19 KiB
| title | icon | hide | |
|---|---|---|---|
| Privacy Tools | material/tools |
|
If you're looking for a specific solution to something, these are the hardware and software tools we recommend in a variety of categories. Our recommended privacy tools are primarily chosen based on security features, with additional emphasis on decentralized and open-source tools. They are applicable to a variety of threat models ranging from protection against global mass surveillance programs and avoiding big tech companies to mitigating attacks, but only you can determine what will work best for your use case.
If you want assistance figuring out the best privacy tools and alternative programs for your workload/use-case, start a discussion in our Reddit or Matrix communities!
For your convenience, everything we recommend is listed below with a link to the project's homepage. For more details about each project, why they were chosen, and additional tips or tricks we recommend, click the "Learn more" link in each section.
Web Browsers
{ .twemoji } Tor Browser
{ .twemoji } Firefox (Desktop)
{ .twemoji } Bromite (Android)
{ .twemoji } Safari (iOS)
Browser extensions:
{ .twemoji } uBlock Origin
{ .twemoji } AdGuard for Safari
{ .twemoji } Terms of Service; Didn't Read*
* We do not recommend installing ToS;DR as a browser extension. The same information is provided on their website.
Operating Systems
Android
{ .twemoji }
{ .twemoji } GrapheneOS
{ .twemoji } CalyxOS
{ .twemoji } DivestOS
Android Apps:
{ .twemoji } Droid-ify (F-Droid Client)
{ .twemoji } Orbot (Tor Proxy)
{ .twemoji } Shelter (Work Profiles)
{ .twemoji }
{ .twemoji } Auditor (Supported Devices)
{ .twemoji }
{ .twemoji } GrapheneOS
{ .twemoji }
{ .twemoji } Secure PDF Viewer
{ .twemoji } PrivacyBlur
Linux
{ .twemoji } Fedora Workstation
{ .twemoji } OpenSUSE Tumbleweed
{ .twemoji } Arch Linux
{ .twemoji } Fedora Silverblue & Kinoite
{ .twemoji } NixOS
{ .twemoji } Whonix (Tor)
{ .twemoji } Tails (Live Boot)
{ .twemoji } Qubes OS (Xen VM Distribution)*
* Qubes uses Xen to provide strong sandboxing between multiple Linux virtual machine installations, and can run most Linux applications. Learn more about Qubes...
Router Firmware
Service Providers
Cloud Storage
{ .twemoji } Nextcloud (Self-Hostable)
{ .twemoji } Proton Drive
{ .twemoji }
{ .twemoji } Cryptee
{ .twemoji }
{ .twemoji } Tahoe-LAFS (Advanced)
DNS
We recommend a number of encrypted DNS servers based on a variety of criteria. Some no-logging choices include MullvadDNS and Quad9, but we recommend you read our full page on DNS before choosing a provider. In many cases using an alternative DNS provider is not recommended. Learn more...
Search Engines
{ .twemoji } DuckDuckGo
{ .twemoji } Startpage- Mojeek
{ .twemoji } Searx
Social Media
News Aggregators:
VPN Providers
??? danger "VPNs do not provide anonymity"
Using a VPN will **not** keep your browsing habits anonymous, nor will it add additional security to non-secure (HTTP) traffic.
If you are looking for **anonymity**, you should use the Tor Browser **instead** of a VPN.
If you're looking for added **security**, you should always ensure you're connecting to websites using [HTTPS](https://en.wikipedia.org/wiki/HTTPS). A VPN is not a replacement for good security practices.
[Learn more](vpn.md)
Software
Calendar/Contacts Sync
{ .twemoji } Tutanota (SaaS)
{ .twemoji } Proton Calendar (SaaS)
{ .twemoji } EteSync
{ .twemoji } Nextcloud- DecSync
Notebooks
{ .twemoji } Joplin
{ .twemoji } Standard Notes
Email Clients
{ .twemoji } Thunderbird
{ .twemoji } GNOME Evolution (Linux)
{ .twemoji } Kontact (Linux)
{ .twemoji } Mailvelope (PGP in standard webmail)
{ .twemoji } K-9 Mail (Android)
{ .twemoji } FairEmail (Android)
{ .twemoji } Canary Mail (iOS)
{ .twemoji } NeoMutt (CLI)
Encryption Tools
??? info "Operating System Disk Encryption"
For encrypting your operating system drive, we typically recommend using whichever encryption tool your operating system provides, whether that is **BitLocker** on Windows, **FileVault** on macOS, or **LUKS** on Linux. These tools are available out of the box and typically utilize hardware encryption elements such as a TPM that other full-disk encryption software like VeraCrypt will not. VeraCrypt is still suitable for non-operating system disks such as external drives, especially drives that may be accessed from multiple operating systems.
[Learn more](encryption.md##operating-system-included-full-disk-encryption-fde)
{ .twemoji }
{ .twemoji } VeraCrypt (FDE)
{ .twemoji } Cryptomator
{ .twemoji } Picocrypt
{ .twemoji }
{ .twemoji } Hat.sh (Browser-based)
{ .twemoji } Kryptor
{ .twemoji } Tomb
OpenPGP Clients:
{ .twemoji } GnuPG
{ .twemoji } GPG4Win (Windows)
{ .twemoji } GPG Suite (macOS)
{ .twemoji } OpenKeychain
File Sharing
{ .twemoji } Onionshare
{ .twemoji } Magic Wormhole
{ .twemoji } croc
{ .twemoji } FreedomBox
{ .twemoji } Syncthing
{ .twemoji } git-annex
Metadata Removal Tools
{ .twemoji } MAT2
{ .twemoji } ExifCleaner
{ .twemoji } Scrambled Exif (Android)
{ .twemoji } Imagepipe (Android)
{ .twemoji } Metapho (iOS)
{ .twemoji } Exiftool (CLI)
Password Managers
{ .twemoji } KeepassXC
{ .twemoji } KeepassDX (Android)
{ .twemoji } Bitwarden
{ .twemoji } Psono
{ .twemoji } pass
{ .twemoji } gopass
{ .twemoji }
{ .twemoji } VaultWarden (Bitwarden Server)
Productivity Tools
{ .twemoji } LibreOffice
{ .twemoji } OnlyOffice
{ .twemoji } Framadate (Appointment Planning)
{ .twemoji } PrivateBin (Pastebin)
{ .twemoji } CryptPad
{ .twemoji }
{ .twemoji } Write.as (Blogging Platform)
{ .twemoji } VSCodium (Source-Code Editor)
Real-Time Communication
{ .twemoji } Signal
{ .twemoji } Element
{ .twemoji } Briar (Android)
{ .twemoji } Session
Self-Contained Networks
Video Streaming Clients
{ .twemoji } FreeTube (YouTube, Desktop)
{ .twemoji } LBRY
{ .twemoji } NewPipe (YouTube, Android)- { .twemoji } NewPipe x Sponsorblock
{ .twemoji }
{ .twemoji } Invidious (YouTube, Web)
{ .twemoji } Piped (YouTube, Web)