Skip to content
All Privacy Tools

All Privacy Tools

If you’re looking for a specific solution to something, these are the hardware and software tools we recommend in a variety of categories. Our recommended privacy tools are primarily chosen based on security features, with additional emphasis on decentralized and open-source tools. They are applicable to a variety of threat models ranging from protection against global mass surveillance programs and avoiding big tech companies to mitigating attacks, but only you can determine what will work best for your needs.

Service Providers

Calendar Sync

Cloud Storage

Data Removal Services

DNS

DNS Providers

We recommend a number of encrypted DNS servers based on a variety of criteria, such as Mullvad and Quad9 amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended.

Encrypted DNS and filtering clients

Email Aliasing Services

Email Providers

Financial Services

Payment Masking Services

Online Gift Card Marketplaces

Instant Messengers

Photo Backups

Password Managers

Note

For local or self-hosted password managers, see our Password Managers (Local) section below.

Search Engines

VPN Providers

Software

AI Chat

Browser Extensions

Cryptocurrency

Data and Metadata Redaction

Desktop Browsers

Document Collaboration

Email Clients

Encryption Software

Operating System Encryption

Tip

For encrypting your OS drive, we typically recommend using the encryption tool your operating system provides, whether that is BitLocker on Windows, FileVault on macOS, or LUKS on Linux. These tools are included with the operating system and take advantage of hardware encryption elements such as a secure cryptoprocessor.

Recommended tools

Cryptomator
Cryptomator
Cryptomator is an encryption solution designed for privately saving files to any cloud Service Provider, eliminating the need to trust that they won’t access your files. It allows you to create vaults that are stored on a virtual drive, the contents of which are encrypted and synced with your cloud storage provider.
VeraCrypt
VeraCrypt
VeraCrypt is a source-available freeware utility used for on-the-fly encryption. It can create a virtual encrypted disk within a file, encrypt a partition, or encrypt the entire storage device with pre-boot authentication.
BitLocker
BitLocker
BitLocker is the full volume encryption solution bundled with Microsoft Windows that uses the Trusted Platform Module (TPM) for hardware-based security.
FileVault
FileVault
FileVault is the on-the-fly volume encryption solution built into macOS. FileVault takes advantage of the hardware security capabilities present on an Apple Silicon SoC or T2 Security Chip.
LUKS
LUKS
LUKS is the default FDE method for Linux. It can be used to encrypt full volumes, partitions, or create encrypted containers.
Kryptor
Kryptor
Kryptor is a free and open-source file encryption and signing tool that makes use of modern and secure cryptographic algorithms. It aims to be a better version of age and Minisign to provide a simple, easier alternative to GPG.
Tomb
Tomb
Tomb is a command-line shell wrapper for LUKS. It supports steganography via third-party tools.
GnuPG
GnuPG
GnuPG is a GPL-licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF specification of OpenPGP.
GPG4win
GPG4win
GPG4win is a package for Windows from Intevation and g10 Code. It includes various tools that can assist you in using GPG on Microsoft Windows.
GPG Suite
GPG Suite
GPG Suite provides OpenPGP support for Apple Mail and other email clients on macOS.
OpenKeychain
OpenKeychain
OpenKeychain is an implementation of GnuPG for Android. It’s commonly required by mail clients such as Thunderbird, FairEmail, and other Android apps to provide encryption support.

File Sharing and Sync

Frontends

Health and Wellness Apps

Language Tools

Maps and Navigation Apps

Multi-Factor Authentication Tools

Note

Hardware security keys have been moved to their own category.

Mobile Browsers

News Aggregators

Notebooks

Office Suites

Password Managers (Local)

Pastebins

Tor Browser

Hardware

Security Keys

Mobile Phones

Operating Systems

Mobile

Custom Android Operating Systems

Android Apps

Ways to Obtain Android Apps

Desktop/PC

Fedora Linux
Fedora Linux
Fedora Linux is our recommended desktop distribution for people new to Linux. Fedora generally adopts newer technologies (e.g., Wayland and PipeWire) before other distributions. These new technologies often come with improvements in security, privacy, and usability in general.
openSUSE Tumbleweed
openSUSE Tumbleweed
openSUSE Tumbleweed is a stable rolling release distribution. openSUSE Tumbleweed uses Btrfs and Snapper to ensure that snapshots can be rolled back should there be a problem.
Arch Linux
Arch Linux
Arch Linux is a lightweight, do-it-yourself (DIY) distribution, meaning that you only get what you install. For more information see their FAQ.
Fedora Atomic Desktops
Fedora Atomic Desktops
Fedora Atomic Desktops are variants of Fedora which use the rpm-ostree package manager and have a strong focus on containerized workflows and Flatpak for desktop applications. All of these variants follow the same release schedule as Fedora Workstation, benefiting from the same fast updates and staying very close to upstream.
NixOS
NixOS
NixOS is an independent distribution based on the Nix package manager with a focus on reproducibility and reliability.
Whonix
Whonix
Whonix is based on Kicksecure, a security-focused fork of Debian. It aims to provide privacy, security, and anonymity on the internet. Whonix is best used in conjunction with Qubes OS.
Tails
Tails
Tails is a live operating system based on Debian that routes all communications through Tor, which can boot on on almost any computer from a DVD, USB stick, or SD card installation. It uses Tor to preserve privacy and anonymity while circumventing censorship, and it leaves no trace of itself on the computer it is used on after it is powered off.
Qubes OS
Qubes OS
Qubes OS is an open-source operating system designed to provide strong security for desktop computing through secure virtual machines (or “qubes”). Qubes is based on Xen, the X Window System, and Linux. It can run most Linux applications and use most of the Linux drivers.
Secureblue
Secureblue
Secureblue is a security-focused operating system based on Fedora Atomic Desktops. It includes a number of security features intended to proactively defend against the exploitation of both known and unknown vulnerabilities, and ships with Trivalent, their hardened, Chromium-based web browser.
Kicksecure
Kicksecure
Kicksecure—in oversimplified terms—is a set of scripts, configurations, and packages that substantially reduce the attack surface of Debian. It covers a lot of privacy and hardening recommendations by default. It also serves as the base OS for Whonix.

Router Firmware

Advanced

Alternative Networks

Device Integrity Verification

Self-Hosting

DNS Filtering

Email Servers

File Management

Password Sync

Social Networks

Last updated on