| 3rdparty | obj | Security | 1 sub-fields |
| AIControls | obj | Content settings | 7 sub-fields |
| AllowedDomainsForApps | str | Network security | Define domains allowed to access Google Workspace. |
| AllowFileSelectionDialogs | bool | Browser UI | Enable or disable file selection dialogs. |
| AppAutoUpdate | bool | Device update settings | Enable or disable automatic application update. |
| AppUpdatePin | str | Device update settings | Prevent Firefox from being updated beyond the specified version. |
| AppUpdateURL | str | Device update settings | Change the URL for application update if you are providing Firefox updates from a custom update server. |
| Authentication | obj | Authentication | 7 sub-fields |
| AutofillAddressEnabled | bool | Password manager | Enables or disables autofill for addresses. |
| AutofillCreditCardEnabled | bool | Password manager | Enables or disables autofill for payment methods. |
| AutoLaunchProtocolsFromOrigins | arr | Network security | items: 2 fields |
| BackgroundAppUpdate | bool | Device update settings | Enable or disable automatic application update in the background, when the application is not running. |
| BlockAboutAddons | bool | Extensions | Block access to the Add-ons Manager ('about:addons'). |
| BlockAboutConfig | bool | Security | Block access to 'about:config'. |
| BlockAboutProfiles | bool | Security | Block access to About Profiles ('about:profiles'). |
| BlockAboutSupport | bool | Security | Block access to Troubleshooting Information ('about:support'). |
| Bookmarks | arr | Bookmarks | items: 5 fields |
| BrowserDataBackup | obj | Security | 2 sub-fields |
| CaptivePortal | bool | Network security | Enable or disable the detection of captive portals. |
| Certificates | obj | Certificate management | 2 sub-fields |
| CNSA2KeyAgreementEnabled | bool | Network security | Enable the CNSA 2.0 ML-KEM-1024 key agreement for TLS. |
| Containers | obj | Extensions | 1 sub-fields |
| ContentAnalysis | obj | Cloud reporting | 14 sub-fields |
| Cookies | obj | Network security | 10 sub-fields |
| DefaultBrowserSettingEnabled | bool | Startup | Control whether the user can set Firefox as the default browser. If set to false, the default browser check is disabled and the controls for setting Firefox as the default browser are removed from the preferences. |
| DefaultDownloadDirectory | str | Downloads | Set the default download directory. |
| DefaultSerialGuardSetting | enum | Content settings | 2, 3 |
| DisableAccounts | bool | Miscellaneous | Disable account-based services, including sync. |
| DisableAppUpdate | bool | Device update settings | Turn off application updates within Firefox. |
| DisableBuiltinPDFViewer | bool | Printing | Disable the built in PDF viewer. |
| DisabledCiphers | obj | Network security | 20 sub-fields |
| DisableDefaultBrowserAgent | bool | Miscellaneous | Prevent the default browser agent from taking any actions. |
| DisableDeveloperTools | bool | Security | Remove access to all developer tools. |
| DisableEncryptedClientHello | bool | Network security | Disable the TLS Feature for Encrypted Client Hello. |
| DisableFeedbackCommands | bool | Browser UI | Disable the menus for reporting sites (Submit Feedback, Report Deceptive Site). |
| DisableFirefoxAccounts | bool | Miscellaneous | Disable Firefox Accounts integration (Sync). |
| DisableFirefoxScreenshots | bool | Miscellaneous | Remove access to Firefox Screenshots. |
| DisableFirefoxStudies | bool | Miscellaneous | Disable Firefox studies (Shield). |
| DisableForgetButton | bool | Miscellaneous | Disable the "Forget" button. |
| DisableFormHistory | bool | Local data storage | Turn off saving information on web forms and the search bar. |
| DisableLaunchOnLogin | bool | Startup | Prevent Firefox from launching automatically when the user logs in, and prevent the user from enabling this setting. This policy currently only has an effect on Windows. |
| DisableMasterPasswordCreation | bool | Password manager | Remove the master password functionality. |
| DisablePasswordReveal | bool | Password manager | Do not allow passwords to be shown in saved logins. |
| DisablePocket | bool | Miscellaneous | Remove Pocket in the Firefox UI. |
| DisablePrivateBrowsing | bool | Browsing restrictions | Remove access to private browsing. |
| DisableProfileImport | bool | Bookmarks | Remove the ability to import data from other browsers. |
| DisableProfileRefresh | bool | Miscellaneous | Disable the Refresh Firefox button on 'about:support' and 'support.mozilla.org', as well as the prompt that displays offering to refresh Firefox when you haven't used it in a while. |
| DisableRemoteImprovements | bool | Miscellaneous | Prevent Firefox from applying performance, stability, and feature changes between updates. |
| DisableRemoteSettingsAndAcceptSecurityConsequences | bool | Network security | Disable Remote Settings updates, stopping Firefox from receiving updated data such as blocklists, and accept the resulting security consequences. |
| DisableSafeMode | bool | Security | Disable safe mode (Troubleshoot Mode) within the browser. |
| DisableSecurityBypass | obj | Certificate management | 2 sub-fields |
| DisableSetDesktopBackground | bool | Browser UI | Remove the "Set As Desktop Background..." menuitem when right clicking on an image. |
| DisableSystemAddonUpdate | bool | Device update settings | Prevent system add-ons from being installed or updated. |
| DisableTelemetry | bool | Miscellaneous | Prevent the upload of telemetry data. |
| DisableThirdPartyModuleBlocking | bool | Security | Do not allow blocking third-party modules from the 'about:third-party' page. |
| DisplayBookmarksToolbar | str | Bookmarks | Set the initial state of the bookmarks toolbar. |
| DisplayMenuBar | str | Browser UI | Set the state of the menubar. |
| DNSOverHTTPS | obj | Network security | 5 sub-fields |
| DontCheckDefaultBrowser | bool | Startup | Don't check if Firefox is the default browser at startup. |
| DownloadDirectory | str | Downloads | Set and lock the download directory. |
| EnableTrackingProtection | obj | Network security | 10 sub-fields |
| EncryptedMediaExtensions | obj | Content settings | 2 sub-fields |
| ExemptDomainFileTypePairsFromFileTypeDownloadWarnings | arr | Network security | items: 2 fields |
| Extensions | obj | Extensions | 3 sub-fields |
| ExtensionSettings | obj | Extensions | 1 sub-fields |
| ExtensionUpdate | bool | Extensions | Control extension updates. |
| FirefoxHome | obj | Startup | 11 sub-fields |
| FirefoxSuggest | obj | Search | 5 sub-fields |
| GenerativeAI | obj | Miscellaneous | 6 sub-fields |
| GoToIntranetSiteForSingleWordEntryInAddressBar | bool | Network security | Whether to always go through the DNS server before sending a single word search string to a search engine. |
| Handlers | str | Security | Configure default application handlers. |
| HardwareAcceleration | bool | Miscellaneous | Control hardware acceleration. |
| Homepage | obj | Startup | 5 sub-fields |
| HttpAllowlist | arr | Network security | Configure sites that will not be upgraded to HTTPS. |
| HttpsOnlyMode | enum | Network security | allowed, disallowed, enabled, force_enabled |
| InstallAddonsPermission | obj | Extensions | 2 sub-fields |
| IPProtectionAvailable | bool | Network security | Control whether Firefox's built-in IP Protection (VPN) is available to users. When disabled, the feature is turned off and cannot be used. |
| LegacyProfiles | bool | Miscellaneous | Disable the feature enforcing a separate profile for each installation. |
| LegacySameSiteCookieBehaviorEnabled | bool | Network security | Enable default legacy SameSite cookie behavior setting. |
| LegacySameSiteCookieBehaviorEnabledForDomainList | arr | Network security | Revert to legacy SameSite behavior for cookies on specified sites. |
| LocalFileLinks | arr | Network security | Enable linking to local files by origin. |
| LocalNetworkAccess | obj | Network security | 5 sub-fields |
| ManagedBookmarks | arr | Bookmarks | items: 5 fields |
| ManualAppUpdateOnly | bool | Device update settings | Switch to manual updates only. |
| MicrosoftEntraSSO | bool | Authentication | Allow single sign-on for Microsoft Entra accounts on macOS. |
| NetworkPrediction | bool | Network security | Enable or disable network prediction (DNS prefetching). |
| NewTabPage | bool | Startup | Enable or disable the New Tab page. |
| NoDefaultBookmarks | bool | Bookmarks | Disable the creation of default bookmarks. |
| OfferToSaveLogins | bool | Password manager | Control whether or not Firefox offers to save passwords. |
| OfferToSaveLoginsDefault | bool | Password manager | Sets the default value of 'signon.rememberSignons' without locking it. |
| OverrideFirstRunPage | str | Startup | Override the first run page. |
| OverridePostUpdatePage | str | Startup | Override the upgrade page. |
| PasswordManagerEnabled | bool | Password manager | Remove access to the password manager via preferences and blocks about:logins on Firefox 70. |
| PasswordManagerExceptions | arr | Password manager | Prevent Firefox from saving passwords for specific sites. |
| PDFjs | obj | Printing | 2 sub-fields |
| Permissions | obj | Content settings | 7 sub-fields |
| PictureInPicture | obj | Content settings | 2 sub-fields |
| PopupBlocking | obj | Content settings | 3 sub-fields |
| PostQuantumKeyAgreementEnabled | bool | Network security | Enable post-quantum key agreement for TLS. |
| Preferences | str | Security | Set and lock preferences. |
| PrimaryPassword | bool | Password manager | Require or prevent using a primary (formerly master) password. |
| PrintingEnabled | bool | Printing | Enable or disable printing. |
| PrivateBrowsingModeAvailability | enum | Browsing restrictions | 0, 1, 2 |
| PromptForDownloadLocation | bool | Downloads | Ask where to save each file before downloading. |
| Proxy | obj | Network security | 12 sub-fields |
| RelaunchRequired | obj | Miscellaneous | 2 sub-fields |
| RequestedLocales | arr | Miscellaneous | Set the the list of requested locales for the application in order of preference. |
| SanitizeOnShutdown | obj | Local data storage | 10 sub-fields |
| SearchBar | enum | Search | unified, separate |
| SearchEngines | obj | Search | 5 sub-fields |
| SearchSuggestEnabled | bool | Search | Enable search suggestions. |
| SecurityDevices | obj | Certificate management | 2 sub-fields |
| ShowHomeButton | bool | Startup | Show the home button on the toolbar. |
| SitePolicies | arr | Browsing restrictions | items: 3 fields |
| SkipTermsOfUse | bool | Startup | Configure display settings for the Firefox Terms of Use and Privacy Notice on startup. |
| SSLVersionMax | enum | Network security | tls1, tls1.1, tls1.2, tls1.3 |
| SSLVersionMin | enum | Network security | tls1, tls1.1, tls1.2, tls1.3 |
| StartDownloadsInTempDirectory | bool | Downloads | Force downloads to start off in a local, temporary location rather than the default download directory. |
| SupportMenu | obj | Browser UI | 3 sub-fields |
| TranslateEnabled | bool | Content settings | Enable or disable webpage translation. |
| UserMessaging | obj | Miscellaneous | 8 sub-fields |
| UseSystemPrintDialog | bool | Printing | Use the system print dialog instead of the print preview window. |
| VisualSearchEnabled | bool | Search | Enable or disable visual search. |
| WebsiteFilter | obj | Browsing restrictions | 2 sub-fields |
| WindowsSSO | bool | Authentication | Allow Windows single sign-on for Microsoft, work, and school accounts. |
| XSLTEnabled | bool | Content settings | Enable or disable support for the XSLTProcessor JavaScript API and the XSLT processing instruction. |