Privacy & Security

Gold standard - anonymous accounts, cash payments, police raid proved zero data, RAM-only servers, open source

Swiss privacy - open source, unlimited free tier, 4 annual no-logs audits, part of Proton ecosystem

Transparency focused - 7 consecutive Cure53 audits, open source, no email required, honest marketing

Self-funded, no investors - 10GB/mo free tier, open source, RAM-only, court-proven no-logs

Popular mainstream - 6 Deloitte no-logs audits, NordLynx protocol, RAM-only. Had 2018 server breach disclosed late

Budget-friendly - unlimited devices, 2 Deloitte audits, RAM-only. Netherlands jurisdiction, merged with Nord

Court-proven no-logs (twice) - 100% open source apps, Deloitte audited. Owned by Kape Technologies

18+ audit reports, KPMG audited, RAM-only. WARNING: owned by Kape/Unikmind, privatized 2026, zero public transparency

VPN protocol, not a service - ~4,000 lines of code, in Linux kernel, 57% faster than OpenVPN, self-host on any VPS

Trail of Bits - deploy-and-forget WireGuard VPN on any cloud provider, 15-min setup, 30K+ GitHub stars

Non-profit (ex-Google Jigsaw) - Shadowsocks protocol, Cure53 audited, built for journalists in censored countries

Mesh networking (not a privacy VPN) - connects your devices via WireGuard, zero config, free personal use

Best overall - open source, zero-knowledge, best free tier, self-hostable, audited by ETH Zurich & Cure53, no breaches

Fully offline - local-only database, no cloud, ANSSI certified, completely free, zero trust in third parties

Best premium - unique Secret Key architecture, polished UX, 20-year breach-free track record, great family sharing

Swiss privacy - open source, encrypts ALL fields (not just passwords), Cure53 audited, Proton ecosystem integration

Feature-rich - built-in VPN, phishing alerts, SOC 2 Type II certified, no direct breaches. No free tier since Sep 2025

Modern encryption - XChaCha20 + Argon2id, Cure53 audited, SOC 2 compliant, affordable. Closed source

Oldest PM (since 1999) - cheapest premium tier, excellent form filling, Secfault audited. Closed source

Enterprise-grade - FedRAMP High authorized, 10+ years SOC 2, zero-trust architecture. Dark web monitoring costs extra

Self-hosted Bitwarden - lightweight Rust server, all premium features free, 55K+ GitHub stars, runs on Raspberry Pi

Team-focused - 100% open source (even paid tiers), GPG keys, RBAC, SOC 2 Type II, EU-based (Luxembourg)

NOT RECOMMENDED - catastrophic 2022 breach, $150M+ crypto stolen from cracked vaults, UK GDPR fine, ETH Zurich found bypasses

Maximum anonymity - triple-encrypted Tor routing, blocks fingerprinting, NoScript built-in, gold standard for privacy

Chromium-based - aggressive ad/tracker blocking by default, fingerprint randomization, built-in Tor windows, IPFS support

Mozilla nonprofit - Enhanced Tracking Protection, highly configurable via about:config, full Manifest V2 extension support

Hardened Firefox fork - telemetry removed, uBlock Origin pre-installed, strict privacy defaults out of the box

Built with Tor Project - Tor Browser anti-fingerprinting without Tor network, uniform fingerprint for all users, no telemetry

Chromium degoogled - all Google services and phone-home connections removed, no tracking pings, community-built binaries

Firefox fork - zero telemetry, built-in Oblivious DNS-over-HTTPS, supports legacy extensions, no experiments

Feature-rich Chromium - built-in ad/tracker blocking, E2E encrypted sync, no profiling, highly customizable

Privacy-first - Fire Button wipes all data instantly, Duck Player for tracker-free YouTube, automatic HTTPS upgrades

Independent Goanna engine - no telemetry, no DRM, no AI, lightweight, supports legacy XUL extensions

Wide-spectrum content blocker - low CPU/memory, open source. Full version on Firefox only (Chrome limited by Manifest V3)

EFF tracker blocker - learns to block invisible trackers algorithmically, Global Privacy Control signal

Anti-fingerprinting - spoofs Canvas, WebGL, AudioContext and other fingerprinting APIs. Firefox only

Intercepts CDN requests, serves local copies to prevent CDN tracking. Active fork of Decentraleyes with more libraries

Strips 250+ tracking parameters from URLs automatically, cleans redirects, open source

Auto-deletes cookies from closed tabs unless whitelisted, prevents long-term cookie tracking

Cookie isolation via color-coded container tabs - separate work, shopping, banking sessions. Firefox only

Whitelist-based JavaScript blocking - only allow scripts on trusted domains, bundled with Tor Browser

Bypasses intermediary tracking redirect pages, goes straight to the destination URL. Firefox only

Disposable container instances destroyed on tab close - ultimate cookie isolation. Firefox only

Firefox hardening config - hundreds of about:config privacy settings, community maintained, comprehensive documentation

Open-source benchmark suite - compares browser privacy behavior across fingerprinting, tracking, and data leaks

Gold standard E2EE - nonprofit, open source, industry-standard protocol used by WhatsApp and others

No user identifiers at all - not even random IDs, Trail of Bits audited, decentralized, metadata-resistant

No phone or email needed - onion-routed messages through decentralized nodes, open source, based on Signal protocol

Federated open standard - 185M+ users, self-hostable, E2E encrypted, interoperable with other Matrix clients

P2P, works offline - connects via Bluetooth/Wi-Fi/Tor, no servers needed, designed for activists and journalists

Swiss E2EE - MLS protocol, enterprise-grade, free personal tier, open source, good for business use

Swiss, no phone required - one-time purchase (~$4), reproducible builds, fully open source, GDPR compliant

Hardened Signal fork for Android - encrypted local DB, RAM shredding, Tor support, removes Google dependencies

All traffic over Tor v3 onion services - metadata-resistant, fully decentralized, no servers, open source

Swiss E2EE email - zero-access encryption, open source, 1GB free tier, founded by CERN scientists

German E2EE email - quantum-safe encryption, 1GB free tier, open source, formerly Tutanota

Belgian privacy email - OpenPGP in-browser, 500MB free tier, calendar/contacts/docs included, no ads

German green email - TLS + OpenPGP/S/MIME, powered by renewable energy, no personal data required, from 1 EUR/mo

Dutch privacy email - built-in PGP, by the makers of Startpage search engine, 7-day free trial

Community-run platform - free email, cloud, forum, XMPP chat, donation-funded, open source, Netherlands based

Email aliasing - 10 free aliases, unlimited paid, open source, now owned by Proton AG, hide your real email

Email aliasing - 10 free aliases, open source, independent, formerly AnonAddy, custom domains supported

Mozilla email masking - 5 free masks, unlimited with Mozilla VPN bundle, phone masking on paid plan

Disposable email - no signup, instant throwaway addresses, good for one-time signups, no encryption

Most popular private search - no tracking, no search history, bangs shortcuts, partially open source

Google results without tracking - serves Google results anonymously, no profiling, Netherlands based

Independent index - not proxying other engines, no tracking, optional AI answers, Goggles for custom ranking

Premium paid search - no ads, no tracking, AI summaries, Lenses for filtering, from $5/mo. Worth it for power users

Self-hosted meta-search - aggregates results from 70+ engines, open source (AGPL), no tracking, fully customizable

UK independent crawler - own index (not proxying), no tracking, carbon neutral, truly independent results

French private search - EU based, no tracking, no filter bubbles, dedicated Qwant Junior for kids

German nonprofit meta-search - open source (GNU AGPL), run by SUMA-EV association, anonymous proxy view

Cloud DNS firewall - customizable blocklists, analytics, per-device profiles, 300K queries/mo free, privacy-focused

Self-hosted DNS sinkhole - network-wide ad/tracker blocking, open source (GPL-2.0), runs on Raspberry Pi

Self-hosted DNS filter - Pi-hole alternative, open source (GPL-3.0), built-in HTTPS filtering, modern UI

Nonprofit DNS - blocks malware domains, no personal data logging, Swiss-based, free, 150+ locations worldwide

Fastest public DNS - KPMG audited privacy, supports DoH/DoT, WARP VPN mode, free. Cloudflare sees queries

Cloud DNS ad blocker - no-log, supports DoH/DoT/DoQ, family protection mode, freemium, easy setup

Free encrypted DNS by Mullvad VPN - supports DoH/DoT, optional ad/tracker blocking, no logging, open configs

Customizable DNS - block ads/trackers/malware, geo-unblocking, per-device profiles, freemium, modern dashboard

Application firewall - monitor/control every connection, built-in DNS privacy, open source, Windows & Linux

Lightweight Windows firewall - Windows Filtering Platform based, open source (GPL-3.0), blocks telemetry easily

Network monitor + firewall - beautiful visualization of all connections, alerts on changes, freemium, Windows & Android

macOS application firewall - alerts on outgoing connections, network monitor, $59 one-time, the Mac standard

Free macOS firewall - open source, blocks unknown outgoing connections, by Objective-See (Patrick Wardle)

Linux application firewall - Little Snitch equivalent for Linux, open source (GPL-3.0), GUI + daemon

Enterprise firewall/router - FreeBSD based, open source CE, VPN gateway, IDS/IPS, runs on x86 hardware

Modern firewall/router - pfSense fork, BSD licensed, weekly updates, better UI, Zenarmor plugin for DPI

Disk encryption - TrueCrypt successor, full-disk or container encryption, open source, audited, cross-platform

Cloud file encryption - encrypt files before uploading to any cloud, open source, audited, free desktop

PGP encryption standard - encrypt emails/files, sign data, open source (GPL-3.0), the backbone of email encryption

Modern file encryption - simple CLI, no config, by Filippo Valsorda (Go security lead), open source (BSD-3)

Swiss E2EE cloud storage - zero-knowledge, SOC 2 / ISO 27001 certified, GDPR compliant, from $12/mo

E2EE cloud storage - 10GB free, open source clients, zero-knowledge, Germany based, affordable plans

Self-hosted cloud - files, calendar, contacts, office suite, open source (AGPL-3.0), full data sovereignty

Anonymous file sharing - sends files over Tor, no account needed, open source (GPL-3.0), by Micah Lee

Canadian E2EE cloud - zero-knowledge, 5GB free, no-knowledge privacy, PIPEDA/GDPR compliant

GnuPG for Windows - includes Kleopatra key manager, GpgOL Outlook plugin, file encryption, free (GPL)

Browser PGP extension - encrypt webmail (Gmail, Outlook, Yahoo) with OpenPGP, free personal, open source

Cross-platform 2FA - E2E encrypted cloud backup, open source, audited, free, works on all platforms including web

Android 2FA - open source (GPL v3), encrypted vault, biometric unlock, import from other apps, completely free

Simple 2FA app - open source, cloud backup, browser extension for auto-fill, free, Android & iOS

Hardware security key - FIDO2/U2F/OTP, phishing-resistant, works with hundreds of services, from $25

Open source hardware key - FIDO2, email encryption, secure storage, made in Germany, from 30 EUR

Hardware key + password manager - PIN protected, stores passwords on device, open source, ~$50

KeePassXC has built-in TOTP support - store 2FA codes alongside passwords, offline, no separate app needed

Amnesic live OS - boots from USB, all traffic through Tor, leaves no trace, used by Snowden, free

Hardened Android - Pixel phones only, sandboxed Google Play, per-contact permissions, memory-safe, free

Security by compartmentalization - each app runs in its own VM, Xen-based, used by security researchers, free

All traffic through Tor - runs in VMs, impossible to leak real IP, can run inside Qubes, free, open source

Privacy Android - Pixel & Fairphone & Moto, microG for Google services without Google, free, nonprofit backed

Open source Android - supports 200+ devices, no Google apps by default, community maintained, free

Breach checker - search if your email/password appeared in data breaches, free, by Troy Hunt, API available

Community-driven resource - tool recommendations, threat modeling guides, nonprofit, successor to PrivacyTools.io

Electronic Frontier Foundation - digital rights nonprofit, Surveillance Self-Defense guides, 35+ year track record

System cleaner - securely delete files, clear browser data, free disk space, open source (GPL-3.0), Windows & Linux

Virtual payment cards - create burner card numbers for online purchases, hide real card, free tier available

Data broker removal - removes your personal info from data brokers and people-search sites, paid service (~$103/yr)

Android firewall - block internet access per app without root, open source (GPL-3.0), no tracking

Android work profile isolation - isolate apps in a separate profile, freeze apps, open source, free

Privacy tool directory - alternatives to proprietary software sorted by category, open source, community curated

Beginner-friendly privacy guide - step-by-step digital security basics, threat modeling, practical advice