使用组策略关闭 Brave 的隐私收集、Web3 和 AI 功能

官方文档: Group Policy

Brave 基于 Chromium, 所以通用的 Chrome/Chromium policy 也能用. Brave 自己额外提供了一批 policy, 可以用来关掉 Wallet、Rewards、Leo AI、P3A、Stats Ping、Web Discovery 等功能.

要关闭的策略

功能	Policy	值
Brave Wallet / Web3 / decentralized DNS	`BraveWalletDisabled`	`1` / `true`
Brave Rewards	`BraveRewardsDisabled`	`1` / `true`
Brave Leo AI	`BraveAIChatEnabled`	`0` / `false`
P3A 匿名产品分析	`BraveP3AEnabled`	`Disabled`
Stats Ping 活跃统计	`BraveStatsPingEnabled`	`0` / `false`
Web Discovery Project	`BraveWebDiscoveryEnabled`	`0` / `false`
Brave VPN	`BraveVPNDisabled`	`1` / `true`
Brave Talk	`BraveTalkDisabled`	`1` / `true`
Brave News	`BraveNewsDisabled`	`1` / `true`

Windows

1
HKEY_LOCAL_MACHINE\Software\Policies\BraveSoftware\Brave

.reg 示例:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\Software\Policies\BraveSoftware\Brave]
"BraveWalletDisabled"=dword:00000001
"BraveRewardsDisabled"=dword:00000001
"BraveVPNDisabled"=dword:00000001
"BraveTalkDisabled"=dword:00000001
"BraveNewsDisabled"=dword:00000001
"BraveAIChatEnabled"=dword:00000000
"BraveStatsPingEnabled"=dword:00000000
"BraveWebDiscoveryEnabled"=dword:00000000
"BraveP3AEnabled"="Disabled"

也可以写到当前用户:

1
HKEY_CURRENT_USER\Software\Policies\BraveSoftware\Brave

macOS

macOS 用描述文件就够了. Release 版 Brave 的 bundle identifier 是 com.brave.browser.

保存为 brave-hardened.mobileconfig, 然后双击安装, 或者用系统设置里的“描述文件”导入:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
 "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadType</key>
            <string>com.apple.ManagedClient.preferences</string>
            <key>PayloadIdentifier</key>
            <string>com.brave.browser.policy</string>
            <key>PayloadUUID</key>
            <string>8E6A6B2E-6A3F-4F2D-9B6A-AAAABBBB0001</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>PayloadEnabled</key>
            <true/>
            <key>PayloadDisplayName</key>
            <string>Brave Policy</string>
            <key>PayloadContent</key>
            <dict>
                <key>com.brave.browser</key>
                <dict>
                    <key>Forced</key>
                    <array>
                        <dict>
                            <key>mcx_preference_settings</key>
                            <dict>
                                <key>BraveRewardsDisabled</key>
                                <true/>
                                <key>BraveWalletDisabled</key>
                                <true/>
                                <key>BraveVPNDisabled</key>
                                <true/>
                                <key>BraveAIChatEnabled</key>
                                <false/>
                                <key>BraveTalkDisabled</key>
                                <true/>
                                <key>BraveNewsDisabled</key>
                                <true/>
                                <key>BraveP3AEnabled</key>
                                <string>Disabled</string>
                                <key>BraveStatsPingEnabled</key>
                                <false/>
                                <key>BraveWebDiscoveryEnabled</key>
                                <false/>
                            </dict>
                        </dict>
                    </array>
                </dict>
            </dict>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Brave Hardened Config</string>
    <key>PayloadIdentifier</key>
    <string>com.example.brave.hardened</string>
    <key>PayloadUUID</key>
    <string>8E6A6B2E-6A3F-4F2D-9B6A-AAAABBBB9999</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

Linux

Linux 的 Brave policy 目录是:

1
/etc/brave/policies/managed/

创建 GroupPolicy.json:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
sudo mkdir -p /etc/brave/policies/managed/
sudo tee /etc/brave/policies/managed/GroupPolicy.json >/dev/null <<'EOF'
{
  "BraveWalletDisabled": true,
  "BraveRewardsDisabled": true,
  "BraveVPNDisabled": true,
  "BraveTalkDisabled": true,
  "BraveNewsDisabled": true,
  "BraveAIChatEnabled": false,
  "BraveP3AEnabled": "Disabled",
  "BraveStatsPingEnabled": false,
  "BraveWebDiscoveryEnabled": false
}
EOF

检查是否生效

重启 Brave 后打开:

1
brave://policy

点击 Reload policies, 确认上面的 policy 都出现在列表里. 也可以打开:

1
brave://management

如果显示被组织管理, 说明 policy 已经被 Brave 识别.