Nexus is a desktop browser built from scratch in Rust — an AES-encrypted password vault,
ad & tracker blocking at both the page and network layer, and Secure DNS through
1.1.1.1. No company behind it, no data leaving your machine.
No installer · no account · nothing to opt out of
No bundled search deals, no upsells, no "recommended by Nexus" cards. Just the parts a browser is actually for.
Passwords are sealed with AES-256-GCM and an Argon2id-derived key. The master password lives in RAM, zeroized on lock — and there's no cloud to breach.
Private tabs skip history, session restore and password saving by design — not by toggling three settings and hoping.
Domain lookups go through encrypted DNS-over-HTTPS — Cloudflare, Google, or your own resolver — with a TTL cache so pages don't pay the round-trip twice.
File links are detected automatically and pulled down in 16 parallel range requests with a live progress bar. Single-stream fallback when the server can't.
Nexus implements enough of chrome.runtime that many Manifest-style content scripts run unmodified from nexus_extensions/.
Background tabs are suspended after five minutes — the connection pool is released, the page stays cached and snaps back instantly when you click it.
Most browsers block inside the page and hope that's enough. Nexus also stops known ad and tracking domains at the network layer — the request never leaves your machine.
Known ad/tracker domains (doubleclick, taboola, criteo, google-analytics…) are dropped before DNS is even queried. The request is refused locally — nothing to log on the other end.
What slips through the network layer gets stopped in the page: fetch, XHR, beacons, WebSockets — and ad script/image/iframe nodes are stripped as they appear.
An honest comparison — including where Nexus is still catching up.
| Feature | Nexus | Brave | Firefox |
|---|---|---|---|
| Core engine | Rust + OS WebView | Chromium (C++) | Gecko (C++/Rust) |
| Telemetry | None | Anonymized ping | Opt-out |
| Ad & tracker blocking | Built in, 2 layers | Built in | Extension needed |
| Network-layer blocking | Sinkhole | Yes | Via extensions |
| Fingerprint protection | Basic (canvas/WebGL) | Farbling, strong | RFP, partial |
| Secure DNS (DoH) | 1.1.1.1 / custom | Yes | Yes |
| Per-site block details | Every domain, per page | Counts only | Not shown |
| Password vault encryption | AES-256-GCM + Argon2id | OS keychain | OS keychain |
| Idle memory | Low | Moderate–high | Moderate |
| Complex web apps | Good, not universal | Complete | Complete |
| Funding | None — no VC, no ads | Crypto + ads | Search deals |
Nexus uses the OS's native WebView rather than shipping a browser engine — that's most of the memory savings, and the occasional compatibility gap.
The same shortcuts you already know from every other browser — nothing re-invented for the sake of being different.
Nexus isn't a company with a browser as its product. It's a Rust codebase anyone can read, fork, and build on. There's no telemetry to disable because none was ever wired in — and no roadmap driven by a term sheet, because there isn't one.
For everyday browsing — reading, search, video, most web apps — yes. Nexus renders pages through your OS's native WebView instead of shipping its own engine, which is where the memory savings come from. A small number of very complex web apps may behave slightly differently.
Tap it and you see the count, plus every domain blocked on the current page — grouped by type (Ad / Tracker) and hit count — and the blocked-list totals from the network layer. You can switch the tab between Strict, Balanced and Off right there.
Resolved names are cached with their real TTL, so each domain costs one encrypted round-trip and then nothing. If the resolver is unreachable, Nexus falls back to system DNS rather than failing to load pages.
No — and that's the point. Passwords are encrypted with a key derived from your master password on your machine. There's no reset link, no support ticket, no backdoor.
No company — an individual maintainer plus whoever from the community wants to contribute. There's no roadmap dictated by investors, and no plan to monetize it later.