theme's colours, off by default, with a switch per site in the shield (Ubuntu)
• "Customize your toolbar" lists Iris's buttons and has new icons; Cast and Send to your devices are gone (Ubuntu)
• The shield on Android, with the same per-site settings as on Ubuntu
• Modern remake of Dino in place of the dinosaur, with a touch pad on Android

Hardening

• Removed: Web MIDI, idle detection, motion and orientation sensors, the on-screen keyboard API, camera photo capture, fenced frames, background sync and the JavaScript self-profiler. Leftover names of APIs that were already off (WebGPU and others) are gone too. Pages now see 723 browser interfaces instead of 811.
• Website timers rounded to 1 ms (100 ms with "Coarser timers")
• The app-lock key is kept out of swap and crash dumps, and the typed passphrase is wiped after each try

Fixes

• Settings no longer turns see-through after switching tabs with the glass window on; only the new tab page is see-through
• Settings pages follow your theme in light mode instead of staying white
• Smaller blocked-count badge on the shield
• No coloured specks on the corners of the address-bar dropdown

Install
sudo apt install ./iris-browser-stable_156.0.8078.11-4_amd64.deb

Android: iris-156.0.8078.11-4-pqc-signed.apk. Snap: see the README.

To verify the download, see the README.

Iris 156.0.8078.11-3 (Chromium 156.0.8078.11)

New

• Shield in the toolbar (Ubuntu): shows how many ads, trackers, cookies and fingerprinting attempts were blocked on the page, and holds every setting for the site in one panel: ads and trackers, cross-site cookies, JavaScript, JavaScript optimisation, WebGL, Google sign-in prompts, forget the site, canvas and audio reading, browser identity and the connection details.
• Toolbar buttons (Ubuntu) for JavaScript on the current site, New identity (erases site data, cache and history, closes the other tabs and starts fresh) and Lock. Each one can be hidden in Settings > Appearance.
• New switches: remove tracking parameters from links (on by default, with more parameters covered), block all downloads, block third-party requests.
• Blocked pop-ups can be opened once without allowing the site.
• Connection details now show the hash used for key derivation, without code numbers.
• JPEG XL images, decoded by a memory-safe Rust decoder.
• Android: the lock screen follows your colour palette.

Removed for security

• Camera and microphone access for websites (getUserMedia), MediaRecorder and captureStream().
• WebCodecs, WebTransport, the Geolocation API and the old webkitRequestFileSystem API.
• New sites start with more than 30 permissions set to Not allowed.

Changed

• New toolbar icons, and a light theme by default.
• On Ubuntu, Iris's per-site settings moved from the lock icon into the shield.

Install

Ubuntu / Debian:

sudo apt install ./iris-browser-stable_156.0.8078.11-3_amd64.deb

Android: install iris-156.0.8078.11-3-pqc-signed.apk. It updates 0.0.0.5 in place.

The Snap Store version is waiting for manual review; until then, use the .snap file here.

To verify the download, see the README.

Iris 156.0.8078.11-2 (Chromium 156)

New: Iris hardening page

Settings → Privacy and security → Iris hardening: all of Iris’s own switches in one place, grouped as Ads and trackers, Web content, Fingerprinting, Network, Data and Address bar. On Android they’re grouped the same way in Privacy and security.
New switches, all off by default:
Web content: turn JavaScript off, turn off service workers, turn WebGL off completely, block fonts downloaded by websites, block autoplaying media, faster JavaScript (JIT) on every site.
Fingerprinting and privacy: coarser timers, UTC and US English for websites, don’t send referrers.
Network: turn off QUIC (HTTP/3).
Data: keep the cache in memory only, clear browsing data when Iris closes, clear copied text after 30 seconds, ask before every download.
Desktop only: turn off extensions, hide the Install button.
Block ads and trackers is now a switch (on by default).
Block more ads and trackers (off by default): adds the StevenBlack, HaGeZi Pro, AdGuard DNS and URLhaus lists. They’re built into Iris, nothing is downloaded.

On for everyone

SharedArrayBuffer is off.
No crash dumps are written to disk.
New extensions only run on a site after you click them.

Desktop look

New traffic-light window buttons, on by default. Colours and the hover symbols can be changed in Settings → Appearance, and you can switch back to the standard buttons.
New see-through window (glass) in Appearance, with an opacity slider (off by default). It covers the title bar, tabs, toolbar and Iris’s own pages. Websites stay solid.
The old “Glass look” is now called Frosted pages and is off by default.
The default theme is now light, with Monokai Pro Light. Catppuccin Mocha is still the default in dark mode.
The Google Advanced Protection Program link is gone from the Security page.

DNS and search

Added encrypted DNS providers: AdGuard (two), Control D (two), Applied Privacy, Digitale Gesellschaft and Wikimedia DNS. DNS.SB is removed.
The search list is now 20 engines, all reachable over TLS 1.3. DuckDuckGo Lite is new. OceanHero, Karma, WWF Panda, Lilo, Quendu, Info.com, PrivacyWall, Freespoke and Yep are removed.

Android

Blocked pop-ups now offer Allow once, or Always allow for this site in the gear menu. Pop-ups stay blocked by default.
New tabs no longer show the Chromium logo.

Snap

Media keys use the name iris-browser.

Install

sudo apt install ./iris-browser-stable_156.0.8078.11-2_amd64.deb

The snap and the Android APK are attached too. To verify the downloads, see the README. SHA256SUMS is signed with ML-DSA-87 and Ed25519, and the APK is signed with its own key.

Iris 156.0.8078.11-1 (Chromium 156)

Iris 156.0.8078.11-1 (Chromium 156)

Moved to stable branch

New

Strict post-quantum mode, off by default. It forces ML-KEM-1024 key exchange and AES-256 only. Find it in Settings → Privacy and security → Security. Some sites won't load with it on.
114 colour palettes: 57 light and 57 dark.
13 browser identities per site, including Firefox, Chrome, Edge, Safari and Samsung Internet on desktop, Android and iPhone.
28 search engines in every country, privacy-first. Every one connects over TLS 1.3.
The app-lock screen follows your theme.
A faster desktop build, using profile-guided optimisation.

Settings

Shorter and cleaner: Safety Hub trimmed, no Translate, no Enhanced protection, a simpler autofill page.

Security

Remote debugging is blocked and --load-extension is ignored.
XSLT is off.

Android

Fixed the "Aw, Snap" crashes on YouTube and sign-up pages.
No more endless spinner or Iris tips card on the home screen.
Removed the Settings search bar, which made sub-pages jump.
Removed the Google services pages, Safety check and Developer options.
Fewer permissions and open doors: no Gemini trigger, no NFC tag handling, and your bookmarks and history aren't shared with other apps.

Iris 156.0.8073.0-3

First Android release, a snap, and a cleaner .deb.

• Android app (arm64), signed release.
• Snap: install the file with sudo snap install --dangerous iris-browser_156.0.8073.0-3_amd64.snap,
  then sudo snap connect iris-browser:browser-sandbox and sudo snap connect iris-browser:u2f-devices.
  It's waiting for Snap Store review.
• The .deb no longer adds Google's apt repository, signing key or cron job. If you installed -1 or -2,
  installing -3 removes them.
• Your protections are listed on chrome://version.

sudo apt install ./iris-browser-stable_156.0.8073.0-3_amd64.deb

To verify the download, see the README.

Iris 0.0.0.2

• Connection details in the lock icon: TLS version, cipher, key exchange and ECH
• Switch a site's browser identity from the lock icon
• CNSA 2.0 preferences and Merkle Tree Certificate verification
• Bookmarks and open tabs are stored encrypted only
• Saved passwords fill in only after you pick the account
• Cookies bound to the scheme and port that set them
• Glass look on by default
• Releases are now signed with ML-DSA-87 and Ed25519

Install or upgrade:
sudo apt install ./iris-browser-stable_156.0.8073.0-2_amd64.deb

To verify the download, see the README.