Privacy Guides' Recommendations
This list is not of my creation, all of the credit goes to Privacy Guides. For more information about any of these apps please visit the official list: https://www.privacyguides.org/tools/
Privacy Guides is a socially motivated website that provides information for protecting your data security and privacy. Their mission is to inform the public about the value of digital privacy, and global government initiatives which aim to monitor your online activity. We are a non-profit collective operated entirely by volunteer team members and contributors. The website is free of advertisements and not affiliated with any of the listed providers.
Privacy Guides was launched in September 2021 as a continuation of the defunct "PrivacyTools" open-source educational project. They recognized the importance of independent, criteria-focused product recommendations and general knowledge in the privacy space, which is why the Privacy Guides needed to preserve the work that had been created by so many contributors since 2015 and make sure that information had a stable home on the web indefinitely.
In 2022, they completed the transition of the main website framework's from Jekyll to MkDocs, using the mkdocs-material documentation software. This change made open-source contributions to the site significantly easier for outsiders, because instead of needing to know complicated syntax to write posts effectively, contributing is now as easy as writing a standard Markdown document.
They additionally launched a new discussion forum at discuss.privacyguides.net as a community platform to share ideas and ask questions about the project. This augments the existing community on Matrix, and replaced their previous GitHub Discussions platform, decreasing their reliance on proprietary discussion platforms.
So far in 2023, Privacy Guides has launched international translations of the website in French, Hebrew, and Dutch, with more languages on the way, made possible by their translation team on Crowdin. They plan to continue carrying forward their mission of outreach and education, and finding ways to more clearly highlight the dangers of a lack of privacy awareness in the modern digital age, and the prevalence and harms of security breaches across the technology industry.
These are our currently recommended web browsers and configurations. In general, we recommend keeping extensions to a minimum: they have privileged access within your browser, require you to trust the developer, can make you stand out, and weaken site isolation.
A free and open source web browser descended from the Mozilla Application Suite. Firefox is highly extensible, with thousands of third-party add-ons available.
Firefox version 60+ (Quantum) is presently faster than Google Chrome and use less memory than Chrome. Compare to previous versions of Firefox, the Quantum version is twice as fast, promote parallelism, and has more intuitive user interface.
Brave Web Browser is a fast, free, secure web browser with a built-in ad blocker*, tracking and security protection, and optimized data and battery experience.
*What is Brave Ad Replacement?
Brave’s goal is to speed up the web, stop bad ads and pay publishers. One of the ways we plan to accomplish this is with ad replacements. We will also invite users to fund their wallets and to use those funds to pay the publishers of their favorite websites.
Bromite is a Chromium fork with support for ad blocking and enhanced privacy.
Bromite aims at providing a no-clutter browsing experience without privacy-invasive features and with the addition of a fast ad-blocking engine. Minimal UI changes are applied to help curbing the idea of "browser as an advertisement platform".
Bromite is only available for Android Marshmallow (v6.0, API level 23) and above.
The best browser for your Mac is the one that comes with your Mac. Safari is faster and more energy efficient than other browsers. Handy tools help you save, find, and share your favorite sites. Built-in privacy features help keep your browsing your business. Apple Pay in Safari lets you shop safely and simply. And Safari works with iCloud to let you browse seamlessly across all your devices.
We generally do not recommend installing any extensions as they increase your attack surface. However, uBlock Origin or AdGuard may prove useful if you value content blocking functionality.
An efficient blocker add-on for various browsers. Fast, potent, and lean.
uBlock Origin is NOT an "ad blocker": it is a wide-spectrum blocker -- which happens to be able to function as a mere "ad blocker". The default behavior of uBlock Origin when newly installed is to block ads, trackers and malware sites -- through EasyList, EasyPrivacy, Peter Lowe’s ad/tracking/malware servers, Online Malicious URL Blocklist, and uBlock Origin's own filter lists.
AdGuard is the best way to get rid of intrusive ads and online tracking, and to protect your computer from malware. Make your web surfing faster, safer and more comfortable with AdGuard!
Why choose AdGuard?
Pop-ups, video adverts, banners and such — they will all go away. Due to unnoticeable background filtering and cosmetic processing, all you will see are clean pages with the content you came for.
AdGuard fights against all trackers and analytical systems that spy on you thanks to the special Spyware filter designed by the AdGuard team. It accumulates rules against all known online analytics that try to steal your private data.
There are plenty of otherwise great apps that just can't resist showing ads to you. AdGuard lets you have the best of both worlds by giving an option to filter traffic of any app installed on your computer.
Snowflake is a system to defeat internet censorship. People who are censored can use Snowflake to access the internet. Their connection goes through Snowflake proxies, which are run by volunteers.
If your internet access is not censored, you should consider installing the Snowflake extension to help users in censored networks. There is no need to worry about which websites people are accessing through your proxy. Their visible browsing IP address will match their Tor exit node, not yours.
Terms of Service; Didn't Read (ToS;DR) is an active project to fix the biggest lie on the web. We help you understand the Terms and Conditions and Privacy Policies of websites.
Terms of service are often too long to read, but it's important to understand what's in them. Your rights online depend on them. Get informed about your rights by installing the browser extension for Firefox, Chrome, Opera or Safari.
- Very broad copyright license on your content -> No promise to inform about government requests
- Facebook automatically shares your data with many other services
- Transparency on law enforcement requests
- You can give your feedback before changes
- No pseudonym allowed -> (more info on the forum)
- Google can use your content for all their existing and future services
- Limited copyright license to operate and improve all Google Services
- Inform about data requests
- Google posts notice of changes, with a 14-day ultimatum.
- Transparency on law enforcement requests -> Partial archives of their terms are available -> Jurisdiction in California -> (more info on the forum)
Android Operating Systems
These are the Android operating systems, devices, and apps we recommend to maximize your mobile device's security and privacy.
GrapheneOS is a privacy and security focused mobile OS with Android app compatibility developed as a non-profit open source project. It's focused on the research and development of privacy and security technology including substantial improvements to sandboxing, exploit mitigations and the permission model. GrapheneOS also develops various apps and services with a focus on privacy and security. Vanadium is a hardened variant of the Chromium browser and WebView specifically built for GrapheneOS. GrapheneOS also includes our minimal security-focused PDF Viewer, our hardware-based Auditor app / attestation service providing local and remote verification of devices, and the externally developed Seedvault encrypted backup which was initially developed for inclusion in GrapheneOS.
GrapheneOS improves the privacy and security of the OS from the bottom up. It deploys technologies to mitigate whole classes of vulnerabilities and make exploiting the most common sources of vulnerabilities substantially more difficult. It improves the security of both the OS and the apps running on it. The app sandbox and other security boundaries are fortified. GrapheneOS tries to avoid impacting the user experience with the privacy and security features. Ideally, the features can be designed so that they're always enabled with no impact on the user experience and no additional complexity like configuration options. It's not always feasible, and GrapheneOS does add various toggles for features like the Network permission, Sensors permission, restrictions when the device is locked (USB peripherals, camera, quick tiles), etc. along with more complex user-facing privacy and security features with their own UX.
GrapheneOS will never include either Google Play services or another implementation of Google services like microG. Those are not included in the Android Open Source Project and are not required for baseline Android compatibility.
DivestOS is an unofficial soft fork of LineageOS.
Over 700 proprietary blobs are removed during build time. Removal of these proprietary blobs increase security by reducing attack surface and increase privacy by removing untrusted code.
One of the biggest issues when it comes to aftermarket ROMs is the Linux kernel not being patched against known vulnerabilities. We've developed an automated patch checker that is able to apply fixes for over 2,900 CVEs. Furthermore, bootloader relocking and verified boot is made available for capable devices.
A custom hosts file created by analyzing over 180 million domains is included that blocks over 200,000 advertising and tracking servers. In addition LineageOS's built in analytics service, CMStats, is also removed.
Free Space Eraser
Extirpater is the first free space eraser for Android. It helps prevent deleted files from being recovered. Perfect for migrating from an unencrypted install or before selling your device.
We created Hypatia, the first ever open source real-time malware scanner for Android. Backed by the standard and trusted ClamAV signatures, it can detect over 450,000 malware signatures.
Privacy Oriented Browser
Mull is a browser based on Mozilla technology that is hardened against advanced fingerprinting techniques thanks to the Tor uplift project and arkenfox-user.js project.
F-Droid is an app catalogue that specializes in delivery of FOSS apps. For the most part all apps available through F-Droid respect your privacy and device.
UnifiedNlp is a plugin based Fused location provider. This allows you to enable plugins that can access various offline or online databases to determine your location in a battery saving way without GPS.
Silence, a SMS only fork of Signal, is substituted in place of the default AOSP app. It allows for end-to-end encrypted messages to other Silence users.
Everyone needs a phone. Not everyone wants governments and corporations tracking their every move and spying on their communications. CalyxOS lets you have your cake and eat it too, with "Privacy by Design".
When you use a phone with CalyxOS: • phone calls are encrypted so nobody can listen in • text messages are encrypted and a timer can be set so they disappear • web browsing is anonymized • advertising trackers are blocked • built-in free VPN services protect you from being spied on • your phone is receiving regular, timely, automatic security updates • your data is backed up with strong encryption to your personal cloud server or to USB storage
Features: • Verified Boot to prevent tampering with the phone's operating system, using cryptographic signatures
• Security and privacy by default: Instead of the bloatware, spyware, and backdoors installed by default on many smartphones, CalyxOS includes a suite of privacy, security, and censorship circumvention apps available out of the box, including Signal, Tor, DuckDuckGo Privacy Browser, K-9 Mail, Calyx VPN, and Riseup.
• Android without spyware: CalyxOS has reconfigured Android to avoid Google's spyware and tracking. It uses F-Droid for installing and updating free software applications, and strips out Google's privacy-invasive business model, replacing it with microG, which allows you to run nearly every app from Google Play Store without giving Google access to your phone.
• Regular security updates and patches: CalyxOS receives the latest security updates for Android, fixing software vulnerabilities and security flaws that can put your phone at risk.
Unofficial F-Droid client with Material UI.
This app is an Direct Adaptation/Modification of Foxy-Droid
- Material F-Droid style
- No cards or inappropriate animations
- Fast repository syncing
- Standard Android components and minimal dependencies
Orbot is a freely licensed open-source application developed for the Android platform. It acts as a front-end to the Tor binary application, and also provides an HTTP Proxy for connecting web browsers and other HTTP client applications into the Tor SOCKS interface.
Orbot is a component of the Guardian Project, an effort to develop a secure, anonymous smartphone for use by human rights activists, journalists and others around the world. Learn more: https://guardianproject.info/
Tor protects your privacy on the internet by hiding the connection between your Internet address and the services you use. We believe Tor is reasonably secure, but please ensure you read the instructions and configure it properly. Learn more at https://torproject.org/
Tor Frequently Asked Questions: https://support.torproject.org/faq/
Shelter is a Free and Open-Source (FOSS) app that leverages the “Work Profile” feature of Android to provide an isolated space that you can install or clone apps into.
Shelter comes with absolutely no advertisement / statistics / tracking SDKs bundled with it. All source code is available in at https://git.angry.im/PeterCxy/Shelter or mirror https://github.com/PeterCxy/Shelter and the sources are licensed under WTFPL.
This app depends on your Android system’s implementation of Work Profile. Some vendor / custom ROMs may have a broken implementation that may cause crashes and even bricking of your device. One such example is MIUI from Xiaomi. I currently provide no support for such ROMs because I personally do not own any of these devices. If you are running Shelter on these ROMs, you are on your own. If any developer out there own these devices and could make Shelter run on these ROMs, please send pull requests and I’ll be happy to merge them.
Features / Use Cases
- Run apps inside the isolated profile so they cannot access your data outside the profile
- “Freeze” (disable) background-heavy or seldom-used apps when you don’t need them. This is especially true if you use apps from "some company".
- Clone apps to use two accounts on one device
Shelter is not a full sandbox implementation. It cannot protect you from:
- Security bugs of the Android system or Linux kernel
- Backdoors installed in your Android system (so please use an open-source ROM if you are concerned about this)
- Backdoors installed into the firmwares (no way to work around this)
- Any other bugs or limitations imposed by the Android system.
Also, Shelter cannot create more than 1 work profile on one Android device, and cannot co-exist with any other apps that manages a Work Profile. This is due to the limitations of the Android system, and I can do nothing about this.
This is a modern camera app focused on privacy and security. It includes modes for capturing images, videos and QR / barcode scanning along with additional modes based on CameraX vendor extensions (Portrait, HDR, Night Sight, Face Retouch and Auto) on devices where they're available.
Modes are displayed as tabs at the bottom of the screen. You can switch between modes using the tab interface or by swiping left/right anywhere on the screen. The arrow button at the top opens the settings panel and you can close it by pressing anywhere outside the settings panel. You can also swipe down to open the settings and swipe up to close it.
The app has an in-app gallery and video player for images/videos taken with it. It currently opens an external editor activity for the edit action.
Zooming via pinch to zoom or the zoom slider will automatically make use of the wide angle and telephoto cameras on Pixels and other devices supporting it. It will become more broadly supported over time.
By default, continuous auto focus, auto exposure and auto white balance are used across the whole scene. Tapping to focus will switch to auto focus, auto exposure and auto white balance based on that location. The focus timeout setting determines the timeout before it switches back the default mode. The exposure compensation slider on the left allows manually tuning exposure and will automatically adjust shutter speed, aperture and ISO. Further configuration / tuning will be provided in the future.
Camera permission is the only one that's required. Images and videos are stored via the Media Store API so media/storage permissions aren't required. The Microphone permission is needed for video recording by default but not when including audio is disabled. Location permission is only needed if you explicitly enabling location tagging, which is an experimental feature.
By default, EXIF metadata is stripped for captured images and only includes the orientation.
Simple Android PDF viewer based on pdf.js and content providers. The app doesn't require any permissions.
PrivacyBlur does one thing only and does it well: blur or pixelate areas of your images with a few finger taps. Hide kids, faces, documents, numbers, names, etc., from your pictures in mere seconds. With PrivacyBlur at your side, you can share your pictures online without second thoughts.
Faces can be detected automatically. This happens on your phone, the image is not sent to any server.
No in-app purchases. No ads. No watermark. No hassle. Free forever because privacy shouldn't cost anything.
- Blur / Pixelate effect
- Faces can be detected automatically
- Fine / coarse grain effect
- Round / Square area
- Export to your camera roll
Linux distributions are commonly recommended for privacy protection and software freedom.
If you don't already use Linux, below are some distributions we suggest trying out, as well as some general privacy and security improvement tips that are applicable to many Linux distributions.
The Fedora Project is an openly-developed project designed by Red Hat Enterprise Linux , open for general participation, led by a meritocracy, following a set of project objectives. The goal of The Fedora Project is to work with the Linux community to build a complete, general purpose operating system exclusively from open source software. Development will be done in a public forum. The project will produce time-based releases of Fedora about 2-3 times a year, with a public release schedule. The Red Hat engineering team will continue to participate in building Fedora and will invite and encourage more outside participation than in past releases. By using this more open process, we hope to provide an operating system more in line with the ideals of free software and more appealing to the open source community.
openSUSE is a free and Linux-based operating system for your PC, Laptop or Server.
The openSUSE distribution is a stable, easy to use and complete multi-purpose distribution.
It is aimed towards users and developers working on the desktop or server. It is great for beginners, experienced users and ultra geeks alike, in short, it is perfect for everybody! The latest release, openSUSE 13.1, features new and massively improved versions of all useful server and desktop applications. It comes with more than 1,000 open source applications.
openSUSE is also the base for SUSE's award-winning SUSE Linux Enterprise products.
The openSUSE project is a worldwide effort that promotes the use of Linux everywhere. openSUSE creates one of the world's best Linux distributions, working together in an open, transparent and friendly manner as part of the worldwide Free and Open Source Software community.
Arch Linux is an independently developed, x86_64 optimized GNU/Linux distribution targeted at competent Linux users. It uses pacman, its home-grown package manager, to provide updates to the latest software applications with full dependency tracking. Operating on a rolling release system, Arch can be installed from a CD image or via an FTP server. The default install provides a solid base that enables users to create a custom installation. In addition, the Arch Build System (ABS) provides a way to easily build new packages, modify the configuration of stock packages, and share these packages with other users via the Arch Linux user repository.
NixOS is a GNU/Linux distribution that aims to improve the state of the art in system configuration management. In existing distributions, actions such as upgrades are dangerous: upgrading a package can cause other packages to break, upgrading an entire system is much less reliable than reinstalling from scratch, you can’t safely test what the results of a configuration change will be, you cannot easily undo changes to the system, and so on. We want to change that.
More social network pages for NixOS: Google+ (unofficial): https://plus.google.com/communities/113182864761473463138
Whonix is a desktop operating system designed for advanced security and privacy. Whonix mitigates the threat of common attack vectors while maintaining usability. Online anonymity is realized via fail-safe, automatic, and desktop-wide use of the Tor network. A heavily reconfigured Debian base is run inside multiple virtual machines, providing a substantial layer of protection from malware and IP address leaks. Commonly used applications are pre-installed and safely pre-configured for immediate use. The user is not jeopardized by installing additional applications or personalizing the desktop. Whonix is under active development and is the only operating system designed to be run inside a VM and paired with Tor.
Based on Tor Whonix utilizes Tor's free software, which provides an open and distributed relay network to defend against network surveillance.
Isolation Connections through Tor are enforced. DNS leaks are impossible, and even malware with root privileges cannot discover the user's real IP address.
Compatibility Whonix is available for all major operating systems. Most commonly used applications are compatible with the Whonix design.
The Amnesic Incognito Live System (Tails) is a Debian 9 based live CD/USB with the goal of providing complete Internet anonymity for the user. The product ships with several Internet applications, including web browser, IRC client, mail client and instant messenger, all pre-configured with security in mind and with all traffic anonymised. To achieve this, Incognito uses the Tor network to make Internet traffic very hard to trace.
Priorities for the next years:
ADOPTION Improve installation instructions Give some love: Fix unsupported Wi-Fi cards. Explain better what Tails is and what makes it so awesome. Tails for blind users
RESISTANCE TO REMOTE EXPLOITATIONS: HTTPS only mirrors for protection Critical parts of Tails audited
COMMUNITY GROWTH, DIVERSITY, AND INCLUSION Create outreach especially to under-represented Recruit new workers and Lower technical requirements for them so we can get more people involved
APPLICATIONS AND FEATURES Screen locker. [DONE] Tails Server: run onion services fron tails! :-) Support GUI's to mount VeraCrypt volumes GUI for the Additional Packages persistent feature: Easily add software to Tails. Mobile msg applications: investigate if we could support Signal, Firechat etc. Provide a GUI for backups
SUSTAINABILITY OF CORE CODE Basing Tails on rolling snapshots of Debian Priority for core code than polishes Port complex shells to Python Robust GMT time snyc
USER RESEARCH Perform surveys. Find more people to describe our users Power our help desk with a tracker
FUNDING FROM PRIVATE PARTNERS Strenghten our relationships with existing ones. Contact more potential ones. Document better benefits for partners
INFRASTRUCTURE MIGRATIONS Update our infrastructure to: Have a better server infrastructure to handle our growing Self-host our website as boum.org won't be hosting anymore
ROBUST AUTOMATED TESTS Local Git repos Our own email server Notify devs on failure
Qubes is an open source operating system designed to provide strong security for desktop computing.
Qubes takes an approach called security by compartmentalization, which allows you to compartmentalize the various parts of your digital life into securely isolated compartments called qubes.
This approach allows you to keep the different things you do on your computer securely separated from each other in isolated qubes so that one qube getting compromised won’t affect the others. For example, you might have one qube for visiting untrusted websites and a different qube for doing online banking. This way, if your untrusted browsing qube gets compromised by a malware-laden website, your online banking activities won’t be at risk. Similarly, if you’re concerned about malicious email attachments, Qubes can make it so that every attachment gets opened in its own single-use disposable qube. In this way, Qubes allows you to do everything on the same physical computer without having to worry about a single successful cyberattack taking down your entire digital life in one fell swoop.
Below are a few alternative operating systems, that can be used on routers, Wi-Fi access points, etc.
OpenWrt Project is a Linux operating system targeting embedded devices. Instead of trying to create a single, static firmware, OpenWrt provides a fully writable filesystem with package management. This frees you from the application selection and configuration provided by the vendor and allows you to customize the device through the use of packages to suit any application. For developers, OpenWrt is the framework to build an application without having to build a complete firmware around it; for users this means the ability for full customization, to use the device in ways never envisioned.
pfSense is a free, open source customized distribution of FreeBSD tailored for use as a firewall, and router. In addition to being a powerful, flexible firewalling and routing platform, it includes a long list of related features and a package system allowing further expandability without adding bloat and potential security vulnerabilities to the base distribution, making it a fully qualified UTM device. pfSense is a popular project with more than 1 million downloads since its inception, and proven in countless installations ranging from small home networks protecting a PC and an Xbox to large corporations, universities and other organizations protecting thousands of network devices.
Many cloud storage providers require your full trust that they will not look at your files. The alternatives listed below eliminate the need for trust by either putting you in control of your data or by implementing E2EE.
If these alternatives do not fit your needs, we suggest you look into Encryption Software.
Cryptee is a safety and privacy focused, encrypted and cross-platform personal data storage service. You can write personal documents, notes, journals, store photos and all sorts of other files.
It works on all your devices and provides a zero-knowledge place to keep all your sensitive digital belongings. Cryptee has all the features you'd expect from a modern document editor, like live sync with unlimited devices, rich document editing, to-dos, markdown, hotkeys, code highlighting, latex math, embeds, attachments, support for tables, ability to attach pdf files, read epub ebooks, listen to audio-memos, as well as open and link other various file formats.
Cryptee is based in Europe, in Tallinn, Estonia. a country named "the most advanced digital society in the world" by wired, and a country where the government runs on blockchain.
You should have full control over your data. We help you achieve that: a safe home for all your data. Secure, under your control and developed in an open, transparent and trustworthy way. We are Nextcloud.
Nextcloud offers industry-leading on-premises file sync and online collaboration technology. Our expertise is in combining the convenience and ease of use of consumer-grade solutions like Dropbox and Google Drive with the security, privacy and control business needs.
Our self-hosted solutions ensure you know where data is, who has access, and that even meta-data does not leak.
We create three products, integrated and acting as one:
Nextcloud Files offers an on-premise Universal File Access and sync platform with powerful collaboration capabilities and desktop, mobile and web interfaces.
Nextcloud Talk delivers on-premises, private audio/video conferencing and text chat through browser and mobile interfaces with integrated screen sharing and SIP integration.
Nextcloud Groupware integrates Calendar, Contacts, Mail and other productivity features to help teams get their work done faster and easier.
Our products integrate powerful capabilities to control and monitor data exchange and communication, including our unique File Access Control and workflow features, extensive audit logs, fine-grained sharing controls and more.
Security is Nextcloud users' greatest concerns and our prime advantage over competitors. Nextcloud features a host of unique, innovative security technologies from brute force protection to advanced server side and integrated end-to-end, client side encryption with enterprise-grade key handling and a wide range of security hardenings. Our security has been reviewed by trusted third parties and is backed by a USD 5000 Security Bug Bounty Program, providing the confidence that data meant to stay private will stay private.
The safest way to store or share your files Proton Drive is an end-to-end encrypted Swiss vault for your files, ensuring that nobody except those authorized by you can access your data.
Protect your files with end-to-end encryption Proton Drive uses end-to-end encryption, which means no one else, not even Proton, can access your files. Your file content, file names, folder names, and paths are all fully encrypted. Proton Drive is open source and independently audited. Anyone can verify that our encryption works as described.
Syncing and sharing made easy Your Proton Drive is a secure vault that you can carry with you and give or revoke access to.
Free file storage Everyone has the right to privacy, which is why we make Proton Drive available for free. To access more features and support our fight for a better internet, upgrade to a paid account.
Your data, your rules With Proton Drive, you keep full control of your data. Unlike other cloud file storage services, our encryption ensures we can't access your files.
Swiss privacy Proton Drive is based in Switzerland and functions as a Swiss vault for your data. Your data is protected by some of the world's strongest privacy laws.
It works just like other file storage services, except everything is encrypted automatically. Automatic cross-device sync means all your files are available on all your devices, all the time. Easily share files with anyone with one click.
Encrypted DNS Proxies
Encrypted DNS proxy software provides a local proxy for the unencrypted DNS resolver to forward to. Typically it is used on platforms that don't natively support encrypted DNS.
An OpenSnitch-inspired firewall and network monitor + a pi-hole-inspired DNS over HTTPS client with blocklists.
In other words, RethinkDNS has two primary modes, DNS and Firewall. The DNS mode routes all DNS traffic generated by apps to any user chosen DNS-over-HTTPS or DNSCrypt resolver. The Firewall mode lets the user deny internet-access to entire applications based on events like screen-on / screen-off, app-foreground / app-background, unmetered-connection / metered-connection; or based on play-store defined categories like Social, Games, Utility, Productivity; or additionally, based on user-defined denylists.
DNSCrypt is a protocol that authenticates communications between a DNS client and a DNS resolver. It prevents DNS spoofing. It uses signatures to verify that responses originate from the chosen DNS resolver and haven't been tampered with. You can learn more about DNSCrypt protocol at https://dnscrypt.info
Our app implements DNSCrypt & DNS-over-HTTPS/2 (DoH) protocols and allows you to secure your DNS traffic against of spoofing. It overrides your DNS settings with a single or multiple DNSCrypt or DNS-over-HTTPS/2 (DoH) resolvers. Works both for WiFi & cellular.
DNSCrypt-Proxy 2 is a command-line proxy for Linux, BSD, Windows, MacOS, Android and more. It bridges applications expecting regular DNS with servers supporting encrypted DNS (DNSCrypt and DoH). DNSCrypt-Proxy can also display the DNS activity, cache results to improve speed, and locally block unwanted content.
Self-hosted DNS Proxies
A self-hosted DNS solution is useful for providing filtering on controlled platforms, such as Smart TVs and other IoT devices, as no client-side software is needed.
AdGuard Home is a network-wide software for blocking ads & tracking. After you set it up, it'll cover ALL your home devices, and you don't need any client-side software for that.
It operates as a DNS server that re-routes tracking domains to a "black hole", thus preventing your devices from connecting to those servers. It's based on software we use for our public AdGuard DNS servers -- both share a lot of common code.
Block ads for all your devices without the need to install client-side software. The Pi-hole blocks ads at the DNS-level, so all your devices are protected.
Email is practically a necessity for using any online service, however we do not recommend it for person-to-person conversations. Rather than using email to contact other people, consider using an instant messaging medium that supports forward secrecy.
Secure email with absolutely no compromises, brought to you by MIT and CERN scientists.
Swiss Based ProtonMail is incorporated in Switzerland and our servers are located in Switzerland. We are outside of US and EU jurisdiction and all user data is protected by strict Swiss privacy laws.
Zero Access Because of our end-to-end encryption, your data is already encrypted by the time it reaches our servers. We have no access to your messages, and since we cannot decrypt them, we cannot share them with third parties.
Backwards Compatible ProtonMail works out of any modern web browser, there is nothing to install. We are also backwards compatible with other email providers so you can continue sending and receiving emails from friends who are not using ProtonMail.
Forever Free We believe privacy is a fundamental human right and should be available for everyone. That's why we offer multi-tiered pricing including a free version that anyone can use. Let's bring privacy back to the people!
Fully Anonymous We do not log IP addresses or require any personal information to sign up. We accept bitcoin and cash payments for paid accounts to ensure even paid account users have complete privacy.
Cross Platform ProtonMail works on all devices, including desktops, laptops, tablets, and smartphones. It's as simple as visiting our site and logging in. There are no plugins or apps to install - simply use your favorite web browser.
Mailbox.org offers a secure e-mail account for home and business use. The domain name, email@example.com, is easy to remember and can be understood anywhere in the world. They have been operating e-mail accounts for more than 20 years and are a highly reliable service provider.
Strong Security & Privacy:
• Two-Factor authentication (TFA) for personal (Private) accounts. TFA is not yet available for Business accounts. But they are in progress of implementing it. Using the very popular Keycloak. • Optional password reset via SMS • Consistent encryption with SSL/TLS and GPG • Free automated email backup and restore • Reliable spam and virus protection • Redundancy with two independent datacenters located in Berlin, Germany. • Compliant with German data privacy regulations • Mailbox.org is mostly powered by Libre software (open source). Such as, but not limited to, Open-Xchange (OX) for its backend, and Roundcube for its webmail. If you're not familiar with "Libre software" this means stronger security and stronger privacy. Because all can review the software code and contribute. ___ • Source mailbox.org is mostly powered by Libre software at https://archive.ph/ueZ5B#selection-715.0-733.34 ___ • Repository at https://software.open-xchange.com/products/appsuite/stable/appsuiteui/ • For OX, attractive free license GNU Affero General Public License (AGPL) v.3.0
• E-mails, calendars, contacts, tasks, word processing, and file sharing • Optional custom domain names for email Business accounts • Alias email • Webmail • Business account can administer sub-accounts • Optional connection using WebDAV (CalDAV and CardDAV), IMAP, POP3, SMTP, or IMap. Using your own mail software. For example, Thunderbird, Lightning. • Optional connection to external inboxes • Attachment size up to 137 MB • 2 to 50 GB storage space for e-mails. • Up to 100 GB storage space for documents and photos • Both the Standard and Premium plan are quickly & easily extendable within the same plan. Up to 250 GB for email storage, per email account. And 1,000 GB for cloud storage, per cloud storage account. Also, the Premium extended GB are half price than the Standard extended GB. • Smartphone synchronizing for contacts, calendars, etc. • Unlimited video conference up to 10 participants • User-defined filters, forwarding, automated vacation responses, blacklist, • Dark theme. Which is optional for everything into the cloud office. • Completely ad-free, no analysis of user data • Green hosting with green power • Highly reliable email service provider • Support and documentation in English or German
• Access Mailbox.org with various mobile OX app :
___• https://play.google.com/store/apps/details?id=com.openxchange.mobile.oxmail ___• https://play.google.com/store/apps/details?id=com.openexchange.drive.vanilla ___• https://play.google.com/store/apps/details?id=com.openexchange.mobile.syncapp.enterprise
The easiest way to protect yourself from unwanted intrusion and mass surveillance.
Easy one-click PGP encryption Think PGP encryption is too hard to use? Think again. We’ve got it down to one click. It’s so fast and easy, anyone can use it—even beginners.
Send private email to everyone Even if your recipient does not use encryption, you can still send encrypted messages with our Q&A feature.
State-of-the-art security StartMail uses state-of-the-art security like PFS (TLS 1.1 & 1.2) and extra-secure vaults to keep your communications and data safe.
10 GB storage in a personal vault It’s more space than you will ever need to store all of your sensitive communications — safely.
Disposable email addresses When you don’t want to share real email addresses, you can create temporary ones on the fly.
IMAP/SMTP compatible You can manage StartMail through your favorite email programs, like Outlook, Thunderbird, and Apple Mail.
Easy setup for business No software to download. No installation needed. We walk you through the easy setup in minutes.
Costs less than a coffee All of the above features come at an affordable price. Less than $5 per month. That’s just 16 cents per day.
We never read your email We couldn’t even if we wanted to do so. We believe that your privacy is a basic human right worth fighting for.
Use your own domain Get StartMail security on your own domains or subdomains for professional, custom email addresses.
Email Aliasing Services
An email aliasing service allows you to easily generate a new email address for every website you register for. The email aliases you generate are then forwarded to an email address of your choosing, hiding both your "main" email address and the identity of your email provider.
Addy.io is an open-source anonymous email forwarding service.
Why should I use addy.io?
- Protect your real email address from spam by simply deactivating/deleting aliases that receive unsolicited emails
- Identify who has sold your data by using a different email address for every site
- Protect your identity in the event of a data breach by making it difficult for hackers to cross-reference your accounts
- Prevent inbox snooping by encrypting all inbound emails using GPG/OpenPGP encryption
- Update where emails are forwarded without having to go through and change your email address for each site individually
- Reply to forwarded emails anonymously without revealing your true email address
How does it work?
- Register your username
Let's say your username is johndoe. You can now use *@johndoe.anonaddy.com (or .me) as your email. Where * denotes any valid local part for an email address.
If you would like to remain anonymous choose a username that is not linked to your real name or identify and that you haven't used anywhere else.
- Create Aliases On The Fly (or generate UUID aliases)
Next time you are signing up to a website or newsletter, simply make up a new alias and enter that instead of your real email address.
For example, if you are on vuejs.org and you want to sign up to their newsletter you could simply enter firstname.lastname@example.org (or .me).
We'll automatically create the alias in your dashboard as soon as it receives its first email. You can reply to emails anonymously too!
- Manage Aliases
Let's say a spammer gets hold of one of your aliases and starts sending unsolicited email to it. You can simply toggle a switch in your dashboard and deactivate that alias.
Our system will then silently discard any further emails and you won't be forwarded anything else for that alias.
You can also delete the alias. Then our system will reject any emails and respond with an error.
SimpleLogin is the open source, self-hostable solution to protect your email address using email alias: just use alias everywhere instead of your personal email address.
All emails sent to an alias are forwarded to your email inbox. And not only a SimpleLogin alias can receive emails, it can also send and reply to emails.
With our extensions on Chrome and Firefox and Safari one is coming, create quickly alias without leaving your browser tab.
Believing that anyone should be able to protect their email address for free, SimpleLogin has a generous free plan: no cap on bandwidth and infinite forwards/replies.
If you have your own domain, with powerful features like catch-all email alias, SimpleLogin could replace your email hosting solution!
Advanced system administrators may consider setting up their own email server. Mail servers require attention and continuous maintenance in order to keep things secure and mail delivery reliable.
mailcow is a mail server suite based on Dovecot, Postfix and other open source software, that provides a modern Web UI for administration.
Take back control of your email with this easy-to-deploy mail server in a box. Mail-in-a-Box turns a fresh cloud computer into a working mail server. You get contact synchronization, spam filtering, and so on. On your phone, you can use apps like K-9 Mail and CardDAV-Sync free beta to sync your email and contacts between your phone and your box. And in your browser:
Use a search engine that doesn't build an advertising profile based on your searches.
Consider using a VPN or https://alternativeto.net/software/tor/ if your threat model requires hiding your IP address from the search provider.
Brave Search is built on top of a completely independent index, and doesn’t track users, their searches, or their clicks.
Brave Search is available in beta release globally on all Brave browsers (desktop, Android, and iOS) as one of the search options alongside other search engines, and will become the default search in the Brave browser later. It is also available from any other browser.
Brave Search is different from other search engines because it uses its own index and follows different principles:
- Privacy: no tracking or profiling of users.
- User-first: the user comes first, not the advertising and data industries.
- Independence: Brave has its own search index for answering common queries privately without reliance on other providers.
- Choice: soon, options for ad-free paid search and ad-supported search. (Sometime in early 2022, Brave Search results will include paid ads (delivered, of course, in a way that protects privacy). Users with a Brave Search Premium subscription will see ad-free search results)
- Transparency: no secret methods or algorithms to bias results, and soon, community-curated open ranking models to ensure diversity and prevent algorithmic biases and outright censorship.
- Seamlessness: best-in-class integration between the browser and search without compromising privacy, from personalization to instant results as the user types.
- Openness: Brave Search will soon be available to power other search engines.
Brave Search uses its own index, but also ensures fully anonymous search, is transparent in how search results are ranked, and integrates with a privacy-preserving browser on desktop and mobile – an across-the-board combination of independence and privacy which no other provider offers.
Brave Search is also introducing the industry’s first search independence metric, displaying the ratio of results coming exclusively from Brave’s index. It is derived privately using the user’s browser as we do not build user profiles. Users can check this aggregate metric to verify the independence of their results and see how results are powered by our own index, or if third-parties are being used.
DuckDuckGo is an alternative search engine that has rich features, respects your privacy, and is built from free/open-source software.
• Zero-click Info - Useful information above the links. • More Privacy - We do not track you. • Goodies - Instant answers, !bangs & settings. • Less Spam - We remove sites with just ads.
Differences to searx
SearXNG is a fork of searx. Here are some of the changes:
- Huge update of the simple theme:
- usable on desktop, tablet and mobile
- light and dark versions (you can choose in the preferences)
- support right-to-left languages
- see the screenshots
- the translations are up to date, you can contribute on Weblate
- the preferences page has been updated:
- you can see which engines are reliable or not
- engines are grouped inside each tab
- each engine has a description
- thanks to the anonymous metrics, it is easier to report a bug of an engine and thus engines get fixed more quickly
- if you don't want any metrics to be recorded, you can disable them on the server
- administrator can block and/or replace the URLs in the search results
- the Docker image is now also built for ARM64 and ARM/v7 architectures
- you don't need Morty to proxy the images even on a public instance
- you get a well maintained Docker image, now also built for ARM64 and ARM/v7 architectures
- up to date installation scripts
Contributing is easier
- readable debug log
- contributions to the themes are made easier, check out our Development Quickstart guide
- a lot of code cleanup and bug fixes
- the dependencies are up to date
Why did we create Startpage.com?
As kids, we’re all taught not to touch stuff that doesn’t belong to us. It’s a good guideline. So why are online companies harvesting our personal data without our consent? They shouldn’t. That’s why we’re developing online tools that help you stay in control of your personal information. Search is done. Expect other private versions of common digital services soon. Why? Because it’s our belief that personal data should be your data, not Big Data. Period.
How we made search private
You can’t beat Google when it comes to online search. So we’re paying them to use their brilliant search results in order to remove all trackers and logs. The result: The world’s best and most private search engine. Only now you can search without ads following you around, recommending products you’ve already bought. And no more data mining by companies with dubious intentions. We want you to dance like nobody’s watching and search like nobody’s watching.
No personal data storage
We don’t collect or share your personal information. Ever. There’s literally no data about you on our servers. None. We can’t profile you, and we can’t be forced to hand over your data to authorities, simply because we don’t have any data to hand over.
Clicking search results means leaving the protection of Startpage.com. This could lead to a barrage of cookies being installed on your device. That’s why we developed the "Anonymous View" feature. With "Anonymous View" you can visit search results in full privacy, and keep on browsing: They’ll never know you were there. You’ll find the feature next to every search result.
No filter bubble
Other search engines use your search habits to serve you results they think you want, essentially trapping you in an echo chamber of results. With Startpage.com, you break through the filter bubble to see a wider variety of results.
Find a no-logging VPN operator who isn’t out to sell or read your web traffic. If you're looking for additional privacy from your ISP, on a public Wi-Fi network, or while torrenting files, a VPN may be the solution for you as long as you understand the risks involved.
VPNs DO NOT PROVIDE ANONYMITY!!
Security Our secure VPN sends your internet traffic through an encrypted VPN tunnel, so your passwords and confidential data stay safe, even over public or untrusted Internet connections.
Privacy Keep your browsing history private. As a Swiss VPN provider, we do not log user activity or share data with third parties. Our anonymous VPN service enables Internet without surveillance.
Freedom We created Proton VPN to protect the journalists and activists who use Proton Mail. Proton VPN breaks down the barriers of Internet censorship, allowing you to access any website or content.
Internet security for everyone Our goal is to make online privacy accessible to all. To do this, we have focused on making the advanced security technology in Proton VPN effortless to use and freely available.
Free VPN We believe privacy and security are fundamental human rights, so we also provide a free version of Proton VPN to the public. Unlike other free VPNs, there are no catches. We don't serve ads or secretly sell your browsing history. Proton VPN Free is subsidized by Proton VPN paid users. If you would like to support online privacy, please consider upgrading to a paid plan for faster speeds and more features.
Easy to Use The best security tools in the world will only protect you if used correctly and consistently. We have extensively simplified the Proton VPN interface to make it as intuitive as possible – so you can stay protected every day, hassle free.
Fast VPN Speeds A 10 Gbps server network combined with our unique suite of VPN Accelerator technologies can improve speeds by over 400%. The advanced network TCP flow control algorithm we utilize provides unparalleled performance and connection stability.
Multi-Platform Support Proton VPN is available on all your devices, including PCs, Macs, smartphones, and even routers. A secure Internet connection that you can trust is essential to maintaining your privacy on your laptop at home, your mobile device on the road, or your workstation at the office. Proton VPN has native apps for Windows, macOS, Linux, Chromebook, Android, Android TV and iOS/iPadOS.
Stream from anywhere Proton VPN unblocks a wide selection of popular online media services, allowing you to access your favorite streaming content from anywhere in the world as if you were at home. Our fast server network and unique VPN Accelerator technology also ensure your experience is smooth and buffering-free.
VPN Accelerator VPN Accelerator is a set of technologies unique to Proton VPN that can increase your VPN speeds by over 400%. By overcoming CPU limitations that affect how VPN protocols are processed, using advanced networking techniques to reduce latency, and redesigning VPN protocols themselves to reduce inefficiencies in their code, VPN Accelerator can dramatically increase speed performance.
IVPN offers a secure VPN service to privacy minded individuals including multi-hop technology and fast bandwidth. Protect your privacy now!
YOUR PRIVACY & SECURITY REQUIRES MORE THAN JUST A VPN SERVICE
We don't pretend that you can just flip a switch and enjoy complete security and peace of mind. Your privacy and security requires that you adopt a mindset that considers your online defences at many levels. You must consider fundamental questions such as "what data am I trying to protect?" and "from whom am I trying to protect it?". Which is why we publish our free privacy and security guides for novices to our most sophisticated users.
Install our exclusive IVPN software that protects against every type of known IP leak and connect to the internet without any fear of being tracked, monitored or censored. All your online activity is tied to our network IP addresses, ensuring your long-term privacy.
We've been around since 2009, far longer than most VPN services. You can rely on our hard-earned reputation for the security of our service, providing you with a privacy service you can trust.
And we don't store any logs that could compromise your privacy or anonymity.
With IVPN, your privacy and security is more than just an afterthought – it's our top priority.
Mullvad is an ethical VPN provider based in Gothenburg, Sweden.
They keep no logs and an account number is the only thing you need to connect to Mullvad VPN. They ask for no email, no phone number; no personal information whatsoever. You can pay by Crypto or Cash.
Mullvad use the latest encryption methods and were one of the first VPN providers to start using the cutting edge WireGuard protocol. To help you obtain even higher connection speeds, they also provide a SOCKS5 service - which is used in addition to Wireguard/OpenVPN - so that you're no longer confined to the bandwidth of a single VPN connection.
They support Wireguard Multihop (like Tor), Killswitch, DNS content and ad-blocking. Their servers are blazing fast with some blasting out uplink speeds of 40Gb/s.
Visit the website for more details.
Calendars and contacts contain some of your most sensitive data; use products that implement E2EE at rest to prevent a provider from reading them.
Tutanota is the world's most secure email service, easy to use and private by design. You get fully encrypted calendars and contacts with all our personal and business email accounts. It has open source iOS and an Android apps. The Android app is published on F-Droid (which means the app does not use Google's push notification system) making it a great option if you want to de-Google your life. All data is stored encrypted and can not be searched, i.e. for commercial use. It offers dead easy end-to-end encryption.
Encrypted Calendar Organization is key: Regain control over your busy life with Tutanota's encrypted calendar. The calendar is integrated seamlessly into the secure email client and can be easily accessed on any device. Event notifications are sent end-to-end encrypted to fully protect your privacy.
Contacts: Tutanota allows you to add and manage encrypted contacts, always at hand.
Search: Fast search of encrypted data guarantees privacy.
Mail Storage 1 GB of storage is free for everyone.
Easy - one password for everything Tutanota wants to provide the easiest-to-use and most secure email client. You do not have to fiddle with multiple passwords for signing in and for encryption/decryption. The state-of-the-art encryption technology handles all the encryption and decryption complexities. Still: Your password only belongs to you. It is being hashed and salted locally before being transmitted to the servers.
Only you with your password have access to your encrypted data, profiling is impossible. Tutanota combines security with ease-of-use so that everybody can use end-to-end encryption. Now you can take back your privacy easily!
Secure and end-to-end encrypted personal information sync for Android, the desktop and the web. Currently supports calendars, contacts and tasks (using OpenTasks), with more on the way.
In order to use this application you need to have an account with EteSync (paid hosting), or run your own instance (free and open source). Check out https://www.etesync.com/ for more information.
Easy to Use
EteSync is very easy to use. It seamlessly integrates with Android so you won't even notice you are using it. Security doesn't always have to come at a cost.
Secure & Open
Thanks to zero-knowledge end-to-end encryption, not even we can see your data. Don't believe us? You shouldn't, just verify yourself, both the client and server are open source.
A full history of your data is saved in an encrypted tamper-proof journal which means you can review, replay and revert any changes you have made at any point in time.
How does it work?
EteSync integrates seamlessly with your existing apps. All you need to do is sign up (or run your own instance), install the app, and enter your password. After that, you will be able to save your contacts, calendar events and tasks to EteSync using your existing Android apps, and EteSync will transparently encrypt your data and update the change journal in the background. More security, same work-flow.
Your schedule is worth protecting Your calendar is a record of your life. Proton Calendar helps keep it private.
Make every day safer with end-to-end encryption Proton Calendar automatically secures all your events with end-to-end encryption. Events received from people who use other calendars are secured with zero-knowledge encryption. In both cases, event details, including the title, description, location, and people invited, are encrypted so not even we can see them.
All the features you expect, plus privacy Proton Calendar makes staying on top of your schedule simple while keeping your information secure.
Free calendar Everyone has the right to privacy, which is why we make Proton Calendar available for free. To access more features and support our fight for a better internet, upgrade to a paid account.
Your data, your rules Proton Calendar is a calendar that respects privacy and puts people (not advertisers) first. Your data belongs to you, and our encryption ensures that.
Swiss privacy Proton is incorporated and headquartered in Switzerland. This means all user data is protected by strict Swiss privacy laws and Swiss neutrality.
Proton Calendar was built by the team behind Proton Mail, the world’s largest encrypted email service Over 50 million people and some of the world’s largest organizations have signed up with Proton.
Get more from Proton Calendar when you use Proton Mail Proton Calendar comes with a Proton Mail email address that you can use to securely send event invites. You can also add events to Proton Calendar directly from your Proton Mail inbox.
Proton Calendar helps you make the most of your day With Proton Calendar, you can quickly add events, modify invitations, and set multiple reminders, meaning you can spend less time managing your schedule and more time on the things that matter. Import your existing calendar to Proton Calendar with only a couple of clicks to get started.
Keep track of your notes and journalings without giving them to a third-party.
If you are currently using an application like Evernote, Google Keep, or Microsoft OneNote, we suggest you pick an alternative here that supports E2EE.
EteSync Notes is the first new app to use the EteSync 2.0 protocol. As we mentioned in a previous post, a big part of the motivation behind EteSync 2.0 is what it enables for the future of EteSync. EteSync Notes is the first fruit of that effort.
Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. The notes are searchable, can be copied, tagged and modified either from the applications directly or from your own text editor. The notes are in Markdown format.
Notes exported from Evernote via .enex files can be imported into Joplin, including the formatted content (which is converted to Markdown), resources (images, attachments, etc.) and complete metadata (geolocation, updated time, created time, etc.). Plain Markdown files can also be imported.
The notes can be synchronised with various cloud services including Nextcloud, Dropbox, OneDrive, WebDAV, their own service (paid) or the file system (for example with a network directory). When synchronising the notes, notebooks, tags and other metadata are saved to plain text files which can be easily inspected, backed up and moved around.
The application is available for Windows, Linux, macOS, Android and iOS. A Web Clipper, to save web pages and screenshots from your browser, is also available for Firefox and Chrome.
- Desktop, mobile and terminal applications.
- Web Clipper for Firefox and Chrome.
- End To End Encryption (E2EE)
- Synchronisation with various services, including NextCloud, Dropbox, WebDAV and OneDrive.
- Import Enex files (Evernote export format) and Markdown files.
- Export JEX files (Joplin Export format) and raw files.
- Support for to-dos and tags
- Support for notifications in mobile and desktop applications.
- Offline first, so the entire data is always available on the device even without an internet connection.
- Markdown notes. Support for extra features such as math notation, checkboxes and Fountain (screenwriting markup language).
- File attachment support, images, etc.
- Search functionality.
- Geo-location support.
- Supports multiple languages
- External editor support - open notes in your favorite external editor with one click in Joplin.
Standard Notes is a simple and private notes app. It allows you to write and sync your notes across all your devices, iOS, Android, Linux, Windows, MacOS, and web browser.
Private means your notes are end-to-end encrypted, so only you can read your notes. Even we can't read the contents of your notes.
Simple means it does one job and does it well. Standard Notes is a safe and lasting place for your life's work. Our focus is making it easy to write notes wherever you are and syncing them with encryption to all your devices.
Standard Notes comes free with: • Seamless sync across all your devices, with easy to use applications on iPhone, iPad, Mac, web browsers, and other platforms.
- Offline access, so you can access your downloaded notes even without a connection.
- No limit on number of devices.
- No limit on number of notes.
- Passcode lock protection, along with Touch ID and Face ID protection.
- A tagging system to organize your notes (like #work, #ideas, #passwords, #crypto).
- The ability to pin, lock, protect, and move notes to trash, which allows you to recover deleted notes until the trash is emptied.
We made Standard Notes simple because longevity is important to us. We want to make sure we're here, protecting your notes, for the next hundred years. You shouldn't have to find a new notes app every year.
To sustain our development, we offer optional paid subscriptions with additional benefits. A premium subscription gives you access to powerful tools including:
- Super note type
- Beautiful themes
- Web clipper
- Encrypted files
- Hardware security key support
Org-mode is for keeping notes, maintaining ToDo lists, doing project planning, and authoring with a fast and effective plain-text system.
Org is implemented on top of Outline mode, which makes it possible to keep the content of large files well structured. Visibility cycling and structure editing help to work with the tree. Tables are easily created with a built-in table editor. Org supports TODO items, deadlines, timestamps, and scheduling. It dynamically compiles entries into an agenda that utilizes and smoothly integrates much of the Emacs calendar and diary. Plain text URL-like links connect to websites, emails, Usenet messages, BBDB entries, and any files related to the projects. For printing and sharing notes, an Org file can be exported as a structured ASCII file, as HTML, or (TODO and agenda items only) as an iCalendar file. It can also serve as a publishing tool for a set of linked web pages.
Our recommendation list contains email clients that support both OpenPGP and strong authentication such as Open Authorization (OAuth). OAuth allows you to use Multi-Factor Authentication and prevent account theft.
Apple Mail changes the way you interact with your email every day.
Mail displays your messages and open email side by side in a widescreen, two-column view. The favorites bar below the toolbar works much like a bookmarks bar in a web browser, giving you one-click access to your mail folders.
A compact preview of each message — including the first two lines — lets you scan your messages at a glance.
Search suggestions help you find messages even if you’re not sure what you’re looking for. Just start typing whatever you remember — a recipient’s name, part of a subject line, a keyword — and Mail dynamically suggests matches. Search tokens let you refine what you find.
Conversations are a new way to read and manage email that automatically groups messages from the same conversation. Fully compatible with other email applications, Conversations reveals streamlined feeds of messages in chronological order, so you can see how each thread has progressed without having to search for individual messages.
Note: Apple Mail is included in all versions of Mac OS X. It can't be downloaded separately. If you need to reinstall Apple Mail, an installer package for default Apple apps is available in the "Optional Installs" folder of your Mac OS X installation disk.
Email, meet AI. Canary can write your emails, prioritize what needs attention, silence spam & much more. Say hello to your Inbox Copilot!
FairEmail is a privacy-focused email client with a setup wizard that helpfully walks you through the steps to use it with any email provider. There are many privacy settings including encryption via OpenPGP and S/MIME and reformatted emails to avoid phishing.
It uses a Material Design (including light and dark themes) and comes with many configuration options for the display. It also includes configurable swipe gestures and other shortcuts to adjust the app to match your workflow.
You can choose to access the Pro features with a one time purchase which helps make the open-source project sustainable.
- Fully featured
- 100 % open source
- Privacy oriented
- Unlimited accounts
- Unlimited email addresses
- Unified inbox
- Conversation threading
- Two way synchronization
- Offline storage and operations
- Battery friendly
- Low data usage
- Small (~ 12 MB)
- Material design (including dark/black theme)
- Maintained and supported
- Encryption/decryption supported (OpenPGP and S/MIME)
- Reformat messages to prevent phishing
- Confirm showing images to prevent tracking
- Confirm opening links to prevent tracking and phishing
- Automatically recognize and disable tracking images
- Warning if messages could not be authenticated
- Account/identity/folder colors
- Colored stars
- Notification settings (sounds) per account/folder/sender (requires Android 8 Oreo)
- Configurable notification actions
- Snooze messages
- Send messages after selected time
- Synchronization scheduling
- Reply templates
- Accept/decline calendar invitations
- Filter rules
- Search on server
- Keyword management
- S/MIME sign/encrypt
- Biometric authentication
- Unified inbox widget
- Export settings
Evolution is a personal information management application that provides integrated mail, calendaring, address book and task list functionality. Evolution supports a wide range of industry standard data formats and network protocols for information exchange, with an emphasis on standards compliance and security. Evolution can also integrate smoothly with Microsoft Exchange by way of the “Exchange Web Services” (EWS) extension. Works well with Gmail too.
- E-mail retrieval with the POP and IMAP protocols and e-mail transmission with SMTP.
- Secure network connections encrypted with SSL, TLS and STARTTLS.
- E-mail encryption with GnuPG and S/MIME.
- E-mail filters.
- Search folders, saved searches that look like normal mail folders as an alternative to using filters and search queries.
- Automatic spam filtering with SpamAssassin and Bogofilter.
- Connectivity to Microsoft Exchange Server, Novell GroupWise and Kolab (provided in separate packages as plug-ins).
- Calendar support for the iCalendar file format, the WebDAV and CalDAV standards and Google Calendar.
- Contact management with local address books, LDAP and Google address books.
- Synchronization via SyncML with SyncEvolution and with Palm OS devices via gnome-pilot.
- Evolution's address books can be used as a data source in LibreOffice.
- An RSS reader plug-in.
K-9 is an open source email client for Android with multi-folder sync, email signatures, Bcc-to-self, return-address configuration, keyboard shortcuts, Exchange Support, message flagging, IMAP deletes, saving attachments, configurable notifications and more.
Kontact is the integrated Personal Information Manager of KDE.
Kontact suite unites mature and proven KDE PIM applications under one roof. Thanks to the powerful KPart technology, existing applications are seamlessly integrated into one.
The components of KDE Kontact are tailored to work well with each other. This results in features like intuitive drag-and-drop between appointment handling, task lists and contacts. KDE Kontact supports various groupware servers. When using these servers your workgroup has access to features like shared email folders, group task lists, calendar sharing, central addressbooks and meeting scheduling.
In short: KDE Kontact delivers innovations to help you manage your communications more easily, organize your work faster and work together more closely, resulting in more productivity and efficiency in digital collaboration.
These programs can be integrated into Kontact:
- Akregator - Read your favorite feeds
- KAddressBook - Manage your contacts
- KMail - Mail client
- KNotes - Sticky notes for your Desktop
- KOrganizer - Calendar and scheduling, Journal
- Summary - Summary screen in Kontact
Mailvelope is a browser extension that allows to exchange encrypted emails following the OpenPGP encryption standard.
Mailvelope integrates directly into the Webmail user interface, it's elements are unintrusive and easy to use in your normal workflow.
It comes preconfigured for major Webmail provider:
Mailvelope can easily be configured to work with other Webmail providers.
NeoMutt was created when Richard Russon (FlatCap) took all the old Mutt patches, sorted through them, fixed them up and documented them.
Thunderbird is a free, open source, cross-platform e-mail, news and instant messaging client. The project strategy is modeled after Mozilla Firefox.
It supports POP (storing mail locally on your hard drive so that it can be accessed without an internet connection), and IMAP. It features excellent mail filter capabilities and management.
Thunderbird has strong support for using multiple accounts and identities, including automated signature features.
Chat functionality is built in, so you can enjoy real-time conversation with your contacts, right from your favorite messaging application, with multiple supported networks. Thunderbird makes it easy to search through both past conversations and received emails.
Thunderbird can also function as an RSS/Atom feed reader, and has a large selection of add-ons that extend it with calendar support, PGP support, integration with online services and much more.
Available also as portable app: http://portableapps.com/apps/internet/thunderbird_portable
Thunderbird for Android is known as K-9 Mail
Encryption of data is the only way to control who can access it. If you are currently not using encryption software for your hard disk, emails or files, you should pick an option here.
Cryptomator provides transparent, client-side encryption for your cloud. Protect your documents from unauthorized access. Cryptomator is free and open source software, so you can rest assured there are no backdoors.
Easy and Reliable
We understand simplicity as a key aspect of security. With Cryptomator you don't have to deal with accounts, key management, cloud access grants or cipher configurations. Just choose a password and you're ready to go.
You don't even need to specify what cloud you use. Cryptomator encrypts files and doesn't care where you store them. This makes it a lightweight application, which we believe is a huge benefit for reliability. Complexity would kill security.
Cryptomator is a so-called transparent encryption utility. This means that you don't have to learn new workflows. Just work with your files as you're used to.
Secure and Trustworthy
Cryptomator encrypts file contents and names using AES. Your passphrase is protected against bruteforcing attempts using scrypt. Directory structures and file sizes get obfuscated. The only thing which cannot be encrypted without breaking your cloud synchronization is the modification date of your files.
Cryptomator's desktop app is a free and open source software licensed under the MIT / X Consortium License. This allows anyone to check our code. It is impossible to introduce backdoors for third parties. Also we cannot hide vulnerabilities. And the best thing is: There is no need to trust us, as you can control us!
Vendor lock-ins are impossible. Even if we decided to stop development: The desktop source code is already cloned by hundreds of other developers. As you don't need an account, you will never stand in front of locked doors.
Picocrypt is a very small (hence Pico), very simple, yet very secure encryption tool that you can use to protect your files. It's designed to be the go-to tool for encryption, with a focus on security, simplicity, and reliability. Picocrypt uses the secure XChaCha20 cipher and the Argon2id key derivation function to provide a high level of security, even from three-letter agencies like the NSA. It's designed for maximal security, making absolutely no compromises security-wise, and is built with Go's standard x/crypto modules. Your privacy and security is under attack. Take it back with confidence by protecting your files with Picocrypt.
VeraCrypt is a free and libre source (open source) disk encryption software brought to you by https://www.idrix.fr
• Creates a virtual encrypted disk within a file and mounts it as a real disk. • Encrypts an entire partition or storage device such as USB flash drive or hard drive. • Encrypts a partition or drive where Windows is installed (pre-boot authentication). • Encryption is automatic, real-time (on-the-fly) and transparent. • Parallelization and pipelining allow data to be read and written as fast as if the drive was not encrypted. • Encryption can be hardware-accelerated on modern processors. • Provides plausible deniability, in case an adversary forces you to reveal the password: Hidden volume (steganography) and hidden operating system. • Multilingual. More than 35 languages. List at https://sourceforge.net/p/veracrypt/code/ci/master/tree/Translations • More information about the features of VeraCrypt may be found in this documentation at https://veracrypt.fr/en/Documentation.html
VeraCrypt is based on TrueCrypt 7.1a at TrueCrypt . In comparison to TrueCrypt, VeraCrypt adds enhanced security to the algorithms used for system and partitions encryption, making it immune to new developments in brute-force attacks.
For example, when the system partition is encrypted, TrueCrypt uses PBKDF2-RIPEMD160 with 1000 iterations whereas in VeraCrypt we use 327670. And for standard containers and other partitions, TrueCrypt uses at most 2000 iterations but VeraCrypt uses 655340 for RIPEMD160 and 500000 iterations for SHA-2 and Whirlpool.
VeraCrypt is licensed with both Apache 2.0 and TrueCrypt 3.0 licenses. Per https://sourceforge.net/p/veracrypt/code/ci/master/tree/License.txt#l24
It's fast, secure and Serverless, the app never uploads the files to the server.
in a small amount of code the app can encrypt any type of files at any size within seconds.
To use the app all you have to do is Browse a file, Type a Decryption Key or Generate one through our secure key generator. and your encrypted file is ready to download.
Free and open source file encryption software for Windows, Linux, and macOS.
It is a portable, cross-platform command line tool that makes use of modern and secure cryptographic algorithms. It aims to be a mixture of age and Minisign in terms of functionality to provide a simple, user friendly alternative to GPG.
- Encrypt files with a password, keyfile, or asymmetric keys.
- Create and verify digital signatures. Supports an authenticated comment and prehashing for large files.
- Encrypting files using a recipient's public key allows for authenticated file sharing.
- Generation of asymmetric key pairs. The private key is encrypted for protection at rest.
- UNIX style password entry and random passphrase generation.
- Random keyfile generation. Any type of file can also be used as a keyfile.
- Optional obfuscation of output file names when encrypting files/folders.
- Optional overwriting of input files.
Tomb is an 100% free and open source system for file encryption on GNU/Linux, facilitating the backup of secret files. Tomb is written in code that is easy to review and links commonly shared components.
Tomb generates encrypted storage folders to be opened and closed using their associated keyfiles, which are also protected with a password chosen by the user.
A tomb is like a locked folder that can be safely transported and hidden in a filesystem; its keys can be kept separate, for instance keeping the tomb file on your computer harddisk and the key files on a USB stick.
Tomb is a simple tool to manage encrypted storage on GNU/Linux, from the hashes of the dyne:bolic nesting mechanism.
Tomb works only on GNU/Linux systems.
OpenPGP is sometimes needed for specific tasks such as digitally signing and encrypting email. PGP has many features and is complex as it has been around a long time. For tasks such as signing or encrypting files, we suggest the following options.
GnuPG allows to encrypt and sign your data and communication, features a versatile key management system as well as access modules for all kinds of public key directories. GnuPG, also known as GPG, is a command line tool with features for easy integration with other applications. A wealth of frontend applications and libraries are available. Version 2 of GnuPG also provides support for S/MIME.
GPG4Win provides a Windows version of GnuPG.
GPGTools provides a Mac OS X version of GnuPG.
Gpg4win enables users to securely transport emails and files with the help of encryption and digital signatures. Encryption protects the contents against an unwanted party reading it. Digital signatures make sure that it was not modified and comes from a specific sender.
Gpg4win supports both relevant cryptography standards, OpenPGP and S/MIME (X.509), and is the official GnuPG distribution for Windows. It is maintained by the developers of GnuPG. Gpg4win and the software included with Gpg4win are Free Software (Open Source; among other things free of charge for all commercial and non-commercial purposes).
Creation of Gpg4win was supported by the German Federal Office for Information Security (BSI).
Gpg4win Components Gpg4win is an installer for Windows and contains several Free Software components:
GnuPG The backend; this is the actual encryption tool.
Kleopatra A certificate manager for OpenPGP and X.509 (S/MIME) and common crypto dialogs.
GpgOL A plugin for Microsoft Outlook 2010/2013/2016/2019 (email encryption). With Outlook 2010 and higher GpgpOL supports MS Exchange Server.
GpgEX A plugin for Microsoft Explorer (file encryption).
GPA An alternative certificate manager for OpenPGP and X.509 (S/MIME).
GPG for Mail is an open source plugin for Apple Mail. Encrypt, decrypt, sign and verify mails using OpenPGP with a few simple clicks.
GPG Keychain is an open source application for Mac OS X. It allows you to manage your OpenPGP keys. Create and modify your keys and import the keys of your friends from a key server.
GPG Services is a plugin that brings GPG power to almost any application. It allows you to encrypt/decrypt, sign/verify and import keys from text selections, files, folders and much more.
MacGPG is the underlying power engine of our GPG Suite. If you're familiar with the command line use the raw power of it. Based on gnupg 2.0.28.
OpenKeychain helps you communicate more privately and securely. It uses high-quality modern encryption to ensure that your messages can be read only by the people you send them to, others can send you messages that only you can read, and these messages can be digitally signed so the people getting them are sure who sent them. OpenKeychain is based on the well established OpenPGP standard making encryption compatible across your devices and operating systems.
Modern encryption is based on digital “keys”. OpenKeychain stores and manages your keys, and those of the people you communicate with, on your Android. It also helps you find others’ keys online, and interchange keys by touching devices. But its most frequent use is in using those keys to encrypt and decrypt messages.
Discover how to privately share your files between your devices, with your friends and family, or anonymously online.
Get things from one computer to another, safely.
This package provides a library and a command-line tool named wormhole, which makes it possible to get arbitrary-sized files and directories (or short pieces of text) from one computer to another. The two endpoints are identified by using identical "wormhole codes": in general, the sending machine generates and displays the code, which must then be typed into the receiving machine.
The codes are short and human-pronounceable, using a phonetically-distinct wordlist. The receiving side offers tab-completion on the codewords, so usually only a few characters must be typed. Wormhole codes are single-use and do not need to be memorized.
Web servers are started locally on your computer and made accessible to other people as Tor onion services.
By default, OnionShare web addresses are protected with a random password. A typical OnionShare address might look something like this:
You’re responsible for securely sharing that URL using a communication channel of your choice like in an encrypted chat message, or using something less secure like unencrypted e-mail, depending on your threat model.
The people you send the URL to then copy and paste it into their Tor Browser to access the OnionShare service.
If you run OnionShare on your laptop to send someone files, and then suspend it before the files are sent, the service will not be available until your laptop is unsuspended and on the Internet again. OnionShare works best when working with people in real-time.
Because your own computer is the web server, no third party can access anything that happens in OnionShare, not even the developers of OnionShare. It’s completely private. And because OnionShare is based on Tor onion services too, it also protects your anonymity.
FreedomBox is a community project to develop, design and promote personal servers running free software for distributed social networking, email and audio/video communications.
FreedomBox is free software, which means you can freely inspect it, audit it, study it and improve it.
FreedomBox integrates privacy protection on a cheap plug server so everybody can have privacy.
FreedomBoxes are encrypted web proxies. Boxes in uncensored countries can bounce signals for users stuck behind censorship walls---each one is a tiny crack in the Great Firewall. Chinese users could surf the entire net free from government censorship.
With the FreedomBox, we can use VOIP to encrypt telephone calls and can create anonymous web servers over TOR to publish documents. Anonymous instant messaging or microblogging are also possible.
If our internet plug is pulled, the box will use mesh routing to talk to other boxes like it. If any of them can get a packet across the border, they all can.
FreedomBoxes are useful on a daily personal level too. That same proxy technology can scrub web sites of ads and tracking technology as you use them, thus protecting your privacy. FreedomBoxes help you encrypt your email. They also know who your friends are and can back up your data in encrypted form to their FreedomBoxes. You can get your data back even if you don't know your password. Even absent a crisis, privacy matters.
Syncthing replaces proprietary sync and cloud services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third party and how it's transmitted over the Internet.
Private. None of your data is ever stored anywhere else other than on your computers. There is no central server that might be compromised, legally or illegally. Encrypted. All communication is secured using TLS. The encryption used includes perfect forward secrecy to prevent any eavesdropper from ever gaining access to your data. Authenticated. Every node is identified by a strong cryptographic certificate. Only nodes you have explicitly allowed can connect to your cluster.
Metadata Removal Tools
When sharing files, be sure to remove associated metadata. Image files commonly include Exif data. Photos sometimes even include GPS coordinates in the file metadata.
ExifCleaner is a free app written in Electron framework, opensource desktop GUI app to remove exif metadata from images and video files with simple drag and drop. It's built on top of the proven ExifTool library and supports fast multi-core batch processing of files. There is even a dark mode.
mat2 is a metadata removal tool, supporting a wide range of commonly used file formats, written in python3: at its core, it's a library, used by an eponymous command-line interface, as well as several file manager extensions.
Metadata consist of information that characterizes data. Metadata are used to provide documentation for data products. In essence, metadata answer who, what, when, where, why, and how about every facet of the data that are being documented. Metadata within a file can tell a lot about you. Cameras record data about when a picture was taken and what camera was used. Office documents like PDF or Office automatically adds author and company information to documents and spreadsheets. Maybe you don't want to disclose those information. This is precisely the job of mat2: getting rid, as much as possible, of metadata. mat2 provides a command line tool, and graphical user interfaces via a service menu for Dolphin, the default file manager of KDE, and an extension for Nautilus, the default file manager of GNOME.
Take full control of your photo's metadata.
*Note: Remove Metadata, Date / Location Edit, and Safe Share are premium features, require single “Unlock Everything” in–app purchase.
Metapho is a simple and clean viewer for photo metadata such as date, file name, size, camera model, shutter speed, location.
Metapho Action lets you check metadata of a photo, and export it without metadata, from anywhere with iOS share sheet.
- Browse all your photos in iCloud Photo Library
- See essential EXIF data of a photo
- Get photo location and lens direction on the map
- Safe Share: Remove geotag and personal data before sharing
- Remove Metadata: Erase/Restore metadata without duplication
- Date Edit: Change date and time of a photo
- Location Edit: Add or change geolocation data of a photo
- Batch Operation: Edit multiple metadata at once
Metapho also supports Live Photos, Gifs, and videos.
*Note: Remove Metadata, Date / Location Edit, and Safe Share are premium features, require single “Unlock Everything” in–app purchase.
ExifTool supports many different metadata formats including EXIF, GPS, IPTC, XMP, JFIF, GeoTIFF, ICC Profile, Photoshop IRB, FlashPix, AFCP and ID3, as well as the maker notes of many digital cameras by Canon, Casio, FujiFilm, HP, JVC/Victor, Kodak, Leaf, Minolta/Konica-Minolta, Nikon, Olympus/Epson, Panasonic/Leica, Pentax/Asahi, Ricoh, Samsung, Sanyo, Sigma/Foveon and Sony.
ExifTool is also available as a stand-alone Windows executable and a Macintosh OS X package.
Multi-Factor Authentication Tools
The YubiKey is a one-time password device for secure login with two-factor authentication
Nitrokey is an USB key to enable highly secure encryption and signing of emails and data, as well as login to the Web, networks and computers. Other than ordinary software solutions, the secret keys are always stored securely inside the Nitrokey. Their extraction is impossible which makes Nitrokey immune to computer viruses and Trojan horses. The user-chosen PIN and the tamper-proof smart card protect in case of loss and theft. Hardware and software are both available as Open Source to allow verifying the security and integration with other applications.
Encryption All of your one-time passwords are stored in a vault. If you choose to set a password, which is highly recommended, the vault will be encrypted using AES-256. If someone with malicious intent gets a hold of the vault file, it’s impossible for them to retrieve the contents without knowing the password.
Fingerprint unlock Entering your password each time you need access to a one-time password can be cumbersome. Fortunately, you can also enable fingerprint unlock if your device has a fingerprint scanner.
Compatibility Aegis supports the HOTP and TOTP algorithms. These two algorithms are industry-standard and widely supported, making Aegis compatible with thousands of services. Some examples are: Google, GitHub, Dropbox, Facebook and Instagram.
It is also compatible with Google Authenticator. Any website that shows a QR code for Google Authenticator also works with Aegis.
Groups Have a lot of one-time passwords? Add them to custom groups for easier access. Personal, Work and Social can each get their own group.
Backups To make sure you will never lose access to your online accounts Aegis Authenticator supports exporting your vault which you can import onto a new device. Aegis Authenticator also allows you to import AndOTP and FreeOTP databases so switching to Aegis is made easier for you.
Open source and license Aegis Authenticator is open source (licensed under GPL v3) and the source code can be found here: http://github.com/beemdevelopment/Aegis
Open the app in one tap, sign in with FaceID and copy your one-time password to your Mac in one tap with handoff. Using a one-time password manager has never been easier!
Features: • Backup/sync one-time passwords to iCloud. • Search through your one-time passwords in one tap. • Export your one-time passwords to encrypted ZIP archives. • Add custom icons to your one-time passwords. • Scan a QR code or add a one-time password manually. • Show both the current and previous one-time password. • Unlock Raivo OTP with FaceID, TouchID or a passcode. • Raivo OTP is native and open-source (built in Swift 5)!
Stay safe and secure online with an encrypted and open-source password manager.
A light material design KeePass client to manage keys and passwords in secure database.
- Create database files / entries and groups
- Support for .kdb and .kdbx files (version 1 to 4)
- Open database, copy username / password, open URI / URL
- Fingerprint for fast unlocking
- Material design with themes
- AutoFill and Integration (Development in progress)
- Precise management of settings
KeePassDX is open source and ad-free. You can donate for a better service and a quick development of your features.
Any issue : https://github.com/Kunzisoft/KeePassDX/issues
KeePassXC is a community fork of KeePassX, the cross-platform port of KeePass for Windows. Every feature is cross-platform and tested to give users the same feel on each operating system, including the loved auto-type feature.
The complete database is always encrypted with the AES (alias Rijndael) encryption algorithm using a 256 bit key. KeePassXC uses a database format that is compatible with KeePass Password Safe. Your wallet always works offline and requires no Internet connection.
The source code is published under the terms of the GNU General Public License. KeePassXC is and always will be free as in freedom as well as in beer. Contributions from everyone are welcome.
Features: • Attractive GNU General Public License version 2 or 3. This means the software code of this extension is owned and supported by a friendly not-for-profit community. Instead of a for-profit corporation. https://github.com/keepassxreboot/keepassxc/blob/develop/COPYING • Cloud synchronization available. Using Nextcloud or any other supplier to your liking. Simply by storing your KeePassXC database inside your shared cloud folder and letting your desktop synchronization client do the rest. Offers to re-load on changes from another device. • Auto-fill entry of username, password, and TOTP • Strong and random password generator • Cross-platform Linux, MacOS, Windows • Store TOTP secrets. In either different or same database. • Browser add-ons for Firefox or Chromium/Chrome ___• https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/ ___• https://chrome.google.com/webstore/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidjkkk • Open and convert databases in KeePass 1.x (.kdbx) or KeePass 2.x (.kdbx) format • Well documented at https://keepassxc.org/docs/ • Latest version available at https://flathub.org/apps/org.keepassxc.KeePassXC • Ad-free • Tracker-free • Cloud-free • Auto-saves your changes
Bitwarden is the easiest and safest way to store all of your logins and passwords while conveniently keeping them synced between all of your devices.
Password theft is a serious problem. The websites and apps that you use are under attack every day. Security breaches occur and your passwords are stolen. When you reuse the same passwords across apps and websites hackers can easily access your email, bank, and other important accounts.
Security experts recommend that you use a different, randomly generated password for every account that you create. But how do you manage all those passwords? Bitwarden makes it easy for you to create, store, and access your passwords.
Bitwarden stores all of your logins in an encrypted vault that syncs across all of your devices. Since it's fully encrypted before it ever leaves your device, only you have access to your data. Not even the team at Bitwarden can read your data, even if we wanted to. Your data is sealed with AES-256 bit encryption, salted hashing, and PBKDF2 SHA-256.
Bitwarden is 100% open source software. The source code for Bitwarden is hosted on GitHub and everyone is free to review, audit, and contribute to the Bitwarden codebase.
Alternative implementation of the Bitwarden server API written in Rust and compatible with upstream Bitwarden clients*, perfect for self-hosted deployment where running the official resource-heavy service might not be ideal.
Basically full implementation of Bitwarden API is provided including:
- Organizations support
- Vault API support
- Serving the static files for Vault interface
- Website icons API
- Authenticator and U2F support
- YubiKey and Duo support
Note: This project was known as Bitwarden_RS and has been renamed to separate itself from the official Bitwarden server in the hopes of avoiding confusion and trademark/branding issues.
The Psono password manager keeps hackers out and your passwords secure. Psono is free and open source and available for Windows, Linux and Mac. Organize your passwords now!
gopass is a password manager for the command line written in Go. It supports all major operating systems (Linux, MacOS, BSD) as well as Windows.
Gopass is a versatile command line based password manager that is being developed with the following principles in mind:
Easy: For technical users (i.e. those who are used to the command line) it should be easy to get started with gopass. Secure: Security is hard. We aim to make it as easy as possible while still providing a good level of protection against common adversaries. Caution: If your personal threat level is very high, we might not offer a good tool for you. Extensible: While Gopass includes a fair amount of useful features, we can't cover every use-case. To support more special use cases we want to provide a clean and simple API to integration gopass into your own binaries.
Password management should be simple and follow Unix philosophy. With pass, each secret lives inside of a gpg encrypted file whose filename is the title of the website or resource that requires the secret. These encrypted files may be organized into meaningful folder hierarchies, copied from computer to computer, and, in general, manipulated using standard command line file management utilities. - passwordstore.org
Our target audience are professional developers and sysadmins (and especially teams of those) who are well versed with a command line interface. One explicit goal for this project is to make it more approachable to semi- and non-technical users in the long term as well. We go by the UNIX philosophy and try to do one thing and do it well - always providing stellar user experience and sane, simple interfaces.
LibreOffice is a free and open-source office suite that is compatible with other major office suites, and is available on all operating systems. It is an independently-developed version of the OpenOffice.org suite.
The office suite includes:
LibreOffice - Writer, a word processor with similar functionality and file support to Microsoft Word . It has extensive WYSIWYG word processing capabilities, but can also be used as a basic text editor.
LibreOffice - Calc , a spreadsheet program, similar to Microsoft Office Excel . It has a number of unique features, including a system which automatically defines series of graphs, based on information available to the user.
LibreOffice - Draw , a vector graphics editor and diagramming tool similar to Microsoft Office Visio . It provides connectors between shapes, which are available in a range of line styles and facilitate building drawings such as flowcharts. It also includes features similar to desktop publishing software such as Scribus and Microsoft Office Publisher .
ONLYOFFICE is an open-source online collaborative office combining editors for documents, spreadsheets, presentations, and forms. It is compatible with all popular formats and features maximum support for MS Office files.
With ONLYOFFICE Docs, you can create and edit complex objects, apply professional formatting to texts and paragraphs, use academic layout tools, and use third-party plugins to translate, search thesaurus, publish texts, insert videos, make video and audio calls, create bibliographies, and more.
Form editor allows you to build e and fill online forms and document templates and export the ready files as fillable PDFs and files in other formats.
Document viewer provides a comfortable interface for viewing PDF, DjVu, and XPS files.
In ONLYOFFICE Docs, you can collaborate with your colleagues in two co-editing modes (real time and paragraph-locking), add comments with mentions, use Track Changes and review features, browse and restore document versions, compare files.
Data security is provided by end-to-end encryption of documents, HTTPS, JWT, and limited cache lifetime.
ONLYOFFICE Docs can be integrated in over 30 existing Sync&Share platforms and CMS like Nextcoud, ownCloud, Jira, Redmine, Confluence, Alfresco, and others. It is possible to create new integration apps using Open API.
ONLYOFFICE Docs is offered in three editions: free Community Edition for teams of up to 20 users, Enterprise Edition for business, and Home Server for home use.
ONLYOFFICE Docs Developer Edition is distributed as a component for web apps to add document editing and collaboration functionality to a service written on any programming language under own branding.
Another option is ONLYOFFICE Workspace in the cloud or on private network where ONLYOFFICE Docs is combined with native productivity platform that includes DMS, project management tools, CRM, mail, calendars, and social hub. ONLYOFFICE Workspace is available as a cloud service and as a self-hosted solution.
ONLYOFFICE Docs can be used in the desktop environment as ONLYOFFICE Desktop Editors. Mobile editors for both iOS and Android are also available for free with ability to work on device, or in any compatible cloud storage.
CryptPad is a private-by-design alternative to popular office tools and cloud services. All the content stored on CryptPad is encrypted before being sent, which means nobody can access your data unless you give them the keys.
CryptPad uses a variant of the Operational transformation algorithm which is able to find distributed consensus using a Nakamoto Blockchain, a construct popularized by Bitcoin. This way the algorithm can avoid the need for a central server to resolve Operational Transform Edit Conflicts and without the need for resolving conflicts, the server can be kept unaware of the content which is being edited on the pad.
Cryptpad offers collaboration on text and WYSIWYG documents, as well as a basic polling application where users see results in real time.
Data is encrypted/decrypted in the browser using 256bit AES in Galois Counter mode.
This is a fork of ZeroBin, originally developed by Sébastien Sauvage. It was refactored to allow easier and cleaner extensions and has now much more features than the original. It is however still fully compatible to the original ZeroBin 0.19 data storage scheme. Therefore such installations can be upgraded to this fork without loosing any data.
What PrivateBin provides
As a server administrator you don't have to worry if your users post content that is considered illegal in your country. You have no knowledge of any of the pastes content. If requested or enforced, you can delete any paste from your system.
Pastebin-like system to store text documents, code samples, etc.
Encryption of data sent to server.
Possibility to set a password which is required to read the paste. It further protects a paste and prevents people stumbling upon your paste's link from being able to read it without the password.
Some features are optional and can be enabled or disabled in the configuration file:
- Password protection
- Discussions, anonymous or with nicknames and IP based identicons or vizhashes
- Expiration times, including a "forever" and "burn after reading" option
- Markdown format support for HTML formatted pastes, including preview function
- Syntax highlighting for source code using prettify.js, including 4 prettify themes
- File upload support, images get displayed (disabled by default, possibility to adjust size limit)
- Templates: By default there are bootstrap CSS, darkstrap and "classic ZeroBin" themes and it is easy to adapt these to your own websites layout or create your own.
- Translation system and automatic browser language detection (if enabled in browser)
- Language selection (disabled by default, as it uses a session cookie)
Using Signal, you can communicate instantly with your relatives without making a compromise on privacy or security. Make video calls, send messages, pictures, videos, documents, voice recordings, GIFs, contacts & location, create groups so that you can chat in real time with all your friends at once and react to their messages with emojis -all with complete privacy-. Signal servers never have access to any of your communications and never store any of your data.
- Say Anything - Share text, voice messages, photos, videos, GIFs and files for free. Signal uses your phone's data connection so you can avoid SMS (No longer supports SMS or MMS) and MMS fees.
- Speak Freely - Make crystal-clear voice and video calls to people who live across town, or across the ocean, with no long-distance charges.
- Make Privacy Stick - Add a new layer of expression to your conversations with encrypted stickers. You can also create and share your own sticker packs.
- Get Together with Groups - Group chats make it easy to stay connected to your family, friends, and coworkers.
- No ads. No trackers. No kidding. - There are no ads, no affiliate marketers, and no creepy tracking in Signal. So focus on sharing the moments that matter with the people who matter to you.
- Remain Connected - Push notifications let you know when new messages have arrived, and they'll be waiting for you even if your battery dies or you temporarily lose service.
- View Source - All of our code is free, open, and available on GitHub (https://github.com/signalapp).
- Join Movements - Technology developed by Open Whisper Systems is trusted and used by millions of people around the world every day.
Element is a Matrix-based end-to-end encrypted (E2EE) secure collaboration and messaging app.
It provides instant messaging, voice and video calls, screen sharing and file sharing; for 1:1s to huge chat rooms. It’s available to use across Web, Android, iOS, macOS, Windows & Linux.
Its decentralised design delivers digital sovereignty, enabling deployment on-premise or through any cloud provider.
Element Matrix Services (EMS) is the most popular SaaS for corporate use of Element. EMS provides fast performance and enterprise-grade add-ons.
Being Matrix-based, Element provides interoperability between traditional siloed apps. It can bridge into proprietary ‘walled garden’ systems such as Slack, Microsoft Teams, WhatsApp, Signal, Telegram and Discord to enable easy connections between different organisations.
End-to-end encryption is provided by default to keep users’ conversations and files safe. Cross-signed device verification uses QR codes or emoji comparisons to guard against imposters and eavesdropping.
Element is built on the Matrix.org open standard which provides bridges to other systems such as Slack, IRC and a lot more soon.
Session is a new breed of private messenger, built on a unique network of user-operated servers spread all over the world. With no central servers, Session can’t leak or sell your data. And with Session’s private routing protocols, your messages are completely anonymous. No one ever knows who you’re talking to, what you’re saying, or even your IP address.
• Fully anonymous account creation: No phone number or email needed to create a Session ID
• Decentralised server network: No data breaches, no central point of failure
• No metadata logging: Session doesn't store, track, or log your messaging metadata
• IP address protection: Device IP addresses are never exposed to the person you're talking to or the servers holding your data
• Closed groups: Private, end-to-end encrypted group chats for up to 10 people
• Secure attachments: Share voice snippets, photos, and files with Session's secure encryption and privacy protections
• Multi-device syncing: One Session ID for your phone and computer
• Free and open-source: Don’t take our word for it — check Session's code yourself
Session is free as in free speech, free as in free beer, and free of ads and trackers. Session is built and maintained by the Loki Foundation, Australia’s first privacy tech not-for-profit organisation. Take back your online privacy today — download Session.
Want to build from source, report a bug, or just take a look at our code? Check out Session on GitHub: https://github.com/loki-project/session-android
Briar is a messaging app designed for activists, journalists, and anyone else who needs a safe, easy and robust way to communicate.
- Unlike traditional messaging tools such as email, Twitter or Telegram, Briar doesn't rely on a central server - messages are synchronized directly between the users' devices. If the Internet's down, Briar can sync via Bluetooth or Wi-Fi, keeping the information flowing in a crisis. If the Internet's up, Briar can sync via the Tor network, protecting users and their relationships from surveillance.
A news aggregator is a way to keep up with your favourite blogs and news sites.
Akregator is a news feed reader. It enables you to follow news sites, blogs and other RSS/Atom-enabled websites without the need to manually check for updates using a web browser. Akregator is designed to be both easy to use and to be powerful enough to read hundreds of news sources conveniently. It comes with a fast search, advanced archiving functionality and an internal browser for easy news reading.
Feeder is a fully free/libre feed reader. It supports all common feed formats, including JSONFeed. It doesn't track you. It doesn't require any setup. It doesn't even need you to create an account! Just setup your feeds, or import them from your old reader via OPML, then get on with syncing and reading.
Parses HTML and displays it in a native TextView
Handy access to enclosure links
It is free for Mac, Windows and Linux if you download it from GitHub, and it's paid ($2) for Android and iOS.
Fluent Reader is a modern, cross-platform, and open-source desktop RSS Reader.
- A modern UI inspired by Fluent Design System with full dark mode support.
- Read locally or sync with self-hosted services through Fever API.
- Import from or export to OPML files.
- Full application data backup & restoration.
- Read the full content with the built-in article view or open webpages by default.
- Search for articles with regular expressions or filter by read status.
- Hide, mark as read, or star articles automatically as they arrive with regular expression rules.
- Organize your subscriptions with folder-like groupings.
- Single-key keyboard shortcuts.
Feeds is a desktop RSS reader for Linux. It doesn’t integrate or sync with a cloud-based service, but you can import a list of feeds via an .opml file.
It is a clean and simple application to read the latest posts from your favourite websites.
- Marks posts as read/unread
- Save articles to read offline anytime
- Filter articles by feed
- Range of ‘reader modes’, including web view
- Responsive design
- You can install GNOME Feeds from Flathub, the Flatpak app store. If you’re reading from Arch Linux you’ll find this app in the AUR.
Miniflux is a minimalist and opinionated feed reader.
Reader Feed formats supported: Atom, RSS 1.0/2.0, RDF, and JSON OPML import/export Support multiple enclosures/attachments (Podcasts, videos, music, and images) Play videos from YouTube channels directly inside Miniflux Categories Bookmarks Fetch website icons (favicons) Save articles to third-party services
Content Manipulation Fetch original article and returns relevant contents (Readability) Custom scraper rules based on CSS selectors Custom rewriting rules
User Interface Stylesheet optimized for readability Responsive design (works on desktop, tablet, and mobile devices) Doesn't require to download an application from the App/Play Store Keyboard shortcuts Touch events on mobile devices
Integration Send articles to Pinboard, Instapaper, Pocket, or Wallabag Bookmarklet to subscribe to a website directly from any browsers Use existing mobile applications to read your feeds by using the Fever API REST API with clients written in Go and Python
NetNewsWire is a news RSS aggregator for MacOS, iOS and iPadOS.
We value stability, performance, quality, platform-specific design and accessibility.
Features for MacOS include:
- Safari extension for easy feed-adding
- Direct feed-downloading
- Syncing via Feedbin
- Sharing to Mail, MarsEdit, Micro.blog, Notes, Messages, and so on
- Easy keyboard navigation
- Single-key keyboard shortcuts
- AppleScript support
- Dark Mode
- Starred articles
- All Unread and Today smart feeds
- Background refreshing
- Importing and exporting OPML feed lists
- Help book
- Multiple accounts
- Customizable toolbar
We’ll be adding more in future releases, of course, including support for more syncing services.
Features for iOS/iPadOS include:
- Direct feed-downloading
- Syncing via Feedbin and Feedly
- Multiple accounts
- Dark Mode
- Reader view
- Share sheet
- Starred articles
- All Unread and Today smart feeds
- Importing and exporting OPML feed lists
- Background refreshing
- Hiding read articles
- Timeline customization
- Keyboard shortcuts
- Context menus
- Support for multiple windows
The version 1.0 was introduced in 2002 by Brent Simmons. It included custom feed views, custom downloading and opening of podcasts, synchronization of feeds and feed status between computers, Bloglines support, and a built-in tabbed browser.
Over the years, new features were added (also support for iPhone and iPad) and it was acquired by NewsGator Technologies in 2005 and later by Black Pixel in 2011.
On August 31, 2018 Black Pixel announced that they have returned the NetNewsWire intellectual property to Brent Simmons, that completely rewrote the program as a Free and Opensource Mac RSS reader.
Now version 5.0 is at a very early stage and supports RSS, Atom, JSON Feed, and RSS-in-JSON formats.
Newsboat is a fork of Newsbeuter, an RSS/Atom feed reader for the text console. The only difference is that Newsboat is actively maintained while Newsbeuter isn't.
These networks are designed to keep your traffic anonymous.
Freenet is free software which lets you anonymously share files, browse and publish "freesites" (web sites accessible only through Freenet) and chat on forums, without fear of censorship. Freenet is decentralised to make it less vulnerable to attack, and if used in "darknet" mode, where users only connect to their friends, is very difficult to detect.
I2P is an anonymizing network, offering a simple layer that identity-sensitive applications can use to securely communicate. All data is wrapped with several layers of encryption, and the network is both distributed and dynamic, with no trusted parties.
Many applications are available that interface with I2P, including mail, peer-peer, IRC chat and others.
Alternative i2p Clients: https://geti2p.net/en/about/alternative-clients
The main I2P client implementation uses Java. If for some reason you can't use Java on your device, there are alternative implementations developed by community members.
i2pd i2pd is a I2P client implementation in C++. As of early 2016, i2pd is became stable enough to be used in production, and since summer 2016 it fully implements all I2P APIs.
Kovri Kovri is active i2pd fork developed for Monero cryptocurrency.
Go-I2P Go-I2P is I2P client developed using the Go programming language. The project is in early development.
Tor is free portable software and an open network that helps you defend against a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security known as traffic analysis.
Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. Tor works with many of your existing applications, including web browsers, instant messaging clients, remote login, and other applications based on the TCP protocol.
Video Streaming Clients
The primary threat when using a video streaming platform is that your streaming habits and subscription lists could be used to profile you. You should combine these tools with a VPN or https://alternativeto.net/software/tor/ to make it harder to profile your usage.
How does it work?
LBRY is the first digital marketplace to be controlled by the market's participants rather than a corporation or other 3rd-party. It is the most open, fair, and efficient marketplace for digital goods ever created, with an incentive design encouraging it to become the most complete.
No YouTube account required. It doesn't need the YouTube API or any Google Play Services, as NewPipe only parses the YouTube in order to gain the information. Therefore this app can be used on devices without Google Services installed. NewPipe Extractor is used by other apps for this purpose.
NewPipe Legacy (Android 4.1+) version available on website.
- Search videos
- Display general information about a video
- Watch videos at resolutions up to 4K
- Listen to audio in the background, only loading the audio stream to save data
- Popup mode (floating player, aka Picture-in-Picture)
- Watch live streams
- Show/hide subtitles/closed captions
- Search videos and audios (on YouTube, you can specify the content language as well)
- Enqueue videos (and optionally save them as local playlists)
- Show/hide general information about videos (such as description and tags)
- Show/hide next/related videos
- Show/hide comments
- Search videos, audios, channels, playlists and albums
- Browse videos and audios within a channel
- Subscribe to channels (yes, without logging into any account!)
- Get notifications about new videos from channels you're subscribed to
- Create and edit channel groups (for easier browsing and management)
- Browse video feeds generated from your channel groups
- View and search your watch history
- Search and watch playlists (these are remote playlists, which means they're fetched from the service you're browsing)
- Create and edit local playlists (these are created and saved within the app, and have nothing to do with any service)
- Download videos/audios/subtitles (closed captions)
- Open in Kodi
- Watch/Block age-restricted material
- YouTube & YouTube Music - one of the most popular video and live streaming platforms, including music, news, gaming and much more. Best supported out of the five.
- PeerTube - a decentralized video platform. Any PeerTube instance can be added to NewPipe.
- SoundCloud - a streaming platform for music.
- Bandcamp - an artist-friendly platform for sharing music. It offers user-friendly DRM-free downloads.
- media.ccc.de - the video archive and live streaming platform of the German hacker and information security activist group Chaos Computer Club.
An online alternative front-end to YouTube. Open-source (AGPLv3 licensed)
[The instance at invidio.us made by Omar Roth was closed in September 2020. You can select another instance and the project can still be found on GitHub. However, Omar developed this in the rare Crystal language, which has few developers.]
- Lightweight (homepage is ~4 KB compressed)
- No ads
- Audio-only mode (and no need to keep window open on mobile)
- No registration required or No email address required for registration
- Your playlist via registration
- No need to create a Google account to save subscriptions
- Tools for managing subscriptions:
- Only show unseen videos
- Only show latest (or latest unseen) video from each channel
- Delivers notifications from all subscribed channels
- Automatically redirect homepage to feed
- Import subscriptions from YouTube
- Download Videos
- Picture in Picture
- Set default player options (speed, quality, autoplay, loop)
- Dark mode
- Embed support
- Support for Reddit comments in place of YT comments
- Import/Export subscriptions, watch history, preferences
- Export for Invidious (JSON) / NewPipe (OPML)
- Developer API
Invidious is used by other apps via Invidious API.
Piped is an online frontend for viewing YouTube. NewPipe Extractor is used to retrieve information from YouTube. Piped doesn't connect your request to Google.
- No ads / And Skip ad scenes with SponsorBlock
- Return YouTube Dislike
- No registration required / or No email address required for registration
- Your playlist via registration
- Subscribe to channels without YouTube account / Groups of subscriptions
- Picture in Picture
- Various import formats (JSON / OPML / csv / .db / zip)
- Export/Import for Settings and Playlists via JSON
- Dark mode
Piped is used by other apps via Piped API.
The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked.
The Tor Browser lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is self-contained.