Browser extension (Chrome, Firefox)

The Colitu extension protects only your browser's traffic and works without installing an app. Other programs (games, messengers, torrents) are not affected; to protect the whole device, use the Colitu app.

#Installation

The store links are on colitu.com/download/browser. Do not install the extension from other sites.

1. Click Add on the store page and accept the permissions.
2. Pin Colitu from the puzzle icon in the toolbar.
3. Click the Colitu icon and sign in.

Permissions the extension asks for: proxy (to send browser traffic to the server), all sites (to route every site's traffic and answer the server's authentication), privacy (the WebRTC setting) and storage (your session and settings).

#Signing in

• Sign in with colitu.com: a new tab opens and the extension shows an 8-character code. Sign in to your account on the site and confirm the code; the extension signs in by itself. You never type your password into the extension.
• E-mail and password: use the same account details as in the apps. If your e-mail is not verified yet, the extension sends you a code.

The extension counts as one device on your account and appears in your device list as, for example, "Chrome · Windows". If your plan's device limit is reached, remove a device first. Signing out of the extension also removes it from the list.

#Connecting and choosing a server

Click the big button. The default Fastest server picks by measured latency and server load and moves to the next server if one stops answering. For a specific country, click the server row and choose from the list. While connected, the toolbar icon shows the server's country code.

If the server cannot be reached while you are connected, pages do not open directly (without the VPN); choose another server.

#Site lists

Settings → Which sites use Colitu:

• All sites (default): every site opens through Colitu.
• Only the sites listed below: only the sites you list use Colitu.
• Sites that never use Colitu: for example your bank. One domain per line; subdomains are included.

Local network addresses (192.168.x.x, your router, printers) always open directly. As in the apps, some regional sites (domains on a built-in list) open directly by default, so that services which refuse foreign IP addresses keep working; the rule does not apply while you are connected to a server in the same region. You can turn it off in settings.

#WebRTC protection

Video-call sites can learn your real IP address through WebRTC, around the proxy. With Block WebRTC leaks on (the default), WebRTC may only use the protected path. When you disconnect, the browser's own setting comes back. To check, use the WebRTC leak test.

#Private windows

Incognito/private windows are not protected until you allow the extension there:

• Chrome and similar browsers: chrome://extensions → Colitu → Details → Allow in Incognito.
• Firefox: Add-ons → Colitu → Run in Private Windows → Allow.

#How it differs from the app

Browsers can only use HTTPS proxies, so the extension connects to a TLS-encrypted HTTPS proxy on our servers. The Stealth and Resilient methods built to get around blocking, the kill switch and the ad-blocking DNS are only in the apps. On heavily restricted networks, use the app.

#Troubleshooting

• "Another extension controls the browser proxy": only one extension can control the proxy setting at a time. Turn off other VPN or proxy extensions.
• Pages do not open: pick another country in the server list or go back to Fastest server.
• "This month's free traffic is used up": the free plan includes 10 GB every month, and the extension's traffic counts towards it.
• You were signed out: if the device was removed from your account, the extension ends the session; sign in again.

#Open source

The extension's source code is on github.com/colitu/extension under GPL-3.0. The store packages can be rebuilt from this code; the SHA-256 checksums of every release are published on its GitHub release page.