{"id":3810,"url":"https://github.com/lissy93/awesome-privacy","name":"awesome-privacy","description":"🦄  A curated list of privacy \u0026 security-focused software and services","projects_count":652,"last_synced_at":"2026-08-29T17:00:18.854Z","repository":{"id":44418818,"uuid":"512269935","full_name":"lissy93/awesome-privacy","owner":"lissy93","description":"🦄  A curated list of privacy \u0026 security-focused software and services","archived":false,"fork":false,"pushed_at":"2026-08-29T11:32:30.000Z","size":152955,"stargazers_count":9802,"open_issues_count":3,"forks_count":624,"subscribers_count":84,"default_branch":"main","last_synced_at":"2026-08-29T13:10:48.301Z","etag":null,"topics":["awesome","awesome-list","privacy","security","self-hosted","software"],"latest_commit_sha":null,"homepage":"https://awesome-privacy.xyz","language":"Astro","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"cc0-1.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lissy93.png","metadata":{"files":{"readme":".github/README.md","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":".github/funding.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"lissy93","custom":["https://notes.aliciasykes.com/tip"]}},"created_at":"2022-07-09T19:32:38.000Z","updated_at":"2026-08-29T12:28:43.000Z","dependencies_parsed_at":"2026-08-29T13:15:01.233Z","dependency_job_id":null,"html_url":"https://github.com/lissy93/awesome-privacy","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/lissy93/awesome-privacy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lissy93%2Fawesome-privacy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lissy93%2Fawesome-privacy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lissy93%2Fawesome-privacy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lissy93%2Fawesome-privacy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lissy93","download_url":"https://codeload.github.com/lissy93/awesome-privacy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lissy93%2Fawesome-privacy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36973049,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-29T02:00:05.978Z","response_time":51,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"created_at":"2024-01-06T10:53:16.274Z","updated_at":"2026-08-29T17:00:18.855Z","primary_language":null,"list_of_lists":false,"displayable":true,"categories":["More Awesome Software Lists","Smart Home \u0026 IoT","Operating Systems","Utilities","Virtual Machines","Communication","Cloud Productivity Suites","Virtual Private Networks","Security Tools","Encrypted Cloud Storage","Mobile Apps","Media","Final Notes","Code Hosting","Encrypted Email","Networking","Encrypted Messaging","Productivity","Crypto Wallets","The Website","Intrusion Detection","Essentials","Bonus #7 - Raspberry Pi/ IoT Security Software","Search Engines","Email Clients","PGP Managers","Desktop Operating Systems","Mobile Operating Systems","Blogging Platforms","Proxy Sites","DNS Clients","Ad Blockers","Digital Notes","2-Factor Authentication","Online Tools","News Readers and Aggregation","Browsers","Windows Defences","Proxies","Password Managers","Crypto Exchanges","Finance","DNS","Cloud Hosting","Social Networks","Metadata Removal Tools","Virtual Credit Cards","Creativity","Developer Utilities","Social","Bonus #5 - Self-Hosted Development Tools","File Encryption","P2P Messaging","Anonymous Mail Forwarding","Development","Email Security Tools","VOIP Clients","Team Collaboration Platforms","Browser Extensions","Self-Hosted Network Security","Bonus #4 - Self-Hosted Sysadmin","Mix Networks","Firewalls","Linux Defences","Host Block Lists","Router Firmware","Network Analysis","Domain Registrars","DNS Hosting","Backup and Sync","Bonus #3 - Self-Hosted Services","File Drop","Browser Sync","Video Conference Calls","Data Erasers","Video Platforms","Cryptocurrencies","Budgeting Tools","Anti-Malware","Home Automation","AI Voice Assistants","Bonus #1 - Alternatives to Google","Bonus #2 - Open Source Media Applications","News \u0026 Updates","Intro","Contributing","The API","License","Acknowledgements"],"sub_categories":["Notable Mentions","Smart Home","Desktop Operating Systems","Metadata Removal","Encrypted Messaging","Team Collaboration","Windows Defences","Mobile Apps","Video Players","License","Self-Hosted Email","Mail Servers","Email Security Tools","Categories","Encrypted Email","Digital Notes","Self-Hosted Network Security","Running the Website Locally","Password Managers","P2P Messaging","File Converters","Browser Extensions","Virtual Private Networks","Calendar","VOIP Clients","Search Engines","Mobile Operating Systems","2-Factor Authentication","Ad Blockers","DNS Providers","Virtual Credit Cards","Online Tools","Animation","Developer Tools","Social Networks","File Encryption","Browsers","IDEs","Virtual Phone Numbers","Important Considerations","Thank you","Contributors","Terminal Emulators","Scheduling","Cloud Productivity Suites","Secret Sharing","Proxy Sites","Crypto Exchanges","Proxies","Cryptocurrencies","Firewalls","Browser Sync","Further Reading","Host Block Lists","File Drop","Data Erasers","Video Platforms","Linux Defenses","Secure Budgeting","Mail Forwarding","Voice Assistants","Email Clients","Mac OS Defences","Image Editors","Router Firmware","DNS Clients","Video Editors","3D Graphics","Backup and Sync","Cloud Hosting","Virtual Machines","Mix Networks","Network Analysis","Intrusion Detection","Domain Registrars","DNS Hosting","Encrypted Cloud Storage","Secure Conference Calls","PGP Managers","Anti-Malware","Code Hosting","Crypto Wallets","Other Payment Methods","Blogging Platforms","News Readers","Audio Editors \u0026 Recorders","Casting \u0026 Streaming","Conclusion","About Website","Deploying the Website","Sponsors","And, of course our Stargazers, forkers and followers!","Task Management","Anonymity Networks","Security Cameras","Photo Management","Accessibility","Gaming"],"readme":"\u003cp align=\"center\" id=\"top\"\u003e\u003ca href=\"https://github.com/Lissy93/awesome-privacy\"\u003e\u003cimg src=\"https://pixelflare.cc/i/tuj62q\" /\u003e\u003c/a\u003e\u003c/p\u003e\n\u003cp align=\"center\"\u003e\u003ci\u003eA curated list of privacy-respecting apps, software, and providers\u003c/i\u003e\u003c/p\u003e\n\u003cp align=\"center\"\u003e🌐 \u003cb\u003e\u003ca href=\"https://awesome-privacy.xyz\"\u003eawesome-privacy.xyz\u003c/a\u003e\u003c/b\u003e\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n\u003csup\u003e\n\t\u003ca href=\"https://codeberg.org/alicia/awesome-privacy\"\u003e[CodeBerg Mirror]\u003c/a\u003e |\n\t\u003ca href=\"https://github.com/Lissy93/awesome-privacy/blob/main/.github/CONTRIBUTING.md\"\u003e[Submit an Addition]\u003c/a\u003e |\n\t\u003ca href=\"#the-api\"\u003e[Raw data \u0026 API]\u003c/a\u003e\n\u003c/sup\u003e\n\u003c/p\u003e\n\n\n## Intro\nLarge data-hungry corporations dominate the digital world but with little, or no respect for your privacy.\nMigrating to open-source applications with a strong emphasis on privacy and security will help stop\ncorporations, governments, and hackers from logging, storing or selling your personal data.\n\n\u003e [!CAUTION]\n\u003e Remember that [no software is perfect](#important-considerations), and it is important to follow good [security practices](https://github.com/Lissy93/personal-security-checklist/blob/HEAD/CHECKLIST.md)\n\n\n\n\u003c!-- awesome-privacy-start --\u003e\n\u003cblockquote\u003e\u003cdetails open\u003e\n\u003csummary\u003e📋 \u003cb\u003eContents\u003c/b\u003e\u003c/summary\u003e\n\n- **Essentials**\n\t- [Password Managers](#password-managers) (8)\n\t- [2-Factor Authentication](#2-factor-authentication) (11)\n\t- [File Encryption](#file-encryption) (3)\n\t- [Browsers](#browsers) (5)\n\t- [Search Engines](#search-engines) (6)\n- **Communication**\n\t- [Encrypted Messaging](#encrypted-messaging) (4)\n\t- [P2P Messaging](#p2p-messaging) (4)\n\t- [Encrypted Email](#encrypted-email) (4)\n\t- [Email Clients](#email-clients) (6)\n\t- [Mail Forwarding](#mail-forwarding) (4)\n\t- [Email Security Tools](#email-security-tools) (3)\n\t- [VOIP Clients](#voip-clients) (2)\n\t- [Virtual Phone Numbers](#virtual-phone-numbers) (8)\n\t- [Team Collaboration](#team-collaboration) (5)\n- **Security Tools**\n\t- [Browser Extensions](#browser-extensions) (21)\n\t- [Mobile Apps](#mobile-apps) (22)\n\t- [Online Tools](#online-tools) (17)\n- **Networking**\n\t- [Virtual Private Networks](#virtual-private-networks) (7)\n\t- [Self-Hosted Network Security](#self-hosted-network-security) (8)\n\t- [Anonymity Networks](#anonymity-networks) (3)\n\t- [Proxies](#proxies) (2)\n\t- [DNS Providers](#dns-providers) (3)\n\t- [DNS Clients](#dns-clients) (5)\n\t- [Firewalls](#firewalls) (14)\n\t- [Ad Blockers](#ad-blockers) (7)\n\t- [Host Block Lists](#host-block-lists) (5)\n\t- [Router Firmware](#router-firmware) (2)\n\t- [Network Analysis](#network-analysis) (3)\n\t- [Intrusion Detection](#intrusion-detection) (5)\n\t- [Cloud Hosting](#cloud-hosting) (4)\n\t- [Domain Registrars](#domain-registrars) (2)\n\t- [DNS Hosting](#dns-hosting) (1)\n\t- [Mail Servers](#mail-servers) (3)\n- **Productivity**\n\t- [Digital Notes](#digital-notes) (8)\n\t- [Calendar](#calendar) (4)\n\t- [Scheduling](#scheduling) (2)\n\t- [Task Management](#task-management) (2)\n\t- [Backup and Sync](#backup-and-sync) (4)\n\t- [Cloud Productivity Suites](#cloud-productivity-suites) (5)\n\t- [Encrypted Cloud Storage](#encrypted-cloud-storage) (6)\n\t- [Secret Sharing](#secret-sharing) (3)\n\t- [File Drop](#file-drop) (2)\n\t- [Browser Sync](#browser-sync) (4)\n\t- [Habit Trackers](#habit-trackers) (1)\n\t- [Secure Conference Calls](#secure-conference-calls) (2)\n\t- [Maps \u0026 Navigation](#maps--navigation) (1)\n\t- [Accessibility](#accessibility) (1)\n- **Utilities**\n\t- [Virtual Machines](#virtual-machines) (3)\n\t- [PGP Managers](#pgp-managers) (8)\n\t- [Metadata Removal](#metadata-removal) (3)\n\t- [Data Erasers](#data-erasers) (8)\n- **Operating Systems**\n\t- [Mobile Operating Systems](#mobile-operating-systems) (3)\n\t- [Desktop Operating Systems](#desktop-operating-systems) (5)\n\t- [Linux Defenses](#linux-defenses) (6)\n\t- [Windows Defences](#windows-defences) (16)\n\t- [Mac OS Defences](#mac-os-defences) (2)\n\t- [Anti-Malware](#anti-malware) (2)\n- **Development**\n\t- [Code Hosting](#code-hosting) (5)\n\t- [IDEs](#ides) (1)\n\t- [Terminal Emulators](#terminal-emulators) (1)\n\t- [Developer Tools](#developer-tools) (3)\n- **Smart Home \u0026 IoT**\n\t- [Smart Home](#smart-home) (1)\n\t- [Security Cameras](#security-cameras) (1)\n- **Finance**\n\t- [Cryptocurrencies](#cryptocurrencies) (2)\n\t- [Crypto Wallets](#crypto-wallets) (6)\n\t- [Crypto Exchanges](#crypto-exchanges) (2)\n\t- [Virtual Credit Cards](#virtual-credit-cards) (2)\n\t- [Other Payment Methods](#other-payment-methods) (3)\n\t- [Secure Budgeting](#secure-budgeting) (7)\n- **Social**\n\t- [Social Networks](#social-networks) (4)\n\t- [Video Platforms](#video-platforms) (2)\n\t- [Blogging Platforms](#blogging-platforms) (6)\n\t- [News Readers](#news-readers) (1)\n\t- [Proxy Sites](#proxy-sites) (4)\n- **Media**\n\t- [Gaming](#gaming) (1)\n\t- [Video Players](#video-players) (1)\n\t- [Photo Management](#photo-management) (2)\n\t- [Podcast Players](#podcast-players) (1)\n\t- [Torrent Downloaders](#torrent-downloaders) (1)\n\t- [File Converters](#file-converters) (2)\n- **Creativity**\n\t- [Image Editors](#image-editors) (8)\n\t- [Video Editors](#video-editors) (7)\n\t- [Audio Editors \u0026 Recorders](#audio-editors--recorders) (1)\n\t- [Casting \u0026 Streaming](#casting--streaming) (1)\n\t- [Screenshot Tools](#screenshot-tools) (1)\n\t- [3D Graphics](#3d-graphics) (2)\n\t- [Animation](#animation) (1)\n\u003c/details\u003e\u003c/blockquote\u003e\n\n## Essentials\n\n### Password Managers\n\n- **[\u003cimg src='https://icon.horse/icon/bitwarden.com' width='14' alt='' /\u003e Bitwarden](https://bitwarden.com)** - Fully-featured, open source password manager with cloud-sync. Bitwarden is easy-to-use with a clean UI and client apps for desktop, web and mobile. See also [Vaultwarden](https://github.com/dani-garcia/vaultwarden), a self-hosted, Rust implementa[…](https://awesome-privacy.xyz/essentials/password-managers/bitwarden \"View full Bitwarden report\") \n- **[\u003cimg src='https://keepass.info/images/icons/keepass_256x256.png' width='14' alt='' /\u003e KeePass](https://keepass.info)** - Hardened, secure and offline password manager. Does not have cloud-sync baked in, deemed to be [gold standard](https://keepass.info/ratings.html) for secure password managers. KeePass clients: [Strongbox](https://apps.apple.com/us/app/strongbox-keepass-pwsafe/id897283731) *(Mac \u0026 iOS)*, [KeePassDX](https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.free) *(Android)*,[…](https://awesome-privacy.xyz/essentials/password-managers/keepass \"View full KeePass report\") \n- **[\u003cimg src='https://icon.horse/icon/lesspass.com' width='14' alt='' /\u003e LessPass](https://lesspass.com)** - LessPass is a little different, since it generates your passwords using a hash of the website name, your username and a single main-passphrase that you reuse. It omits the need for you to ever need to[…](https://awesome-privacy.xyz/essentials/password-managers/lesspass \"View full LessPass report\") \n- **[\u003cimg src='https://icon.horse/icon/proton.me' width='14' alt='' /\u003e ProtonPass](https://proton.me/pass)** - From the creators of ProtonMail, ProtonPass is a new addition to their suite of services. They have a full collection of user-friendly native mobile and desktop apps. ProtonPass is one of the few \"tru[…](https://awesome-privacy.xyz/essentials/password-managers/protonpass \"View full ProtonPass report\") \n- **[\u003cimg src='https://www.zx2c4.com/favicon.ico' width='14' alt='' /\u003e Pass](https://www.passwordstore.org/)** - The Standard Unix Password Manager \n- **[\u003cimg src='https://www.aliasvault.net/favicon.png' width='14' alt='' /\u003e AliasVault](https://www.aliasvault.net)** - End-to-end encrypted open source password and alias manager with built-in email server. AliasVault protects your privacy by creating alternative identities, passwords and email addresses for every web[…](https://awesome-privacy.xyz/essentials/password-managers/aliasvault \"View full AliasVault report\") \n- **[\u003cimg src='https://papervault.xyz/papervault-512.png' width='14' alt='' /\u003e PaperVault](https://papervault.xyz)** - Store secrets and passwords on encrypted paper with distributed keys. Designed to last generations. Open source, client-side only, works offline. \n- **[\u003cimg src='https://icon.horse/icon/2of3.ente.com' width='14' alt='' /\u003e 2of3 by Ente](https://2of3.ente.com)** - Turn a recovery key, password, or other secret into 3 cards you can keep in different places. Open-source, client-side only, with an offline recovery page. \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [Password Safe](https://www.pwsafe.org) - An offline, open source password manager designed by [Bruce Schneier](https://www.schneier.com/academic/passsafe/), with native applications for Windows, Linux, MacOS, Android and iOS, and support for YubiKey. The UI is a little dated, and there is no official browser extension, making is slightly less convenient to use compared with other options\n\u003e - [PassBolt](https://www.passbolt.com) - A good option for teams. It is free, open source, self-hosted, extensible and OpenPGP based. It is specifically good for development and DevOps usage, with integrations for the terminal, browser and chat, and can be easily extended for custom usage, and deployed quickly with Docker\n\u003e - [1Password](https://1password.com) - (proprietary) A fully-featured cross-platform password manager with sync. Free for self-hosted data (or $3/ month hosted). Be aware that 1Password is not fully open source, but they do regularly publish results of their independent [security audits](https://support.1password.com/security-assessments), and they have a solid reputation for transparently disclosing and fixing vulnerabilities\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eℹ️ \u003cb\u003eFurther Info\u003c/b\u003e\u003c/summary\u003e\n\n\u003e **Other Open Source PM**: [Buttercup](https://buttercup.pw), [Clipperz](https://clipperz.is), [Pass](https://www.passwordstore.org), [Padloc](https://padloc.app), [TeamPass](https://teampass.net), [PSONO](https://psono.com), [UPM](http://upm.sourceforge.net), [Gorilla](https://github.com/zdia/gorilla/wiki), [Seahorse](https://gitlab.gnome.org/GNOME/seahorse) (for GNOME), [GNOME Keyring](https://wiki.gnome.org/Projects/GnomeKeyring), [KDE Wallet Manager](https://userbase.kde.org/KDE_Wallet_Manager). \u003cbr /\u003e\u003cbr /\u003e If you are using a deprecated PM, you should migrate to something actively maintained. This includes: [Firefox Lockwise](https://www.mozilla.org/en-US/firefox/lockwise), [Encryptr](https://spideroak.com/personal/encryptr?ref=awesome-privacyr), [Mitro](https://www.mitro.co), [Rattic](https://spideroak.com/encryptr), [JPasswords](http://jpws.sourceforge.net/jpasswords.html), [Passopolis](https://passopolis.com), [KYPS](https://en.wikipedia.org/wiki/KYPS), [Factotum](http://man.9front.org/4/factotum).\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### 2-Factor Authentication\n\n- **[\u003cimg src='https://avatars.githubusercontent.com/u/18189374' width='14' alt='' /\u003e 2FAS](https://2fas.com/)** - Free, secure and open source authenticator app for both iOS and Android. Supports creating encrypted backups and syncing between devices without the need for an account. \n- **[\u003cimg src='https://raw.githubusercontent.com/beemdevelopment/Aegis/master/metadata/en-US/images/icon.png' width='14' alt='' /\u003e Aegis](https://getaegis.app)** - Free, secure and open source authenticator app for Android. Has a backup/ restore feature and a customisable UI with dark mode \n- **[\u003cimg src='https://stratumauth.com/img/icon.svg' width='14' alt='' /\u003e Stratum](https://stratumauth.com/)** - Free and open-source two factor authentication app for Android. It features encrypted backups, icons, categories and a high level of customisation. It also has a Wear OS companion app \n- **[\u003cimg src='https://www.tofuauth.com/images/icon.svg' width='14' alt='' /\u003e Tofu](https://www.tofuauth.com)** - An easy-to-use, open-source two-factor authentication app designed specifically for iOS \n- **[\u003cimg src='https://i.ibb.co/dLqS8ZH/Screenshot-from-2024-02-19-20-47-48.png' width='14' alt='' /\u003e Authenticator](https://mattrubin.me/authenticator)** - Simple, native, open source 2-FA Client for iOS, which never connects to the internet - built by @mattrubin.me \n- **[\u003cimg src='https://gitlab.gnome.org/World/Authenticator/-/avatar?width=48' width='14' alt='' /\u003e Authenticator GNOME](https://gitlab.gnome.org/World/Authenticator)** - Rust-based OTP authenticator. Has native With GNOME Shell integration. Also available through [flathub](https://flathub.org/apps/details/com.belmoussaoui.Authenticator). \n- **[\u003cimg src='https://authenticator.cc/assets/logo/logo.svg' width='14' alt='' /\u003e Authenticator CC](https://authenticator.cc)** - Authenticator Extension is an in-browser One-Time Password (OTP) client, supports both Time-Based One-Time Password (TOTP, specified in [RFC 6238](https://tools.ietf.org/html/rfc6238)) and HMAC-Based One-Time Password (HOTP, specified in [RFC 4226](https://tools.ietf.org/html/rfc4226)[…](https://awesome-privacy.xyz/essentials/2-factor-authentication/authenticator-cc \"View full Authenticator CC report\") \n- **[\u003cimg src='https://raw.githubusercontent.com/ente/ente/main/mobile/apps/auth/android/app/src/main/play/listings/en-US/graphics/icon/icon.png' width='14' alt='' /\u003e Ente Auth](https://ente.com/auth/)** - Free, open source TOTP authenticator for mobile, desktop and web. Works fully offline, or with an Ente account to sync codes across devices with end-to-end encrypted backups. Codes can be imported fro[…](https://awesome-privacy.xyz/essentials/2-factor-authentication/ente-auth \"View full Ente Auth report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/15990069' width='14' alt='' /\u003e Bitwarden Authenticator](https://bitwarden.com/products/authenticator/)** - Bitwarden Authenticator is a free and open-source app which stores and generates time-based codes for multi-factor authentication. It can be used with an online account to backup and sync your tokens[…](https://awesome-privacy.xyz/essentials/2-factor-authentication/bitwarden-authenticator \"View full Bitwarden Authenticator report\") \n- **[\u003cimg src='https://raw.githubusercontent.com/protonpass/android-pass/refs/heads/main/metadata/en-US/images/icon.png' width='14' alt='' /\u003e Proton Authenticator](https://proton.me/authenticator)** - Proton Authenticator is free, open source, and available for both iOS and Android. A Proton account is required to use Proton Authenticator. Existing 2FA codes can be imported from other popular apps[…](https://awesome-privacy.xyz/essentials/2-factor-authentication/proton-authenticator \"View full Proton Authenticator report\") \n- **[\u003cimg src='https://github.com/joeldavidw/Chronos/raw/main/.github/assets/logo.png' width='14' alt='' /\u003e Chronos Authenticator](https://chronosauth.com)** - Chronos Authenticator is a free, open-source two-factor authentication app for iOS, designed to provide robust security and reliable backup options. \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e [OTPClient](https://github.com/paolostivanin/OTPClient) *(Linux)*, [gauth](https://github.com/gbraadnl/gauth) *(Self-Hosted, Web-based)*, [Etopa](https://play.google.com/store/apps/details?id=de.ltheinrich.etopa) *(Android)*\u003cbr\u003e For KeePass users, [TrayTop](https://keepass.info/plugins.html#traytotp) is a plugin for managing TOTP's -  offline and compatible with Windows, Mac and Linux.\n\u003e \u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eℹ️ \u003cb\u003eFurther Info\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Check which websites support multi-factor authentication: [2fa.directory](https://2fa.directory/)\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### File Encryption\n\n- **[\u003cimg src='https://veracrypt.fr/favicon.ico' width='14' alt='' /\u003e VeraCrypt](https://www.veracrypt.fr)** - VeraCrypt is open source cross-platform disk encryption software. You can use it to either encrypt a specific file or directory, or an entire disk or partition. VeraCrypt is incredibly feature-rich, w[…](https://awesome-privacy.xyz/essentials/file-encryption/veracrypt \"View full VeraCrypt report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/11850518' width='14' alt='' /\u003e Cryptomator](https://cryptomator.org)** - Open source client-side encryption for cloud files - Cryptomator is geared towards using alongside cloud-backup solutions, and hence preserves individual file structure, so that they can be uploaded.[…](https://awesome-privacy.xyz/essentials/file-encryption/cryptomator \"View full Cryptomator report\") \n- **[\u003cimg src='https://i.ibb.co/H7hHddf/logo-white.png' width='14' alt='' /\u003e age](https://age-encryption.org)** - `age` is a simple, modern and secure CLI file encryption tool and Go library. It features small explicit keys, no config options, and UNIX-style composability \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Where possible, choose a cross-platform and well established encryption method, so that you are never faced with not being able to access your files using your current system.\u003cbr\u003e Although well-established encryption methods are usually very secure, if the password is not strong, then an adversary may be able to gain access to your files, with a powerful enough GPU. If your system is compromised, then the password may also be able to be skimmed with a keylogger or other similar malware, so take care to follow good basic security practices\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [AES Crypt](https://www.aescrypt.com/) - A light-weight and easy file encryption utility. It includes applications for Windows, Mac OS, BSD and Linux, all of which can be interacted with either through the GUI, CLI or programatically though an API (available for Java, C, C# and Python). Although it is well established, with an overall positive reputation, there have been some [security issues](https://www.reddit.com/r/privacytoolsIO/comments/b7riov/aes_crypt_security_audit_1_serious_issue_found/) raised recently.\n\u003e - [CryptSetup](https://gitlab.com/cryptsetup/cryptsetup) - is a convenient layer for use on top of [dm-crypt](https://wiki.archlinux.org/index.php/Dm-crypt). [EncFS](https://github.com/vgough/encfs) is a cross-platform file-based encryption module, for use within user local directories. [geli](https://www.freebsd.org/cgi/man.cgi?query=geli\u0026sektion=8) is a disk encryption subsystem included with FreeBSD.\n\u003e - [BitLocker](https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-overview) - is popular among Microsoft Windows and enterprise users, and provides fast, efficient and (if correctly configured) reasonably secure full drive encryption. However it is not open source, has poor compatibility with other operating systems, and has some very dodgy [defaults](https://www.diskcryptor.org/why-not-bitlocker/), which could lead to your system being compromised. Similarly, Apple's [FileVault](https://support.apple.com/en-us/HT204837) on MacOS is easy and secure, but again, the source code is proprietary.\n\u003e - [DiskCryptor](https://www.diskcryptor.org/) - Windows-only, open source, file and volume encryption solution,\nthat makes a good alternative to BitLocker.\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Browsers\n\n- **[\u003cimg src='https://librewolf.net/icon.svg' width='14' alt='' /\u003e LibreWolf](https://librewolf.net)** - An independent fork of Firefox hardened for privacy by default. No telemetry, uBlock Origin bundled, anti-fingerprinting, strict settings \n- **[\u003cimg src='https://brave.com/static-assets/images/brave-logo-sans-text.svg' width='14' alt='' /\u003e Brave Browser](https://brave.com)** - Chromium-based browser with strong built-in ad, tracker and fingerprint blocking, and timely Chromium security updates. Note that Brave does bundle potentially unwanted features, like crypto, rewards[…](https://awesome-privacy.xyz/essentials/browsers/brave-browser \"View full Brave Browser report\") \n- **[\u003cimg src='https://www.mozilla.org/media/protocol/img/logos/firefox/logo.fedb52c912d6.svg' width='14' alt='' /\u003e Firefox](https://www.firefox.com/)** - The main independent browser, on Mozilla's own Gecko engine rather than Chromium. Reliable, long-standing, with frequent security updates, broad extension support and strong customization. However tel[…](https://awesome-privacy.xyz/essentials/browsers/firefox \"View full Firefox report\") \n- **[\u003cimg src='https://www.torproject.org/static/images/favicon/favicon.ico' width='14' alt='' /\u003e Tor Browser](https://www.torproject.org/)** - Tor provides an extra layer of anonymity, by encrypting each of your requests, then routing it through several nodes, making it near-impossible for you to be tracked by your ISP. While excellent for a[…](https://awesome-privacy.xyz/essentials/browsers/tor-browser \"View full Tor Browser report\") \n- **[\u003cimg src='https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/mullvad-browser.png' width='14' alt='' /\u003e Mullvad Browser](https://mullvad.net/browser)** - A Firefox-based browser maintained in collaboration between the Tor Project and Mullvad. With strong anti-fingerprinting (so users look alike), no telemetry and uBlock Origin bundled \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e New vulnerabilities are being discovered and patched all the time - use a browser that is being actively maintained, in order to receive these security-critical updates.\u003cbr\u003e Even privacy-respecting browsers, often do not have the best privacy options enabled by default. After installing, check the privacy \u0026 security settings, and update the configuration to something that you are comfortable with. 12Bytes maintains a comprehensive guide on [Firefox Configuration for Privacy and Performance](https://codeberg.org/12bytes/firefox-config-guide)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [Cromite](https://www.cromite.org/) - Chromium fork and successor of Bromite. Adds built-in ad and tracker blocking, removes Google service calls, and disables several fingerprinting vectors. Note that patches often lag several weeks behind upstream\u003e - [WaterFox](https://www.waterfox.net) - Firefox fork with telemetry, studies and data collection removed. The legacy Classic line retains support for XUL/NPAPI extensions; the current Quantum-based release does not.\u003e - [PaleMoon](https://www.palemoon.org) - Independent Firefox-derived browser using its own Goanna engine. Disables telemetry and retains support for legacy XUL extensions. Lagging support for modern web-platform features (e.g. CSP) has led to incidents of Cloudflare blocking the browser.\u003e - [Iridium](https://iridiumbrowser.de/) - Chromium fork with telemetry, background pings and most Google service integrations stripped out or made opt-in.\u003e - [SeaMonkey](https://www.seamonkey-project.org/) - All-in-one internet suite (browser, mail, IRC, HTML editor) derived from the Mozilla Application Suite. Receives security fixes but lags upstream Firefox on features.\u003e - [Ungoogled-Chromium](https://github.com/ungoogled-software/ungoogled-chromium) - Chromium with all Google web service integrations, binary blobs and background calls removed. Tries to retain the default Chromium experience as closely as possible. No built-in auto-updates; relies on third-party rebuilds for security patches.\u003e - [Basilisk Browser](https://www.basilisk-browser.org/) - Firefox/UXP-based fork originally created by Moonchild Productions and independently maintained since 2022. Retains NPAPI plugin and XUL extension support dropped by mainline Firefox.\u003e - [IceCat](https://www.gnu.org/software/gnuzilla/) - GNU's fully-free Firefox fork. Removes proprietary components such as DRM and EME, and bundles LibreJS to block non-free JavaScript. Tracks Firefox ESR, but release cadence lags upstream and can delay security fixes.\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eℹ️ \u003cb\u003eFurther Info\u003c/b\u003e\u003c/summary\u003e\n\n\u003e 12Bytes maintains a list of privacy \u0026 security [extensions](https://12bytes.org/articles/tech/firefox/firefox-extensions-my-picks/).\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Search Engines\n\n- **[\u003cimg src='https://duckduckgo.com/favicon.png' width='14' alt='' /\u003e DuckDuckGo](https://duckduckgo.com)** - DuckDuckGo is a user-friendly and fast secure search engine. While it doesn't use trackers or cookies, there are search-related ads. It's also highly customisable, with theming, languages, bangs and p[…](https://awesome-privacy.xyz/essentials/search-engines/duckduckgo \"View full DuckDuckGo report\") \n- **[\u003cimg src='https://www.startpage.com/favicon.ico' width='14' alt='' /\u003e Startpage](https://www.startpage.com)** - Dutch search engine returning primarily Google results, proxied to strip IP and identifiers. Includes an \"Anonymous View\" proxy for previewing results privately. No third-party tracking or cookies, bu[…](https://awesome-privacy.xyz/essentials/search-engines/startpage \"View full Startpage report\") \n- **[\u003cimg src='https://i.ibb.co/GH1n4wf/Brave-Search-Icon.png' width='14' alt='' /\u003e Brave Search](https://search.brave.com/)** - Brave Search is a privacy-focused search engine that does not track users or their searches, does not use secret algorithms or user profiling, and is based on its own search index. \n- **[\u003cimg src='https://www.mojeek.com/favicon.png' width='14' alt='' /\u003e Mojeek](https://mojeek.com)** - British search engine providing independent and unbiased search results using its own crawler. Has a zero tracking policy (it is not open source) \n- **[\u003cimg src='https://uruky.com/public/images/favicon.svg' width='14' alt='' /\u003e Uruky](https://uruky.com)** - Uruky is an ad-free, private search engine focused on personalization. It uses, among other providers, Mojeek and Marginalia. It is EU-based and does not keep or track any personal data (it is not 100[…](https://awesome-privacy.xyz/essentials/search-engines/uruky \"View full Uruky report\") \n- **[\u003cimg src='https://prieco.net/static/img/prieco.webp' width='14' alt='' /\u003e PriEco](https://prieco.net)** - PriEco is an independent web search engine with growing index. It is EU-based and 100% open source. It allows customization via Goggles. \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [Qwant](https://www.qwant.com) - French search engine, running on Bing results and the new European Search Perspective. Contains contextual, non-tracking ads. Privacy policy is out-dated, and Qwant does track users despite claiming not to. See [full review](https://github.com/Lissy93/awesome-privacy/issues/45) for more info.\n\u003e - [MetaGear](https://metager.org)\n\u003e - [YaCy](https://yacy.net)\n\u003e - [Searx](https://github.com/searxng/searxng) - Self-hostable search engines that use the results of multiple other engines (such as Google and Bing) at the same time. They're open source and self-hostable, although using a [public instance](https://searx.space) has the benefit of not singling out your queries to the engines used. A fork of the original [Searx](https://searx.github.io/searx/).\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n## Communication\n\n### Encrypted Messaging\n\n- **[\u003cimg src='https://signal.org/assets/images/favicon/android-chrome-192x192.png' width='14' alt='' /\u003e Signal](https://signal.org)** - Probably one of the most popular, secure private messaging apps that combines strong encryption (see [Signal Protocol](https://en.wikipedia.org/wiki/Signal_Protocol)) with a simple UI and plenty of features. It's widely used across the world, and ea[…](https://awesome-privacy.xyz/communication/encrypted-messaging/signal \"View full Signal report\") \n- **[\u003cimg src='https://simplex.chat/img/new/logo-symbol-light.svg' width='14' alt='' /\u003e SimpleX](https://simplex.chat/)** - Simplex is gaining popularity as a secure and private messaging app renowned for its robust encryption protocol without user IDs or phone numbers and this improves your privacy. Simplex offers instant[…](https://awesome-privacy.xyz/communication/encrypted-messaging/simplex \"View full SimpleX report\") \n- **[\u003cimg src='https://xmpp.org/apple-touch-icon.png' width='14' alt='' /\u003e XMPP](https://xmpp.org)** - XMPP, also known as Jabber, is an open standard for decentralized messaging that has been widely used for decades. It has actually been the basis upon which WhatsApp, Facebook's Chat and Google's Talk[…](https://awesome-privacy.xyz/communication/encrypted-messaging/xmpp \"View full XMPP report\") \n- **[\u003cimg src='https://matrix.org/assets/favicon.ico' width='14' alt='' /\u003e Matrix](https://matrix.org)** - Matrix is a decentralized open network for secure communications, with E2E encryption with Olm and Megolm. Along with the [Element](https://element.io/) client, it supports VOIP + video calling and IM + group chats. Note th[…](https://awesome-privacy.xyz/communication/encrypted-messaging/matrix \"View full Matrix report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Many messaging apps claim to be secure, but if they are not open source, then this cannot be verified - and they **should not be trusted**. This applies to [Telegram](https://telegram.org), [Cypher](https://www.goldenfrog.com/cyphr), [Wickr](https://wickr.com/), [Silent Phone](https://www.silentcircle.com/products-and-solutions/silent-phone/) and [Viber](https://www.viber.com/), to name a few - these apps should not be used to communicate any sensitive data. [Wire](https://wire.com/) has also been removed, due to a [recent acquisition](https://blog.privacytools.io/delisting-wire/)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [Chat Secure](https://chatsecure.org)\n\u003e - [KeyBase](https://keybase.io/) - Allows encrypted real-time chat, group chats, and public and private file sharing. It also has some nice features around cryptographically proving social identities, and makes PGP signing, encrypting and decrypting messages easy. However, since it was [acquired by Zoom](https://keybase.io/blog/keybase-joins-zoom) in 2020, it has no longer been receiving regular updates.\n\u003e - [OpenPGP](https://www.openpgp.org) - can be used over existing chat networks (such as email or message boards). It provides cryptographic privacy and authentication, PGP is used to encrypt messages.\u003cbr /\u003e **Note/ Issues with PGP**  PGP is [not easy](https://restoreprivacy.com/let-pgp-die/) to use for beginners, and could lead to human error/ mistakes being made, which would be overall much worse than if an alternate, simpler system was used. Do not use [32-bit key IDs](https://evil32.com/) - they are too short to be secure. There have also been vulnerabilities found in the OpenPGP and S/MIME, defined in [EFAIL](https://efail.de/), so although it still considered secure for general purpose use, for general chat, it may be better to use an encrypted messaging or email app instead.\n\u003e - [Threema](https://threema.ch) - A paid, business-focused Swiss messenger. The apps are open source, but the server is proprietary.\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### P2P Messaging\n\nWith [Peer-to-Peer](https://en.wikipedia.org/wiki/Peer-to-peer) networks, there are no central server, so there is nothing that can be raided, shut-down or forced to turn over data. There are P2P networks available that are open source, E2E encrypted, routed through Tor services, totally anonymous and operate without the collection of metadata.\n\n- **[\u003cimg src='https://briarproject.org/img/briar_logo_circle.png' width='14' alt='' /\u003e Briar](https://briarproject.org)** - Tor-based Android app for P2P encrypted messaging and forums. Where content is stored securely on your device (not in the cloud). It also allows you to connect directly with nearby contacts, without i[…](https://awesome-privacy.xyz/communication/p2p-messaging/briar \"View full Briar report\") \n- **[\u003cimg src='https://www.ricochetrefresh.net/apple-touch-icon.png' width='14' alt='' /\u003e Ricochet Refresh](https://www.ricochetrefresh.net)** - Desktop instant messenger, that uses the Tor network to rendezvous with your contacts without revealing your identity, location/ IP or meta data. There are no servers to monitor, censor, or hack so Ri[…](https://awesome-privacy.xyz/communication/p2p-messaging/ricochet-refresh \"View full Ricochet Refresh report\") \n- **[\u003cimg src='https://jami.net/assets/images/favicon/apple-touch-icon-57x57.png' width='14' alt='' /\u003e Jami](https://jami.net)** - P2P encrypted chat network with cross-platform GNU client apps. Jami supports audio and video calls, screen sharing, conference hosting and instant messaging. \n- **[\u003cimg src='https://tox.chat/theme/img/favicon.ico' width='14' alt='' /\u003e Tox \u0026 qTox client](https://tox.chat)** - Open source, encrypted, distributed chat network, with clients for desktop and mobile - see [supported clients](https://tox.chat/clients.html). Clearly documented code and multiple language bindings make it easy for developers to int[…](https://awesome-privacy.xyz/communication/p2p-messaging/tox-and-qtox-client \"View full Tox \u0026 qTox client report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [Cwtch](https://cwtch.im)\n\u003e - [BitMessage](https://github.com/Bitmessage/PyBitmessage)\n\u003e - [RetroShare](https://retroshare.cc)\n\u003e - [Xeres](https://xeres.io)\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Encrypted Email\n\nEmail is not secure - your messages can be easily intercepted and read. Corporations scan the content of your mail, to build up a profile of you, either to show you targeted ads or to sell onto third-parties. Through the [Prism Program](https://en.wikipedia.org/wiki/PRISM_(surveillance_program)), the government also has full access to your emails (if not end-to-end encrypted) - this applies to Gmail, Outlook Mail, Yahoo Mail, GMX, ZoHo, iCloud, AOL and more.\u003cbr\u003e\u003cbr\u003e For a more details comparison of email providers, see [email-comparison.as93.net](https://email-comparison.as93.net/)\n\n- **[\u003cimg src='https://proton.me/favicons/android-chrome-192x192.png' width='14' alt='' /\u003e ProtonMail](https://protonmail.com)** - An end-to-end encrypted anonymous email service. ProtonMail has a modern easy-to-use and customizable UI, as well as fast, secure native mobile apps. ProtonMail has all the features that you'd expect[…](https://awesome-privacy.xyz/communication/encrypted-email/protonmail \"View full ProtonMail report\") \n- **[\u003cimg src='https://tuta.com/resources/favicon/logo-favicon.svg' width='14' alt='' /\u003e Tuta](https://tuta.com)** - Free and open source email service based in Germany. It has a basic intuitive UI, secure native mobile apps and desktop email clients, anonymous signup, and an encrypted calendar. Tuta has a full-feat[…](https://awesome-privacy.xyz/communication/encrypted-email/tuta \"View full Tuta report\") \n- **[\u003cimg src='https://mailfence.com/c/mailfence/images/favicon/android-chrome-192x192.png' width='14' alt='' /\u003e Mailfence](https://mailfence.com?src=digitald)** - Mailfence supports OpenPGP so that you can manually exchange encryption keys independently from the Mailfence servers, putting you in full control. Mailfence has a simple UI, similar to that of Outloo[…](https://awesome-privacy.xyz/communication/encrypted-email/mailfence \"View full Mailfence report\") \n- **[\u003cimg src='https://i.ibb.co/zJtHBTZ/mailfence.png' width='14' alt='' /\u003e MailBox.org](https://mailbox.org)** - A Berlin-based, eco-friendly secure mail provider. There is no free plan, the standard service costs €12/year. You can use your own domain, with the option of a [catch-all alias](https://kb.mailbox.org/display/MBOKBEN/Using+catch-all+alias+with+own+domain). They provide good acco[…](https://awesome-privacy.xyz/communication/encrypted-email/mailbox.org \"View full MailBox.org report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - When using an end-to-end encryption technology like OpenPGP, some metadata\n\u003e in the email header will not be encrypted.\n\u003e - OpenPGP also does not support Forward secrecy, which means if either\n\u003e your or the recipient's private key is ever stolen, all previous messages\n\u003e encrypted with it will be exposed. You should take great care to keep your\n\u003e private keys safe.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [HushMail](https://www.hushmail.com)\n\u003e - [Soverin](https://soverin.net)\n\u003e - [StartMail](https://www.startmail.com)\n\u003e - [Posteo](https://posteo.de)\n\u003e - [Disroot](https://disroot.org/en)\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Email Clients\n\nEmail clients are the programs used to interact with the mail server. For hosted email, then the web and mobile clients provided by your email service are usually adequate, and may be the most secure option. For self-hosted email, you will need to install and configure mail clients for web, desktop or mobile. A benefit of using an IMAP client, is that you will always have an offline backup of all email messages (which can then be encrypted and archived), and many applications let you aggregate multiple mailboxes for convenience. Desktop mail clients are not vulnerable to the common browser attacks, that their web app counterparts are.\n\n- **[\u003cimg src='https://www.thunderbird.net/media/img/thunderbird/ios-icon-180.png' width='14' alt='' /\u003e Mozilla Thunderbird](https://www.thunderbird.net)** - Free and open source email application developed and backed by Mozilla -it's secure, private easy and customizable. As of V 78.2.1 encryption is built in, and the [TorBirdy](https://trac.torproject.org/projects/tor/wiki/torbirdy) extension routes all traffic[…](https://awesome-privacy.xyz/communication/email-clients/mozilla-thunderbird \"View full Mozilla Thunderbird report\") \n- **[\u003cimg src='https://www.emclient.com/favicon.ico' width='14' alt='' /\u003e eM Client](https://www.emclient.com)** - Productivity-based email client, for Windows and MacOS. eM Client has a clean user interface, snappy performance and good compatibility. There is a paid version, with some handy features, including sn[…](https://awesome-privacy.xyz/communication/email-clients/em-client \"View full eM Client report\") \n- **[\u003cimg src='https://snappymail.eu/static/img/logo-256x256.png' width='14' alt='' /\u003e SnappyMail](https://snappymail.eu)** - Simple, modern, fast web-based mail client. This is an IMAP-only fork of [RainLoop](http://www.rainloop.net) that mitigates a severe [RainLoop vulnerability](https://thehackernews.com/2022/04/unpatched-bug-in-rainloop-webmail-could.html) and adds several new [features](https://snappymail.eu/comparison).[…](https://awesome-privacy.xyz/communication/email-clients/snappymail \"View full SnappyMail report\") \n- **[\u003cimg src='https://roundcube.net/images/roundcube_logo_icon.svg' width='14' alt='' /\u003e RoundCube](https://roundcube.net)** - Browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an email client, including MIME support, address book, folder manipulatio[…](https://awesome-privacy.xyz/communication/email-clients/roundcube \"View full RoundCube report\") \n- **[\u003cimg src='https://raw.githubusercontent.com/M66B/FairEmail/master/app/src/main/ic_launcher-web.png' width='14' alt='' /\u003e FairEmail](https://email.faircode.eu)** - Open source, fully-featured and easy mail client for Android. Supports unlimited accounts and email addresses with the option for a unified inbox. Clean user interface, with a dark mode option, it is[…](https://awesome-privacy.xyz/communication/email-clients/fairemail \"View full FairEmail report\") \n- **[\u003cimg src='https://k9mail.app/assets/img/k9-logo.svg' width='14' alt='' /\u003e K-9 Mail](https://k9mail.app)** - K-9 (or Thunderbird for Android) is open source, very well supported and trusted - k9 has been around for nearly as long as Android itself! It supports multiple accounts, search, IMAP push email, mult[…](https://awesome-privacy.xyz/communication/email-clients/k-9-mail \"View full K-9 Mail report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e One disadvantage of mail clients, is that many of them do not support 2FA, so it is important to keep your device secured and encrypted\n\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Mail Forwarding\n\nRevealing your real email address online can put you at risk. Email aliasing allows messages to be sent to [anything]@my-domain.com and still land in your primary inbox. This protects your real email address from being revealed. Aliases are generated automatically, the first time they are used. This approach lets you identify which provider leaked your email address, and block an alias with 1-click.\n\n- **[\u003cimg src='https://addy.io/apple-touch-icon.png' width='14' alt='' /\u003e Addy](https://addy.io)** - An open source anonymous email forwarding service, allowing you to create unlimited email aliases. Has a free plan. \n- **[\u003cimg src='https://simplelogin.io/favicon.ico' width='14' alt='' /\u003e SimpleLogin](https://simplelogin.io)** - Fully open source (view on [GitHub](https://github.com/simple-login)) alias service with many additional features. Can be self-hosted, or the managed version has a free plan, as well as hosted premium option ($2.99/ month) for using cu[…](https://awesome-privacy.xyz/communication/mail-forwarding/simplelogin \"View full SimpleLogin report\") \n- **[\u003cimg src='https://relay.firefox.com/favicon.svg' width='14' alt='' /\u003e Firefox Private Relay](https://relay.firefox.com)** - Developed and managed by Mozilla, Relay is a Firefox addon, that lets you make an email alias with 1 click, and have all messages forwarded onto your personal email. Relay is totally free to use, and[…](https://awesome-privacy.xyz/communication/mail-forwarding/firefox-private-relay \"View full Firefox Private Relay report\") \n- **[\u003cimg src='https://forwardemail.net/img/android-chrome-192x192.png' width='14' alt='' /\u003e Forward Email](https://forwardemail.net)** - Catch-all email forwarding service with unlimited aliases and custom domains, configured via DNS records. Self-hostable; the hosted version has a limited free plan, with paid plans (from $3/month) add[…](https://awesome-privacy.xyz/communication/mail-forwarding/forward-email \"View full Forward Email report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Some full email providers include aliasing or catch-all addresses as a built-in (usually premium) feature. For example, [Proton](https://proton.me) (catch-all, plus hide-my-email aliases via Proton Pass), [StartMail](https://www.startmail.com), [mailbox.org](https://mailbox.org) and [Posteo](https://posteo.de) all offer this.\n\u003e \u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Email Security Tools\n\n- **[\u003cimg src='https://icon.horse/icon/www.emailprivacytester.com' width='14' alt='' /\u003e Email Privacy Tester](https://www.emailprivacytester.com/)** - Tests whether your mail client \"reads\" emails before you open them, and what analytics, read-receipts or other tracking data it leaks back to the sender. Developed by [Mike Cardwell](https://www.grepular.com/); use a spare addres[…](https://awesome-privacy.xyz/communication/email-security-tools/email-privacy-tester \"View full Email Privacy Tester report\") \n- **[\u003cimg src='https://addons.thunderbird.net/user-media/addon_icons/438/438634-64.png' width='14' alt='' /\u003e DKIM Verifier](https://addons.thunderbird.net/en-US/thunderbird/addon/dkim-verifier/?collection_id=a5557f08-eafd-7a39-81c6-09127da790f7)** - Verifies DKIM signatures and shows the result in the e-mail header, in order to help spot spoofed emails (which do not come from the domain that they claim to). \n- **[\u003cimg src='https://www.paperweight.email/icon.png' width='14' alt='' /\u003e Paperweight](https://www.paperweight.email/)** - Paperweight scans your inbox to map your digital footprint, then helps you take back control and delete your data. \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e If you are using ProtonMail, then the [ProtonMail Bridge](https://protonmail.com/bridge/thunderbird) enables you to sync \u0026 backup your emails to your own desktop mail client. It works well with Thunderbird, Microsoft Outlook and others\n\u003e \u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### VOIP Clients\n\n- **[\u003cimg src='https://www.mumble.info/css/apple-touch-icon.png' width='14' alt='' /\u003e Mumble](https://www.mumble.info/)** - Open source, low-latency, high quality voice chat software. You can host your own server, or use a hosted instance, there are client applications for Windows, MacOS and Linux as well as third-party ap[…](https://awesome-privacy.xyz/communication/voip-clients/mumble \"View full Mumble report\") \n- **[\u003cimg src='https://f-droid.org/repo/org.linphone/en-US/icon_G0LG_yfcg9OhsnG4KMctTmcSa71iC8v2lFsDerfB_9s=.png' width='14' alt='' /\u003e Linphone](https://www.linphone.org)** - Open source audio, video and IM groups with E2E encryption and built-in media server. [SIP](https://en.wikipedia.org/wiki/Session_Initiation_Protocol)-based evolving to [RCS](https://en.wikipedia.org/wiki/Rich_Communication_Services). Native apps for Android, iOS, Windows, GNU/Linux and MacOS.[…](https://awesome-privacy.xyz/communication/voip-clients/linphone \"View full Linphone report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [SpoofCard](https://www.spoofcard.com) - Lets you make anonymous phone calls + voicemail, but not open source and limited information on security (avoid sending any secure info).\n\u003e - [MicroSip](https://www.microsip.org) - An open source portable SIP softphone for Windows based on PJSIP stack\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Virtual Phone Numbers\n\n- **[\u003cimg src='https://i.ibb.co/2t4MBFj/apple-touch-icon.png' width='14' alt='' /\u003e SMSPool](https://www.smspool.net)** - Don't feel comfortable giving out your phone number? Protect your online identity by using our one-time-use non-VoIP phone numbers. We support over 50+ countries and support over 300+ services. \n- **[\u003cimg src='https://silent.link/static/favicon/apple-icon-114x114.png' width='14' alt='' /\u003e Silent.link](https://silent.link/)** - Anonymous eSIM for sending / receiving SMS, incoming calls and 4G / 5G internet + world-wide roaming. No data is required at sign-up. Affordable pricing, with payments and top-ups accepted in BTC. Req[…](https://awesome-privacy.xyz/communication/virtual-phone-numbers/silent.link \"View full Silent.link report\") \n- **[\u003cimg src='https://crypton.sh/assets/shared/icons/favicon-32x32.png' width='14' alt='' /\u003e Crypton.sh](https://crypton.sh/)** - Physical SIM card in the cloud, for sending + receiving SMS messages. Messages are encrypted using your chosen private key. Includes a web interface, as well as an API for interacting with it from any[…](https://awesome-privacy.xyz/communication/virtual-phone-numbers/crypton.sh \"View full Crypton.sh report\") \n- **[\u003cimg src='https://jmp.chat/static/jmp.svg' width='14' alt='' /\u003e Jmp.chat](https://jmp.chat/)** - Phone number for incoming + outgoing calls and messages, provided by Soprani. Works with Jabber, Matrix, Snikket, XMPP or any SIP client. Pricing starts at $4.99 / month. Only available in the US and[…](https://awesome-privacy.xyz/communication/virtual-phone-numbers/jmp.chat \"View full Jmp.chat report\") \n- **[\u003cimg src='https://i.ibb.co/Dgwr4Z0/monero-sms.png' width='14' alt='' /\u003e MoneroSMS](https://monerosms.com)** - Anonymous SMS service able to activate accounts. Accessible over web, CLI, or email. Pricing starts at $3.60 / month. The service is in beta as of 2022. \n- **[\u003cimg src='https://pikasim.com/img/pika-transparent.png' width='14' alt='' /\u003e PikaSim](https://pikasim.com)** - Privacy-focused eSIM provider for 170+ countries, with instant eSIM delivery. No account, ID, email needed, and accepts crypto via a self-hosted BTCPay Server. \n- **[\u003cimg src='https://nadanada.me/favicon.ico' width='14' alt='' /\u003e nadanada](https://nadanada.me)** - Disposable (20-min) and extendable rental (3-month) phone numbers for anonymous SMS verification, plus anonymous eSIM data plans for 200+ countries. No account, no email, no KYC. Pay with Bitcoin, Mon[…](https://awesome-privacy.xyz/communication/virtual-phone-numbers/nadanada \"View full nadanada report\") \n- **[\u003cimg src='https://git.narayana.im/avatars/72d9e4a07b9e42917b7face86d544517' width='14' alt='' /\u003e Narayana](https://narayana.im)** - Anonymous physical SIMs, eSIMs, VoIP phone numbers, and other advanced features. Inbound/outbound calls, SMS and roaming internet. Very private, has a Tor mirror, accepts crypto, doesn't KYC and you c[…](https://awesome-privacy.xyz/communication/virtual-phone-numbers/narayana \"View full Narayana report\") \n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Team Collaboration\n\nNow more than ever we are relying on software to help with team collaboration. Unfortunately many popular options, such as [Slack](https://www.wired.co.uk/article/slack-privacy-settings-notifications), [Microsoft Teams](https://www.wired.co.uk/article/microsoft-teams-meeting-data-privacy), [Google for Work](https://www.wired.com/story/google-tracks-you-privacy/) and [Discord](https://cybernews.com/privacy/discord-privacy-tips-that-you-should-use-in-2020/) all come with some serious privacy implications.\u003cbr\u003e Typical features of team collaboration software includes: instant messaging, closed and open group messaging, voice and video conference calling, file sharing/ file drop, and some level or scheduling functionality.\n\n- **[\u003cimg src='https://play-lh.googleusercontent.com/wGn6UxVJUVWBOEAR_864Y_TG42iCsr8Ls3xmLoT4oOimSo6lk2_2gfBATqNDNmArKzQ' width='14' alt='' /\u003e Rocket.Chat](https://rocket.chat)** - Easy-to-deploy, self-hosted Slack alternative with polished cross-platform apps. End-to-end encryption is supported, but off by default - without it, workspace admins can read all messages. Usage stat[…](https://awesome-privacy.xyz/communication/team-collaboration/rocket.chat \"View full Rocket.Chat report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/13446337' width='14' alt='' /\u003e Element](https://element.io/)** - Privacy-focused messenger using the Matrix protocol. The Element client allows for group chat rooms, media sharing, voice and video group calls. End-to-end encryption by default for message content, b[…](https://awesome-privacy.xyz/communication/team-collaboration/element \"View full Element report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/9828093' width='14' alt='' /\u003e Mattermost](https://mattermost.com/)** - Self-hostable Slack alternative with native desktop, mobile and web apps, and many integrations. There's no end-to-end encryption, so the server can read all messages, and telemetry is on by default.[…](https://awesome-privacy.xyz/communication/team-collaboration/mattermost \"View full Mattermost report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/4921959?s=256\u0026v=4' width='14' alt='' /\u003e Zulip](https://zulip.com)** - Open source team chat organized around topic-based threading, which keeps busy conversations easier to follow than channel-only tools. Can be self-hosted, or used as a paid cloud service. The threadin[…](https://awesome-privacy.xyz/communication/team-collaboration/zulip \"View full Zulip report\") \n- **[\u003cimg src='https://xeres.io/wp-content/uploads/cropped-cropped-favicon-1-e1623491252400.png' width='14' alt='' /\u003e Xeres](https://xeres.io)** - A decentralized, encrypted P2P friend-to-friend app for chat, forums, channels, boards, voice calls and anonymous file sharing. Best for trusted contacts, as it isn't anonymous unless you route it thr[…](https://awesome-privacy.xyz/communication/team-collaboration/xeres \"View full Xeres report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Some chat platforms allow for cross-platform group chats, voice and video conferencing, but without the additional collaboration features. For example, [Tox](https://tox.chat/), [Mumble](https://www.mumble.info/) and [Jami](https://jami.net/).\u003cbr\u003e [IRC](https://en.wikipedia.org/wiki/IRC) is decentralized, easy to self-host and has a wide choice of clients, making it a good fit for open community channels and public project support. But there's no end-to-end encryption - TLS only protects the connection to the server, so operators can read all messages, and your IP may be exposed unless the network supports host cloaking. Avoid it for private or confidential team communication.\u003cbr\u003e For Conferences, [OSEM](https://osem.io) is an open source all-in-one conference management tool, providing Registration, Schedules, Live and Recorded Sessions, Paper Submissions, Marketing Pages and Administration.\n\u003e \u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n## Security Tools\n\n### Browser Extensions\n\nThe following browser add-ons give you better control over what content is able to be loaded and executed while your browsing.\u003cbr\u003e Before installing anything, you should read the Word of Warning section below.\n\n- **[\u003cimg src='https://i.ibb.co/8Y1ds5X/privacy-badger.png' width='14' alt='' /\u003e Privacy Badger](https://privacybadger.org/)** - Blocks invisible trackers, in order to stop advertisers and other third-parties from secretly tracking where you go and what pages you look at. Less configurable but simpler than uBlock, and focuses o[…](https://awesome-privacy.xyz/security-tools/browser-extensions/privacy-badger \"View full Privacy Badger report\") \n- **[\u003cimg src='https://raw.githubusercontent.com/gorhill/uBlock/master/src/img/ublock.svg' width='14' alt='' /\u003e uBlock Origin](https://ublockorigin.com)** - Block ads, trackers and malware sites. **Download**: [Chrome](https://chrome.google.com/webstore/detail/ublock-origin/cjpalhdlnbpafiamejdnhcphjbkeiagm?hl=en-GB) - [Firefox](https://addons.mozilla.org/en-GB/firefox/addon/ublock-origin/)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/ublock-origin \"View full uBlock Origin report\") \n- **[\u003cimg src='https://addons.mozilla.org/user-media/addon_icons/782/782160-64.png' width='14' alt='' /\u003e Firefox Multi-Account Containers](https://addons.mozilla.org/en-US/firefox/addon/multi-account-containers/)** - Firefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs that preserve your privacy. Cookies are separated by container, allowing you to use the web wit[…](https://awesome-privacy.xyz/security-tools/browser-extensions/firefox-multi-account-containers \"View full Firefox Multi-Account Containers report\") \n- **[\u003cimg src='https://lh3.googleusercontent.com/n4XZC3SfmhMnrIwR1256Cmx5d51OaJImxBtJqaTQnNuWD7xqAgGI2LmAXQk6O1CffLzFNSiTqIO-ZxMCJIGTuKcG=s60' width='14' alt='' /\u003e WebRTC-Leak-Prevent](https://diafygi.github.io/webrtc-ips)** - Provides user control over WebRTC privacy settings in Chromium, in order to prevent WebRTC leaks. **Download**: [Chrome](https://chrome.google.com/webstore/detail/webrtc-leak-prevent/eiadekoaikejlgdbkbdfeijglgfdalml?hl=en-GB). For Firefox users, you can do this through [browser settings](https://www.privacytools.io/browsers/#webrtc). Test for WebRTC leaks,[…](https://awesome-privacy.xyz/security-tools/browser-extensions/webrtc-leak-prevent \"View full WebRTC-Leak-Prevent report\") \n- **[\u003cimg src='https://cdn.webextension.org/icons/canvas-fingerprint-blocker128.png' width='14' alt='' /\u003e Canvas Fingerprint Blocker](https://add0n.com/canvas-fingerprint-blocker.html)** - Block fingerprint without removing access to HTML5 Canvas element. Canvas fingerprinting is commonly used for tracking, this extension helps to mitigate this through disallowing the browser to generat[…](https://awesome-privacy.xyz/security-tools/browser-extensions/canvas-fingerprint-blocker \"View full Canvas Fingerprint Blocker report\") \n- **[\u003cimg src='https://addons.mozilla.org/user-media/addon_icons/839/839767-64.png' width='14' alt='' /\u003e ClearURLs](https://gitlab.com/KevinRoebert/ClearUrls)** - This extension will automatically remove tracking elements from the GET parameters of URLs to help protect some privacy **Download**: [Chrome](https://chrome.google.com/webstore/detail/clearurls/lckanjgmijmafbedllaakclkaicjfmnk) - [Firefox](https://addons.mozilla.org/en-US/firefox/addon/clearurls/) / [Source](https://gitlab.com/KevinRoebert/ClearUrls)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/clearurls \"View full ClearURLs report\") \n- **[\u003cimg src='https://addons.mozilla.org/user-media/addon_icons/1012/1012731-64.png?modified=e97aa3af' width='14' alt='' /\u003e Privacy-Oriented Origin Policy](https://claustromaniac.github.io/poop)** - Prevent Firefox from sending Origin headers when they are least likely to be necessary, to protect your privacy **Download**: [Firefox](https://addons.mozilla.org/en-US/firefox/addon/privacy-oriented-origin-policy/) - [Source](https://github.com/claustromaniac/poop)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/privacy-oriented-origin-policy \"View full Privacy-Oriented Origin Policy report\") \n- **[\u003cimg src='https://codeberg.org/repo-avatars/5014-6cc14ee9c85003bda3adb1d71762c306' width='14' alt='' /\u003e LocalCDN](https://www.localcdn.org/)** - Emulates remote frameworks (e.g. jQuery, Bootstrap, Angular) and delivers them as local resource. Prevents unnecessary 3rd party requests to tracking CDNs **Download**: [Firefox](https://addons.mozilla.org/en-US/firefox/addon/localcdn-fork-of-decentraleyes/)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/localcdn \"View full LocalCDN report\") \n- **[\u003cimg src='https://addons.mozilla.org/user-media/addon_icons/521/521554-64.png' width='14' alt='' /\u003e Decentraleyes](https://decentraleyes.org)** - Similar to LocalCDN, Serves up local versions of common scripts instead of calling to 3rd-party CDN. Improves privacy and load times. Works out-of-the-box and plays nicely with regular content blocker[…](https://awesome-privacy.xyz/security-tools/browser-extensions/decentraleyes \"View full Decentraleyes report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/342708' width='14' alt='' /\u003e Privacy Essentials](https://duckduckgo.com/app)** - Simple extension by DuckDuckGo, which grades the security of each site. **Download**: [Chrome](https://chrome.google.com/webstore/detail/duckduckgo-privacy-essent/bkdgflcldnnnapblkhphbgpggdiikppg?hl=en-GB) \\ [Firefox](https://addons.mozilla.org/en-GB/firefox/addon/duckduckgo-for-firefox/)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/privacy-essentials \"View full Privacy Essentials report\") \n- **[\u003cimg src='https://i.ibb.co/hyb1SGK/useragent-switcher128.png' width='14' alt='' /\u003e User Agent Switcher](https://add0n.com/useragent-switcher.html)** - Spoofs browser's User-Agent string, making it appear that you are on a different device, browser and version to what you are actually using. This alone does very little for privacy, but combined with[…](https://awesome-privacy.xyz/security-tools/browser-extensions/user-agent-switcher \"View full User Agent Switcher report\") \n- **[\u003cimg src='https://privacyspy.org/static/img/favicon-32x32.png' width='14' alt='' /\u003e PrivacySpy](https://privacyspy.org)** - The companion extension for PrivacySpy.org - an open project that rates, annotates, and archives privacy policies. The extension shows a score for the privacy policy of the current website. **Download**:[…](https://awesome-privacy.xyz/security-tools/browser-extensions/privacyspy \"View full PrivacySpy report\") \n- **[\u003cimg src='https://addons.mozilla.org/user-media/addon_icons/642/642100-64.png?modified=1597226821' width='14' alt='' /\u003e Skip Redirect](https://github.com/sblask/webextension-skip-redirect)** - Some web pages use intermediary pages before redirecting to a final page. This add-on tries to extract the final url from the intermediary url and goes there straight away if successful **Download**: [Firefox](https://addons.mozilla.org/en-US/firefox/addon/skip-redirect/)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/skip-redirect \"View full Skip Redirect report\") \n- **[\u003cimg src='https://i.imgur.com/H9zwf8l.png' width='14' alt='' /\u003e Web Archives](https://github.com/dessant/web-archives)** - View archived and cached versions of web pages on 10+ search engines, such as the Wayback Machine, Archive.is, Google etc Useful for checking legitimacy of websites, and viewing change logs **Download**:[…](https://awesome-privacy.xyz/security-tools/browser-extensions/web-archives \"View full Web Archives report\") \n- **[\u003cimg src='https://flagfox.files.wordpress.com/2014/02/flagfoxlogowithname1.png' width='14' alt='' /\u003e Flagfox](https://flagfox.wordpress.com/)** - Displays a country flag depicting the location of the current website's server, which can be useful to know at a glance. Click icon for more tools such as site safety checks, whois, validation etc **Download**[…](https://awesome-privacy.xyz/security-tools/browser-extensions/flagfox \"View full Flagfox report\") \n- **[\u003cimg src='https://amiunique.org/favicon.ico' width='14' alt='' /\u003e AmIUnique Timeline](https://amiunique.org/timeline)** - Enables you to better understand the evolution of browser fingerprints (which is what websites use to uniquely identify and track you). **Download**: [Chrome](https://chrome.google.com/webstore/detail/amiunique/pigjfndpomdldkmoaiiigpbncemhjeca) - [Firefox](https://addons.mozilla.org/en-US/firefox/addon/amiunique)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/amiunique-timeline \"View full AmIUnique Timeline report\") \n- **[\u003cimg src='https://lh3.googleusercontent.com/c78SvSl7OD2thLmgX5irlo1tvxGVtkziKTKmp7VByjvvrw2czkP2cFbbRASmopQBV9-PpNBD_NOqt8WIC4JVc0WB3A=s60' width='14' alt='' /\u003e Netcraft Extension](https://www.netcraft.com/apps/browser)** - Notifies you when visiting a known or potential phishing site, and detects suspicious JavaScript (including skimmers and miners). Also provides a simple rating for a given site's legitimacy and securi[…](https://awesome-privacy.xyz/security-tools/browser-extensions/netcraft-extension \"View full Netcraft Extension report\") \n- **[\u003cimg src='https://icon.horse/icon/linguister.io' width='14' alt='' /\u003e Linguist](https://linguister.io)** - Linguist is a privacy‑focused translation solution in-browser that has an embedded offline translator and lets users create [custom translators](https://linguister.io/docs/CustomTranslator) to use any translation API, even if it's locally deployed[…](https://awesome-privacy.xyz/security-tools/browser-extensions/linguist \"View full Linguist report\") \n- **[\u003cimg src='https://raw.githubusercontent.com/libredirect/browser_extension/refs/heads/master/src/assets/images/libredirect.svg' width='14' alt='' /\u003e LibRedirect](https://libredirect.manerakai.com)** - A browser extension that redirects popular sites to alternative privacy friendly frontends **Download**: [Firefox](https://addons.mozilla.org/firefox/addon/libredirect/) - [Chrome](https://libredirect.github.io/download_chromium.html)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/libredirect \"View full LibRedirect report\") \n- **[\u003cimg src='https://sponsor.ajay.app/icons/icon-192x192.png?v=2190b8dd66c9e760a732842073d0a087' width='14' alt='' /\u003e SponsorBlock](https://sponsor.ajay.app)** - Crowdsourced browser extension that skips sponsored segments and other unwanted parts of YouTube videos using community-submitted timestamps. **Download**: [Firefox](https://addons.mozilla.org/firefox/addon/sponsorblock/) - [Chrome](https://chromewebstore.google.com/detail/sponsorblock-para-youtube/mnjggcdmjocbbbhaepdhchncahnbgone)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/sponsorblock \"View full SponsorBlock report\") \n- **[\u003cimg src='https://dearrow.ajay.app/icons/icon-192x192.png?v=6f203adf3dc83cd564c279fa5c263c62' width='14' alt='' /\u003e DeArrow](https://dearrow.ajay.app/)** - Crowdsourced browser extension that replaces YouTube video titles and thumbnails using community-submitted versions to stop clickbait. **Download**: [Firefox](https://addons.mozilla.org/en-US/firefox/addon/dearrow/) - [Chrome](https://chromewebstore.google.com/detail/dearrow-better-titles-and/enamippconapkdmgfgjchkhakpfinmaj)[…](https://awesome-privacy.xyz/security-tools/browser-extensions/dearrow \"View full DeArrow report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - Having many extensions installed raises entropy, causing your fingerprint to be more unique, hence making tracking easier.\n\u003e - Much of the functionality of the above addons can be applied without installing anything, by configuring browser settings yourself. For Firefox this is done in the user.js\n\u003e - Be careful when installing unfamiliar browser add-ons, since some can compromise your security and privacy. At the time of writing, the above list were all open source, verified and 'safe' extensions.\n\u003e - In most situations, only a few of the above extensions will be needed in combination.\n\u003e - See the [arkenfox wiki](https://github.com/arkenfox/user.js/wiki/4.1-Extensions) for more information on the obsolescence and purposelessness of many popular extensions, and why you may only need a very limited set.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [Extension source viewer](https://addons.mozilla.org/en-US/firefox/addon/crxviewer) - A handy extension for viewing the source code of another browser extension, which is a useful tool for verifying the code does what it says\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Mobile Apps\n\n- **[\u003cimg src='https://raw.githubusercontent.com/guardianproject/orbot-android/master/fastlane/metadata/android/en-US/images/icon.png' width='14' alt='' /\u003e Orbot](https://orbot.app/)** - System-wide Tor proxy, which encrypts your connection through multiple nodes. You can also use it alongside Tor Browser to access .onion sites. \n- **[\u003cimg src='https://raw.githubusercontent.com/M66B/NetGuard/master/app/src/main/ic_launcher-web.png' width='14' alt='' /\u003e NetGuard](https://netguard.me/)** - A firewall app for Android, which does not require root. NetGuard provides simple and advanced ways to block access to the internet, where applications and addresses can individually be allowed or den[…](https://awesome-privacy.xyz/security-tools/mobile-apps/netguard \"View full NetGuard report\") \n- **[\u003cimg src='https://play-lh.googleusercontent.com/ywvaxXcH90yttClJvgHR5UsfDnGS_YNtFiW6fQJm1p7_6HX9Dbn0v2J9gIzOOKFYQOnA=w240-h480' width='14' alt='' /\u003e Island](https://island.oasisfeng.com/)** - A sandbox environment, allowing you to clone selected apps and run them in an isolated box, preventing it from accessing your personal data, or device information. \n- **[\u003cimg src='https://gitlab.com/uploads/-/system/project/avatar/18237274/ic_launcher-playstore.png?width=48' width='14' alt='' /\u003e Insular](https://gitlab.com/secure-system/Insular)** - An actively-maintained fork of the Island project with additional enhancements \n- **[\u003cimg src='https://exodus-privacy.eu.org/img/favicons/apple-touch-icon.png' width='14' alt='' /\u003e Exodus](https://exodus-privacy.eu.org/en/page/what/#android-app)** - Shows which trackers, each of your installed apps is using, so that you can better understand how your data is being collected. Uses data from the Exodus database of scanned APKs. \n- **[\u003cimg src='https://play-lh.googleusercontent.com/QbgM-Vgqp32sNMgwC0kD4kJW3YVp7xiPcVIHNcbSQgrkTIDqSfTqSBXKEvoZ9SNSjxw=w240-h480' width='14' alt='' /\u003e Bouncer](https://play.google.com/store/apps/details?id=com.samruston.permission)** - Gives you the ability to grant permissions temporarily, so that you could for example use the camera to take a profile picture, but when you close the given app, those permissions will be revoked. \n- **[\u003cimg src='https://f-droid.org/repo/icons-640/superfreeze.tool.android.1000.png' width='14' alt='' /\u003e SuperFreezZ](https://superfreezz.gitlab.io/)** - Makes it possible to entirely freeze all background activities on a per-app basis. Intended purpose is to speed up your phone, and prolong battery life, but this app is also a great utility to stop ce[…](https://awesome-privacy.xyz/security-tools/mobile-apps/superfreezz \"View full SuperFreezZ report\") \n- **[\u003cimg src='https://play-lh.googleusercontent.com/Xb_KbjGC3J8xrj1QmZqYhUq1A6aww5ikFuXfCqJonww-vz38y6xUjHzvH65AGrQU9P4=s48' width='14' alt='' /\u003e Secure Task](https://play.google.com/store/apps/details?id=com.balda.securetask)** - Triggers actions, when certain security conditions are met, such as multiple failed login attempts or monitor settings changed. It does require Tasker, and needs to be set up with ADB, device does not[…](https://awesome-privacy.xyz/security-tools/mobile-apps/secure-task \"View full Secure Task report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/11850518?s=200\u0026v=4' width='14' alt='' /\u003e Cryptomator](https://cryptomator.org/android/)** - Encrypts files and folders client-side, before uploading them to cloud storage (such as Google Drive, One Drive or Dropbox), meaning none of your personal documents leave your device in plain text. \n- **[\u003cimg src='https://1.1.1.1/favicon.ico' width='14' alt='' /\u003e 1.1.1.1](https://1.1.1.1/)** - Lets you use CloudFlares fast and secure 1.1.1.1 DNS, with DNS over HTTPS, and also has the option to enable CloudFlares WARP+ VPN. \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/62335928?s=200\u0026v=4' width='14' alt='' /\u003e Fing App](https://www.fing.com/products/fing-app)** - A network scanner to help you monitor and secure your WiFi network. The app is totally free, but to use the advanced controls, you will need a Fing Box. \n- **[\u003cimg src='https://blokada.org/favicon.png' width='14' alt='' /\u003e Blokada](https://blokada.org/)** - This application blocks ads and trackers, doesn't require root and works for all the apps on your Android phone. Check out how it works here. \n- **[\u003cimg src='https://trackercontrol.org/images/logo.png' width='14' alt='' /\u003e TrackerControl](https://trackercontrol.org/)** - Monitor and control hidden data collection in mobile apps about user behavior/ tracking. Get from [F-Droid](https://f-droid.org/en/packages/net.kollnig.missioncontrol.fdroid/) \n- **[\u003cimg src='https://f-droid.org/repo/com.smilla.greentooth/en-US/icon_8WaREJ2f7uFLdL9QGDL4xSqsIRB7wgdwv9BY_ET0WEg=.png' width='14' alt='' /\u003e Greentooth](https://gitlab.com/nbergman/greentooth)** - Auto-disable Bluetooth, then it is not being used. Saves battery, and prevent some security risks. Get from [F-Droid](https://f-droid.org/en/packages/com.smilla.greentooth/) \n- **[\u003cimg src='https://f-droid.org/repo/com.wesaphzt.privatelock/en-US/icon_c5gFGZ7VhAR-kLihEfLVrStxIushKtWADc7pR1hQ6b4=.png' width='14' alt='' /\u003e PrivateLock](https://github.com/wesaphzt/privatelock)** - Auto lock your phone based on movement force/ acceleration. Get from [F-Droid](https://f-droid.org/en/packages/com.wesaphzt.privatelock/) See also [PluckLock](https://github.com/SyntaxBlitz/PluckLock) \n- **[\u003cimg src='https://schiffer.tech/img/logo.png' width='14' alt='' /\u003e CamWings](https://schiffer.tech/camwings-mobile.html)** - Prevent background processes gaining unauthorized access to your devices camera. Better still, use a webcam sticker. \n- **[\u003cimg src='https://schiffer.tech/img/logo.png' width='14' alt='' /\u003e ScreenWings](https://schiffer.tech/screenwings-mobile.html)** - Prevent background processes taking unauthorized screenshots, which could expose sensitive data. \n- **[\u003cimg src='https://play-lh.googleusercontent.com/LGMnS6aiFUxTLMlDQ4VYaJG0V2lY3lr_ru9QZ3OiCp-YZlsCz3F_v0oWQnqrN-giBA=s48' width='14' alt='' /\u003e AFWall+](https://github.com/ukanth/afwall/)** - Android Firewall+ (AFWall+) is an advanced iptables editor (GUI) for rooted Android devices, which provides very fine-grained control over which Android apps are allowed to access the network. Get fro[…](https://awesome-privacy.xyz/security-tools/mobile-apps/afwalland \"View full AFWall+ report\") \n- **[\u003cimg src='https://play-lh.googleusercontent.com/hMhLdDNBR_rBIDctJ5yCPbyPy0fi_6FHp9MdgaOIPPedyqgwr6tsZq_AO3W1z4Zb8HJ_=w240-h480' width='14' alt='' /\u003e Catch the Man-in-the-Middle](https://play.google.com/store/apps/details?id=me.brax.certchecker)** - Simple tool, that compares SHA-1 fingerprints of the the SSL certificates seen from your device, and the certificate seen from an external network. If they do not match, this may indicate a man-in-the[…](https://awesome-privacy.xyz/security-tools/mobile-apps/catch-the-man-in-the-middle \"View full Catch the Man-in-the-Middle report\") \n- **[\u003cimg src='https://f-droid.org/repo/com.celzero.bravedns/en-US/icon_AwgyVcHjczoaNxANCvUeSJrEfOWsIIeIpCgBaUKoXuY=.png' width='14' alt='' /\u003e RethinkDNS \u0026 Firewall](https://rethinkdns.com)** - An open-source ad-blocker and firewall app for Android 6+ (does not require root). \n- **[\u003cimg src='https://f-droid.org/assets/apple-touch-icon_ypJwtCrcixeH_qV6LdcMYk1anFIR9o-_ufR__1wNdJY=.png' width='14' alt='' /\u003e F-Droid](https://f-droid.org/)** - F-Droid is an installable catalogue of FOSS applications for Android. The client enables you to browse, install, and keep track of updates on your device. \n- **[\u003cimg src='https://raw.githubusercontent.com/thomasbuilds/Spectre/refs/heads/main/metadata/en-US/images/icon.png' width='14' alt='' /\u003e Spectre](https://github.com/thomasbuilds/Spectre)** - A radio frequency scanner app for Android with recon and offensive capabilities. \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Too many installed apps will increase your attack surface - only install applications that you need.\n\u003e Be sure to check the permissions, and what data an app has access to prior to installation.\n\u003e Only install from official sources.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e For more open source security \u0026 privacy apps, check out these publishers:\n\u003e [The Guardian Project](https://guardianproject.info) ([Play Store](https://play.google.com/store/apps/dev?id=6502754515281796553), [F-Droid](https://search.f-droid.org/?q=guardianproject)),\n\u003e [The Tor Project](https://www.torproject.org/) ([Play Store](https://play.google.com/store/apps/developer?id=The+Tor+Project), [F-Droid](https://search.f-droid.org/?q=torproject)),\n\u003e [Oasis Feng](https://github.com/oasisfeng) ([Play Store](https://play.google.com/store/apps/dev?id=7664242523989527886)),\n\u003e [FairCode (Marcel Bokhorst)](https://www.faircode.eu/) ([Play Store](https://play.google.com/store/apps/dev?id=8420080860664580239), [F-Droid](https://search.f-droid.org/?q=faircode)),\n\u003e [SECUSO Research Group](https://secuso.aifb.kit.edu/english/105.php) ([Play Store](https://play.google.com/store/apps/developer?id=SECUSO+Research+Group\u0026hl=en_US), [F-Droid](https://search.f-droid.org/?q=secuso)),\n\u003e and [Fossify](https://www.fossify.org) ([Play Store](https://play.google.com/store/apps/dev?id=9070296388022589266), [F-Droid](https://search.f-droid.org/?q=fossify)) -\n\u003e all of which are trusted developers or organisations, who've done amazing work.\n\u003e \n\u003e For offensive and defensive security, see\n\u003e The Kali [Nethunter Catalogue](https://store.nethunter.com/en/packages) of apps\n\u003e \n\u003e For *advanced* users, the following tools can be used to closely monitor\n\u003e your devise and networks, in order to detect any unusual activity.\n\u003e [PortDroid] for network analysis, [Packet Capture] to monitor network\n\u003e traffic, [SysLog] for viewing system logs, [Dexplorer] to read .dex or .apk files\n\u003e for your installed apps, and [Check and Test] to check status and details of devices hardware.\n\u003e \u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Online Tools\n\nA selection of free online tools and utilities, to check, test and protect your security\n\n- **[\u003cimg src='https://i.ibb.co/XxmfTyw/haveibeenpwnd.png' width='14' alt='' /\u003e Have i been pwned](https://haveibeenpwned.com)** - Checks if your credentials (Email address or Password) have been compromised in a data breach. See also Firefox Monitor. \n- **[\u003cimg src='https://i.ibb.co/Vvq8XrM/Exodus.png' width='14' alt='' /\u003e εxodus](https://reports.exodus-privacy.eu.org)** - Checks how many, and which trackers any Android app has. Useful to understand how data is being collected before you install a certain APK, it also shows which permissions the app asks for. \n- **[\u003cimg src='https://amiunique.org/favicon.ico' width='14' alt='' /\u003e Am I Unique?](https://amiunique.org/fingerprint)** - Show how identifiable you are on the Internet by generating a fingerprint based on device information. This is how many websites track you (even without cookies enabled), so the aim is to not be uniqu[…](https://awesome-privacy.xyz/security-tools/online-tools/am-i-unique \"View full Am I Unique? report\") \n- **[\u003cimg src='https://coveryourtracks.eff.org/static/favicon.ico' width='14' alt='' /\u003e Panopticlick](https://panopticlick.eff.org/)** - Check if your browser safe against tracking. Analyzes how well your browser and add-ons protect you against online tracking techniques, and if your system is uniquely configured—and thus identifiable. \n- **[\u003cimg src='https://phish.ly/images/logo.svg' width='14' alt='' /\u003e Phish.ly](https://phish.ly/)** - Analyzes emails, checking the URLs and creating a SHA256 and MD5 hash of attachments, with a link to VirusTotal. To use the service, just forward a potentially malicious or suspicious email to scan@ph[…](https://awesome-privacy.xyz/security-tools/online-tools/phish.ly \"View full Phish.ly report\") \n- **[\u003cimg src='https://browserleaks.com/favicon.ico' width='14' alt='' /\u003e Browser Leak Test](https://browserleaks.com)** - Shows which of personal identity data is being leaked through your browser, so you can better protect yourself against fingerprinting. \n- **[\u003cimg src='https://ipleak.net/favicon.ico' width='14' alt='' /\u003e IP Leak Test](https://ipleak.net)** - Shows your IP address, and other associated details (location, ISP, WebRTC check, DNS, and lots more). \n- **[\u003cimg src='https://www.exifremove.com/favicon.ico' width='14' alt='' /\u003e EXIF Remove](https://www.exifremove.com)** - Displays, and removes Meta and EXIF data from an uploaded photo or document. \n- **[\u003cimg src='https://redirectdetective.com/redirect-detective.png' width='14' alt='' /\u003e Redirect Detective](https://redirectdetective.com)** - Check where a suspicious URL redirects to (without having to click it). Lets you avoid being tracked by not being redirected via adware/tracking sites, or see if a shortened link actually resolves a l[…](https://awesome-privacy.xyz/security-tools/online-tools/redirect-detective \"View full Redirect Detective report\") \n- **[\u003cimg src='https://www.blocked.org.uk/assets/images/blocked/socialmedia/blocked_result.jpg' width='14' alt='' /\u003e Blocked.org](https://www.blocked.org.uk)** - Checks if a given website is blocked by filters applied by your mobile and broadband Internet Service Providers (ISP). \n- **[\u003cimg src='https://www.virustotal.com/gui/images/manifest/icon-192x192.png' width='14' alt='' /\u003e Virus Total](https://www.virustotal.com)** - Analyses a potentially-suspicious web resources (by URL, IP, domain or file hash) to detect types of malware (*note: files are scanned publicly*). \n- **[\u003cimg src='https://www.hardenize.com/favicon/android-chrome-192x192.png' width='14' alt='' /\u003e Hardenize](https://www.hardenize.com/)** - Scan websites and shows a security overview, relating to factors such as HTTPS, domain info, email data, www protocols and so on. \n- **[\u003cimg src='https://www.islegitsite.com/apple-touch-icon.png' width='14' alt='' /\u003e Is Legit?](https://www.islegitsite.com/)** - Checks if a website or business is a scam, before buying something from it. \n- **[\u003cimg src='https://www.shouldiremoveit.com/favicon.ico' width='14' alt='' /\u003e Should I Remove It?](https://www.shouldiremoveit.com)** - Ever been uninstalling programs from your Windows PC and been unsure of what something is? Should I Remove It is a database of Windows software, detailing whether it is essential, harmless or dangerou[…](https://awesome-privacy.xyz/security-tools/online-tools/should-i-remove-it \"View full Should I Remove It? report\") \n- **[\u003cimg src='https://10minemail.com/blog/content/images/size/w256h256/2021/05/10min_mobile_icon@2x.png' width='14' alt='' /\u003e 10 Minute Mail](https://10minemail.com/)** - Generates temporary disposable email address, to avoid giving your real details. \n- **[\u003cimg src='https://mxtoolbox.com/favicon.ico' width='14' alt='' /\u003e MXToolBox Mail Headers](https://mxtoolbox.com/Public/Tools/EmailHeaders.aspx)** - Tool for analyzing email headers, useful for checking the authenticity of messages, as well as knowing what info you are revealing in your outbound messages. \n- **[\u003cimg src='https://static.netcraft.com/images/favicon.ico' width='14' alt='' /\u003e Site Report](https://sitereport.netcraft.com/)** - A tool from Netcraft, for analysing what any given website is running, where it's located and information about its host, registrar, IP and SSL certificates. \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Browsers are inherently insecure, be careful when uploading, or entering personal details.\n\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n## Networking\n\n### Virtual Private Networks\n\n- **[\u003cimg src='https://mullvad.net/apple-touch-icon.png' width='14' alt='' /\u003e Mullvad](https://mullvad.net/en)** - Mullvad is one of the best for privacy, they have a totally anonymous sign up process, you don't need to provide any details at all, you can choose to pay anonymously too (with Monero, BTC or cash). \n- **[\u003cimg src='https://www.azirevpn.com/assets/img/apple-icon-57x57.png' width='14' alt='' /\u003e Azire](https://www.azirevpn.com/)** - Azire is a Swedish VPN provider, who owns their own hardware with physically removed storage and a no logging policy. Pricing starts at €3.25/mo, with crypto (including XMR) supported. Note that they'[…](https://awesome-privacy.xyz/networking/virtual-private-networks/azire \"View full Azire report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/38857113' width='14' alt='' /\u003e IVPN](https://www.ivpn.net/)** - Independently Security Audited VPN with anonymous signup, no logs, no cloud or customer data stored, open-source apps and website. Strong ethics: no trackers, no false promises, no surveillance ads. A[…](https://awesome-privacy.xyz/networking/virtual-private-networks/ivpn \"View full IVPN report\") \n- **[\u003cimg src='https://protonvpn.com/favicons/apple-touch-icon.png' width='14' alt='' /\u003e ProtonVPN](https://protonvpn.com)** - From the creators of ProtonMail, ProtonVPN has a solid reputation. They have a full suite of user-friendly native mobile and desktop apps. ProtonVPN is one of the few \"trustworthy\" providers that also[…](https://awesome-privacy.xyz/networking/virtual-private-networks/protonvpn \"View full ProtonVPN report\") \n- **[\u003cimg src='https://www.ovpn.com/favicon.ico' width='14' alt='' /\u003e OVPN](https://www.ovpn.com)** - A court-proven VPN service with support for Wireguard and OpenVPN support, and optional ad-blocking. Running on dedicated hardware, with no hard drives. \n- **[\u003cimg src='https://partyvpn.com/icon.png' width='14' alt='' /\u003e Party VPN](https://partyvpn.com)** - Crypto-native VPN with pay-as-you-go pricing. Accepts cryptocurrency only, including Monero. WireGuard and AmneziaWG protocols, no-logs policy, REST API for developers. No subscriptions or credit card[…](https://awesome-privacy.xyz/networking/virtual-private-networks/party-vpn \"View full Party VPN report\") \n- **[\u003cimg src='https://avatars.githubusercontent.com/u/30499389' width='14' alt='' /\u003e Windscribe](https://windscribe.com)** - An audited and court-proven VPN with a free 10GB plan, in-RAM servers, browser extensions and open source WireGuard/IKEv2/OpenVPN clients. Supports split tunneling, customizable DNS blocking, MAC spoo[…](https://awesome-privacy.xyz/networking/virtual-private-networks/windscribe \"View full Windscribe report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - *A VPN does not make you anonymous - it merely changes your public IP address to that of your VPN provider, instead of your ISP. Your browsing session can still be linked back to your real identity either through your system details (such as user agent, screen resolution even typing patterns), cookies / session storage, or by the identifiable data that you enter. [Read more about fingerprinting](https://pixelprivacy.com/resources/browser-fingerprinting/)*\n\u003e - *Logging - If you choose to use a VPN because you do not agree with your ISP logging your full browsing history, then it is important to keep in mind that your VPN provider can see (and mess with) all your traffic. Many VPNs claim not to keep logs, but you cannot be certain of this ([VPN leaks](https://vpnleaks.com/)). See [this article](https://gist.github.com/joepie91/5a9909939e6ce7d09e29) for more*\n\u003e - *IP Leaks - If configured incorrectly, your IP may be exposed through a DNS leak. This usually happens when your system is unknowingly accessing default DNS servers rather than the anonymous DNS servers assigned by an anonymity network or VPN. Read more: [What is a DNS leak](https://www.dnsleaktest.com/what-is-a-dns-leak.html), [DNS Leak Test](https://www.dnsleaktest.com), [How to Fix a DNS Leak](https://www.dnsleaktest.com/how-to-fix-a-dns-leak.html)*\n\u003e - *Stealth - It will be visible to your adversary that you are using a VPN (usually from the IP address), but other system and browser data, can still reveal information about you and your device (such as your local time-zone, indicating which region you are operating from)*\n\u003e - *Many reviews are sponsored, and hence biased. Do your own research, or go with one of the above options*\n\u003e - *Using [Tor](https://www.torproject.org) (or another [Mix Network](/5_Privacy_Respecting_Software.md#mix-networks)) may be a better option for anonimity*\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e If you don't trust a VPN provider not to keep logs, then you could self-host your own VPN. This gives you you total control, but at the cost of anonymity (since your cloud provider, will require your billing info). See [Streisand](https://github.com/StreisandEffect/streisand), to learn more, and get started with running a VPN. [Digital Ocean](https://m.do.co/c/3838338e7f79) provides flexible, secure and easy Linux VMs, (from $0.007/hour or $5/month), Here is a [1-click install script](http://dovpn.carlfriess.com/)for on [Digital Ocean](https://m.do.co/c/3838338e7f79), by Carl Friess.\n\u003e Recently distributed self-hosted solutions for running your own VPNs have become more popular, with services like [Outline](https://getoutline.org/) letting you spin up your own instance and share it with friends and family. Since it's distributed, it is very resistant to blocking, and gives you world-wide access to the free and open internet. And since you have full control over the server, you can be confident that there is no logging or monitoring happening. However it comes at the cost of anonymity, especially if it's only you using your instance.\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eℹ️ \u003cb\u003eFurther Info\u003c/b\u003e\u003c/summary\u003e\n\n\u003e *While choosing a VPN, consider the following: Logging policy (logs are bad),\nJurisdiction (avoid 5-eyes), Number of servers, availability and average load.\nPayment method (anonymous methods such as BTC, Monero or cash are better),\nLeak protection (1st-party DNS servers = good, and check if IPv6 is supported),\nprotocols (OpenVPN and WireGuard = good). Finally, usability of their apps,\nuser reviews and download speeds.*\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Self-Hosted Network Security\n\nFun little projects that you can run on a Raspberry Pi, or other low-powered computer. In order to help detect and prevent threats, monitor network and filter content\n\n- **[\u003cimg src='https://wp-cdn.pi-hole.net/wp-content/uploads/2016/12/cropped-Vortex-R-192x192.png' width='14' alt='' /\u003e Pi-Hole](https://pi-hole.net)** - Network-level advertisement and Internet tracker blocking application which acts as a DNS sinkhole. Pi-Hole can significantly speed up your internet, remove ads and block malware. It comes with a nice[…](https://awesome-privacy.xyz/networking/self-hosted-network-security/pi-hole \"View full Pi-Hole report\") \n- **[\u003cimg src='https://technitium.com/favicon.ico' width='14' alt='' /\u003e Technitium](https://technitium.com/dns)** - Another DNS server for blocking privacy-invasive content at its source. Technitium doesn't require much of a setup, and basically works straight out of the box, it supports a wide range of systems (an[…](https://awesome-privacy.xyz/networking/self-hosted-network-security/technitium \"View full Technitium report\") \n- **[\u003cimg src='https://www.ipfire.org/static/img/apple-touch-icon-192x192-precomposed.png' width='14' alt='' /\u003e IPFire](https://www.ipfire.org)** - A hardened, versatile, state-of-the-art open source firewall based on Linux. Its ease of use, high performance and extensibility make it usable for everyone. \n- **[\u003cimg src='https://www.pivpn.io/images/pivpnlogo.png' width='14' alt='' /\u003e PiVPN](https://pivpn.io)** - A simple way to set up a home VPN on any Debian server. Supports OpenVPN and WireGuard with elliptic curve encryption keys up to 512 bit. Supports multiple DNS providers and custom DNS providers - wor[…](https://awesome-privacy.xyz/networking/self-hosted-network-security/pivpn \"View full PiVPN report\") \n- **[\u003cimg src='http://e2guardian.org/cms/images/banners/logo-guardian.png' width='14' alt='' /\u003e E2guardian](http://e2guardian.org)** - Powerful open source web content filter. \n- **[\u003cimg src='https://www.pfsense.org/img/apple-touch-icon.png' width='14' alt='' /\u003e PF Sense](https://www.pfsense.org)** - Widely used, open source firewall/router. \n- **[\u003cimg src='https://zeek.org/wp-content/uploads/2019/09/favicon.ico' width='14' alt='' /\u003e Zeek](https://www.zeek.org)** - Detect if you have a malware-infected computer on your network, and powerful network analysis framework and monitor. \n- **[\u003cimg src='https://www.firezone.dev/favicon.ico' width='14' alt='' /\u003e Firezone](https://www.firezone.dev/)** - Open-source self-hosted VPN and firewall built on WireGuard®. \n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Anonymity Networks\n\n- **[\u003cimg src='https://www.torproject.org/static/images/favicon/favicon.ico' width='14' alt='' /\u003e Tor](https://www.torproject.org)** - Tor provides robust anonymity, allowing you to defend against surveillance, circumvent censorship and reduce tracking. It blocks trackers, resists fingerprinting and implements multi-layered encryptio[…](https://awesome-privacy.xyz/networking/anonymity-networks/tor \"View full Tor report\") \n- **[\u003cimg src='https://geti2p.net/_static/favicon.ico' width='14' alt='' /\u003e I2P](https://geti2p.net)** - I2P offers great generic transports, it is well geared towards accessing hidden services, and has a couple of technical benefits over Tor: P2P friendly with unidirectional short-lived tunnels, it is p[…](https://awesome-privacy.xyz/networking/anonymity-networks/i2p \"View full I2P report\") \n- **[\u003cimg src='https://www.hyphanet.org/favicon.ico' width='14' alt='' /\u003e Freenet](https://freenetproject.org)** - Freenet is easy to setup, provides excellent friend To Friend Sharing vs I2P, and is great for publishing content anonymously. It's quite large in size, and very slow so not the best choice for casual[…](https://awesome-privacy.xyz/networking/anonymity-networks/freenet \"View full Freenet report\") \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e To provide low-latency browsing, Tor does not mix packets or generate cover traffic.\n\u003e If an adversary is powerful enough, theoretically they could either observe the entire network,\n\u003e or just the victims entry and exit nodes. It's worth mentioning, that even though your ISP\n\u003e can not see what you are doing, they will be able determine that you are using a mix net,\n\u003e to hide this - a VPN could be used as well.\n\u003e If you are doing anything which could put you at risk, then good OpSec is essential,\n\u003e as the authorities have traced criminals through the Tor network before,\n\u003e and [made arrests](https://techcrunch.com/2019/05/03/how-german-and-us-authorities-took-down-the-owners-of-darknet-drug-emporium-wall-street-market).\n\u003e Don't let Tor provide you a false sense of security - be aware of information leaks through DNS, other programs or human error.\n\u003e Tor-supported browsers may might lag behind their upstream forks, and include exploitable unpatched issues.\n\u003e See [#19](https://github.com/Lissy93/personal-security-checklist/issues/19)\n\u003e\n\u003e Note: The Tor network is run by the community.\n\u003e If you benefit from using it and would like to help sustain uncensored internet access for all,\n\u003e consider [running a Tor relay](https://trac.torproject.org/projects/tor/wiki/TorRelayGuide)\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [GNUnet](https://gnunet.org/en)\n\u003e - [IPFS](https://ipfs.io)\n\u003e - [ZeroNet](https://zeronet.io)\n\u003e - [Panoramix](https://panoramix-project.eu)\n\u003e - [Nym](https://nymtech.net)\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eℹ️ \u003cb\u003eFurther Info\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Tor, I2P and Freenet are all anonymity networks - but they work very differently and each is good for specific purposes.\nSo a good and viable solution would be to use all of them, for different tasks.\n*You can read more about how I2P compares to Tor, [here](https://blokt.com/guides/what-is-i2p-vs-tor-browser)*\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### Proxies\n\nA proxy acts as a gateway between you and the internet, it can be used to\nact as a firewall or web filter, improves privacy and can also be used to\nprovide shared network connections and cache data to speed up common requests.\n**Never use a [free](https://whatismyipaddress.com/free-proxies) proxy.**\n\n- **[\u003cimg src='https://avatars.githubusercontent.com/u/3006190' width='14' alt='' /\u003e ShadowSocks](https://shadowsocks.org)** - Secure socks5 proxy, designed to protect your Internet traffic. Open source, superfast, cross-platform and easy to deploy, see [GitHub repo](https://github.com/shadowsocks). \n- **[\u003cimg src='https://www.privoxy.org/images/privoxy.png' width='14' alt='' /\u003e Privoxy](https://www.privoxy.org)** - Non-caching web proxy with advanced filtering capabilities for enhancing privacy, modifying web page data and HTTP headers, controlling access, and removing ads and other obnoxious Internet junk. \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e [Malicious Proxies](https://www.defcon.org/images/defcon-17/dc-17-presentations/defcon-17-edward_zaborowski-doppelganger.pdf) are all too common.\n\u003e Always use open source software, host it yourself or pay for a reputable cloud service.\n\u003e Never use a free proxy; it can monitor your connection, steal cookies and contain malware.\n\u003e VPNs are a better option, better still - use the Tor network.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e [V2ray-core](https://github.com/v2ray/v2ray-core) is a platform for building\n\u003e proxies to bypass network restrictions and protect your privacy.\n\u003e See [more](https://github.com/hugetiny/awesome-vpn)\n\u003e [TransparentTorProxy](https://github.com/onyks-os/TransparentTorProxy) is a Linux CLI\n\u003e utility that transparently routes all system traffic through the Tor network.\n\u003e \u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### DNS Providers\n\nWithout using a secure, privacy-centric DNS all your web requests can be\nseen in the clear. You should configure your DNS queries to be managed by\na service that respects privacy and supports DNS-over-TLS, DNS-over-HTTPS or DNSCrypt.\n\n- **[\u003cimg src='https://developers.cloudflare.com/assets/icon-512x512-fe4c8fe4.png' width='14' alt='' /\u003e CloudFlare](https://developers.cloudflare.com/1.1.1.1/setting-up-1.1.1.1)** - One of the most performant options, Cloudflare's DNS supports DoH and DoT, and has a Tor implementation, providing world-class protection. They have native cross-platform apps, for easy set-up. \n- **[\u003cimg src='https://cdn.adguard.info/website/adguard-dns.io/favicon.svg' width='14' alt='' /\u003e AdGuard](https://adguard.com/en/adguard-dns/overview.html)** - Open-source DNS provider, specialising in the blocking of ads, trackers and malicious domains. They have been independently audited and do not keep logs. \n- **[\u003cimg src='https://nextdns.io/favicon.ico' width='14' alt='' /\u003e NextDNS](https://nextdns.io)** - An ad-blocking, privacy-protecting, censorship-bypassing DNS. Also comes with analytics, and the ability to shield kids from adult content. \n\n\u003cdetails\u003e\n\u003csummary\u003e⚠️ \u003cb\u003eWord of Warning\u003c/b\u003e\u003c/summary\u003e\n\n\u003e Using an encrypted DNS resolver will not make you anonymous, it just makes\n\u003e it harder for third-partied to discover your domain history.\n\u003e If you are using a VPN, take a [DNS leak test](https://www.dnsleaktest.com/),\n\u003e to ensure that some requests are not being exposed.\n\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e✳️ \u003cb\u003eNotable Mentions\u003c/b\u003e\u003c/summary\u003e\n\n\u003e - [Quad9](https://www.quad9.net) - A well-funded, performant DNS with a strong focus on privacy and security and easy set-up, however questions have been raised about the motivation of some of the financial backers.\n\u003e - [BlahDNS](https://blahdns.com) - (Japan, Finland or Germany) is an excellent security-focused DNS\u003e - [OpenNIC](https://www.opennic.org/) - [NixNet DNS](https://nixnet.services/dns) and [UncensoredDNS](https://blog.uncensoreddns.org) are open source and democratic, privacy-focused DNS\n\u003e - [Unbound](https://nlnetlabs.nl/projects/unbound/about) - A validating, recursive, caching DNS resolver, designed to be fast and lean. Incorporates modern features and based on open standards\n\u003e - [Clean Browsing](https://cleanbrowsing.org) - A good option for protecting kids, they offer comprehensive DNS-based Content Filtering\n\u003e - [Mullvad](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) - Mullvads public DNS with QNAME minimization and basic ad blocking. It has been audited by the security experts at Assured. You can use this privacy-enhancing service even if you don't use Mullvad.\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003eℹ️ \u003cb\u003eFurther Info\u003c/b\u003e\u003c/summary\u003e\n\n\u003e #### DNS Protocols\n\nDNS-over-TLS was proposed in [RTC-7858](https://tools.ietf.org/html/rfc7858)\nby the IETF, then 2 years later, the DNS-over-HTTPS specification was outlined\nin [RFC8484](https://tools.ietf.org/html/rfc8484) in October '18.\n[DNSCrypt](https://dnscrypt.info/), is a protocol that authenticates communications\nbetween a DNS client and a DNS resolver. It prevents DNS spoofing, through\nusing cryptographic signatures to verify that responses originate from the\nchosen DNS resolver, and haven't been tampered with. DNSCrypt is a well\nbattle-tested protocol, that has been in use since 2013, and is still widely used.\n\u003c/details\u003e\n\n\u003cp align=\"right\"\u003e\u003csup\u003e\u003ca href=\"#top\"\u003e⬆️ [Back to Top]\u003c/a\u003e\u003c/sub\u003e\u003c/p\u003e\n\n---\n\n### DNS Clients\n\n- **[\u003cimg src='https://dnscrypt.info/favicon.ico' width='14' alt='' /\u003e DNScrypt-proxy 2](https://dnscrypt.info)** - A flexible DNS proxy, with support for modern encrypted DNS protocols including DNSCrypt V2, DNS-over-HTTPS and Anonymized DNSCrypt. Also allows for advanced monitoring, filtering, caching and client[…](https://awesome-privacy.xyz/networking/dns-clients/dnscrypt-p","projects_url":"https://awesome.ecosyste.ms/api/v1/lists/lissy93%2Fawesome-privacy/projects"}