Resources
Outside tools, guides and organizations we think are worth your time. Links are checked by hand and added over time. We don't take money for listings.
Free to use (a free tier counts) Paid
Anonymity & Tor
| Resource | What it is | Free |
|---|---|---|
| OnionShare | Open-source tool for sharing files, hosting a simple website, or receiving files through Tor. It can avoid uploading a file to a conventional third-party file-hosting service. | Free |
| Tails | A live operating system you run from a USB stick. Routes everything through Tor and leaves nothing on the computer. | Free |
| Tor Bridges | Get bridge addresses to reach Tor where it is blocked or heavily monitored. | Free |
| Tor Browser | Routes browsing traffic through the Tor network to reduce linkability between you and the sites you visit. It is useful where anonymity matters, but users should avoid installing extra extensions or changing browser settings unnecessarily. | Free |
| Tor Project | The Tor Project: the anonymity network and the free Tor Browser. Start here for anonymous browsing. | Free |
| Whonix | Tor-routed desktop OS designed to run in virtual machines, so a compromised app can't reveal your real IP address. | Free |
Browsers & search
| Resource | What it is | Free |
|---|---|---|
| Brave | Chromium-based browser with tracker and ad blocking enabled by default. It can be a convenient privacy upgrade for people who prefer Chrome-like browser compatibility. | Free |
| DuckDuckGo | Search engine that does not build a personal search profile in the conventional advertising-model sense. It also provides a privacy-oriented browser and browser extensions. | Free |
| Firefox | Open-source browser with strong privacy controls, tracker blocking options, and support for privacy extensions. For better protection, review telemetry and search settings after installation. | Free |
| LibreWolf | Hardened Firefox build with privacy and security settings on by default. | Free |
| Mullvad Browser | Privacy-focused browser built with the Tor Project to resist fingerprinting without using Tor. | Free |
| Privacy Badger | EFF browser extension that learns to block invisible trackers. | Free |
| Startpage | Privacy-focused search service that provides Google-derived results while aiming not to associate search activity with an individual user profile. | Free |
| uBlock Origin | Free, open-source content blocker for ads and trackers. Install from your browser's official add-on store. | Free |
Cameras & smart home
| Resource | What it is | Free |
|---|---|---|
| Atlas of Surveillance | EFF database of surveillance technology used by U.S. law enforcement, searchable by place. | Free |
| DeFlock | Crowd-sourced map of Flock license plate readers and other automated surveillance cameras. | Free |
| Frigate | Local-only network video recorder for security cameras, so your footage stays in your house. | Free |
| Home Assistant | Local-first smart home control that doesn't depend on a vendor's cloud. | Free |
| Mozilla *Privacy Not Included | Mozilla's privacy reviews of smart devices, apps and connected products. | Free |
Cloud & storage
| Resource | What it is | Free |
|---|---|---|
| Cryptomator | Free, open-source tool that encrypts files locally before they are uploaded to cloud providers such as Dropbox, Google Drive, or OneDrive. It is useful if you want to keep your existing cloud provider but reduce its ability to read stored files. | Free |
| Ente Photos | End-to-end encrypted photo storage as an alternative to Google or Apple photos. | Free |
| Filen | Zero-knowledge encrypted cloud storage, open-source apps. | Free |
| Nextcloud | Self-hosted file sync and collaboration, for people who want to hold their own data. | Free |
| Proton Drive | Cloud storage with end-to-end encryption for files. It fits well with Proton Mail users who want encrypted file storage and sharing under the same account. | Free |
| Tresorit | End-to-end encrypted cloud storage and secure file-sharing service, aimed at both personal and business use. | Paid |
Crypto & payments
| Resource | What it is | Free |
|---|---|---|
| Monero | Privacy-focused cryptocurrency that hides sender, receiver and amounts by default. | Free |
| Privacy.com | Virtual debit cards for U.S. users, so merchants never see your real card number. | Free |
| Sparrow Wallet | Bitcoin wallet with strong privacy features and hardware wallet support. | Free |
| Wallet Explorer | Shows how Bitcoin addresses cluster together, which is a good look at how traceable Bitcoin is. | Free |
Data brokers & scams
| Resource | What it is | Free |
|---|---|---|
| AnnualCreditReport.com | The only official source for your free credit reports (U.S.). | Free |
| Big-Ass Data Broker Opt-Out List | Community-maintained checklist with direct opt-out links for major data brokers. | Free |
| FBI IC3 | Report internet crime and fraud to the FBI's Internet Crime Complaint Center. | Free |
| FTC ReportFraud | Report scams and fraud to the U.S. Federal Trade Commission. | Free |
| IdentityTheft.gov | FTC's step-by-step recovery plan if your identity has been stolen (U.S.). | Free |
| IRS Identity Protection PIN | Get a PIN that stops anyone else filing a tax return in your name (U.S.). | Free |
| National Do Not Call Registry | Reduce telemarketing calls (U.S.). Scammers ignore it, but legitimate callers must respect it. | Free |
| Optery | Service that scans people-search and data-broker sites for exposed personal information and can assist with removal requests. Coverage and automation vary by plan and country. | Paid |
| OptOutPrescreen.com | Opt out of prescreened credit and insurance offers (U.S.), which stops that mail and data sharing. | Free |
| Privacy Rights Clearinghouse: Data Brokers | Explains data brokers and how to opt out of them. | Free |
| StopNCII | Free tool that helps stop intimate images being shared online, without uploading the images. | Free |
| ToS;DR | Plain-language ratings of websites' terms of service and privacy policies. | Free |
Deepfakes & verification
| Resource | What it is | Free |
|---|---|---|
| Content Credentials Verify | Check the provenance information attached to images and video, where a creator has included it. | Free |
| FotoForensics | Error-level analysis and metadata tools to help spot edited images. | Free |
| TinEye | Reverse image search to find where a picture first appeared and whether it has been altered. | Free |
Email & aliases
| Resource | What it is | Free |
|---|---|---|
| addy.io | Open-source email alias and forwarding service, another way to keep your real address private. | Free |
| Firefox Relay | Mozilla's email masking service, so signups never see your real address. | Free |
| Mailbox.org | Privacy-focused paid email provider based in Germany. Supports encrypted email workflows, custom domains, calendar, cloud storage, and office features. | Paid |
| Mailfence | Belgian encrypted email that supports OpenPGP and standard mail apps. | Free |
| Mozilla Monitor | Free breach alerts for your email addresses, from Mozilla. | Free |
| Posteo | German privacy-focused paid email provider emphasizing minimal data collection, no advertising, and anonymous payment options. Best suited to users who want a straightforward, low-data email account. | Paid |
| Proton Mail | Privacy-oriented email with end-to-end encryption between Proton users and zero-access encryption for stored mailbox content. It also offers encrypted contacts, calendar, storage, aliases, and a Tor onion service. Email sent to ordinary non-encrypted addresses still has the usual email-protocol limitations. | Free |
| SimpleLogin | Email alias service (owned by Proton). Give each site a different address that forwards to your real inbox. | Free |
| Thunderbird | Free, open-source email app from Mozilla with built-in OpenPGP support. | Free |
| Tuta Mail | Encrypted email, contacts, and calendar service designed around privacy by default. Tuta says its mailbox encryption is end-to-end and post-quantum capable; emails between Tuta users are automatically encrypted, while messages to external recipients can use password-protected encrypted mail. | Free |
Encryption & files
| Resource | What it is | Free |
|---|---|---|
| age | A small, modern file-encryption tool that is simpler to use than PGP. | Free |
| BitLocker | Built-in full-disk encryption for many Windows editions. It protects data on a lost or stolen computer, especially when paired with a TPM and a strong account password. | Free |
| ExifCleaner | Free desktop app that strips location, camera and other hidden metadata from photos and documents. | Free |
| ExifTool | Command-line utility for reading and removing metadata from images, PDFs, video, and other files. This is useful before sharing photos or documents that may reveal device, location, author, or editing history. | Free |
| FileVault | Apple’s built-in full-disk encryption for Macs. It encrypts the startup disk so files are inaccessible without an authorized login or recovery key. | Free |
| GnuPG | The standard free implementation of OpenPGP for encrypting email and files. | Free |
| Gpg4win | GnuPG for Windows, including the Kleopatra key manager. | Free |
| VeraCrypt | Free, open-source encryption software for Windows, macOS, and Linux. It can create encrypted containers for sensitive files, encrypt partitions, and encrypt an entire system drive. Its documentation includes a beginner guide for creating and mounting encrypted volumes. | Free |
Guides & training
| Resource | What it is | Free |
|---|---|---|
| Consumer Reports Security Planner | Answer a few questions and get a personalized list of security steps. | Free |
| Data Detox Kit | Tactical Tech's plain-language guide to cleaning up your digital life. | Free |
| Digital First Aid Kit | Step-by-step help if you think a device or account has been compromised. | Free |
| EFF Surveillance Self-Defense | The classic step-by-step digital security guide for everyone, including activists and journalists. | Free |
| Privacy Guides | Community-maintained recommendations and guides for privacy-respecting software, browsers, operating systems, email, VPNs, and threat modeling. | Free |
| Security in a Box | Digital security tools and tactics from Tactical Tech and Front Line Defenders, in many languages. | Free |
Journalists & activists at risk
| Resource | What it is | Free |
|---|---|---|
| Access Now Digital Security Helpline | Free, 24/7 emergency help for civil society and journalists facing digital threats. | Free |
| Amnesty Security Lab | Amnesty International's technical team investigating spyware and digital attacks on activists. | Free |
| Article 19 | Human rights organization defending freedom of expression and information worldwide. | Free |
| Bellingcat Online Investigation Toolkit | Bellingcat's curated tools for verification and open-source investigation. | Free |
| Citizen Lab | University of Toronto research group that investigates spyware, censorship and targeted surveillance. | Free |
| CPJ Digital Safety Kit | Committee to Protect Journalists' safety resources for reporters, including assessments and travel guidance. | Free |
| Digital Defenders Partnership | Emergency support and funding for human rights defenders under digital threat. | Free |
| Freedom of the Press Foundation: Digital Security | Guides and training for journalists and newsrooms on protecting sources and communications. | Free |
| Front Line Defenders | Protection and digital security support for human rights defenders at risk. | Free |
| Global Investigative Journalism Network | Guides for investigative reporters, including digital security and safety resources. | Free |
| GlobaLeaks | Open-source whistleblowing platform for media and organizations. | Free |
| SecureDrop | Open-source whistleblower submission system used by newsrooms to receive tips securely. | Free |
| WeVerify / InVID Verification Plugin | Browser extension used by journalists to verify images, video and possible deepfakes. | Free |
Law & policy
| Resource | What it is | Free |
|---|---|---|
| Center for Democracy & Technology | Nonprofit working on privacy, free expression and civil liberties policy. | Free |
| DLA Piper Data Protection Laws of the World | Country-by-country summary of data protection and retention law for more than 160 jurisdictions. | Free |
| Electronic Frontier Foundation | Nonprofit resource for digital civil liberties, encryption, surveillance, online privacy, and practical security guidance. Its Surveillance Self-Defense materials are especially useful for learning safer habits. | Free |
| EPIC | Electronic Privacy Information Center: research and litigation on privacy law. | Free |
| Freedom on the Net | Freedom House's yearly ranking of internet freedom and surveillance by country. | Free |
| Privacy International | Charity tracking government surveillance law and practice around the world. | Free |
| Reporters Committee for Freedom of the Press | Free legal help and guides for journalists, including recording, sources and subpoenas. | Free |
Passwords
| Resource | What it is | Free |
|---|---|---|
| 1Password | Polished commercial password manager for individuals, families, and teams. Stores passwords, passkeys, recovery codes, payment cards, and secure notes in encrypted vaults. | Paid |
| 2FAS | Free authenticator app for TOTP-based two-factor authentication on mobile devices. It can help protect accounts even if a password is exposed. | Free |
| Aegis Authenticator | Open-source Android app for time-based one-time passwords (TOTP). Useful for replacing SMS verification with app-based two-factor authentication and for making encrypted backups of your 2FA entries. | Free |
| Bitwarden | Open-source password manager for generating, storing, and autofilling unique passwords. It supports encrypted vaults, passkeys, two-factor authentication, secure sharing, and cross-device synchronization. | Free |
| EFF Dice-Generated Passphrases | How to make a strong, memorable passphrase using dice and a wordlist. | Free |
| Ente Auth | Open-source two-factor authenticator app with encrypted backups. | Free |
| Have I Been Pwned | Lets you check whether an email address or phone number appears in known data breaches. If it does, change affected passwords, enable two-factor authentication, and watch for phishing attempts. | Free |
| Have I Been Pwned: Pwned Passwords | Check whether a password has appeared in known breaches. Never reuse one that has. | Free |
| KeePassXC | Free, open-source local password manager. Your password database stays in an encrypted file you control; syncing it between devices is optional and can be done through a service of your choice. | Free |
| Nitrokey | Open-source hardware security keys made in Germany. | Paid |
| YubiKey | Physical hardware keys for phishing-resistant login protection. They support standards such as FIDO2/WebAuthn and are particularly valuable for email, password-manager, financial, and administrator accounts. | Paid |
Phones & operating systems
| Resource | What it is | Free |
|---|---|---|
| /e/OS | De-Googled Android with a simpler setup than most alternatives. | Free |
| Apple Lockdown Mode | Apple's extreme protection mode for people who may be targeted by sophisticated attacks. | Free |
| Exodus Privacy | Look up which trackers and permissions any Android app contains. | Free |
| F-Droid | Catalog of free, open-source Android apps, with no tracking. | Free |
| GrapheneOS | Hardened, open-source Android for Google Pixel phones. Among the strongest privacy phones available. | Free |
| Guardian Project | Secure and private mobile apps and tools, including Orbot and Proof Mode. | Free |
| LineageOS | Long-running open-source Android distribution for many devices. | Free |
| Orbot | Routes Android and iOS app traffic through Tor. | Free |
| Qubes OS | Desktop OS that isolates everything you do in separate virtual machines. For high-risk users. | Free |
Secure messaging
| Resource | What it is | Free |
|---|---|---|
| Briar | Peer-to-peer encrypted messaging that works over Bluetooth, Wi-Fi or Tor, even when the internet is down. | Free |
| Element (Matrix) | Encrypted chat on the open Matrix network. Can be self-hosted by groups. | Free |
| Session | Encrypted messenger that needs no phone number or email and routes messages through an onion network. | Free |
| Signal | End-to-end encrypted messaging and calling app. Supports private one-to-one and group chats, voice/video calls, disappearing messages, and encrypted media sharing. | Free |
| SimpleX Chat | Privacy-focused messenger designed to avoid persistent user identifiers such as phone numbers and user IDs. It is useful for people who want to minimize account-based identity linkage. | Free |
| Threema | Paid encrypted messenger that can be used without a phone number. It is popular with users seeking a more account-minimizing alternative to mainstream messengers. | Paid |
Test your setup
| Resource | What it is | Free |
|---|---|---|
| Am I Unique? | Research project showing how unique your browser fingerprint is. | Free |
| Blacklight | The Markup's scanner shows the trackers and fingerprinting on any website. | Free |
| BrowserLeaks | Detailed tests of what your browser reveals: IP, WebRTC, fonts, canvas and more. | Free |
| Cover Your Tracks | EFF test showing how trackable your browser is through fingerprinting. | Free |
| DNS Leak Test | Check whether your DNS requests are leaking outside your VPN. | Free |
| IPLeak.net | Shows your visible IP address, DNS servers and WebRTC leaks in one page. | Free |
| Tor Check | Confirms whether your browser is actually connected through Tor. | Free |
VPNs & DNS
| Resource | What it is | Free |
|---|---|---|
| IVPN | Independently audited, no-logs VPN with an emphasis on privacy and transparency. | Paid |
| Mullvad VPN | Privacy-oriented VPN service known for minimizing account information; it allows account numbers rather than requiring an email address. A VPN protects traffic between your device and the VPN provider, but it does not make all online activity anonymous. | Paid |
| NextDNS | Configurable encrypted DNS with tracker and ad blocking, free tier available. | Free |
| OpenWrt | Open-source router firmware that gives you control over your home network. | Free |
| Pi-hole | Network-wide ad and tracker blocking for your whole home. | Free |
| Proton VPN | VPN service from Proton with apps for major platforms, a free tier, paid plans, and privacy-focused features. It is convenient for users already using Proton Mail or other Proton services. | Free |
| Quad9 | Nonprofit encrypted DNS resolver that blocks known malicious domains. | Free |
| WireGuard | The modern VPN protocol used by most good VPN services. Also useful for your own home VPN. | Free |