Catalogue · Section 01 · Entry
Camoufox
ACTIVE
Camoufox is a C++ / Python project catalogued in section 01 of this register. Anti-detect Firefox fork that patches fingerprint surfaces at the C++ level rather than injecting JavaScript. It reads ACTIVE at the last field check — its most recent push was 2 days before that check, inside the 90-day threshold the rubric in force prints.
https://github.com/daijro/camoufox
The fields this state was derived from
| Field | Value at this printing |
|---|---|
| pushed_at | 2026-08-12 |
| archived | false |
| latest_release | v152.0.4-beta.28 · 2026-07-19 |
| license.spdx_id | MPL-2.0 |
| stargazers_count | 11100 |
| http_status | 200 |
| fetched_at | 2026-08-14T09:12:00Z |
| endpoint | GET https://api.github.com/repos/daijro/camoufox |
| rubric_edition | 2nd, in force since 2026-08-14 |
A live read does not change what is printed above it. The site records that you ran it; what GitHub returned is not kept. The printed state moves only when the register is swept and a new printing is issued. raw JSON
Why it reads ACTIVE
pushed_at = 2026-08-12 — 2 days, within the 90-day ACTIVE threshold.
Shipping. Safe to build on today.
Under the superseded first edition
Unchanged: the first edition read ACTIVE from the same fields.
The rubric in force · The superseded first edition · Errata leaf
Curator's annotation
Engine-level patching is the reason this one keeps working when JS-patch stacks stop. The beta tag has been the shipping tag for months; read that as a release policy, not as instability. — ED.
What Camoufox actually does
Camoufox edits Firefox's own C++ sources so the values a page reads are produced by the engine itself. Nothing is overwritten after the fact by injected script, which removes the whole class of tell where a property getter's own source no longer looks native.
What Camoufox's maintenance signals mean
The liveness field here is pushed_at, read as 2026-08-12 against a field check 2 days later. That is inside 90 days, and 90 days is where the second edition of the rubric put ACTIVE after moving it down from the first edition's 180.
The reason for the move is worth stating, because it is the kind of threshold that looks arbitrary until you know what it is measuring against: detection changes on a shorter cycle than half a year, so a six-month-old evasion is not a current one. What a recent push does not tell you is what was in it. A commit landing on a branch is not a release, not a fix, and not a test — it is evidence that somebody is still there.
The release field is a second and different signal. v152.0.4-beta.28 was published 2026-07-19, and the gap between that date and the push date above is the interval in which work exists but has not been cut into anything you can pin a dependency to. A project that pushes constantly and tags rarely and a project that does the reverse look very different to anyone trying to depend on either.
Where Camoufox sits in this catalogue
Camoufox is filed in section 01, open-source anti-detect browsers & forks, whose scope is this: Browsers whose source you can read: anti-detect Firefox and Chromium forks, hardened builds, and the profile managers built on top of them. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.
Filed beside it in the same section: BotBrowser (ACTIVE), Donut Browser (ACTIVE), Undetectable Fingerprint Browser (NRND). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.
It is published under MPL-2.0, alongside the rest of the MPL-2.0 entries in this register, and it sits with everything else currently marked ACTIVE. Read those two facets together: a permissively licensed project that stopped shipping is not a safer dependency than a copyleft one that did not, and a filter on one axis alone will tell you the wrong thing.
Substitutes for the same job, with no claim that either is better: BotBrowser, Dolphin Anty, Donut Browser, GoLogin, Kameleo, Mullvad Browser, Multilogin, Undetectable Fingerprint Browser. The alternative relation is symmetric and carries no ranking, because this register publishes no ranking of any kind. The full Camoufox comparison table sets all of them side by side on licence, push date, release cadence and state.
What to settle before you adopt Camoufox
It tracks one Firefox release line at a time, so the build you compile decides which surfaces are covered and which browser version you are presenting as. Read the Python launcher's fingerprint options rather than assuming the defaults describe a coherent device.
See also
| Relation | Entry | State | Last push |
|---|---|---|---|
| alternative to | BotBrowser | ACTIVE | 2026-08-08 |
| alternative to | Dolphin Anty | ACTIVE | — |
| alternative to | Donut Browser | ACTIVE | 2026-08-12 |
| alternative to | GoLogin | ACTIVE | — |
| alternative to | Kameleo | ACTIVE | — |
| alternative to | Mullvad Browser | ACTIVE | 2026-07-23 |
| alternative to | Multilogin | ACTIVE | — |
| alternative to | Undetectable Fingerprint Browser | NRND | 2025-04-25 |
Questions readers ask about Camoufox
Answered from this entry's own fields, at the field check printed above and at no other instant.
Is Camoufox still maintained?
At the 2026-08-14 field check this register read pushed_at as 2026-08-12 and the archive flag as false, and the rubric in force turned those into ACTIVE. Shipping. Safe to build on today. The clause that fired is printed on this page, so you can check the arithmetic rather than take the word.
What are the alternatives to Camoufox?
BotBrowser, Dolphin Anty, Donut Browser, GoLogin, Kameleo, Mullvad Browser, Multilogin, Undetectable Fingerprint Browser are recorded as substitutes for the same job. The relation carries no ranking — this register publishes none — so read them side by side on the comparison table, which prints licence, last push, release cadence and state for each.
What licence is Camoufox under?
MPL-2.0, read from the repository's own licence metadata at the field check rather than from a README badge. Other MPL-2.0 entries are grouped together, and the no-licence-declared group is worth a look before you assume any project here carries a grant.
Where does this status come from?
From one sweep, recorded with the instant it ran. The raw fields, the endpoint they were read from, the fetch timestamp and the rubric edition in force are all printed on this page, and the same row is in the CC0 data files in JSON and CSV. Recompute the state from those columns and this page must agree with you; where it does not, the register is wrong.
You are reading section 01, which is where the browsers live, so the comparison is direct: Donut Browser is filed here too, under the same rule, with the same fields printed against it. What it does differently is where the spoofing happens — the Wayfern Chromium fork applies fingerprint overrides at engine level over CDP rather than by patching page JavaScript after load, which is the same architectural argument several of its neighbours in this section make and a different implementation of it.
curl -fsSL https://donutbrowser.com/install.sh | sh
macOS (DMG, Homebrew cask donut), Windows (installer and portable), Linux (deb, rpm, AppImage, with APT and RPM repositories at repo.donutbrowser.com), and a Nix flake. Desktop only — there is no mobile build target. Ten shipped languages. Source, AGPL-3.0 · its own entry, judged by the same rubric · the keepers' disclosure.