net-identity Autor: jacek4yang

Your proxy and browser identity, together.

Net Identity helps you switch between repeatable Firefox setups for regional website testing, timezone-sensitive apps and everyday proxy use. Manage proxy routing, page-visible location, timezone and WebRTC settings in one profile. Bring your own proxy; no proxy servers or VPN service are included.

Quick to set up. Clear about what is active.

• A compact bilingual interface. Search and switch profiles in English or Simplified Chinese, with light and dark themes.
• Preview before switching. Enter a complete proxy endpoint to automatically check its observed exit IP, approximate location and timezone through that draft proxy. Existing browsing keeps its current route; the check does not save the draft.
• Save on your terms. Save stages edits. Save and enable saves the visible form and activates it. Saved edits stay separate from the applied route, including after restart.
• Flexible profiles. HTTP, HTTPS, SOCKS4 and SOCKS5, supported authentication, bypass rules, automatic or manual location and timezone, and editable WebRTC policies.
• Protection defaults you control. New proxies start with proxy-only WebRTC, automatic identity and SOCKS proxy DNS. Existing settings stay unchanged. Strict WebRTC can affect calls without a suitable proxy/TURN TCP path.
• Optional encrypted storage. Protect profiles and saved/applied proxy credentials with a local master-password vault. Export encrypted backups and unlock after a full Firefox restart to restore the applied configuration.
• Useful diagnostics. Inspect routing, identity and WebRTC separately. Unavailable, stale or unverified results remain visible.

Get started

1. Open Net Identity and choose Add Proxy.
2. Enter the address, confirm the protocol and add credentials separately if needed.
3. Review the preview, then choose Save or Save and enable.

Privacy and control

No telemetry, analytics or remotely loaded code. Automatic checks contact ipwho.is, including draft checks before Save or enable. Only the preview request uses the draft proxy. Proxy credentials go to the chosen proxy for authentication, never to the GeoIP provider or web pages. Options with Public IP / GeoIP set to Disabled suppress draft checks and runtime lookups; popup quick setup previews by design. Lookups using browser routing require optional Firefox consent because they can reveal your own public IP.

Before vault setup, profiles are unencrypted and credentials last only for the Firefox session. After setup, profiles and credentials persist encrypted locally; the master password is never stored. There is no password-reset service. Keep an encrypted backup outside the Firefox profile; restore is supported only into an empty installation. Storage encryption does not encrypt the connection to your proxy.

The optional online map uses OpenFreeMap. First enablement remembers automatic loading for later visible map openings; each opening rechecks the current route, credentials and consent. The provider and its delivery infrastructure can see your network-visible IP and viewed region. Unload or unchecking automatic loading clears the preference. Coordinates and the local grid work offline.

Know the limits

Requires Firefox 140 or newer on desktop. Browser / System routing (Direct) retains Firefox and system routing, including other configured proxies. Off releases the extension's identity and WebRTC controls. Selected proxies do not silently fall back to Direct for ordinary extension-observable traffic; explicit bypasses still apply and loopback is always bypassed.

GeoIP is approximate. Page-level location and timezone compatibility shims can be detected, and some frames cannot be modified. The extension does not guarantee anonymity or fingerprinting invisibility and is not a browser-wide network kill switch: protected Firefox service requests cannot all be cancelled. For proxy-account identity, the server must reject anonymous access; configured HTTP/HTTPS credentials alone do not prove which account handled a connection if the endpoint accepts anonymous CONNECT.

Open source under the MIT license.