From 55460d4d26b1c6a9c18ed467ca0dee27b26403a9 Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Mon, 3 Aug 2026 08:35:43 -0500 Subject: [PATCH 01/22] Update "Foundations & Organizations" donors (#3258) --- docs/about/donate.md | 8 +++++--- theme/assets/img/donors/cape.webp | Bin 0 -> 1928 bytes 2 files changed, 5 insertions(+), 3 deletions(-) create mode 100644 theme/assets/img/donors/cape.webp diff --git a/docs/about/donate.md b/docs/about/donate.md index 26495781..2add1a83 100644 --- a/docs/about/donate.md +++ b/docs/about/donate.md @@ -28,11 +28,13 @@ MAGIC Grants is our fiscal host, and their custom, open-source donation platform
- [![Power Up Privacy]](https://powerupprivacy.com){ rel=nofollow target=_blank title="Power Up Privacy" } - [![DeleteMe]](https://joindeleteme.com){ rel=nofollow target=_blank title="DeleteMe" } + [![Power Up Privacy]](https://powerupprivacy.com){ target=_blank title="Power Up Privacy" } + [![DeleteMe]](https://joindeleteme.com){ target=_blank title="DeleteMe" } + [![Cape]](https://www.cape.co){ target=_blank title="Cape" } [Power Up Privacy]: ../assets/img/donors/power-up-privacy.webp [DeleteMe]: ../assets/img/donors/deleteme.webp + [Cape]: ../assets/img/donors/cape.webp
@@ -83,7 +85,7 @@ You can become an organizational member by reaching out to ^) zx_fNfHfwC#wry*@W7~GMyPiL)DkJiVn5fC!eZ3~4{}X^e{r}VdKmGsD&5w7^?^>__ z=99O+8W}OihZJ%Ly1o_Wy)Y*JuI~-xO(nJ&4}V6QK+H-vjfL1wAg=pxtAX&M1PI+G z!7%teH3;4y&LDV_0)%g93`7?K39c~&T7wJ&o*Dp0L5`ISfKrlxQ(COw=vxx?Nc^VR z!j|xjza^1gyoF$t!W;)#*41(i1at|`ULw+bDu&A$(40ln*;(DIXLAP~U6N)m9x?o= zg~F%3{c9A>5?}&~ZYe^ljy`Ttk#f>-eJqwkuk!Pwbc)n)usBe4FFxUeKCea=bOrK0 zU2Z7HbCBmiDF8rYF#9!S60iVBEF8hM;UXRq_cMd^Mk?KOWQW~a604m4xsgHqeM(+| za9VPGGANiWFhNFe+TIP|S#t2QQ+IUzWBb^&9G0lchVK`mr6CiXlhR;&GdYw!ffQqh zvyD}iKfh-fSDk4%KmRKIX6QV22G)QmB>VNpNLQ9XPQK6RAbtwraN6cB zQ#GXf=Z}#>ED*=13X=ZAjcu#V1*WltIy-5v&g@w`cPiP5Wr6t_pFXtE%r?(vH`6jQ z-v$BmL?`I!+dLW?m~6B5`2s&QXpsjr~I%#%P*<=7*yW*<;xy3l&|8*7YBJuazARi~Lr zPLpI+@c^nNTNzp{fc2S8F*c8WZ;)zYQz^BSk!Q(4H&8VvF$Kqx%EJ_GlZ(miJQCh2 zBWoB9*Kjk{(KA-<{w)?2bU71@q7>`S;)Q(7NO_KomI3oDo9#?3QTcbXCAmpx8?dI~ zbd^+d8iQ!P31(YwbCzkL`dwgy(pECBlQZS!or8;we|ngRP!n>$Pq>UWm|GpH4>@)blDMGjWfd+(qB6Bzs z@O)u|-Yn2t`LHGrfb!E1J<-Mb@IZSP;P@-2iiu>NZ%)pw4_s4O?UZ4H zp2|0ikF9^fqTKU%0bj2;J9(L)XB3U6T|Iyf00b2%TC`}=mA{y5O}@48yvtCapJ4WVHSC;vDch~$TD(yYY($< zuuWCEA;m_$mYn~rAWNl@GS=Qe#i@=CCvYO{Gb2Gc;xfu&B--DtIDa^@q!tXI&^^__ zC6e%X;UL;qY3icJCBi`ot7^m*ki!&o+(0A`^R-Kb^(lAh>Lj6DuW3mL6Al)r20l(M zgEEO4F1ZS{6%m{0(-#pVMVf<}Zw3h$5T_b=+D$yahp4rSI4uwn^XL?W$isrc&HNVd+N`}vfnBbvLC?eunS5Yd*v*2ozXj{|+j|7Y5cM=&Nq!GjS z0wUr~(8tq?h&WS_j?u`zCrB`}g5bk^A|?9+nQvwg!S5{EZqo@K+u$m90esdW*N270 z>Z&3bH8Hs;E^S{T$1fe|`JYF-X1$Kt!NY#kOyM_>bL{9Kk-8`eqGehtAxiy;oR3vD zk#cE%2kqC_Ymq&?-8u;+w-(n>$1jsoI2(x32m9wY(aLZB8+E+ZCzlHqm!`MSafn|1 z93Va)7(gUdfS~pzta}JRj5M%EgSu&(aE&kz+yN{Z?@g@>|vUR?>YlCp=3zbGi8A3G~t_&WD zMiD$VjE)&b3k{=whEarJ6lxfGBpOBV$S^u)7%eo6`WZ$MhEa%N Date: Mon, 3 Aug 2026 16:39:40 +0000 Subject: [PATCH 02/22] docs(cloud): Remove SDI mention (#3254) Signed-off-by: fria Signed-off-by: Daniel Gray --- docs/cloud.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/docs/cloud.md b/docs/cloud.md index ac70c0c7..de069837 100644 --- a/docs/cloud.md +++ b/docs/cloud.md @@ -89,8 +89,6 @@ Tresorit has received a number of independent security audits: [^1]: [ISO/IEC 27001](https://en.wikipedia.org/wiki/ISO/IEC_27001):2013 compliance relates to the company's [information security management system](https://en.wikipedia.org/wiki/Information_security_management) and covers the sales, development, maintenance and support of their cloud services. -They have also received the Digital Trust Label, a certification from the [Swiss Digital Initiative](https://efd.admin.ch/en/swiss-digital-initiative-en) which requires passing [35 criteria](https://swiss-digital-initiative.org/criteria) related to security, privacy, and reliability. - ## Peergos
From c0514c4b2877eb3fdeb74f0d834e1f0591dd9f2e Mon Sep 17 00:00:00 2001 From: Lince Date: Thu, 13 Aug 2026 01:20:03 +0200 Subject: [PATCH 03/22] fix: Yubico U2F on Linux guide link (#3259) Signed-off-by: Jonah Aragon --- docs/basics/multi-factor-authentication.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/basics/multi-factor-authentication.md b/docs/basics/multi-factor-authentication.md index 94f129bd..38e09424 100644 --- a/docs/basics/multi-factor-authentication.md +++ b/docs/basics/multi-factor-authentication.md @@ -140,7 +140,7 @@ If the hostname of your system changes (such as due to DHCP), you would be unabl
-The `pam_u2f` module on Linux can provide two-factor authentication for logging in on most popular Linux distributions. If you have a hardware security key that supports U2F, you can set up MFA authentication for your login. Yubico has a guide [Ubuntu Linux Login Guide - U2F](https://support.yubico.com/hc/articles/360016649099-Ubuntu-Linux-Login-Guide-U2F) which should work on any distribution. The package manager commands—such as `apt-get`—and package names may however differ. This guide does **not** apply to Qubes OS. +The `pam_u2f` module on Linux can provide two-factor authentication for logging in on most popular Linux distributions. If you have a hardware security key that supports U2F, you can set up MFA authentication for your login. Yubico has a guide [Ubuntu Linux Login Guide - U2F](https://support.yubico.com/s/article/Ubuntu-Linux-login-guide-U2F) which should work on any distribution. The package manager commands—such as `apt-get`—and package names may however differ. This guide does **not** apply to Qubes OS. ### Qubes OS From d52f5a4ee22f4ce99d4c46c8d093d37ea54899d7 Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Fri, 14 Aug 2026 11:52:33 -0600 Subject: [PATCH 04/22] docs: Remove DeleteMe as org member and PUP link (#3261) --- docs/about/donate.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/about/donate.md b/docs/about/donate.md index 2add1a83..cbe4a89e 100644 --- a/docs/about/donate.md +++ b/docs/about/donate.md @@ -28,8 +28,7 @@ MAGIC Grants is our fiscal host, and their custom, open-source donation platform
- [![Power Up Privacy]](https://powerupprivacy.com){ target=_blank title="Power Up Privacy" } - [![DeleteMe]](https://joindeleteme.com){ target=_blank title="DeleteMe" } + ![Power Up Privacy]{ title="Power Up Privacy" } [![Cape]](https://www.cape.co){ target=_blank title="Cape" } [Power Up Privacy]: ../assets/img/donors/power-up-privacy.webp @@ -43,6 +42,7 @@ MAGIC Grants is our fiscal host, and their custom, open-source donation platform Thank you to these organizations who have substantially supported our project in the past. - [Safing](https://safing.io){ rel=nofollow target=_blank }: 2019 – 2021 + - [DeleteMe](https://joindeleteme.com){ rel=nofollow target=_blank }: 2025 ## Active Members From 7a0ff96a61caf0b7ad72b24e942b4e7b28ff0e83 Mon Sep 17 00:00:00 2001 From: Chas Nelson Date: Fri, 21 Aug 2026 18:49:24 +0100 Subject: [PATCH 05/22] update: SimpleLogin section to reflect Proton integration status (#3058) Signed-off-by: Jonah Aragon Co-authored-by: Jonah Aragon Co-authored-by: Daniel Nathan Gray Co-authored-by: fria <138676274+friadev@users.noreply.github.com> --- docs/email-aliasing.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/docs/email-aliasing.md b/docs/email-aliasing.md index 5e027f63..998ec32d 100644 --- a/docs/email-aliasing.md +++ b/docs/email-aliasing.md @@ -4,6 +4,7 @@ icon: material/email-lock description: An email aliasing service allows you to easily generate a new email address for every website you register for. cover: email-aliasing.webp --- + Protects against the following threat(s): - [:material-account-cash: Surveillance Capitalism](basics/common-threats.md#surveillance-as-a-business-model){ .pg-brown } @@ -119,9 +120,9 @@ If you cancel your subscription, you will still enjoy the features of your paid
-SimpleLogin was [acquired by Proton AG](https://proton.me/news/proton-and-simplelogin-join-forces) as of April 8, 2022. If you use Proton Mail for your primary mailbox, SimpleLogin is a great choice. As both products are now owned by the same company you now only have to trust a single entity. We also expect that SimpleLogin will be more tightly integrated with Proton's offerings in the future. SimpleLogin continues to support forwarding to any email provider of your choosing. +SimpleLogin was [acquired by Proton AG](https://proton.me/news/proton-and-simplelogin-join-forces) on April 8, 2022, making it an excellent option for users of [Proton Mail](email.md#proton-mail) as their primary mailbox. With this acquisition, you only need to trust a single entity for your email services. SimpleLogin still allows forwarding to any email provider of your choice. -You can link your SimpleLogin account in the settings with your Proton account. If you have Proton Pass Plus, Proton Unlimited, or any multi-user Proton plan, you will have SimpleLogin Premium for free. You can also purchase a voucher code for SimpleLogin Premium anonymously via their official reseller [ProxyStore](https://simplelogin.io/faq). +You can link your SimpleLogin account in the settings with your Proton account. If you have Proton Pass Plus, Proton Unlimited, or any multi-user Proton plan, you will have SimpleLogin Premium for free. Likewise both the [Free and Premium tiers](https://simplelogin.io/pricing/) of SimpleLogin now include Proton Pass subscriptions. You can also purchase a voucher code for SimpleLogin Premium anonymously via their official reseller [ProxyStore](https://simplelogin.io/faq). Securitum [audited](https://simplelogin.io/blog/security-audit) SimpleLogin in early 2022 and all issues [were addressed](https://simplelogin.io/audit2022/web.pdf). From 2cba767aa170f004b78a21b3caaf0512de1f3a5a Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Fri, 21 Aug 2026 13:35:33 -0500 Subject: [PATCH 06/22] update: Disable Windows Recall in gpedit guide (#2932) Signed-off-by: fria <138676274+friadev@users.noreply.github.com> Signed-off-by: Jonah Aragon Co-authored-by: fria <138676274+friadev@users.noreply.github.com> --- docs/os/windows/group-policies.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/os/windows/group-policies.md b/docs/os/windows/group-policies.md index 56e1047b..48d4dd0a 100644 --- a/docs/os/windows/group-policies.md +++ b/docs/os/windows/group-policies.md @@ -127,6 +127,17 @@ This last setting disables OneDrive on your system; make sure to change it to ** - Improve inking and typing recognition: **Disabled** +#### Windows AI + +
+

Windows Recall

+ +Windows 11 recently introduced a feature called **Recall**, which records all your activity and creates a searchable archive of that activity history. This is a massive privacy vulnerability, because those archives can potentially store highly sensitive information (essentially anything displayed on your screen), and malware without any special permissions or admin access can trivially [access](https://github.com/xaitax/TotalRecall) the full Recall database anytime after it is unlocked. + +
+ +- Turn off saving snapshots for use with Recall: **Enabled** + #### Windows Error Reporting - Do not send additional data: **Enabled** From 3b27fed14919dbafe06afc284ab93516e666dc9a Mon Sep 17 00:00:00 2001 From: fria <138676274+friadev@users.noreply.github.com> Date: Mon, 31 Aug 2026 16:46:45 -0500 Subject: [PATCH 07/22] update: Fix dead links in PrivacyTools FAQ (#3268) --- docs/about/privacytools.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/about/privacytools.md b/docs/about/privacytools.md index 31b1ef51..716ad34c 100644 --- a/docs/about/privacytools.md +++ b/docs/about/privacytools.md @@ -107,10 +107,10 @@ This topic has been discussed extensively within our communities in various loca - [June 28, 2021 request for control of r/privacytoolsIO](https://reddit.com/comments/o9tllh) - [July 27, 2021 announcement of our intentions to move on the PrivacyTools blog, written by the team](https://web.archive.org/web/20210729184422/https://blog.privacytools.io/the-future-of-privacytools) -- [Sept 13, 2021 announcement of the beginning of our transition to Privacy Guides on r/privacytoolsIO](https://reddit.com/pnql46) +- [Sept 13, 2021 announcement of the beginning of our transition to Privacy Guides on r/privacytoolsIO](https://archive.ph/rMevJ) - [Sept 17, 2021 announcement on OpenCollective from Jonah](https://opencollective.com/privacyguides/updates/transitioning-to-privacy-guides) - [Sept 30, 2021 Twitter thread detailing most of the events now described on this page](https://twitter.com/privacy_guides/status/1443633412800225280) - [Oct 1, 2021 post by u/dng99 noting subdomain failure](https://reddit.com/comments/pymthv/comment/hexwrps) - [Apr 2, 2022 response by u/dng99 to PrivacyTools' accusatory blog post](https://reddit.com/comments/tuo7mm/comment/i35kw5a) - [May 16, 2022 response by @TommyTran732 on Twitter](https://twitter.com/TommyTran732/status/1526153497984618496) -- [Sep 3, 2022 post on Techlore's forum by @dngray](https://discuss.techlore.tech/t/has-anyone-seen-this-video-wondering-your-thoughts/792/20) +- [Sep 3, 2022 post on Techlore's forum by @dngray](https://web.archive.org/web/20260521005749/https://discuss.techlore.tech/t/has-anyone-seen-this-video-wondering-your-thoughts/792/20) From 3aef104a9d269b49b373609aba41bd605aa1b526 Mon Sep 17 00:00:00 2001 From: fria <138676274+friadev@users.noreply.github.com> Date: Thu, 3 Sep 2026 15:53:50 +0000 Subject: [PATCH 08/22] update: Remove Specific Arch-Based Anti-Recommendations (#3269) Signed-off-by: Jordan Warne Co-authored-by: Daniel Gray --- docs/os/linux-overview.md | 11 ++++------- 1 file changed, 4 insertions(+), 7 deletions(-) diff --git a/docs/os/linux-overview.md b/docs/os/linux-overview.md index aa362f29..a9e27ddf 100644 --- a/docs/os/linux-overview.md +++ b/docs/os/linux-overview.md @@ -67,16 +67,13 @@ Arch and Arch-based distributions are not recommended for those new to Linux (re For a secure system, you are also expected to have sufficient Linux knowledge to properly set up security for their system such as adopting a [mandatory access control](#mandatory-access-control) system, setting up [kernel module](https://en.wikipedia.org/wiki/Loadable_kernel_module#Security) blacklists, hardening boot parameters, manipulating [sysctl](https://en.wikipedia.org/wiki/Sysctl) parameters, and knowing what components they need such as [Polkit](https://en.wikipedia.org/wiki/Polkit). -Anyone using the [Arch User Repository (AUR)](https://wiki.archlinux.org/title/Arch_User_Repository) **must** be comfortable auditing PKGBUILDs that they download from that service. AUR packages are community-produced content and are not vetted in any way, and therefore are vulnerable to software [:material-package-variant-closed-remove: Supply Chain Attacks](../basics/common-threats.md#attacks-against-certain-organizations){ .pg-viridian }, which has in fact happened [in the past](https://bleepingcomputer.com/news/security/malware-found-in-arch-linux-aur-package-repository). +Arch-based derivatives designed to make Arch "easier to use" are not recommended, as they frequently encourage poor security practices while weakening the base system. These practices include bundling outdated packages in downstream repositories that are updated less frequently than Arch's official channels. Furthermore, these distributions usually fail to properly educate users on the risks associated with the Arch User Repository (AUR). + +Anyone using the [Arch User Repository (AUR)](https://wiki.archlinux.org/title/Arch_User_Repository) **must** be comfortable auditing PKGBUILDs (the recipes that build packages) that they download from that service. AUR packages are community-produced content and are not vetted in any way, and therefore are vulnerable to software [:material-package-variant-closed-remove: Supply Chain Attacks](../basics/common-threats.md#attacks-against-certain-organizations){ .pg-viridian }, which has in fact happened [in the past](https://bleepingcomputer.com/news/security/malware-found-in-arch-linux-aur-package-repository) and more recently when [1500 packages](https://discuss.privacyguides.net/t/around-1-500-aur-packages-compromised-with-rootkit-like-malware/38517) were compromised. The AUR should always be used sparingly, and often there is a lot of bad advice on various pages which direct people to blindly use [AUR helpers](https://wiki.archlinux.org/title/AUR_helpers) without sufficient warning. Similar warnings apply to the use of third-party Personal Package Archives (PPAs) on Debian-based distributions or Community Projects (COPR) on Fedora. -If you are experienced with Linux and wish to use an Arch-based distribution, we generally recommend mainline Arch Linux over any of its derivatives. - -Additionally, we recommend **against** these two Arch derivatives specifically: - -- **Manjaro**: This distribution holds packages back for 2 weeks to make sure that their own changes don’t break, not to make sure that upstream is stable. When AUR packages are used, they are often built against the latest [libraries](https://en.wikipedia.org/wiki/Library_(computing)) from Arch’s repositories. -- **Garuda**: They use [Chaotic-AUR](https://aur.chaotic.cx) which automatically and blindly compiles packages from the AUR. There is no verification process to make sure that the AUR packages don’t suffer from supply chain attacks. +If you are experienced with Linux and wish to use an Arch-based distribution, mainline Arch Linux is the **only** recommended option. ### Linux-libre kernel and “Libre” distributions From 95f851315ef355dd1488eb0f7d4117705683ab4f Mon Sep 17 00:00:00 2001 From: fria <138676274+friadev@users.noreply.github.com> Date: Thu, 3 Sep 2026 14:46:09 -0500 Subject: [PATCH 09/22] update: Remove Mullvad DNS from Encrypted DNS providers (#3270) --- docs/dns.md | 7 +------ docs/tools.md | 2 +- 2 files changed, 2 insertions(+), 7 deletions(-) diff --git a/docs/dns.md b/docs/dns.md index 8f81e771..0b73d4a3 100644 --- a/docs/dns.md +++ b/docs/dns.md @@ -23,8 +23,7 @@ These are our favorite public DNS resolvers based on their privacy and security | [**AdGuard Public DNS**](https://adguard-dns.io/en/public-dns.html) | Cleartext
DoH/3
DoT
DoQ
DNSCrypt | Anonymized[^1] | Anonymized | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/AdguardTeam/AdGuardSDNSFilter) | Yes [:octicons-link-external-24:](https://adguard-dns.io/en/blog/encrypted-dns-ios-14.html) | | [**Cloudflare**](https://developers.cloudflare.com/1.1.1.1/setup) | Cleartext
DoH/3
DoT | Anonymized[^2] | No | Based on server choice. | No [:octicons-link-external-24:](https://community.cloudflare.com/t/requesting-1-1-1-1-signed-profiles-for-apple/571846) | | [**Control D Free DNS**](https://controld.com/free-dns) | Cleartext
DoH/3
DoT
DoQ | No[^3] | No | Based on server choice. | Yes
[:simple-apple: iOS](https://docs.controld.com/docs/ios-platform)
[:material-apple-finder: macOS](https://docs.controld.com/docs/macos-platform#manual-setup-profile) | -| [**Mullvad**](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) | DoH
DoT | No[^4] | No | Based on server choice. Filter list being used can be found here. [:octicons-link-external-24:](https://github.com/mullvad/dns-adblock) | Yes [:octicons-link-external-24:](https://github.com/mullvad/encrypted-dns-profiles) | -| [**Quad9**](https://quad9.net) | Cleartext
DoH/3
DoT
DoQ
DNSCrypt | Anonymized[^5] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | +| [**Quad9**](https://quad9.net) | Cleartext
DoH/3
DoT
DoQ
DNSCrypt | Anonymized[^4] | Optional | Based on server choice. Malware blocking is included by default. | Yes
[:simple-apple: iOS](https://docs.quad9.net/Setup_Guides/iOS/iOS_14_and_later_(Encrypted))
[:material-apple-finder: macOS](https://docs.quad9.net/Setup_Guides/MacOS/Big_Sur_and_later_(Encrypted)) | [^1]: AdGuard stores aggregated performance metrics of their DNS servers, namely the number of complete requests to a particular server, the number of blocked requests, and the speed of processing requests. They also keep and store the database of domains requested within the last 24 hours. @@ -41,10 +40,6 @@ These are our favorite public DNS resolvers based on their privacy and security Control D: [*Privacy Policy*](https://controld.com/privacy) [^4]: - Mullvad's DNS service is available to both subscribers and non-subscribers of Mullvad VPN. Their privacy policy explicitly claims they do not log DNS requests in any way. - - Mullvad: [*No-logging of user activity policy*](https://mullvad.net/en/help/no-logging-data-policy) -[^5]: Quad9 collects some data for the purposes of threat monitoring and response. That data may then be remixed and shared for purposes like furthering their security research. Quad9 does not collect or record IP addresses or other data they deem personally identifiable. Quad9: [*Data and Privacy Policy*](https://quad9.net/privacy/policy) diff --git a/docs/tools.md b/docs/tools.md index 8de1178a..4b3711b4 100644 --- a/docs/tools.md +++ b/docs/tools.md @@ -276,7 +276,7 @@ If you're looking for added **security**, you should always ensure you're connec #### DNS Providers -We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Mullvad](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) and [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended. +We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended. [Learn more :material-arrow-right-drop-circle:](dns.md) From 4ad7b0d6a1f5f656099fb492727b8e0f2acb11c0 Mon Sep 17 00:00:00 2001 From: duydanh9989 <71323169+duydanh9989@users.noreply.github.com> Date: Wed, 9 Sep 2026 18:45:33 +0000 Subject: [PATCH 10/22] docs: Remove dead staging preview link (#3271) Signed-off-by: fria Signed-off-by: Mare Polaris <15004290+ph00lt0@users.noreply.github.com> Signed-off-by: Daniel Gray --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index e6da7d35..1cfacb9e 100644 --- a/README.md +++ b/README.md @@ -112,7 +112,7 @@ Committing to this repository requires [signing your commits](https://docs.githu ## Releasing -It is required to create a GitHub release to publish the current site to privacyguides.org. The current `main` branch can be previewed at [https://main.staging.privacyguides.dev](https://main.staging.privacyguides.dev) prior to release. +It is required to create a GitHub release to publish the current site to privacyguides.org. 1. Create a new tag: `git tag -s YYYY.MM.DD -m 'Some message'` - Tag numbering: `YYYY.MM.DD` - if two+ releases are published on the same day, append short commit to the next release, e.g. `YYYY.MM.DD-6aa14e8` From 8be53ef24b9f699be26624d65c258567305ba923 Mon Sep 17 00:00:00 2001 From: Jordan Warne Date: Mon, 14 Sep 2026 20:34:18 +0000 Subject: [PATCH 11/22] update!: Remove RetoSwap (Haveno-Reto) (#3264) A bit too early perhaps to recommend this. Signed-off-by: fria Signed-off-by: Daniel Gray --- docs/cryptocurrency.md | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/cryptocurrency.md b/docs/cryptocurrency.md index ba599419..c4e058d2 100644 --- a/docs/cryptocurrency.md +++ b/docs/cryptocurrency.md @@ -74,7 +74,6 @@ There are numerous centralized exchanges (CEX) as well as P2P marketplaces where - [Kraken](https://kraken.com): A well-known CEX. Registration and KYC are mandatory. Card payments and bank transfers accepted. Make sure not to leave your newly purchased Monero on Kraken's platform after the purchase; withdraw them to a self-custody wallet. Monero is not available in all jurisdictions that Kraken operates in.[^1] - [Cake Wallet](https://cakewallet.com): A self-custody cross-platform wallet for Monero and other cryptocurrencies. You can buy Monero directly in the app using card payments or bank transfers (through third-party providers such as [Guardarian](https://guardarian.com) or [DFX](https://dfx.swiss)).[^2] KYC is usually not required, but it depends on your country and the amount you are purchasing. In countries where directly purchasing Monero is not possible, you can also use a provider within Cake Wallet to first buy another cryptocurrency such as Bitcoin, Bitcoin Cash, or Litecoin and then exchange it to Monero in-app. - [Monero.com](https://monero.com) is an associated website where you can buy Monero and other cryptocurrencies without having to download an app. The funds will simply be sent to the wallet address of your choice. -- [RetoSwap](https://retoswap.com) (formerly known as Haveno-Reto) is a self-custody, decentralized P2P exchange platform based on the [Haveno](https://haveno.exchange) project which is available for Linux, Windows, and macOS. Monero can be bought and sold with maximum privacy, since most trading counterparties do not require KYC, trades are made directly between users (P2P), and all connections run through the Tor network. It is possible to buy Monero via bank transfer, PayPal, or even by paying in cash (meeting in person or sending by mail). Arbitrators can step in to resolve disputes between buyer and seller, but be careful when sharing your bank account or other sensitive information with your trading counterparty. Trading with some accounts may be against those accounts' terms of service. ## Criteria From e40376173a6c29cd8ed94654b16933ad0f153ba4 Mon Sep 17 00:00:00 2001 From: fria <138676274+friadev@users.noreply.github.com> Date: Mon, 14 Sep 2026 21:39:01 +0000 Subject: [PATCH 12/22] update: clarify Tor and Mullvad Browser capabilities (#3272) Update wording to accurately reflect tracking and fingerprinting protections. Adjust descriptions regarding anonymity, fingerprint similarity, and advanced tracking mitigation. Signed-off-by: Daniel Gray --- docs/advanced/tor-overview.md | 2 +- docs/desktop-browsers.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/advanced/tor-overview.md b/docs/advanced/tor-overview.md index 0c58add5..2787a7bd 100644 --- a/docs/advanced/tor-overview.md +++ b/docs/advanced/tor-overview.md @@ -92,7 +92,7 @@ It is critical to understand the difference between bypassing censorship and eva ### Tor Browser is not the most *secure* browser -Anonymity can often be at odds with security: Tor's anonymity requires every user to be identical, which creates a monoculture (e.g., the same bugs are present across all Tor Browser users). As a cybersecurity rule of thumb, monocultures are generally regarded as bad: Security through diversity (which Tor lacks) provides natural segmentation by limiting vulnerabilities to smaller groups, and is therefore usually desirable, but this diversity is also less good for anonymity. +Anonymity can often be at odds with security. Tor achieves anonymity by ensuring every user appears identical, creating a digital monoculture where the same vulnerabilities exist across all installations. In cybersecurity, monocultures are generally considered a risk. Security through diversity provides natural segmentation by limiting the impact of an exploit to a smaller segment of users. While such diversity is structurally desirable for security, it inherently compromises user anonymity by making individuals trackable. Additionally, Tor Browser is based on Firefox's Extended Support Release builds, which only receives patches for vulnerabilities considered *Critical* and *High* (not *Medium* and *Low*). This means that attackers could (for example): diff --git a/docs/desktop-browsers.md b/docs/desktop-browsers.md index af60c51d..3c46c8a8 100644 --- a/docs/desktop-browsers.md +++ b/docs/desktop-browsers.md @@ -62,7 +62,7 @@ schema: These are our currently recommended **desktop web browsers** and configurations for standard/non-anonymous browsing. We recommend [Mullvad Browser](#mullvad-browser) if you are focused on strong privacy protections and anti-fingerprinting out of the box, [Firefox](#firefox) for casual internet browsers looking for a good alternative to Google Chrome, and [Brave](#brave) if you need Chromium browser compatibility. -If you need to browse the internet anonymously, you should use [Tor](tor.md) instead. We make some configuration recommendations on this page, but all browsers other than Tor Browser will be traceable by *somebody* in some manner or another. +If you need to browse the internet anonymously, you should use [Tor Browser](tor.md) instead. We make some configuration recommendations on this page, but Tor Browser offers the best protections against online tracking. ## Mullvad Browser @@ -88,7 +88,7 @@ If you need to browse the internet anonymously, you should use [Tor](tor.md) ins -Like [Tor Browser](tor.md), Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint identical to all other Mullvad Browser users, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*. +Like [Tor Browser](tor.md), Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint similar to a large number of other Mullvad Browser users, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*. Therefore, it is imperative that you do not modify the browser at all outside adjusting the default [security levels](https://tb-manual.torproject.org/security-settings). When adjusting the security level, you **must** always restart the browser before continuing to use it. Otherwise, [the security settings may not be fully applied](https://www.privacyguides.org/articles/2025/05/02/tor-security-slider-flaw), putting you at a higher risk of fingerprinting and exploits than you may expect based on the setting chosen. @@ -98,7 +98,7 @@ Modifications other than adjusting this setting would make your fingerprint uniq **Without** using a [VPN](vpn.md), Mullvad Browser provides protections against [naive fingerprinting scripts](https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting) similar to other private browsers like Firefox+[Arkenfox](#arkenfox-advanced) or [Brave](#brave). Mullvad Browser provides these protections out of the box, at the expense of some flexibility and convenience that other private browsers can provide. -==For the strongest anti-fingerprinting protection, we recommend using Mullvad Browser in conjunction **with** a VPN==, whether that is Mullvad or another recommended VPN provider. When using a VPN with Mullvad Browser, you will share a fingerprint and a pool of IP addresses with many other users, giving you a "crowd" to blend in with. This strategy is the only way to thwart advanced tracking scripts, and is the same anti-fingerprinting technique used by Tor Browser. +==For the strongest anti-fingerprinting protection, we recommend using Mullvad Browser in conjunction **with** a VPN==, whether that is Mullvad or another recommended VPN provider. When using a VPN with Mullvad Browser, you will share a fingerprint and a pool of IP addresses with many other users, giving you a "crowd" to blend in with. This strategy is the best way to defend against advanced tracking scripts, and is the same anti-fingerprinting technique used by Tor Browser. Note that while you can use Mullvad Browser with any VPN provider, other people on that VPN must also be using Mullvad Browser for this "crowd" to exist, something which is more likely on Mullvad VPN compared to other providers. Mullvad Browser does not have built-in VPN connectivity, nor does it check whether you are using a VPN before browsing; your VPN connection has to be configured and managed separately. From 0f6eee20c916770364d45159a5afb5ba92a149b4 Mon Sep 17 00:00:00 2001 From: mdevolde Date: Mon, 14 Sep 2026 22:08:50 +0000 Subject: [PATCH 13/22] docs: add new recommendation for brave wallets (#3274) Signed-off-by: fria Signed-off-by: Jordan Warne Signed-off-by: Daniel Gray --- docs/desktop-browsers.md | 1 + 1 file changed, 1 insertion(+) diff --git a/docs/desktop-browsers.md b/docs/desktop-browsers.md index 3c46c8a8..da834289 100644 --- a/docs/desktop-browsers.md +++ b/docs/desktop-browsers.md @@ -329,6 +329,7 @@ Brave's Web3 features can potentially add to your browser fingerprint and attack - Select **Extensions (no fallback)** under *Default Ethereum wallet* - Select **Extensions (no fallback)** under *Default Solana wallet* +- Select **Extensions (no fallback)** under *Default Cardano wallet* #### Extensions From 31d4a3ad8208355191e4b147348ee63df8dd5bcc Mon Sep 17 00:00:00 2001 From: Daniel Gray Date: Mon, 1 Jun 2026 15:54:13 +0000 Subject: [PATCH 14/22] feat: Add rumdl config (#3243) --- .devcontainer/devcontainer.json | 2 +- .rumdl.toml | 14 ++++++++++++++ .vscode/extensions.json | 2 +- .vscode/settings.json | 2 +- 4 files changed, 17 insertions(+), 3 deletions(-) create mode 100644 .rumdl.toml diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 7d298ce0..dd0cbe13 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -81,7 +81,7 @@ }, "extensions": [ "EditorConfig.EditorConfig", - "DavidAnson.vscode-markdownlint", + "rvben.rumdl", "wholroyd.jinja", "mikestead.dotenv", "redhat.vscode-yaml", diff --git a/.rumdl.toml b/.rumdl.toml new file mode 100644 index 00000000..61ad7ea5 --- /dev/null +++ b/.rumdl.toml @@ -0,0 +1,14 @@ +[global] +disable = ["md013", "md033", "md046", "md026"] + +[md007] +indent = 4 + +[md010] +code_blocks = false + +[md024] +siblings_only = true + +[md049] +style = "asterisk" diff --git a/.vscode/extensions.json b/.vscode/extensions.json index 7d8a9d10..af809e02 100644 --- a/.vscode/extensions.json +++ b/.vscode/extensions.json @@ -21,7 +21,7 @@ { "recommendations": [ "EditorConfig.EditorConfig", - "DavidAnson.vscode-markdownlint", + "rvben.rumdl", "wholroyd.jinja", "mikestead.dotenv", "redhat.vscode-yaml", diff --git a/.vscode/settings.json b/.vscode/settings.json index 9a388048..b4962c5a 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -91,7 +91,7 @@ }, "editor.unicodeHighlight.ambiguousCharacters": true, "editor.unicodeHighlight.invisibleCharacters": true, - "editor.defaultFormatter": "DavidAnson.vscode-markdownlint", + "editor.defaultFormatter": "rvben.rumdl", "[yaml]": { "editor.defaultFormatter": "redhat.vscode-yaml", "editor.quickSuggestions": { From 02620825ea65c2166ae990b7f623c0ae5c839af8 Mon Sep 17 00:00:00 2001 From: fria <138676274+friadev@users.noreply.github.com> Date: Thu, 17 Sep 2026 08:09:11 +0000 Subject: [PATCH 15/22] update: Remove Radaris from manual opt-outs (#3275) Signed-off-by: Jordan Warne Signed-off-by: Daniel Gray --- docs/data-broker-removals.md | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/data-broker-removals.md b/docs/data-broker-removals.md index cc998615..946c2558 100644 --- a/docs/data-broker-removals.md +++ b/docs/data-broker-removals.md @@ -34,7 +34,6 @@ You should search for your information on these sites first, and submit an opt-o - InfoTracer ([Search](https://infotracer.com), [Opt-Out](https://infotracer.com/optout)) - Intelius ([Search](https://intelius.com), [Opt-Out](https://suppression.peopleconnect.us/login)) - PublicDataUSA ([Search](https://publicdatausa.com), [Opt-Out](https://publicdatausa.com/remove.php)) -- Radaris ([Search](https://radaris.com), [Opt-Out](https://radaris.com/page/how-to-remove)) - Spokeo ([Search](https://spokeo.com/search), [Opt-Out](https://spokeo.com/optout)) - That's Them ([Search](https://thatsthem.com), [Opt-Out](https://thatsthem.com/optout)) - USPhonebook ([Search and Opt-Out](https://usphonebook.com/opt-out)) From b1441f596087475accf98ac3e5c9569cb067b16e Mon Sep 17 00:00:00 2001 From: Ali Mashally <71723982+blackaly@users.noreply.github.com> Date: Tue, 22 Sep 2026 04:19:17 +0000 Subject: [PATCH 16/22] style: Correct typos in guides and blog posts (#3278) Signed-off-by: fria Signed-off-by: Jordan Warne --- blog/posts/differential-privacy.md | 2 +- blog/posts/email-security.md | 2 +- blog/posts/mastodon-tutorial-privacy-and-security.md | 2 +- blog/posts/stay-safe-but-stay-connected.md | 2 +- .../toolbox/tip-consider-everyones-unique-situation.md | 2 +- docs/email.md | 4 ++-- docs/health-and-wellness.md | 2 +- docs/os/linux-overview.md | 2 +- docs/social-networks.md | 2 +- docs/vpn.md | 2 +- 10 files changed, 11 insertions(+), 11 deletions(-) diff --git a/blog/posts/differential-privacy.md b/blog/posts/differential-privacy.md index 3ddc78e6..e74bff96 100644 --- a/blog/posts/differential-privacy.md +++ b/blog/posts/differential-privacy.md @@ -45,7 +45,7 @@ A famous example is the AOL search log release. AOL had been logging its users s #### Strava Heatmap Incident -In 2018, the fitness app Strava announced a major update to its heatmap, showing the the workout patterns of users of fitness trackers like Fitbit. +In 2018, the fitness app Strava announced a major update to its heatmap, showing the workout patterns of users of fitness trackers like Fitbit. Analyst [Nathan Ruser](https://x.com/Nrg8000/status/957318498102865920) indicated that these patterns can reveal military bases and troop movement patterns. This is obviously a huge op-sec problem and can endanger the lives of troops. diff --git a/blog/posts/email-security.md b/blog/posts/email-security.md index ad7aa14c..28f1b6ed 100644 --- a/blog/posts/email-security.md +++ b/blog/posts/email-security.md @@ -10,7 +10,7 @@ tags: - Email license: BY-SA schema_type: BackgroundNewsArticle -description: Email is ubiquitous. If you want to function in modern society, you pretty much have to have an email address. But is it really a good idea to still be relying on the same decades old techology? What can we do about replacing it? +description: Email is ubiquitous. If you want to function in modern society, you pretty much have to have an email address. But is it really a good idea to still be relying on the same decades old technology? What can we do about replacing it? preview: cover: blog/assets/images/email-security/cover.png --- diff --git a/blog/posts/mastodon-tutorial-privacy-and-security.md b/blog/posts/mastodon-tutorial-privacy-and-security.md index 1ed08d2e..2aed4aed 100644 --- a/blog/posts/mastodon-tutorial-privacy-and-security.md +++ b/blog/posts/mastodon-tutorial-privacy-and-security.md @@ -266,7 +266,7 @@ Confirm your choice by clicking on "Save changes" on the upper-right. ![Screenshot of the Mastodon web interface showing the "Preferences" page in Preferences.](../assets/images/mastodon-tutorial-privacy-and-security/mastodon-posts-default.webp)
-

Hide posted media (slighly)

+

Hide posted media (slightly)

Additionally, you might want to check the "Always mark media as sensitive" option from the same section. This will label the media as "Sensitive content", and require others to click on it to view the image. This will **not stop anyone from clicking to view it**, including people without a Mastodon account from your account's public page, but it might *slightly* reduce the visibility for certain media. diff --git a/blog/posts/stay-safe-but-stay-connected.md b/blog/posts/stay-safe-but-stay-connected.md index 5ea98ed2..30da6607 100644 --- a/blog/posts/stay-safe-but-stay-connected.md +++ b/blog/posts/stay-safe-but-stay-connected.md @@ -59,7 +59,7 @@ There are different levels to this. It could mean sharing a first name but not a Using a pseudonym and a profile picture that isn't a self-portrait can help significantly to reduce digital footprints and improve online safety. It can also help to detach different accounts from each other, for example by using a certain name for a work account and a pseudonym for a personal alt account. -Remember that that this will not make you anonymous online, however. It will only help hide or separate your legal identity from your public-facing profile. +Remember that this will not make you anonymous online, however. It will only help hide or separate your legal identity from your public-facing profile. If you want to use more serious pseudonymity online, you will also need to consider using different email addresses to sign up, different phone numbers if required, different photos of course, but also different IP addresses, and so on and so forth. diff --git a/docs/activism/toolbox/tip-consider-everyones-unique-situation.md b/docs/activism/toolbox/tip-consider-everyones-unique-situation.md index ec63b9b0..14b91eb1 100644 --- a/docs/activism/toolbox/tip-consider-everyones-unique-situation.md +++ b/docs/activism/toolbox/tip-consider-everyones-unique-situation.md @@ -1,6 +1,6 @@ --- title: Consider Everyone's Unique Situation -description: To give actionable privacy advices, it's essential to consider everyone's situation. Learn more on how you can evaluate each person's unique threat model. +description: To give actionable privacy advice, it's essential to consider everyone's situation. Learn more on how you can evaluate each person's unique threat model. icon: fontawesome/solid/users-between-lines cover: activism/banner-toolbox-tip-everyone.webp --- diff --git a/docs/email.md b/docs/email.md index 1277e84b..4e268b2a 100644 --- a/docs/email.md +++ b/docs/email.md @@ -92,7 +92,7 @@ Proton Mail has internal crash reports that are **not** shared with third partie From your inbox, select :gear: → **All Settings** → **Account** → **Security and privacy** → **Privacy and data collection**. - - [ ] Disable **Collect usage dignostics** + - [ ] Disable **Collect usage diagnostics** - [ ] Disable **Send crash reports** === "Mobile" @@ -100,7 +100,7 @@ Proton Mail has internal crash reports that are **not** shared with third partie From your inbox, select :material-menu: → :gear: **Settings** → select your username. - [ ] Disable **Send crash reports** - - [ ] Disable **Collect usage dignostics** + - [ ] Disable **Collect usage diagnostics** #### :material-check:{ .pg-green } Custom Domains and Aliases diff --git a/docs/health-and-wellness.md b/docs/health-and-wellness.md index 6886682c..6e2561c6 100644 --- a/docs/health-and-wellness.md +++ b/docs/health-and-wellness.md @@ -2,7 +2,7 @@ meta_title: "Privacy-Respecting Health and Wellness apps for Android and iOS - Privacy Guides" title: "Health and Wellness" icon: material/heart-pulse -description: These applications are what we currently recommend for all health- and fitness-related activites on your phone. +description: These applications are what we currently recommend for all health- and fitness-related activities on your phone. cover: health.webp --- Protects against the following threat(s): diff --git a/docs/os/linux-overview.md b/docs/os/linux-overview.md index a9e27ddf..582b18dc 100644 --- a/docs/os/linux-overview.md +++ b/docs/os/linux-overview.md @@ -1,7 +1,7 @@ --- title: Linux Overview icon: simple/linux -description: Linux is an open-source, privacy-focused desktop operating system alternative, but not all distribitions are created equal. +description: Linux is an open-source, privacy-focused desktop operating system alternative, but not all distributions are created equal. --- **Linux** is an open-source, privacy-focused desktop operating system alternative. In the face of pervasive telemetry and other privacy-encroaching technologies in mainstream operating systems, desktop Linux has remained the clear choice for people looking for total control over their computers from the ground up. diff --git a/docs/social-networks.md b/docs/social-networks.md index af23e269..ecc845b5 100644 --- a/docs/social-networks.md +++ b/docs/social-networks.md @@ -179,7 +179,7 @@ As an end user on a public homeserver, you can consider unchecking the **Enable - [ ] (Optional) Uncheck **Record the client name, version, and url to recognize sessions for easily in session manager** -Unchecking this option may make it more diffcult to discern your active sessions if you logged in to your Matrix account on multiple devices. +Unchecking this option may make it more difficult to discern your active sessions if you logged in to your Matrix account on multiple devices. #### Encryption diff --git a/docs/vpn.md b/docs/vpn.md index 67a49388..d8749bfc 100644 --- a/docs/vpn.md +++ b/docs/vpn.md @@ -76,7 +76,7 @@ We also think it's better for the security of the VPN provider's private keys if #### :material-check:{ .pg-green } Independently Audited -Independent security researcher Ruben Santamarta conducted audits for Proton VPN's [browser extensions](https://drive.proton.me/urls/RWDD2SHT98#v7ZrwNcafkG8) and [apps](https://drive.proton.me/urls/RVW8TXG484#uTXX5Fc9GADo) in September 2024 and January 2025, respectively. Proton VPN's infrastrcture has undergone [annual audits](https://protonvpn.com/blog/no-logs-audit) by Securitum since 2022. +Independent security researcher Ruben Santamarta conducted audits for Proton VPN's [browser extensions](https://drive.proton.me/urls/RWDD2SHT98#v7ZrwNcafkG8) and [apps](https://drive.proton.me/urls/RVW8TXG484#uTXX5Fc9GADo) in September 2024 and January 2025, respectively. Proton VPN's infrastructure has undergone [annual audits](https://protonvpn.com/blog/no-logs-audit) by Securitum since 2022. Previously, Proton VPN underwent an independent audit by SEC Consult in January 2020. SEC Consult found some medium and low risk vulnerabilities in Proton VPN's Windows, Android, and iOS applications, all of which were "properly fixed" by Proton VPN before the reports were published. None of the issues identified would have provided an attacker remote access to your device or traffic. You can view individual reports for each platform in their dedicated [blog post](https://web.archive.org/web/20250307041036/https://protonvpn.com/blog/open-source) on the audit. From d077e5b66bcc2494f35d8fa514bd34018e157f8d Mon Sep 17 00:00:00 2001 From: fria <138676274+friadev@users.noreply.github.com> Date: Tue, 22 Sep 2026 04:18:09 +0000 Subject: [PATCH 17/22] update: Removed outdated info about molly (#3277) Signed-off-by: Daniel Gray --- docs/real-time-communication.md | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/docs/real-time-communication.md b/docs/real-time-communication.md index 72a9c399..6e2c7bbd 100644 --- a/docs/real-time-communication.md +++ b/docs/real-time-communication.md @@ -73,7 +73,7 @@ If you use Android and your threat model requires protecting against [:material- ![Molly logo](assets/img/messengers/molly.svg){ align=right } -**Molly** is an alternative Signal client for Android which allows you to encrypt the local database with a passphrase at rest, to have unused RAM data securely shredded, to route your connection via Tor, and [more](https://blog.privacyguides.org/2022/07/07/signal-configuration-and-hardening#privacy-and-security-features). It also has usability improvements including scheduled backups, automatic locking, and the ability to use your Android phone as a linked device instead of the primary device for a Signal account. +**Molly** is an alternative Signal client for Android which allows you to encrypt the local database with a passphrase at rest, to have unused RAM data securely shredded, to route your connection via Tor, and [more](https://www.privacyguides.org/articles/2022/07/07/signal-configuration-and-hardening#privacy-and-security-features). It also has usability improvements including scheduled backups, automatic locking, and the ability to use your Android phone as a linked device instead of the primary device for a Signal account. [:octicons-home-16: Homepage](https://molly.im){ .md-button .md-button--primary } [:octicons-eye-16:](https://signal.org/legal/#privacy-policy){ .card-link title="Privacy Policy" } @@ -92,13 +92,9 @@ If you use Android and your threat model requires protecting against [:material-
-Molly is updated every two weeks to include the latest features and bug fixes from Signal. The exception is security issues, which are patched as soon as possible. That said, you should be aware that there might be a slight delay compared to upstream, which may affect actions such as [migrating from Signal to Molly](https://github.com/mollyim/mollyim-android/wiki/Migrating-From-Signal#migrating-from-signal). - Note that you are trusting multiple parties by using Molly, as you now need to trust the Signal team *and* the Molly team to deliver safe and timely updates. -**Molly-FOSS** is a version of Molly which removes proprietary code like the Google services used by both Signal and Molly at the expense of some features (like battery-saving push notifications via Google Play Services). You can set up push notifications without Google Play Services in either version of Molly with [UnifiedPush](https://unifiedpush.org). Using this notification delivery method requires access to a [MollySocket](https://github.com/mollyim/mollysocket) server, but you can choose a public MollySocket instance for this.[^3] - -Both versions of Molly provide the same security improvements and support [reproducible builds](https://github.com/mollyim/mollyim-android/tree/main/reproducible-builds), meaning it's possible to confirm that the compiled APKs match the source code. +Molly provides support for [reproducible builds](https://github.com/mollyim/mollyim-android/tree/main/reproducible-builds), meaning it's possible to confirm that the compiled APKs match the source code. ## SimpleX Chat From aca2cf49fe4ce52381512d2096478a992166782c Mon Sep 17 00:00:00 2001 From: fria <138676274+friadev@users.noreply.github.com> Date: Tue, 22 Sep 2026 04:25:24 +0000 Subject: [PATCH 18/22] style: Change wording of the encrypted DNS section of the DNS overview (#3276) Signed-off-by: Daniel Gray --- docs/advanced/dns-overview.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/advanced/dns-overview.md b/docs/advanced/dns-overview.md index 489e3343..d672104f 100644 --- a/docs/advanced/dns-overview.md +++ b/docs/advanced/dns-overview.md @@ -126,7 +126,7 @@ In this example we will record what happens when we make a DoH request: We can see the [connection establishment](https://en.wikipedia.org/wiki/Transmission_Control_Protocol#Connection_establishment) and [TLS handshake](https://cloudflare.com/learning/ssl/what-happens-in-a-tls-handshake) that occurs with any encrypted connection. When looking at the "application data" packets that follow, none of them contain the domain we requested or the IP address returned. -## Why **shouldn't** I use encrypted DNS? +## Encrypted DNS Limitations In locations where there is internet filtering (or censorship), visiting forbidden resources may have its own consequences which you should consider in your [threat model](../basics/threat-modeling.md). We do **not** suggest the use of encrypted DNS for this purpose. Use [Tor](../advanced/tor-overview.md) or a [VPN](../vpn.md) instead. If you're using a VPN, you should use your VPN's DNS servers. When using a VPN, you are already trusting them with all your network activity. From 9262e3401bce4477bca17f731a4260b672e4e4e7 Mon Sep 17 00:00:00 2001 From: kuferu Date: Thu, 24 Sep 2026 07:11:32 +0300 Subject: [PATCH 19/22] update: Add warning about Windows native metadata removal (#3094) Signed-off-by: redoomed1 Co-authored-by: Daniel Gray Co-authored-by: redoomed1 --- docs/data-redaction.md | 10 +++++++++- includes/abbreviations.en.txt | 3 +++ 2 files changed, 12 insertions(+), 1 deletion(-) diff --git a/docs/data-redaction.md b/docs/data-redaction.md index 02deb308..7e0ef666 100644 --- a/docs/data-redaction.md +++ b/docs/data-redaction.md @@ -5,11 +5,19 @@ icon: material/tag-remove description: Use these tools to remove metadata like GPS location and other identifying information from photos and files you share. cover: data-redaction.webp --- + Protects against the following threat(s): - [:material-account-search: Public Exposure](basics/common-threats.md#limiting-public-information){ .pg-green } -When sharing files, be sure to remove associated metadata. Image files commonly include [Exif](https://en.wikipedia.org/wiki/Exif) data. Photos sometimes even include GPS coordinates in the file metadata. +When sharing files, be sure to remove associated metadata. Most common file types (including documents, images, and videos) include metadata. Image files, for example, commonly include Exif data. Photos sometimes even include GPS coordinates in the file metadata. + +Windows has a built-in metadata remover, but unfortunately it cannot remove many types of data such as: + +- Documents: Comments, author names, tracked changes, hidden worksheets, slide notes, custom XML, and document revision histories. +- Images: Camera serial numbers, XMP/IPTC data, C2PA metadata, and image thumbnails (which can dangerously expose original details from cropped or erased areas). +- Audio & Video: XMP metadata, C2PA metadata, and certain ID3v2 tag fields. +- Embedded Files: Hidden metadata nested inside images that are embedded within documents.

Warning

diff --git a/includes/abbreviations.en.txt b/includes/abbreviations.en.txt index fa7cc368..3cf553d4 100644 --- a/includes/abbreviations.en.txt +++ b/includes/abbreviations.en.txt @@ -5,6 +5,7 @@ *[attack surface]: The total number of possible entry points for unauthorized access to a system *[AVB]: Android Verified Boot *[cgroups]: Control Groups +*[C2PA]: Coalition for Content Provenance and Authenticity *[CLI]: Command Line Interface *[CSV]: Comma-Separated Values *[CVE]: Common Vulnerabilities and Exposures @@ -48,6 +49,7 @@ *[IPv6]: Internet Protocol version 6 *[ISP]: Internet Service Provider *[ISPs]: Internet Service Providers +*[IPTC]: International Press Telecommunications Council *[JNI]: Java Native Interface *[KYC]: Know Your Customer *[LLaVA]: Large Language and Vision Assistant (multimodal AI model) @@ -107,6 +109,7 @@ *[VLAN]: Virtual Local Area Network *[VoIP]: Voice over IP (Internet Protocol) *[W3C]: World Wide Web Consortium +*[XMP]: Extensible Metadata Platform *[XMPP]: Extensible Messaging and Presence Protocol *[PWA]: Progressive Web App *[PWAs]: Progressive Web Apps From dbc140bd50676f285eda53656a796a05c6857d06 Mon Sep 17 00:00:00 2001 From: pharaonic-faery <32229347+pharaonic-faery@users.noreply.github.com> Date: Mon, 28 Sep 2026 19:48:07 +0200 Subject: [PATCH 20/22] [email services] re-remove custom domain requirement from "Minimum to Qualify" (#3281) Signed-off-by: pharaonic-faery <32229347+pharaonic-faery@users.noreply.github.com> --- docs/email.md | 1 - 1 file changed, 1 deletion(-) diff --git a/docs/email.md b/docs/email.md index 4e268b2a..03784f76 100644 --- a/docs/email.md +++ b/docs/email.md @@ -277,7 +277,6 @@ We regard these features as important in order to provide a safe and optimal ser - Must encrypt email account data at rest with asymmetric encryption, where only the user has the private keys needed to decrypt it. - Must be capable of exporting emails as [Mbox](https://en.wikipedia.org/wiki/Mbox) or individual .EML with [RFC5322](https://datatracker.ietf.org/doc/rfc5322) standard. -- Allow users to use their own [domain name](https://en.wikipedia.org/wiki/Domain_name). Custom domain names are important to users because it allows them to maintain their agency from the service, should it turn bad or be acquired by another company which doesn't prioritize privacy. - Must operate on owned infrastructure, i.e. not built upon third-party email service providers. **Best Case:** From f7316b605e21b218e84e9930c0e06d47699ec256 Mon Sep 17 00:00:00 2001 From: Ali Mashally <71723982+blackaly@users.noreply.github.com> Date: Wed, 30 Sep 2026 04:07:16 +0300 Subject: [PATCH 21/22] update: Revise Android app installation guidance (#3280) Signed-off-by: Ali Mashally <71723982+blackaly@users.noreply.github.com> Signed-off-by: redoomed1 Co-authored-by: fria <138676274+friadev@users.noreply.github.com> Co-authored-by: redoomed1 Co-authored-by: Jordan Warne --- docs/android/obtaining-apps.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/android/obtaining-apps.md b/docs/android/obtaining-apps.md index 7122ccea..9f1b1f3a 100644 --- a/docs/android/obtaining-apps.md +++ b/docs/android/obtaining-apps.md @@ -121,6 +121,6 @@ The [F-Droid](https://f-droid.org/en/packages) and [IzzyOnDroid](https://apt.izz

F-Droid Basic

-In some rare cases, the developer of an app will only distribute it through F-Droid ([Gadgetbridge](../health-and-wellness.md#gadgetbridge) is one example of this). If you really need an app like that, we recommend using the newer [F-Droid Basic](https://f-droid.org/en/packages/org.fdroid.basic) client instead of the original F-Droid app to obtain it. F-Droid Basic supports automatic background updates without privileged extension or root, and has a reduced feature set (limiting attack surface). +In some rare cases, an app may only be available through F-Droid. If you really need an app like that, we recommend using the newer [F-Droid Basic](https://f-droid.org/en/packages/org.fdroid.basic) client instead of the original F-Droid app to obtain it, as it has a reduced feature set (limiting attack surface).
From c3e1984cbd1ae9a90cfa99cc5abaee4310e0d196 Mon Sep 17 00:00:00 2001 From: Daniel Nathan Gray Date: Wed, 30 Sep 2026 16:56:04 +0000 Subject: [PATCH 22/22] update: Wording in Tor Overview (#3279) Signed-off-by: fria <138676274+friadev@users.noreply.github.com> Co-authored-by: fria <138676274+friadev@users.noreply.github.com> --- docs/advanced/tor-overview.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/docs/advanced/tor-overview.md b/docs/advanced/tor-overview.md index 2787a7bd..d9a8a429 100644 --- a/docs/advanced/tor-overview.md +++ b/docs/advanced/tor-overview.md @@ -92,7 +92,11 @@ It is critical to understand the difference between bypassing censorship and eva ### Tor Browser is not the most *secure* browser -Anonymity can often be at odds with security. Tor achieves anonymity by ensuring every user appears identical, creating a digital monoculture where the same vulnerabilities exist across all installations. In cybersecurity, monocultures are generally considered a risk. Security through diversity provides natural segmentation by limiting the impact of an exploit to a smaller segment of users. While such diversity is structurally desirable for security, it inherently compromises user anonymity by making individuals trackable. +Anonymity can often be at odds with security. Tor achieves anonymity by ensuring more users appear [similar](https://support.torproject.org/tor-browser/features/fingerprinting-protections/#:~:text=Tor%20Browser%20is,individual%20users%20effectively.): + +>Tor Browser is specifically engineered to minimize the uniqueness of each user's fingerprint across various metrics. While it is practically impossible to make all Tor Browser users identical, the goal is to reduce the number of distinguishable "buckets" for each metric. This approach makes it harder to track individual users effectively. + + While this is effective at preserving anonymity, it also creates a digital monoculture where the same vulnerabilities exist across many installations. In cybersecurity, monocultures are generally considered a risk. Security through diversity provides natural segmentation by limiting the impact of an exploit to a smaller segment of users. While such diversity is structurally desirable for security, it inherently compromises user anonymity by making individuals trackable. Additionally, Tor Browser is based on Firefox's Extended Support Release builds, which only receives patches for vulnerabilities considered *Critical* and *High* (not *Medium* and *Low*). This means that attackers could (for example):