mirror of
https://github.com/privacyguides/privacyguides.org.git
synced 2026-05-24 04:11:17 +00:00
feat!: Separate full list of tools into new page
This commit is contained in:
+49
-696
@@ -1,730 +1,83 @@
|
||||
---
|
||||
meta_title: "Ad-Free Privacy Tool/Service Recommendations - Privacy Guides"
|
||||
title: "Privacy Tools"
|
||||
icon: material/tools
|
||||
description: A complete list of the privacy tools, services, software, and hardware recommended by the Privacy Guides community.
|
||||
toc: false
|
||||
cascade:
|
||||
type: docs
|
||||
---
|
||||
|
||||
If you're looking for a specific solution to something, these are the hardware and software tools we recommend in a variety of categories. Our recommended privacy tools are primarily chosen based on security features, with additional emphasis on decentralized and open-source tools. They are applicable to a variety of threat models ranging from protection against global mass surveillance programs and avoiding big tech companies to mitigating attacks, but only you can determine what will work best for your needs.
|
||||
|
||||
<div class="grid" markdown>
|
||||
|
||||
<div markdown>
|
||||
[VPN Providers](vpn.md){ .md-button }
|
||||
[Password Managers](passwords.md){ .md-button }
|
||||
[Email Providers](email.md){ .md-button }
|
||||
[Browser Extensions](browser-extensions.md){ .md-button }
|
||||
[DNS Servers](dns.md){ .md-button }
|
||||
[Email Aliasing Services](email-aliasing.md){ .md-button }
|
||||
[Photo Organization Tools](photo-management.md){ .md-button }
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
<div markdown>
|
||||
|
||||
<div class="admonition info" markdown>
|
||||
|
||||
[Self-hosting recommendations](self-hosting/_index.md) have been moved to their own category.
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
If you want assistance figuring out the best privacy tools and alternative programs for your needs, start a discussion on our [forum](https://discuss.privacyguides.net) or our [Matrix](https://matrix.to/#/#privacyguides:matrix.org) community!
|
||||
|
||||
For more details about each project, why they were chosen, and additional tips or tricks we recommend, click the "Learn more" link in each section, or click on the recommendation itself to be taken to that specific section of the page.
|
||||
|
||||
<div class="grid" markdown>
|
||||
|
||||
<div markdown>
|
||||
- [x] **Ad-Free Recommendations**
|
||||
- [x] **Frequent Updates**
|
||||
- [x] **Trusted by Readers**
|
||||
</div>
|
||||
|
||||
<div markdown>
|
||||
- [x] **Complete Editorial Independence**
|
||||
- [x] **Open-Source Contributions**
|
||||
- [x] **Trusted by Journalists**
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
## Private Web Browsers
|
||||
|
||||
<div class="admonition recommendation" markdown>
|
||||
|
||||
{ align=left }
|
||||
|
||||
**Tor Browser** (Desktop & Android) is the top choice if you need anonymity, as it provides you with access to the **Tor** network, a group of volunteer-operated servers that allows you to connect for free and improve your privacy and security on the Internet. Individuals and organizations can also share information over the Tor network with ".onion hidden services" without compromising their privacy. Because Tor traffic is difficult to block and trace, Tor is an effective censorship circumvention tool.
|
||||
|
||||
[Read Our Full Review :material-arrow-right-drop-circle:](tor.md){ .md-button .md-button--primary }
|
||||
|
||||
</div>
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .lg .middle .twemoji } **Mullvad Browser**
|
||||
|
||||
---
|
||||
|
||||
**Mullvad Browser** is a version of [Tor Browser](tor.md#tor-browser) with Tor network integrations removed, aimed at providing Tor Browser's anti-fingerprinting browser technologies to VPN users.
|
||||
|
||||
- [Read Full Review :material-arrow-right-drop-circle:](desktop-browsers.md#mullvad-browser)
|
||||
|
||||
- { .lg .middle .twemoji } **Firefox**
|
||||
|
||||
---
|
||||
|
||||
**Firefox** is a great Chromium alternative which provides strong privacy settings such as [Enhanced Tracking Protection](https://support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop), which can help block various [types of tracking](https://support.mozilla.org/kb/enhanced-tracking-protection-firefox-desktop#w_what-enhanced-tracking-protection-blocks).
|
||||
|
||||
- [Read Full Review :material-arrow-right-drop-circle:](desktop-browsers.md#firefox)
|
||||
|
||||
- { .lg .middle .twemoji } **Brave Browser**
|
||||
|
||||
---
|
||||
|
||||
**Brave** is a private-by-default browser based on Chromium, so it should feel familiar and have minimal website compatibility issues.
|
||||
|
||||
- [Brave Desktop Review :material-arrow-right-drop-circle:](desktop-browsers.md#brave)
|
||||
- [Brave Mobile Review :material-arrow-right-drop-circle:](mobile-browsers.md#brave)
|
||||
|
||||
- { .lg .middle .twemoji } **Cromite (Android)**
|
||||
|
||||
---
|
||||
|
||||
**Cromite** is a Chromium-based Android browser with built-in ad-blocking and [privacy enhancements](https://github.com/uazo/cromite/blob/master/docs/FEATURES.md). It is a fork of the popular, now-discontinued Bromite browser.
|
||||
|
||||
- [Read Full Review :material-arrow-right-drop-circle:](mobile-browsers.md#cromite-android)
|
||||
|
||||
- { .lg .middle .twemoji } **Safari (iOS)**
|
||||
|
||||
---
|
||||
|
||||
We recommend **Safari** due to its [anti-fingerprinting](https://webkit.org/blog/15697/private-browsing-2-0) features and default tracker blocking. It also separates your cookies in private browsing mode to prevent tracking between tabs.
|
||||
|
||||
- [Read Full Review :material-arrow-right-drop-circle:](mobile-browsers.md#safari-ios)
|
||||
|
||||
</div>
|
||||
|
||||
<div class="grid" markdown>
|
||||
|
||||
<div markdown>
|
||||
### Browser Extensions
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [uBlock Origin](browser-extensions.md#ublock-origin)
|
||||
- { .twemoji loading=lazy } [uBlock Origin Lite](browser-extensions.md#ublock-origin-lite)
|
||||
- { .twemoji loading=lazy } [AdGuard for iOS](browser-extensions.md#adguard)
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
<div markdown>
|
||||
### More Tor Network Tools
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Onion Browser (Tor for iOS)](tor.md#onion-browser-ios)
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
## Top 3 Private VPN Providers
|
||||
|
||||
<details class="danger" markdown>
|
||||
<summary>VPNs do not provide anonymity</summary>
|
||||
|
||||
Using a VPN will **not** keep your browsing habits anonymous, nor will it add additional security to non-secure (HTTP) traffic.
|
||||
|
||||
If you are looking for **anonymity**, you should use the Tor Browser.
|
||||
|
||||
If you're looking for added **security**, you should always ensure you're connecting to websites using HTTPS. A VPN is not a replacement for good security practices.
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](vpn.md)
|
||||
|
||||
</details>
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .lg .middle .twemoji } **Proton VPN**
|
||||
|
||||
---
|
||||
|
||||
- [x] **112+ Countries**
|
||||
- [x] WireGuard Support
|
||||
- [x] Cash Payments
|
||||
- [x] Partial Port Forwarding Support
|
||||
- [ ] No IPv6
|
||||
|
||||
[Read Full Review :material-arrow-right-drop-circle:](vpn.md#proton-vpn)
|
||||
|
||||
- { .lg .middle .twemoji } **IVPN**
|
||||
|
||||
---
|
||||
|
||||
- [x] **37+ Countries**
|
||||
- [x] WireGuard Support
|
||||
- [x] Monero & Cash Payments
|
||||
- [ ] No Port Forwarding
|
||||
- [ ] No IPv6
|
||||
|
||||
[Read Full Review :material-arrow-right-drop-circle:](vpn.md#ivpn)
|
||||
|
||||
- { .lg .middle .twemoji } **Mullvad**
|
||||
|
||||
---
|
||||
|
||||
- [x] **49+ Countries**
|
||||
- [x] WireGuard Support
|
||||
- [x] Monero & Cash Payments
|
||||
- [ ] No Port Forwarding
|
||||
- [x] IPv6 Support
|
||||
|
||||
[Read Full Review :material-arrow-right-drop-circle:](vpn.md#mullvad)
|
||||
|
||||
</div>
|
||||
|
||||
## Top 3 Private Email Providers
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .lg .middle .twemoji } **Proton Mail**
|
||||
|
||||
---
|
||||
|
||||
Proton Mail is an email service with a focus on privacy, encryption, security, and ease of use. They have been in operation since 2013. Proton AG is based in Geneva, Switzerland. The Proton Mail Free plan comes with 500 MB of Mail storage, which you can increase up to 1 GB for free.
|
||||
|
||||
[Read Full Review :material-arrow-right-drop-circle:](email.md#proton-mail)
|
||||
|
||||
- { .lg .middle .twemoji } **Mailbox Mail**
|
||||
|
||||
---
|
||||
|
||||
Mailbox Mail (formerly *Mailbox.org*) is an email service with a focus on being secure, ad-free, and powered by 100% eco-friendly energy. They have been in operation since 2014. Mailbox Mail is based in Berlin, Germany. Accounts start with up to 2 GB storage, which can be upgraded as needed.
|
||||
|
||||
[Read Full Review :material-arrow-right-drop-circle:](email.md#mailbox-mail)
|
||||
|
||||
- { .lg .middle .twemoji }{ .lg .middle .twemoji } **Tuta**
|
||||
|
||||
---
|
||||
|
||||
Tuta (formerly *Tutanota*) is an email service with a focus on security and privacy through the use of encryption. Tuta has been in operation since 2011 and is based in Hanover, Germany. Free accounts start with 1 GB of storage.
|
||||
|
||||
[Read Full Review :material-arrow-right-drop-circle:](email.md#tuta)
|
||||
|
||||
</div>
|
||||
|
||||
<div class="grid" markdown>
|
||||
|
||||
<div markdown>
|
||||
### Email Aliasing Services
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Addy.io](email-aliasing.md#addyio)
|
||||
- { .twemoji loading=lazy } [SimpleLogin](email-aliasing.md#simplelogin)
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
</div>
|
||||
|
||||
### Secure Email Clients
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Thunderbird](email-clients.md#thunderbird)
|
||||
- { .twemoji loading=lazy } [Apple Mail (macOS)](email-clients.md#apple-mail-macos)
|
||||
- { .twemoji loading=lazy } [FairEmail (Android)](email-clients.md#fairemail-android)
|
||||
- { .twemoji loading=lazy } [GNOME Evolution (Linux)](email-clients.md#gnome-evolution-gnome)
|
||||
- { .twemoji loading=lazy } [Kontact (Linux)](email-clients.md#kontact-kde)
|
||||
- { .twemoji loading=lazy } [Mailvelope (PGP in standard webmail)](email-clients.md#mailvelope-browser)
|
||||
- { .twemoji loading=lazy } [NeoMutt (CLI)](email-clients.md#neomutt-cli)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](email-clients.md)
|
||||
|
||||
## More Private Service Providers
|
||||
|
||||
### Cloud Storage
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Proton Drive](cloud.md#proton-drive)
|
||||
- { .twemoji loading=lazy } [Tresorit](cloud.md#tresorit)
|
||||
- { .twemoji loading=lazy } [Peergos](cloud.md#peergos)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](cloud.md)
|
||||
|
||||
### Data Removal Services
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [EasyOptOuts](data-broker-removals.md#easyoptouts-paid)
|
||||
- { .twemoji loading=lazy } [Google *Results about you*](data-broker-removals.md#google-results-about-you-free)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](data-broker-removals.md)
|
||||
|
||||
### DNS
|
||||
|
||||
#### DNS Providers
|
||||
|
||||
We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Mullvad](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) and [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended.
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](dns.md)
|
||||
|
||||
#### Encrypted DNS Proxies
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [RethinkDNS](dns.md#rethinkdns)
|
||||
- { .twemoji loading=lazy } [DNSCrypt-Proxy](dns.md#dnscrypt-proxy)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](dns.md#encrypted-dns-proxies)
|
||||
|
||||
### Financial Services
|
||||
|
||||
#### Payment Masking Services
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Privacy.com](financial-services.md#privacycom-us)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [MySudo](financial-services.md#mysudo-us-paid)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](financial-services.md#payment-masking-services)
|
||||
|
||||
#### Online Gift Card Marketplaces
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Coincards](financial-services.md#coincards)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](financial-services.md#gift-card-marketplaces)
|
||||
|
||||
### Photo Management
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Ente Photos](photo-management.md#ente-photos)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](photo-management.md)
|
||||
|
||||
### Search Engines
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Brave Search](search-engines.md#brave-search)
|
||||
- { .twemoji loading=lazy } [DuckDuckGo](search-engines.md#duckduckgo)
|
||||
- { .twemoji loading=lazy } [SearXNG](search-engines.md#searxng)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Startpage](search-engines.md#startpage)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](search-engines.md)
|
||||
## Service Providers
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="services/calendar/" title="Calendar Sync" icon="calendar" >}}
|
||||
{{< card link="services/cloud-storage/" title="Cloud Storage" icon="cloud" >}}
|
||||
{{< card link="services/data-broker-removals/" title="Data Removal Services" icon="folder-remove" >}}
|
||||
{{< card link="services/dns/" title="DNS Servers" icon="globe" >}}
|
||||
{{< card link="services/email-aliasing/" title="Email Aliasing Services" icon="at-symbol" >}}
|
||||
{{< card link="services/email/" title="Email Providers" icon="inbox" >}}
|
||||
{{< card link="services/financial-services/" title="Financial Services" icon="currency-dollar" >}}
|
||||
{{< card link="services/messengers/" title="Instant Messengers" icon="chat" >}}
|
||||
{{< card link="services/photo-management/" title="Photo Organization Tools" icon="photograph" >}}
|
||||
{{< card link="services/search-engines/" title="Search Engines" icon="search" >}}
|
||||
{{< card link="services/vpn/" title="VPN Providers" icon="globe" >}}
|
||||
{{< /cards >}}
|
||||
|
||||
## Software
|
||||
|
||||
### AI Chat
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Kobold.cpp](ai-chat.md#koboldcpp)
|
||||
- { .twemoji loading=lazy } [Llamafile](ai-chat.md#llamafile)
|
||||
- { .twemoji loading=lazy } [Ollama (CLI)](ai-chat.md#ollama-cli)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](ai-chat.md)
|
||||
|
||||
### Calendar Sync
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Tuta](calendar.md#tuta)
|
||||
- { .twemoji loading=lazy } [Proton Calendar](calendar.md#proton-calendar)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](calendar.md)
|
||||
|
||||
### Cryptocurrency
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Monero](cryptocurrency.md#monero)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](cryptocurrency.md)
|
||||
|
||||
### Data and Metadata Redaction
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [MAT2](data-redaction.md#mat2)
|
||||
- { .twemoji loading=lazy } [ExifEraser (Android)](data-redaction.md#exiferaser-android)
|
||||
- { .twemoji loading=lazy } [ExifTool (CLI)](data-redaction.md#exiftool-cli)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](data-redaction.md)
|
||||
|
||||
### Document Collaboration
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [CryptPad](document-collaboration.md#cryptpad)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](document-collaboration.md)
|
||||
|
||||
### Encryption Software
|
||||
|
||||
<details class="info" markdown>
|
||||
<summary>Operating System Encryption</summary>
|
||||
|
||||
For encrypting your OS drive, we typically recommend using the encryption tool your operating system provides, whether that is **BitLocker** on Windows, **FileVault** on macOS, or **LUKS** on Linux. These tools are included with the operating system and take advantage of hardware encryption elements such as a [secure cryptoprocessor](basics/hardware.md/#tpmsecure-cryptoprocessor).
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](encryption.md#operating-system-encryption)
|
||||
|
||||
</details>
|
||||
|
||||
#### Cross-Platform Tools
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Cryptomator](encryption.md#cryptomator-cloud)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [VeraCrypt (FDE)](encryption.md#veracrypt-disk)
|
||||
- { .twemoji loading=lazy } [Kryptor](encryption.md#kryptor)
|
||||
- { .twemoji loading=lazy } [Tomb](encryption.md#tomb)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](encryption.md)
|
||||
|
||||
#### OpenPGP Clients
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [GnuPG](encryption.md#gnu-privacy-guard)
|
||||
- { .twemoji loading=lazy } [GPG4Win (Windows)](encryption.md#gpg4win)
|
||||
- { .twemoji loading=lazy } [GPG Suite (macOS)](encryption.md#gpg-suite)
|
||||
- { .twemoji loading=lazy } [OpenKeychain](encryption.md#openkeychain)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](encryption.md#openpgp)
|
||||
|
||||
### File Sharing and Sync
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Send](file-sharing.md#send)
|
||||
- { .twemoji loading=lazy } [OnionShare](file-sharing.md#onionshare)
|
||||
- { .twemoji loading=lazy } [Syncthing](file-sharing.md#syncthing-p2p)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](file-sharing.md)
|
||||
|
||||
### Frontends
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Redlib (Reddit, Web)](frontends.md#redlib)
|
||||
- { .twemoji loading=lazy } [ProxiTok (TikTok, Web)](frontends.md#proxitok)
|
||||
- { .twemoji loading=lazy } [FreeTube (YouTube, Desktop)](frontends.md#freetube)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [LibreTube (YouTube, Android)](frontends.md#libretube-android)
|
||||
- { .twemoji loading=lazy } [NewPipe (YouTube, Android)](frontends.md#newpipe-android)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Invidious (YouTube, Web)](frontends.md#invidious)
|
||||
- { .twemoji loading=lazy } [Piped (YouTube, Web)](frontends.md#piped)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](frontends.md)
|
||||
|
||||
### Health and Wellness Apps
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Drip](health-and-wellness.md#drip)
|
||||
- { .twemoji loading=lazy } [Euki](health-and-wellness.md#euki)
|
||||
- { .twemoji loading=lazy } { .twemoji loading=lazy } [Apple Health](health-and-wellness.md#apple-health)
|
||||
- { .twemoji loading=lazy } [Apple Fitness](health-and-wellness.md#apple-fitness)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Gadgetbridge](health-and-wellness.md#gadgetbridge)
|
||||
- { .twemoji loading=lazy } { .twemoji loading=lazy } [Apple Health Records](health-and-wellness.md#apple-health-records)
|
||||
- { .twemoji loading=lazy } [CommonHealth](health-and-wellness.md#commonhealth)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](health-and-wellness.md)
|
||||
|
||||
### Language Tools
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [LanguageTool](language-tools.md#languagetool)
|
||||
- { .twemoji } [LibreTranslate](language-tools.md#libretranslate)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](language-tools.md)
|
||||
|
||||
### Maps and Navigation Apps
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Organic Maps](maps.md#organic-maps)
|
||||
- { .twemoji loading=lazy } [OsmAnd](maps.md#osmand)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](maps.md)
|
||||
|
||||
### Multi-Factor Authentication Tools
|
||||
|
||||
**Note:** [Hardware security keys](#security-keys) have been moved to their own category.
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Ente Auth](multi-factor-authentication.md#ente-auth)
|
||||
- { .twemoji loading=lazy } [Aegis Authenticator (Android)](multi-factor-authentication.md#aegis-authenticator-android)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](multi-factor-authentication.md)
|
||||
|
||||
### News Aggregators
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Akregator](news-aggregators.md#akregator)
|
||||
- { .twemoji loading=lazy } [NewsFlash](news-aggregators.md#newsflash)
|
||||
- { .twemoji} [Feeder (Android)](news-aggregators.md#feeder)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Miniflux](news-aggregators.md#miniflux)
|
||||
- { .twemoji loading=lazy } [NetNewsWire](news-aggregators.md#netnewswire)
|
||||
- { .twemoji loading=lazy } [Newsboat](news-aggregators.md#newsboat)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](news-aggregators.md)
|
||||
|
||||
### Notebooks
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Standard Notes](notebooks.md#standard-notes)
|
||||
- { .twemoji loading=lazy } [Notesnook](notebooks.md#notesnook)
|
||||
- { .twemoji loading=lazy } [Joplin](notebooks.md#joplin)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Cryptee](notebooks.md#cryptee)
|
||||
- { .twemoji loading=lazy } [Org-mode](notebooks.md#org-mode)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](notebooks.md)
|
||||
|
||||
### Office Suites
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [LibreOffice](office-suites.md#libreoffice)
|
||||
- { .twemoji loading=lazy } [OnlyOffice](office-suites.md#onlyoffice)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](office-suites.md)
|
||||
|
||||
### Password Managers
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Bitwarden](passwords.md#bitwarden)
|
||||
- { .twemoji loading=lazy } [Proton Pass](passwords.md#proton-pass)
|
||||
- { .twemoji loading=lazy } [1Password](passwords.md#1password)
|
||||
- { .twemoji loading=lazy } [Psono](passwords.md#psono)
|
||||
- { .twemoji loading=lazy } [KeePassXC](passwords.md#keepassxc)
|
||||
- { .twemoji loading=lazy } [KeePassDX (Android)](passwords.md#keepassdx-android)
|
||||
- { .twemoji loading=lazy } [KeePassium (iOS & macOS)](passwords.md#keepassium-ios-macos)
|
||||
- { .twemoji loading=lazy } [Gopass (CLI)](passwords.md#gopass-cli)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](passwords.md)
|
||||
|
||||
### Pastebins
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [PrivateBin](pastebins.md#privatebin)
|
||||
- { .twemoji loading=lazy } [Paaster](pastebins.md#paaster)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](pastebins.md)
|
||||
|
||||
### Real-Time Communication
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Signal](real-time-communication.md#signal)
|
||||
- { .twemoji loading=lazy } [Briar](real-time-communication.md#briar)
|
||||
- { .twemoji loading=lazy } [SimpleX Chat](real-time-communication.md#simplex-chat)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](real-time-communication.md)
|
||||
|
||||
### Social Networks
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Mastodon](social-networks.md#mastodon)
|
||||
- { .twemoji loading=lazy } [Element](social-networks.md#element)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](social-networks.md)
|
||||
{{< cards >}}
|
||||
{{< card link="software/ai-chat/" title="AI Chat" icon="lightning-bolt" >}}
|
||||
{{< card link="software/cryptocurrency/" title="Cryptocurrency" icon="cash" >}}
|
||||
{{< card link="software/data-redaction/" title="Data and Metadata Redaction" icon="scissors" >}}
|
||||
{{< card link="software/document-collaboration/" title="Document Collaboration" icon="document-text" >}}
|
||||
{{< card link="software/encryption/" title="Encryption Software" icon="lock-closed" >}}
|
||||
{{< card link="software/file-sharing/" title="File Sharing and Sync" icon="document-download" >}}
|
||||
{{< card link="software/frontends/" title="Frontends" icon="desktop-computer" >}}
|
||||
{{< card link="software/health-and-wellness/" title="Health and Wellness Apps" icon="heart" >}}
|
||||
{{< card link="software/language-tools/" title="Language Tools" icon="translate" >}}
|
||||
{{< card link="software/maps/" title="Maps and Navigation Apps" icon="map" >}}
|
||||
{{< card link="software/multi-factor-authentication/" title="Multi-Factor Authentication Tools" icon="device-mobile" >}}
|
||||
{{< card link="software/news-aggregators/" title="News Aggregators" icon="newspaper" >}}
|
||||
{{< card link="software/notebooks/" title="Notebooks" icon="pencil-alt" >}}
|
||||
{{< card link="software/office-suites/" title="Office Suites" icon="document" >}}
|
||||
{{< card link="software/passwords/" title="Password Managers" icon="key" >}}
|
||||
{{< card link="software/pastebins/" title="Pastebins" icon="clipboard" >}}
|
||||
{{< card link="software/social-networks/" title="Social Networks" icon="globe-alt" >}}
|
||||
{{< /cards >}}
|
||||
|
||||
## Hardware
|
||||
|
||||
### Security Keys
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Yubico Security Key](security-keys.md#yubico-security-key)
|
||||
- { .twemoji loading=lazy } [YubiKey](security-keys.md#yubikey)
|
||||
- { .twemoji loading=lazy } [Nitrokey](security-keys.md#nitrokey)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](security-keys.md)
|
||||
|
||||
### Mobile Phones
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Google Pixel](mobile-phones.md#google-pixel)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](mobile-phones.md)
|
||||
{{< cards >}}
|
||||
{{< card link="hardware/mobile-phones/" title="Mobile Phones" icon="device-mobile" >}}
|
||||
{{< card link="hardware/security-keys/" title="Security Keys" icon="key" >}}
|
||||
{{< /cards >}}
|
||||
|
||||
## Operating Systems
|
||||
|
||||
### Mobile
|
||||
|
||||
#### Custom Android Operating Systems
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [GrapheneOS](android/distributions.md#grapheneos)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](android/distributions.md)
|
||||
|
||||
#### Android Apps
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Shelter (Work Profiles)](android/general-apps.md#shelter)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Secure Camera](android/general-apps.md#secure-camera)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Secure PDF Viewer](android/general-apps.md#secure-pdf-viewer)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](android/general-apps.md)
|
||||
|
||||
#### Ways to Obtain Android Apps
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Obtainium (App Manager)](android/obtaining-apps.md#obtainium)
|
||||
- { .twemoji loading=lazy } [Aurora Store (Google Play Client)](android/obtaining-apps.md#aurora-store)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](android/obtaining-apps.md)
|
||||
|
||||
### Desktop/PC
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } [Qubes OS (Xen VM Distribution)](desktop.md#qubes-os)
|
||||
- { .twemoji loading=lazy } [Fedora Linux](desktop.md#fedora-linux)
|
||||
- { .twemoji loading=lazy } [openSUSE Tumbleweed](desktop.md#opensuse-tumbleweed)
|
||||
- { .twemoji loading=lazy } [Arch Linux](desktop.md#arch-linux)
|
||||
- { .twemoji loading=lazy } [Fedora Atomic Desktops](desktop.md#fedora-atomic-desktops)
|
||||
- { .twemoji loading=lazy } [NixOS](desktop.md#nixos)
|
||||
- { .twemoji loading=lazy } [Whonix (Tor)](desktop.md#whonix)
|
||||
- { .twemoji loading=lazy } [Tails (Live Boot)](desktop.md#tails)
|
||||
- { .twemoji loading=lazy } [Secureblue](desktop.md#secureblue)
|
||||
- { .twemoji loading=lazy } [Kicksecure](desktop.md#kicksecure)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](desktop.md)
|
||||
|
||||
### Router Firmware
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [OpenWrt](router.md#openwrt)
|
||||
- { .twemoji loading=lazy } [OPNsense](router.md#opnsense)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](router.md)
|
||||
{{< cards >}}
|
||||
{{< card link="os/android/" title="Android ROM" icon="device-mobile" >}}
|
||||
{{< card link="os/desktop/" title="Desktop OS" icon="desktop-computer" >}}
|
||||
{{< card link="os/router-firmware/" title="Router Firmware" icon="wifi" >}}
|
||||
{{< /cards >}}
|
||||
|
||||
## Advanced Tools
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="advanced/alternative-networks/" title="Alternative Networks" icon="link" >}}
|
||||
{{< card link="advanced/device-integrity/" title="Device Integrity Verification" icon="shield-check" >}}
|
||||
{{< /cards >}}
|
||||
|
||||
These tools may provide utility for certain individuals. They provide functionality which most people do not need to worry about, and often require more in-depth technical knowledge to utilize effectively.
|
||||
|
||||
### Alternative Networks
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy } { .twemoji loading=lazy } [I2P](alternative-networks.md#i2p-the-invisible-internet-project)
|
||||
- { .twemoji loading=lazy } [Tor](alternative-networks.md#tor)
|
||||
- { .twemoji loading=lazy } [Orbot (Mobile Tor Proxy)](alternative-networks.md#orbot)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Snowflake](alternative-networks.md#snowflake)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](advanced/alternative-networks/_index.md)
|
||||
|
||||
### Device Integrity Verification
|
||||
|
||||
<div class="grid cards" markdown>
|
||||
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Mobile Verification Toolkit](device-integrity.md#mobile-verification-toolkit)
|
||||
- { .twemoji loading=lazy } [iMazing (iOS)](device-integrity.md#imazing-ios)
|
||||
- { .twemoji loading=lazy }{ .twemoji loading=lazy } [Auditor (Android)](device-integrity.md#auditor-android)
|
||||
|
||||
</div>
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](device-integrity.md)
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
---
|
||||
title: Advanced
|
||||
weight: 5
|
||||
weight: 70
|
||||
---
|
||||
|
||||
@@ -0,0 +1,342 @@
|
||||
---
|
||||
title: All Tools
|
||||
weight: 10
|
||||
---
|
||||
|
||||
<style>
|
||||
.hextra-card-image {
|
||||
width: 100px;
|
||||
padding: 16px;
|
||||
}
|
||||
</style>
|
||||
|
||||
## Service Providers
|
||||
|
||||
### Calendar Sync
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../tools/calendar-sync/#tuta" title="Tuta" image="../services/calendar/tuta.svg" subtitle="Tuta is a self-hosted, open-source calendar sync service that allows you to synchronize your calendar data across devices securely." >}}
|
||||
{{< card link="../tools/calendar-sync/#proton-calendar" title="Proton Calendar" image="../services/calendar/proton-calendar.svg" subtitle="Proton Calendar is a privacy-focused calendar service developed by the makers of Proton Mail." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Cloud Storage
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/cloud/#proton-drive" title="Proton Drive" image="../services/cloud/protondrive.svg" subtitle="Proton Drive is an encrypted cloud storage provider from the popular encrypted email provider Proton Mail." >}}
|
||||
{{< card link="../services/cloud/#tresorit" title="Tresorit" image="../services/cloud/tresorit.svg" subtitle="Tresorit is a Swiss-Hungarian encrypted cloud storage provider founded in 2011. Tresorit is owned by the Swiss Post, the national postal service of Switzerland." >}}
|
||||
{{< card link="../services/cloud/#peergos" title="Peergos" image="../services/cloud/peergos.svg" subtitle="Peergos is a decentralized protocol and open-source platform for storage, social media, and applications. It provides a secure and private space where users can store, share, view, and edit their photos, videos, documents, etc." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Data Removal Services
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/data-broker-removals/#easyoptouts" title="EasyOptOuts" image="../services/data-broker-removals/easyoptouts.svg" subtitle="EasyOptOuts is a paid data removal service that removes your information from data brokers and people search sites." >}}
|
||||
{{< card link="../services/data-broker-removals/#google-results-about-you" title="Google *Results about you*" image="../services/data-broker-removals/google.svg" subtitle="Google's *Results about you* is a free data removal service that allows you to request the removal of certain personal information from Google Search results." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### DNS
|
||||
|
||||
#### DNS Providers
|
||||
|
||||
We [recommend](dns.md#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Mullvad](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) and [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended.
|
||||
|
||||
[Learn more :material-arrow-right-drop-circle:](dns.md)
|
||||
|
||||
#### Encrypted DNS Proxies
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/dns/#rethinkdns" title="RethinkDNS" image="../services/dns/rethinkdns.svg" subtitle="RethinkDNS is an open-source encrypted DNS proxy for Android that supports DNS-over-HTTPS and DNS-over-TLS." >}}
|
||||
{{< card link="../services/dns/#dnscrypt-proxy" title="DNSCrypt-Proxy" image="../services/dns/dnscrypt-proxy.svg" subtitle="DNSCrypt-Proxy is a cross-platform encrypted DNS proxy that supports DNS-over-HTTPS, DNS-over-TLS, and DNSCrypt." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Financial Services
|
||||
|
||||
#### Payment Masking Services
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/financial-services/#privacycom" title="Privacy.com" image="../services/financial-services/privacy_com.svg" subtitle="Privacy.com is a US-based payment masking service that allows you to create virtual credit cards for online purchases." >}}
|
||||
{{< card link="../services/financial-services/#mysudo" title="MySudo" image="../services/financial-services/mysudo.svg" subtitle="MySudo is a US-based payment masking service that allows you to create virtual credit cards for online purchases, as well as providing private phone numbers and email addresses." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
#### Online Gift Card Marketplaces
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/financial-services/#coincards" title="Coincards" image="../services/financial-services/coincards.svg" subtitle="Coincards is a Canadian online gift card marketplace that allows you to buy and sell gift cards for various retailers." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Password Managers
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/passwords/#bitwarden" title="Bitwarden" image="../services/passwords/bitwarden.svg" subtitle="Bitwarden is a cross-platform, open-source password manager that offers end-to-end encryption and a user-friendly interface." >}}
|
||||
{{< card link="../services/passwords/#proton-pass" title="Proton Pass" image="../services/passwords/protonpass.svg" subtitle="Proton Pass is a cross-platform password manager developed by the makers of Proton Mail." >}}
|
||||
{{< card link="../services/passwords/#1password" title="1Password" image="../services/passwords/1password.svg" subtitle="1Password is a cross-platform password manager that offers end-to-end encryption and a user-friendly interface." >}}
|
||||
{{< card link="../services/passwords/#psono" title="Psono" image="../services/passwords/psono.svg" subtitle="Psono is a cross-platform, open-source password manager that offers end-to-end encryption and a user-friendly interface." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
> [!NOTE]
|
||||
> For local or self-hosted password managers, see our [Password Managers (Local)](#password-managers-local) section below.
|
||||
|
||||
### Photo Management
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/photo-management/#ente-photos" title="Ente Photos" image="../services/photo-management/ente.svg" subtitle="Ente Photos is a self-hosted, open-source photo management service that allows you to store, organize, and share your photos securely." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Search Engines
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/search-engines/#brave-search" title="Brave Search" image="../services/search-engines/brave-search.svg" subtitle="Brave Search is a privacy-focused search engine developed by the makers of the Brave browser." >}}
|
||||
{{< card link="../services/search-engines/#duckduckgo" title="DuckDuckGo" image="../services/search-engines/duckduckgo.svg" subtitle="DuckDuckGo is a privacy-focused search engine that does not track its users." >}}
|
||||
{{< card link="../services/search-engines/#searxng" title="SearXNG" image="../services/search-engines/searxng.svg" subtitle="SearXNG is a free and open-source metasearch engine that aggregates results from various search engines while respecting user privacy." >}}
|
||||
{{< card link="../services/search-engines/#startpage" title="Startpage" image="../services/search-engines/startpage.svg#only-light" image-dark="../services/search-engines/startpage-dark.svg#only-dark" subtitle="Startpage is a privacy-focused search engine that serves Google search results without tracking its users." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
## Software
|
||||
|
||||
### AI Chat
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../tools/ai-chat/#koboldcpp" title="Kobold.cpp" image="../software/ai-chat/kobold.png" subtitle="Kobold.cpp is a cross-platform, open-source implementation of the LLaMA language model that can run on a variety of hardware." >}}
|
||||
{{< card link="../tools/ai-chat/#llamafile" title="Llamafile" image="../software/ai-chat/llamafile.webp" subtitle="Llamafile is a web-based interface for running LLaMA language models in the browser using WebAssembly." >}}
|
||||
{{< card link="../tools/ai-chat/#ollama-cli" title="Ollama (CLI)" image="../software/ai-chat/ollama.png" subtitle="Ollama is a command-line interface for running LLaMA language models on your local machine." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Cryptocurrency
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../tools/cryptocurrency/#monero" title="Monero" image="../software/cryptocurrency/monero.svg" subtitle="Monero is a privacy-focused cryptocurrency that uses ring signatures, stealth addresses, and confidential transactions to provide strong privacy guarantees for its users." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Data and Metadata Redaction
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../tools/data-redaction/#mat2" title="MAT2" image="../software/data-redaction/mat2.svg" subtitle="MAT2 (Metadata Anonymisation Toolkit 2) is a cross-platform, open-source tool for removing metadata from various file types." >}}
|
||||
{{< card link="../tools/data-redaction/#exiferaser-android" title="ExifEraser (Android)" image="../software/data-redaction/exiferaser.svg" subtitle="ExifEraser is an Android app for removing EXIF metadata from photos." >}}
|
||||
{{< card link="../tools/data-redaction/#exiftool-cli" title="ExifTool (CLI)" image="../software/data-redaction/exiftool.png" subtitle="ExifTool is a command-line application for reading, writing, and editing metadata in a wide variety of file formats." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Document Collaboration
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../tools/document-collaboration/#cryptpad" title="CryptPad" image="../software/document-collaboration/cryptpad.svg" subtitle="CryptPad is a web-based, end-to-end encrypted collaboration suite that includes tools for document editing, spreadsheets, presentations, and more." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Encryption Software
|
||||
|
||||
#### Operating System Encryption
|
||||
|
||||
> [!TIP]
|
||||
> For encrypting your OS drive, we typically recommend using the encryption tool your operating system provides, whether that is BitLocker on Windows, FileVault on macOS, or LUKS on Linux. These tools are included with the operating system and take advantage of hardware encryption elements such as a secure cryptoprocessor.
|
||||
|
||||
#### Cross-Platform Tools
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/encryption/#cryptomator" title="Cryptomator" image="../software/encryption/cryptomator.svg" subtitle="Cryptomator is a cross-platform, open-source encryption tool that allows you to encrypt your files and folders before uploading them to cloud storage providers." >}}
|
||||
{{< card link="../software/encryption/#veracrypt-disk" title="VeraCrypt (FDE)" image="../software/encryption/veracrypt.svg" subtitle="VeraCrypt is a cross-platform, open-source encryption tool that allows you to create encrypted containers, encrypt entire drives, and perform full disk encryption (FDE)." >}}
|
||||
{{< card link="../software/encryption/#kryptor" title="Kryptor" image="../software/encryption/kryptor.png" subtitle="Kryptor is a cross-platform, open-source encryption tool that allows you to encrypt your files and folders using AES-256 encryption." >}}
|
||||
{{< card link="../software/encryption/#tomb" title="Tomb" image="../software/encryption/tomb.png" subtitle="Tomb is a cross-platform, open-source encryption tool that allows you to create encrypted containers for storing your sensitive data." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
#### OpenPGP Clients
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/encryption/#gnupg" title="GnuPG" image="../software/encryption/gnupg.svg" subtitle="GnuPG (GNU Privacy Guard) is a free and open-source implementation of the OpenPGP standard for encrypting and signing data and communications." >}}
|
||||
{{< card link="../software/encryption/#gpg4win" title="GPG4Win (Windows)" image="../software/encryption/gpg4win.svg" subtitle="GPG4Win is a Windows-based suite of tools that includes GnuPG for encryption and signing, as well as additional tools for key management and integration with email clients." >}}
|
||||
{{< card link="../software/encryption/#gpg-suite" title="GPG Suite (macOS)" image="../software/encryption/gpgsuite.png" subtitle="GPG Suite is a macOS-based suite of tools that includes GnuPG for encryption and signing, as well as additional tools for key management and integration with email clients." >}}
|
||||
{{< card link="../software/encryption/#openkeychain" title="OpenKeychain" image="../software/encryption/openkeychain.svg" subtitle="OpenKeychain is an Android app that provides OpenPGP encryption and signing capabilities, allowing you to secure your communications and files on your mobile device." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### File Sharing and Sync
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/file-sharing/#send" title="Send" image="../software/file-sharing/send.svg" subtitle="Send is a free, end-to-end encrypted file sharing service developed by Mozilla." >}}
|
||||
{{< card link="../software/file-sharing/#onionshare" title="OnionShare" image="../software/file-sharing/onionshare.svg" subtitle="OnionShare is a free, open-source tool that allows you to securely and anonymously share files of any size using the Tor network." >}}
|
||||
{{< card link="../software/file-sharing/#syncthing-p2p" title="Syncthing (P2P)" image="../software/file-sharing/syncthing.svg" subtitle="Syncthing is a free, open-source peer-to-peer file synchronization tool that allows you to sync files between devices without relying on a central server." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Frontends
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/frontends/#redlib" title="Redlib (Reddit, Web)" image="../software/frontends/redlib.svg" subtitle="Redlib is a web-based frontend for Reddit that blocks ads and trackers while providing a clean and user-friendly interface." >}}
|
||||
{{< card link="../software/frontends/#proxitok" title="ProxiTok (TikTok, Web)" image="../software/frontends/proxitok.svg" subtitle="ProxiTok is a web-based frontend for TikTok that blocks ads and trackers while providing a clean and user-friendly interface." >}}
|
||||
{{< card link="../software/frontends/#freetube" title="FreeTube (YouTube, Desktop)" image="../software/frontends/freetube.svg" subtitle="FreeTube is a desktop application that serves as a privacy-focused frontend for YouTube, allowing you to watch videos without ads or tracking." >}}
|
||||
{{< card link="../software/frontends/#libretube-android" title="LibreTube (YouTube, Android)" image="../software/frontends/libretube.svg" subtitle="LibreTube is an Android app that serves as a privacy-focused frontend for YouTube, allowing you to watch videos without ads or tracking." >}}
|
||||
{{< card link="../software/frontends/#newpipe-android" title="NewPipe (YouTube, Android)" image="../software/frontends/newpipe.svg" subtitle="NewPipe is an Android app that serves as a privacy-focused frontend for YouTube, allowing you to watch videos without ads or tracking." >}}
|
||||
{{< card link="../software/frontends/#invidious" title="Invidious (YouTube, Web)" image="../software/frontends/invidious.svg" subtitle="Invidious is a web-based frontend for YouTube that blocks ads and trackers while providing a clean and user-friendly interface." >}}
|
||||
{{< card link="../software/frontends/#piped" title="Piped (YouTube, Web)" image="../software/frontends/piped.svg" subtitle="Piped is a web-based frontend for YouTube that blocks ads and trackers while providing a clean and user-friendly interface." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Health and Wellness Apps
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/health-and-wellness/#drip" title="Drip" image="../software/health-and-wellness/drip.png" subtitle="Drip is a self-hosted, open-source health and wellness app that allows you to track your habits, goals, and overall well-being securely." >}}
|
||||
{{< card link="../software/health-and-wellness/#euki" title="Euki" image="../software/health-and-wellness/euki.svg" subtitle="Euki is a self-hosted, open-source period and fertility tracking app that allows you to track your menstrual cycle and related health data securely." >}}
|
||||
{{< card link="../software/health-and-wellness/#apple-health" title="Apple Health" image="../software/health-and-wellness/apple-health.webp#only-light" image-dark="../software/health-and-wellness/apple-health-dark.webp#only-dark" subtitle="Apple Health is a health and wellness app developed by Apple that allows you to track your health data on iOS devices." >}}
|
||||
{{< card link="../software/health-and-wellness/#apple-fitness" title="Apple Fitness" image="../software/health-and-wellness/apple-fitness.webp" subtitle="Apple Fitness is a fitness tracking app developed by Apple that provides workout tracking and fitness-related features on iOS devices." >}}
|
||||
{{< card link="../software/health-and-wellness/#gadgetbridge" title="Gadgetbridge" image="../software/health-and-wellness/gadgetbridge.svg#only-light" image-dark="../software/health-and-wellness/gadgetbridge-dark.svg#only-dark" subtitle="Gadgetbridge is an open-source Android app that allows you to connect and manage various fitness trackers and smartwatches without relying on proprietary apps." >}}
|
||||
{{< card link="../software/health-and-wellness/#apple-health-records" title="Apple Health Records" image="../software/health-and-wellness/apple-health.webp#only-light" image-dark="../software/health-and-wellness/apple-health-dark.webp#only-dark" subtitle="Apple Health Records is a feature of the Apple Health app that allows you to securely store and manage your medical records on iOS devices." >}}
|
||||
{{< card link="../software/health-and-wellness/#commonhealth" title="CommonHealth" image="../software/health-and-wellness/commonhealth.png" subtitle="CommonHealth is an open-source Android app that allows you to track and manage your health data securely, with a focus on interoperability and user control." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Language Tools
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/language-tools/#languagetool" title="LanguageTool" image="../software/language-tools/languagetool.svg#only-light" image-dark="../software/language-tools/languagetool-dark.svg#only-dark" subtitle="LanguageTool is a cross-platform, open-source grammar and spell checker that supports multiple languages." >}}
|
||||
{{< card link="../software/language-tools/#libretranslate" title="LibreTranslate" image="../software/language-tools/libretranslate.png" subtitle="LibreTranslate is a free and open-source machine translation API that supports multiple languages." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Maps and Navigation Apps
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/maps/#organic-maps" title="Organic Maps" image="../software/maps/organic-maps.svg" subtitle="Organic Maps is a free, open-source offline maps and navigation app for Android and iOS." >}}
|
||||
{{< card link="../software/maps/#osmand" title="OsmAnd" image="../software/maps/osmand.svg" subtitle="OsmAnd is a free, open-source offline maps and navigation app for Android and iOS." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Multi-Factor Authentication Tools
|
||||
|
||||
> [!NOTE]
|
||||
> [Hardware security keys](#security-keys) have been moved to their own category.
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/multi-factor-authentication/#ente-auth" title="Ente Auth" image="../software/multi-factor-authentication/ente-auth.svg" subtitle="Ente Auth is a self-hosted, open-source multi-factor authentication (MFA) tool that allows you to generate time-based one-time passwords (TOTPs) for securing your online accounts." >}}
|
||||
{{< card link="../software/multi-factor-authentication/#aegis-authenticator-android" title="Aegis Authenticator (Android)" image="../software/multi-factor-authentication/aegis.png" subtitle="Aegis Authenticator is an open-source multi-factor authentication (MFA) app for Android that allows you to generate time-based one-time passwords (TOTPs) for securing your online accounts." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### News Aggregators
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/news-aggregators/#akregator" title="Akregator" image="../software/news-aggregators/akregator.svg" subtitle="Akregator is a free, open-source news aggregator for the KDE desktop environment that allows you to subscribe to and read RSS feeds." >}}
|
||||
{{< card link="../software/news-aggregators/#newsflash" title="NewsFlash" image="../software/news-aggregators/newsflash.png" subtitle="NewsFlash is a free, open-source news aggregator for Linux that allows you to subscribe to and read RSS feeds." >}}
|
||||
{{< card link="../software/news-aggregators/#feeder-android" title="Feeder (Android)" image="../software/news-aggregators/feeder.png" subtitle="Feeder is a free, open-source news aggregator for Android that allows you to subscribe to and read RSS feeds." >}}
|
||||
{{< card link="../software/news-aggregators/#miniflux" title="Miniflux" image="../software/news-aggregators/miniflux.svg#only-light" image-dark="../software/news-aggregators/miniflux-dark.svg#only-dark" subtitle="Miniflux is a self-hosted, open-source news aggregator that allows you to subscribe to and read RSS feeds securely." >}}
|
||||
{{< card link="../software/news-aggregators/#netnewswire" title="NetNewsWire" image="../software/news-aggregators/netnewswire.png" subtitle="NetNewsWire is a free, open-source news aggregator for macOS and iOS that allows you to subscribe to and read RSS feeds." >}}
|
||||
{{< card link="../software/news-aggregators/#newsboat" title="Newsboat" image="../software/news-aggregators/newsboat.svg" subtitle="Newsboat is a free, open-source news aggregator for the command line that allows you to subscribe to and read RSS feeds." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Notebooks
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/notebooks/#standard-notes" title="Standard Notes" image="../software/notebooks/standard-notes.svg" subtitle="Standard Notes is a cross-platform, open-source note-taking app that focuses on simplicity and security." >}}
|
||||
{{< card link="../software/notebooks/#notesnook" title="Notesnook" image="../software/notebooks/notesnook.svg" subtitle="Notesnook is a cross-platform, open-source note-taking app that offers end-to-end encryption and a user-friendly interface." >}}
|
||||
{{< card link="../software/notebooks/#joplin" title="Joplin" image="../software/notebooks/joplin.svg" subtitle="Joplin is a cross-platform, open-source note-taking and to-do application that supports end-to-end encryption." >}}
|
||||
{{< card link="../software/notebooks/#cryptee" title="Cryptee" image="../software/notebooks/cryptee.svg#only-light" image-dark="../software/notebooks/cryptee-dark.svg#only-dark" subtitle="Cryptee is a cross-platform, open-source note-taking and photo storage app that offers end-to-end encryption." >}}
|
||||
{{< card link="../software/notebooks/#org-mode" title="Org-mode" image="../software/notebooks/org-mode.svg" subtitle="Org-mode is an open-source organizational tool for Emacs that allows you to manage your notes, tasks, and projects in a plain text format." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Office Suites
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/office-suites/#libreoffice" title="LibreOffice" image="../software/office-suites/libreoffice.svg" subtitle="LibreOffice is a free and open-source office suite that includes applications for word processing, spreadsheets, presentations, and more." >}}
|
||||
{{< card link="../software/office-suites/#onlyoffice" title="OnlyOffice" image="../software/office-suites/onlyoffice.svg" subtitle="OnlyOffice is a free and open-source office suite that includes applications for word processing, spreadsheets, presentations, and more." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Password Managers (Local)
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/passwords/#keepassxc" title="KeePassXC" image="../software/passwords/keepassxc.svg" subtitle="KeePassXC is a cross-platform, open-source password manager that offers end-to-end encryption and a user-friendly interface." >}}
|
||||
{{< card link="../software/passwords/#keepassdx-android" title="KeePassDX (Android)" image="../software/passwords/keepassdx.svg" subtitle="KeePassDX is an open-source password manager for Android that offers end-to-end encryption and a user-friendly interface." >}}
|
||||
{{< card link="../software/passwords/#keepassium-ios-macos" title="KeePassium (iOS & macOS)" image="../software/passwords/keepassium.svg" subtitle="KeePassium is a password manager for iOS and macOS that supports KeePass databases and offers end-to-end encryption." >}}
|
||||
{{< card link="../software/passwords/#gopass-cli" title="Gopass (CLI)" image="../software/passwords/gopass.svg" subtitle="Gopass is a command-line password manager that offers end-to-end encryption and a user-friendly interface." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Pastebins
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/pastebins/#privatebin" title="PrivateBin" image="../software/pastebins/privatebin.svg" subtitle="PrivateBin is a minimalist, open-source pastebin service that allows you to share text and code snippets securely with end-to-end encryption." >}}
|
||||
{{< card link="../software/pastebins/#paaster" title="Paaster" image="../software/pastebins/paaster.svg" subtitle="Paaster is a self-hosted, open-source pastebin service that allows you to share text and code snippets securely with end-to-end encryption." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Real-Time Communication
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../software/real-time-communication/#signal" title="Signal" image="../software/real-time-communication/signal.svg" subtitle="Signal is a cross-platform, end-to-end encrypted messaging app that offers secure text messaging, voice calls, and video calls." >}}
|
||||
{{< card link="../software/real-time-communication/#briar" title="Briar" image="../software/real-time-communication/briar.svg" subtitle="Briar is an open-source, peer-to-peer messaging app for Android that uses the Tor network for secure communication." >}}
|
||||
{{< card link="../software/real-time-communication/#simplex-chat" title="SimpleX Chat" image="../software/real-time-communication/simplex.svg" subtitle="SimpleX Chat is a cross-platform, end-to-end encrypted messaging app that offers secure text messaging and file sharing." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Social Networks
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../services/social-networks/#mastodon" title="Mastodon" image="../services/social-networks/mastodon.svg" subtitle="Mastodon is a decentralized, open-source social network that allows users to create and join communities called instances." >}}
|
||||
{{< card link="../services/social-networks/#element" title="Element" image="../services/social-networks/element.svg" subtitle="Element is a cross-platform, open-source messaging app that serves as a client for the Matrix protocol, which can be used for real-time communication and social networking." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
## Hardware
|
||||
|
||||
### Security Keys
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../hardware/security-keys/#yubico-security-key" title="Yubico Security Key" image="../hardware/security-keys/mini/yubico.svg" subtitle="The Yubico Security Key is a hardware security key that supports the FIDO2 standard for strong, phishing-resistant authentication." >}}
|
||||
{{< card link="../hardware/security-keys/#yubikey" title="YubiKey" image="../hardware/security-keys/mini/yubico.svg" subtitle="The YubiKey is a hardware security key that supports multiple authentication protocols, including FIDO2, U2F, and OTP." >}}
|
||||
{{< card link="../hardware/security-keys/#nitrokey" title="Nitrokey" image="../hardware/security-keys/mini/nitrokey.svg" subtitle="Nitrokey is a hardware security key that supports multiple authentication protocols, including FIDO2, U2F, and OTP." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Mobile Phones
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../hardware/mobile-phones/#google-pixel" title="Google Pixel" image="../hardware/mobile-phones/google-pixel.png" subtitle="The Google Pixel is a line of smartphones developed by Google that runs on the Android operating system." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
## Operating Systems
|
||||
|
||||
### Mobile
|
||||
|
||||
#### Custom Android Operating Systems
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../os/android/distributions/#grapheneos" title="GrapheneOS" image="../os/android/grapheneos.svg#only-light" subtitle="GrapheneOS is a privacy and security-focused custom Android operating system that is designed to run on Google Pixel devices." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
#### Android Apps
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../os/android/general-apps/#shelter" title="Shelter (Work Profiles)" image="../os/android/shelter.svg" subtitle="Shelter is an open-source Android app that allows you to create and manage work profiles on your device, providing a secure and isolated environment for your apps and data." >}}
|
||||
{{< card link="../os/android/general-apps/#secure-camera" title="Secure Camera" image="../os/android/secure_camera.svg#only-light" subtitle="Secure Camera is an open-source Android app that provides a secure and privacy-focused camera experience by isolating the camera app in a work profile." >}}
|
||||
{{< card link="../os/android/general-apps/#secure-pdf-viewer" title="Secure PDF Viewer" image="../os/android/secure_pdf_viewer.svg#only-light" subtitle="Secure PDF Viewer is an open-source Android app that provides a secure and privacy-focused PDF viewing experience by isolating the PDF viewer app in a work profile." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
#### Ways to Obtain Android Apps
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../os/android/obtaining-apps/#obtainium" title="Obtainium" image="../os/android/obtainium.svg" subtitle="Obtainium is an open-source app manager for Android that allows you to download and manage apps from various sources." >}}
|
||||
{{< card link="../os/android/obtaining-apps/#aurora-store" title="Aurora Store" image="../os/android/aurora-store.webp" subtitle="Aurora Store is an open-source Google Play client for Android that allows you to download and manage apps from the Google Play Store without a Google account." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Desktop/PC
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../os/desktop/#qubes-os" title="Qubes OS (Xen VM Distribution)" image="../os/desktop/qubes_os.svg" subtitle="Qubes OS is a security-focused desktop operating system that uses Xen-based virtualization to isolate different tasks and applications in separate virtual machines." >}}
|
||||
{{< card link="../os/desktop/#fedora-linux" title="Fedora Linux" image="../os/desktop/fedora.svg" subtitle="Fedora Linux is a free and open-source Linux distribution developed by the Fedora Project, sponsored by Red Hat." >}}
|
||||
{{< card link="../os/desktop/#opensuse-tumbleweed" title="openSUSE Tumbleweed" image="../os/desktop/opensuse-tumbleweed.svg" subtitle="openSUSE Tumbleweed is a rolling release version of the openSUSE Linux distribution that provides the latest software updates and features." >}}
|
||||
{{< card link="../os/desktop/#arch-linux" title="Arch Linux" image="../os/desktop/archlinux.svg" subtitle="Arch Linux is a lightweight and flexible Linux distribution that follows a rolling release model and emphasizes simplicity and user control." >}}
|
||||
{{< card link="../os/desktop/#fedora-atomic-desktops" title="Fedora Atomic Desktops" image="../os/desktop/fedora.svg" subtitle="Fedora Atomic Desktops is a variant of Fedora Linux that focuses on providing a secure and immutable desktop environment using containerization technologies." >}}
|
||||
{{< card link="../os/desktop/#nixos" title="NixOS" image="../os/desktop/nixos.svg" subtitle="NixOS is a unique Linux distribution that uses the Nix package manager to provide reproducible builds and declarative configuration management." >}}
|
||||
{{< card link="../os/desktop/#whonix" title="Whonix (Tor)" image="../os/desktop/whonix.svg" subtitle="Whonix is a security-focused desktop operating system that routes all internet traffic through the Tor network for enhanced privacy and anonymity." >}}
|
||||
{{< card link="../os/desktop/#tails-live-boot" title="Tails (Live Boot)" image="../os/desktop/tails.svg" subtitle="Tails is a live bootable operating system that focuses on privacy and anonymity, routing all internet traffic through the Tor network and leaving no trace on the host machine." >}}
|
||||
{{< card link="../os/desktop/#secureblue" title="Secureblue" image="../os/desktop/secureblue.svg" subtitle="Secureblue is a security-focused desktop operating system that uses a hardened Linux kernel and various security tools to provide a secure computing environment." >}}
|
||||
{{< card link="../os/desktop/#kicksecure" title="Kicksecure" image="../os/desktop/kicksecure.svg" subtitle="Kicksecure is a security-focused desktop operating system that uses a hardened Linux kernel and various security tools to provide a secure computing environment." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Router Firmware
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../os/router-firmware/#openwrt" title="OpenWrt" image="../os/router-firmware/openwrt.svg#only-light" subtitle="OpenWrt is a free and open-source router firmware that provides advanced features and customization options for a wide range of routers." >}}
|
||||
{{< card link="../os/router-firmware/#opnsense" title="OPNsense" image="../os/router-firmware/opnsense.svg" subtitle="OPNsense is a free and open-source firewall and routing platform based on FreeBSD that provides advanced security features and a user-friendly interface." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Alternative Networks
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../advanced/alternative-networks/#i2p" title="I2P (Invisible Internet Project)" image="../advanced/alternative-networks/i2p.svg#only-light" subtitle="I2P (Invisible Internet Project) is an anonymous network layer that allows for secure and private communication over the internet by routing traffic through a network of volunteer-operated nodes." >}}
|
||||
{{< card link="../advanced/alternative-networks/#tor" title="Tor" image="../advanced/alternative-networks/tor.svg" subtitle="Tor is a free and open-source software that enables anonymous communication by routing internet traffic through a network of volunteer-operated servers." >}}
|
||||
{{< card link="../advanced/alternative-networks/#orbot" title="Orbot (Mobile Tor Proxy)" image="../advanced/alternative-networks/orbot.svg" subtitle="Orbot is an Android app that allows you to use the Tor network on your mobile device, providing anonymity and privacy for your internet traffic." >}}
|
||||
{{< card link="../advanced/alternative-networks/#snowflake" title="Snowflake" image="../advanced/alternative-networks/snowflake.svg#only-light" subtitle="Snowflake is a pluggable transport for the Tor network that uses WebRTC to create temporary proxies, allowing users to bypass censorship and access the Tor network from restricted environments." >}}
|
||||
{{< /cards >}}
|
||||
|
||||
### Device Integrity Verification
|
||||
|
||||
{{< cards >}}
|
||||
{{< card link="../advanced/device-integrity/#mobile-verification-toolkit" title="Mobile Verification Toolkit" image="../advanced/device-integrity/mvt.webp#only-light" subtitle="The Mobile Verification Toolkit (MVT) is an open-source tool developed by Amnesty International that allows you to check your mobile device for signs of compromise or surveillance." >}}
|
||||
{{< card link="../advanced/device-integrity/#imazing-ios" title="iMazing (iOS)" image="../advanced/device-integrity/imazing.png" subtitle="iMazing is a desktop application for managing iOS devices that can be used to perform a forensic analysis of an iOS device to check for signs of compromise or surveillance." >}}
|
||||
{{< card link="../advanced/device-integrity/#auditor-android" title="Auditor (Android)" image="../advanced/device-integrity/auditor.svg#only-light" subtitle="Auditor is an open-source Android app developed by the Guardian Project that allows you to check your Android device for signs of compromise or surveillance." >}}
|
||||
{{< /cards >}}
|
||||
@@ -1,4 +1,4 @@
|
||||
---
|
||||
title: Hardware
|
||||
weight: 4
|
||||
weight: 50
|
||||
---
|
||||
|
||||
@@ -0,0 +1,4 @@
|
||||
---
|
||||
title: Operating Systems
|
||||
weight: 60
|
||||
---
|
||||
@@ -0,0 +1,69 @@
|
||||
---
|
||||
title: "Android"
|
||||
description: Our advice for replacing privacy-invasive default Android features with private and secure alternatives.
|
||||
icon: 'simple/android'
|
||||
cover: android.webp
|
||||
schema:
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": WebPage
|
||||
name: Android Recommendations
|
||||
url: "./"
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": CreativeWork
|
||||
name: Android
|
||||
image: /assets/img/android/android.svg
|
||||
url: https://source.android.com/
|
||||
sameAs: https://en.wikipedia.org/wiki/Android_(operating_system)
|
||||
---
|
||||
|
||||
{ align=right }
|
||||
|
||||
The **Android Open Source Project** (AOSP) is an open-source mobile operating system led by Google which powers the majority of the world's mobile devices. Most phones sold with Android are modified to include invasive integrations and apps such as Google Play Services, so you can significantly improve your privacy on your mobile device by replacing your phone's default installation with a version of Android without these invasive features.
|
||||
|
||||
[General Android Overview :material-arrow-right-drop-circle:](../os/android-overview.md){ .md-button .md-button--primary }
|
||||
|
||||
## Our Advice
|
||||
|
||||
### Replace Google Services
|
||||
|
||||
There are many methods of obtaining apps on Android while avoiding Google Play. Whenever possible, try using one of these methods before getting your apps from non-private sources:
|
||||
|
||||
[Obtaining Applications :material-arrow-right-drop-circle:](obtaining-apps.md){ .md-button }
|
||||
|
||||
There are also many private alternatives to the apps that come pre-installed on your phone, such as the camera app. Besides the Android apps we recommend throughout this site in general, we've created a list of system utilities specific to Android which you might find useful.
|
||||
|
||||
[General App Recommendations :material-arrow-right-drop-circle:](general-apps.md){ .md-button }
|
||||
|
||||
### Install a Custom Distribution
|
||||
|
||||
When you buy an Android phone, the default operating system comes bundled with apps and functionality that are not part of the Android Open Source Project. Many of these apps—even apps like the dialer which provide basic system functionality—require invasive integrations with Google Play Services, which in turn asks for privileges to access your files, contacts storage, call logs, SMS messages, location, camera, microphone, and numerous other things on your device in order for those basic system apps and many other apps to function in the first place. Frameworks like Google Play Services increase the attack surface of your device and are the source of various privacy concerns with Android.
|
||||
|
||||
This problem could be solved by using an alternative Android distribution, commonly known as a *custom ROM*, that does not come with such invasive integration. Unfortunately, many custom Android distributions often violate the Android security model by not supporting critical security features such as AVB, rollback protection, firmware updates, and so on. Some distributions also ship [`userdebug`](https://source.android.com/setup/build/building#choose-a-target) builds which expose root via [ADB](https://developer.android.com/studio/command-line/adb) and require [more permissive](https://github.com/LineageOS/android_system_sepolicy/search?q=userdebug&type=code) SELinux policies to accommodate debugging features, resulting in a further increased attack surface and weakened security model.
|
||||
|
||||
Ideally, when choosing a custom Android distribution, you should make sure that it upholds the Android security model. At the very least, the distribution should have production builds, support for AVB, rollback protection, timely firmware and operating system updates, and SELinux in [enforcing mode](https://source.android.com/security/selinux/concepts#enforcement_levels). All of our recommended Android distributions satisfy these criteria:
|
||||
|
||||
[Recommended Distributions :material-arrow-right-drop-circle:](distributions.md){ .md-button }
|
||||
|
||||
### Avoid Root
|
||||
|
||||
[Rooting](https://en.wikipedia.org/wiki/Rooting_(Android)) Android phones can decrease security significantly as it weakens the complete [Android security model](https://en.wikipedia.org/wiki/Android_(operating_system)#Security_and_privacy). This can decrease privacy should there be an exploit that is assisted by the decreased security. Common rooting methods involve directly tampering with the boot partition, making it impossible to perform successful Verified Boot. Apps that require root will also modify the system partition, meaning that Verified Boot would have to remain disabled. Having root exposed directly in the user interface also increases the attack surface of your device and may assist in [privilege escalation](https://en.wikipedia.org/wiki/Privilege_escalation) vulnerabilities and SELinux policy bypasses.
|
||||
|
||||
Content blockers which modify the [hosts file](https://en.wikipedia.org/wiki/Hosts_(file)) (like AdAway) and firewalls which require root access persistently (like AFWall+) are dangerous and should not be used. They are also not the correct way to solve their intended purposes. For content blocking, we suggest encrypted [DNS](../dns.md) or content blocking functionality provided by a VPN instead. TrackerControl and AdAway in non-root mode will take up the VPN slot (by using a local loopback VPN), preventing you from using privacy-enhancing services such as [Orbot](../alternative-networks.md#orbot) or a [real VPN provider](../vpn.md).
|
||||
|
||||
AFWall+ works based on the [packet filtering](https://en.wikipedia.org/wiki/Firewall_(computing)#Packet_filter) approach and may be bypassable in some situations.
|
||||
|
||||
We do not believe that the security sacrifices made by rooting a phone are worth the questionable privacy benefits of those apps.
|
||||
|
||||
### Install Updates Regularly
|
||||
|
||||
It's important to not use an [end-of-life](https://endoflife.date/android) version of Android. Newer versions of Android receive not only security updates for the operating system but also important privacy enhancing updates too.
|
||||
|
||||
For example, [prior to Android 10](https://developer.android.com/about/versions/10/privacy/changes) any apps with the [`READ_PHONE_STATE`](https://developer.android.com/reference/android/Manifest.permission#READ_PHONE_STATE) permission could access sensitive and unique serial numbers of your phone such as [IMEI](https://en.wikipedia.org/wiki/International_Mobile_Equipment_Identity), [MEID](https://en.wikipedia.org/wiki/Mobile_equipment_identifier), or your SIM card's [IMSI](https://en.wikipedia.org/wiki/International_mobile_subscriber_identity); whereas now they must be system apps to do so. System apps are only provided by the OEM or Android distribution.
|
||||
|
||||
### Use Built-in Sharing Features
|
||||
|
||||
You can avoid giving many apps permission to access your media with Android's built-in sharing features. Many applications allow you to "share" a file with them for media upload.
|
||||
|
||||
For example, if you want to post a picture to Discord you can open your file manager or gallery and share that picture with the Discord app, instead of granting Discord full access to your media and photos.
|
||||
|
Before Width: | Height: | Size: 689 B After Width: | Height: | Size: 689 B |
|
Before Width: | Height: | Size: 17 KiB After Width: | Height: | Size: 17 KiB |
@@ -0,0 +1,79 @@
|
||||
---
|
||||
meta_title: "The Best Android Operating Systems - Privacy Guides"
|
||||
title: Alternative Distributions
|
||||
description: You can replace the operating system on your Android phone with these secure and privacy-respecting alternatives.
|
||||
schema:
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": WebPage
|
||||
name: Private Android Operating Systems
|
||||
url: "./"
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": CreativeWork
|
||||
name: GrapheneOS
|
||||
image: /assets/img/android/grapheneos.svg
|
||||
url: https://grapheneos.org/
|
||||
sameAs: https://en.wikipedia.org/wiki/GrapheneOS
|
||||
subjectOf:
|
||||
"@context": http://schema.org
|
||||
"@type": WebPage
|
||||
url: "./"
|
||||
robots: nofollow, max-snippet:-1, max-image-preview:large
|
||||
---
|
||||
<small>Protects against the following threat(s):</small>
|
||||
|
||||
- [:material-target-account: Targeted Attacks](../basics/common-threats.md#attacks-against-specific-individuals){ .pg-red }
|
||||
- [:material-bug-outline: Passive Attacks](../basics/common-threats.md#security-and-privacy){ .pg-orange }
|
||||
|
||||
A **custom Android-based operating system** (sometimes referred to as a **custom ROM**) can be a way to achieve a higher level of privacy and security on your device. This is in contrast to the "stock" version of Android which comes with your phone from the factory, and is often deeply integrated with Google Play Services as well as other vendor software.
|
||||
|
||||
We recommend installing GrapheneOS if you have a Google Pixel as it provides improved security hardening and additional privacy features. The reasons we don't list other operating systems or devices are as follows:
|
||||
|
||||
- They often have [weaker security](index.md#install-a-custom-distribution).
|
||||
- Support is frequently dropped when the maintainer loses interest or upgrades their device, which is in contrast to the predictable [support cycle](https://grapheneos.org/faq#device-lifetime) that GrapheneOS follows.
|
||||
- They generally have few or no notable privacy or security improvements that make installing them worthwhile.
|
||||
|
||||
## GrapheneOS
|
||||
|
||||
<div class="admonition recommendation" markdown>
|
||||
|
||||
{ align=right }
|
||||
{ align=right }
|
||||
|
||||
**GrapheneOS** is the best choice when it comes to privacy and security.
|
||||
|
||||
GrapheneOS provides additional [security hardening](https://en.wikipedia.org/wiki/Hardening_(computing)) and privacy improvements. It has a [hardened memory allocator](https://github.com/GrapheneOS/hardened_malloc), network and sensor permissions, and various other [security features](https://grapheneos.org/features). GrapheneOS also comes with full firmware updates and signed builds, so verified boot is fully supported.
|
||||
|
||||
[:octicons-home-16: Homepage](https://grapheneos.org){ .md-button .md-button--primary }
|
||||
[:octicons-eye-16:](https://grapheneos.org/faq#privacy-policy){ .card-link title="Privacy Policy" }
|
||||
[:octicons-info-16:](https://grapheneos.org/faq){ .card-link title="Documentation" }
|
||||
[:octicons-code-16:](https://grapheneos.org/source){ .card-link title="Source Code" }
|
||||
[:octicons-heart-16:](https://grapheneos.org/donate){ .card-link title="Contribute" }
|
||||
|
||||
</div>
|
||||
|
||||
GrapheneOS supports [sandboxed Google Play](https://grapheneos.org/usage#sandboxed-google-play), which runs Google Play Services fully sandboxed like any other regular app. This means you can take advantage of most Google Play Services, such as push notifications, while giving you full control over their permissions and access, and while containing them to a specific [work profile](../os/android-overview.md#work-profile) or [user profile](../os/android-overview.md#user-profiles) of your choice.
|
||||
|
||||
[Google Pixel phones](../mobile-phones.md#google-pixel) are the only devices that currently meet GrapheneOS's [hardware security requirements](https://grapheneos.org/faq#future-devices). The Pixel 8 and later support ARM's Memory Tagging Extension (MTE), a hardware security enhancement that drastically lowers the probability of exploits occurring through memory corruption bugs. GrapheneOS greatly expands the coverage of MTE on supported devices. Whereas the stock OS only allows you to opt in to a limited implementation of MTE via a developer option or Google's Advanced Protection Program, GrapheneOS features a more robust implementation of MTE by default in the system kernel, default system components, and their Vanadium web browser and its WebView.
|
||||
|
||||
GrapheneOS also provides a global toggle for enabling MTE on all user-installed apps at :gear: **Settings** → **Security & privacy** → **Exploit protection** → **Memory tagging** → **Enable by default**. The OS also features per-app toggles to opt out of MTE for apps which may crash due to compatibility issues.
|
||||
|
||||
### Connectivity Checks
|
||||
|
||||
By default, Android makes many network connections to Google to perform DNS connectivity checks, to sync with current network time, to check your network connectivity, and for many other background tasks. GrapheneOS replaces these with connections to servers operated by GrapheneOS and subject to their privacy policy. This hides information like your IP address [from Google](../basics/common-threats.md#privacy-from-service-providers), but means it is trivial for an admin on your network or ISP to see you are making connections to `grapheneos.network`, `grapheneos.org`, etc. and deduce what operating system you are using.
|
||||
|
||||
If you want to hide information like this from an adversary on your network or ISP, you **must** use a [trusted VPN](../vpn.md) in addition to changing the connectivity check setting to **Standard (Google)**. It can be found in :gear: **Settings** → **Network & internet** → **Internet connectivity checks**. This option allows you to connect to Google's servers for connectivity checks, which, alongside the usage of a VPN, helps you blend in with a larger pool of Android devices.
|
||||
|
||||
## Criteria
|
||||
|
||||
**Please note we are not affiliated with any of the projects we recommend.** In addition to [our standard criteria](../about/criteria.md), we have developed a clear set of requirements to allow us to provide objective recommendations. We suggest you familiarize yourself with this list before choosing to use a project, and conduct your own research to ensure it's the right choice for you.
|
||||
|
||||
- Must be open-source software.
|
||||
- Must support bootloader locking with custom AVB key support.
|
||||
- Must receive major Android updates within 0-1 months of release.
|
||||
- Must receive Android feature updates (minor version) within 0-14 days of release.
|
||||
- Must receive regular security patches within 0-5 days of release.
|
||||
- Must **not** be "rooted" out of the box.
|
||||
- Must **not** enable Google Play Services by default.
|
||||
- Must **not** require system modification to support Google Play Services.
|
||||
|
Before Width: | Height: | Size: 18 KiB After Width: | Height: | Size: 18 KiB |
@@ -0,0 +1,143 @@
|
||||
---
|
||||
title: "General Apps"
|
||||
description: The apps listed here are Android-exclusive and specifically enhance or replace key system functionality.
|
||||
schema:
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": WebPage
|
||||
name: General Android Apps
|
||||
url: "./"
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": MobileApplication
|
||||
name: Shelter
|
||||
applicationCategory: Utilities
|
||||
operatingSystem: Android
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": MobileApplication
|
||||
name: Secure Camera
|
||||
applicationCategory: Utilities
|
||||
operatingSystem: Android
|
||||
-
|
||||
"@context": http://schema.org
|
||||
"@type": MobileApplication
|
||||
name: Secure PDF Viewer
|
||||
applicationCategory: Utilities
|
||||
operatingSystem: Android
|
||||
robots: nofollow, max-snippet:-1, max-image-preview:large
|
||||
---
|
||||
<small>Protects against the following threat(s):</small>
|
||||
|
||||
- [:material-bug-outline: Passive Attacks](../basics/common-threats.md#security-and-privacy){ .pg-orange }
|
||||
|
||||
We recommend a wide variety of Android apps throughout this site. The apps listed here are Android-exclusive and specifically enhance or replace key system functionality.
|
||||
|
||||
### Shelter
|
||||
|
||||
If your device is on Android 15 or greater, we recommend using the native [Private Space](../os/android-overview.md#private-space) feature instead, which provides nearly the same functionality without needing to place trust in and grant powerful permissions to a third-party app.
|
||||
|
||||
<div class="admonition recommendation" markdown>
|
||||
|
||||
{ align=right }
|
||||
|
||||
**Shelter** is an app that helps you leverage Android's Work Profile functionality to isolate or duplicate apps on your device.
|
||||
|
||||
Shelter supports blocking contact search cross profiles and sharing files across profiles via the default file manager ([DocumentsUI](https://source.android.com/devices/architecture/modular-system/documentsui)).
|
||||
|
||||
[:octicons-repo-16: Repository](https://gitea.angry.im/PeterCxy/Shelter#shelter){ .md-button .md-button--primary }
|
||||
[:octicons-code-16:](https://gitea.angry.im/PeterCxy/Shelter){ .card-link title="Source Code" }
|
||||
[:octicons-heart-16:](https://patreon.com/PeterCxy){ .card-link title=Contribute }
|
||||
|
||||
</div>
|
||||
|
||||
<div class="admonition warning" markdown>
|
||||
<p class="admonition-title">Warning</p>
|
||||
|
||||
When using Shelter, you are placing complete trust in its developer, as Shelter acts as a [Device Admin](https://developer.android.com/guide/topics/admin/device-admin) to create the Work Profile, and it has extensive access to the data stored within the Work Profile.
|
||||
|
||||
</div>
|
||||
|
||||
Shelter is recommended over [Insular](https://secure-system.gitlab.io/Insular) and [Island](https://github.com/oasisfeng/island) as it supports [contact search blocking](https://secure-system.gitlab.io/Insular/faq.html).
|
||||
|
||||
### Secure Camera
|
||||
|
||||
<small>Protects against the following threat(s):</small>
|
||||
|
||||
- [:material-account-search: Public Exposure](../basics/common-threats.md#limiting-public-information){ .pg-green }
|
||||
|
||||
<div class="admonition recommendation" markdown>
|
||||
|
||||
{ align=right }
|
||||
{ align=right }
|
||||
|
||||
**Secure Camera** is a camera app focused on privacy and security which can capture images, videos, and QR codes. CameraX vendor extensions (Portrait, HDR, Night Sight, Face Retouch, and Auto) are also supported on available devices.
|
||||
|
||||
[:octicons-repo-16: Repository](https://github.com/GrapheneOS/Camera#readme){ .md-button .md-button--primary }
|
||||
[:octicons-info-16:](https://grapheneos.org/usage#camera){ .card-link title=Documentation}
|
||||
[:octicons-code-16:](https://github.com/GrapheneOS/Camera){ .card-link title="Source Code" }
|
||||
[:octicons-heart-16:](https://grapheneos.org/donate){ .card-link title=Contribute }
|
||||
|
||||
<details class="downloads" markdown>
|
||||
<summary>Downloads</summary>
|
||||
|
||||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=app.grapheneos.camera.play)
|
||||
- [:simple-github: GitHub](https://github.com/GrapheneOS/Camera/releases)
|
||||
- [:material-cube-outline: GrapheneOS App Store](https://github.com/GrapheneOS/Apps/releases)
|
||||
|
||||
</details>
|
||||
|
||||
</div>
|
||||
|
||||
Main privacy features include:
|
||||
|
||||
- Auto removal of [Exif](https://en.wikipedia.org/wiki/Exif) metadata (enabled by default)
|
||||
- Use of the new [Media](https://developer.android.com/training/data-storage/shared/media) API, therefore [storage permissions](https://developer.android.com/training/data-storage) are not required
|
||||
- Microphone permission not required unless you want to record sound
|
||||
|
||||
<div class="admonition note" markdown>
|
||||
<p class="admonition-title">Note</p>
|
||||
|
||||
Metadata is not currently deleted from video files, but that is planned.
|
||||
|
||||
The image orientation metadata is not deleted. If you enable location (in Secure Camera) that **won't** be deleted either. If you want to delete that later you will need to use an external app such as [ExifEraser](../data-redaction.md#exiferaser-android).
|
||||
|
||||
</div>
|
||||
|
||||
### Secure PDF Viewer
|
||||
|
||||
<small>Protects against the following threat(s):</small>
|
||||
|
||||
- [:material-target-account: Targeted Attacks](../basics/common-threats.md#attacks-against-specific-individuals){ .pg-red }
|
||||
|
||||
<div class="admonition recommendation" markdown>
|
||||
|
||||
{ align=right }
|
||||
{ align=right }
|
||||
|
||||
**Secure PDF Viewer** is a PDF viewer based on [pdf.js](https://en.wikipedia.org/wiki/PDF.js) that doesn't require any permissions. The PDF is fed into a [sandboxed](https://en.wikipedia.org/wiki/Sandbox_(software_development)) [WebView](https://developer.android.com/guide/webapps/webview). This means that it doesn't require permission directly to access content or files.
|
||||
|
||||
[Content-Security-Policy](https://en.wikipedia.org/wiki/Content_Security_Policy) is used to enforce that the JavaScript and styling properties within the WebView are entirely static content.
|
||||
|
||||
[:octicons-repo-16: Repository](https://github.com/GrapheneOS/PdfViewer#readme){ .md-button .md-button--primary }
|
||||
[:octicons-code-16:](https://github.com/GrapheneOS/PdfViewer){ .card-link title="Source Code" }
|
||||
[:octicons-heart-16:](https://grapheneos.org/donate){ .card-link title=Contribute }
|
||||
|
||||
<details class="downloads" markdown>
|
||||
<summary>Downloads</summary>
|
||||
|
||||
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=app.grapheneos.pdfviewer.play)
|
||||
- [:simple-github: GitHub](https://github.com/GrapheneOS/PdfViewer/releases)
|
||||
- [:material-cube-outline: GrapheneOS App Store](https://github.com/GrapheneOS/Apps/releases)
|
||||
|
||||
</details>
|
||||
|
||||
</div>
|
||||
|
||||
## Criteria
|
||||
|
||||
**Please note we are not affiliated with any of the projects we recommend.** In addition to [our standard criteria](../about/criteria.md), we have developed a clear set of requirements to allow us to provide objective recommendations. We suggest you familiarize yourself with this list before choosing to use a project, and conduct your own research to ensure it's the right choice for you.
|
||||
|
||||
- Applications on this page must not be applicable to any other software category on the site.
|
||||
- General applications should extend or replace core system functionality.
|
||||
- Applications should receive regular updates and maintenance.
|
||||
|
Before Width: | Height: | Size: 1.3 KiB After Width: | Height: | Size: 1.3 KiB |
|
Before Width: | Height: | Size: 1.3 KiB After Width: | Height: | Size: 1.3 KiB |
@@ -0,0 +1,126 @@
|
||||
---
|
||||
title: "Obtaining Applications"
|
||||
description: We recommend these methods for obtaining applications on Android without interacting with Google Play Services.
|
||||
---
|
||||
There are many ways to obtain Android apps privately, even from the Play Store, without interacting with Google Play Services. We recommend the following methods of obtaining applications on Android, listed in order of preference.
|
||||
|
||||
## Obtainium
|
||||
|
||||
<div class="admonition recommendation" markdown>
|
||||
|
||||
{ align=right }
|
||||
|
||||
**Obtainium** is an app manager which allows you to install and update apps directly from the developer's own releases page (i.e. GitHub, GitLab, the developer's website, etc.), rather than a centralized app store/repository. It supports automatic background updates on Android 12 and higher.
|
||||
|
||||
[:octicons-repo-16: Repository](https://github.com/ImranR98/Obtainium#readme){ .md-button .md-button--primary }
|
||||
[:octicons-info-16:](https://github.com/ImranR98/Obtainium/wiki){ .card-link title=Documentation}
|
||||
[:octicons-code-16:](https://github.com/ImranR98/Obtainium){ .card-link title="Source Code" }
|
||||
[:octicons-heart-16:](https://github.com/sponsors/ImranR98){ .card-link title=Contribute }
|
||||
|
||||
<details class="downloads" markdown>
|
||||
<summary>Downloads</summary>
|
||||
|
||||
- [:simple-github: GitHub](https://github.com/ImranR98/Obtainium/releases)
|
||||
|
||||
</details>
|
||||
|
||||
</div>
|
||||
|
||||
Obtainium allows you to download APK installer files from a wide variety of sources, and it is up to you to ensure those sources and apps are legitimate. For example, using Obtainium to install Signal from [Signal's APK landing page](https://signal.org/android/apk) should be fine, but installing from third-party APK repositories like Aptoide or APKPure may pose additional risks. The risk of installing a malicious *update* is lower, because Android itself verifies that all app updates are signed by the same developer as the existing app on your phone before installing them.
|
||||
|
||||
## GrapheneOS App Store
|
||||
|
||||
GrapheneOS's app store is available on [GitHub](https://github.com/GrapheneOS/Apps/releases). It supports Android 12 and above and is capable of updating itself. The app store has standalone applications built by the GrapheneOS project such as the [Auditor](../device-integrity.md#auditor-android), [Camera](general-apps.md#secure-camera), and [PDF Viewer](general-apps.md#secure-pdf-viewer). If you are looking for these applications, we highly recommend that you get them from GrapheneOS's app store instead of the Play Store, as the apps on their store are signed by the GrapheneOS's project own signature that Google does not have access to.
|
||||
|
||||
## Aurora Store
|
||||
|
||||
The Google Play Store requires a Google account to log in, which is not great for privacy. You can get around this by using an alternative client, such as Aurora Store.
|
||||
|
||||
<div class="admonition recommendation" markdown>
|
||||
|
||||
{ align=right }
|
||||
|
||||
**Aurora Store** is a Google Play Store client which does not require a Google account, Google Play Services, or microG to download apps.
|
||||
|
||||
[:octicons-home-16: Homepage](https://auroraoss.com){ .md-button .md-button--primary }
|
||||
[:octicons-eye-16:](https://gitlab.com/AuroraOSS/AuroraStore/-/blob/master/POLICY.md){ .card-link title="Privacy Policy" }
|
||||
[:octicons-code-16:](https://gitlab.com/AuroraOSS/AuroraStore){ .card-link title="Source Code" }
|
||||
|
||||
<details class="downloads" markdown>
|
||||
<summary>Downloads</summary>
|
||||
|
||||
- [:simple-gitlab: GitLab](https://gitlab.com/AuroraOSS/AuroraStore/-/releases)
|
||||
|
||||
</details>
|
||||
|
||||
</div>
|
||||
|
||||
Aurora Store does not allow you to download paid apps with their anonymous account feature. You can optionally log in with your Google account with Aurora Store to download apps you have purchased, which does give access to the list of apps you've installed to Google. However, you still benefit from not requiring the full Google Play client and Google Play Services or microG on your device.
|
||||
|
||||
## Manually with RSS Notifications
|
||||
|
||||
For apps that are released on platforms like GitHub and GitLab, you may be able to add an RSS feed to your [news aggregator](../news-aggregators.md) that will help you keep track of new releases.
|
||||
|
||||
   
|
||||
|
||||
### GitHub
|
||||
|
||||
On GitHub, using [Secure Camera](general-apps.md#secure-camera) as an example, you would navigate to its [releases page](https://github.com/GrapheneOS/Camera/releases) and append `.atom` to the URL:
|
||||
|
||||
`https://github.com/GrapheneOS/Camera/releases.atom`
|
||||
|
||||
### GitLab
|
||||
|
||||
On GitLab, using [Aurora Store](#aurora-store) as an example, you would navigate to its [project repository](https://gitlab.com/AuroraOSS/AuroraStore) and append `/-/tags?format=atom` to the URL:
|
||||
|
||||
`https://gitlab.com/AuroraOSS/AuroraStore/-/tags?format=atom`
|
||||
|
||||
### Verifying APK Fingerprints
|
||||
|
||||
If you download APK files to install manually, you can verify their signature with the [`apksigner`](https://developer.android.com/studio/command-line/apksigner) tool, which is a part of Android [build-tools](https://developer.android.com/studio/releases/build-tools).
|
||||
|
||||
1. Install [Java JDK](https://oracle.com/java/technologies/downloads).
|
||||
|
||||
2. Download the [Android Studio command line tools](https://developer.android.com/studio#command-tools).
|
||||
|
||||
3. Extract the downloaded archive:
|
||||
|
||||
```bash
|
||||
unzip commandlinetools-*.zip
|
||||
cd cmdline-tools
|
||||
./bin/sdkmanager --sdk_root=./ "build-tools;29.0.3"
|
||||
```
|
||||
|
||||
4. Run the signature verification command:
|
||||
|
||||
```bash
|
||||
./build-tools/29.0.3/apksigner verify --print-certs ../Camera-37.apk
|
||||
```
|
||||
|
||||
5. The resulting hashes can then be compared with another source. Some developers such as Signal [show the fingerprints](https://signal.org/android/apk) on their website.
|
||||
|
||||
```bash
|
||||
Signer #1 certificate DN: CN=GrapheneOS
|
||||
Signer #1 certificate SHA-256 digest: 6436b155b917c2f9a9ed1d15c4993a5968ffabc94947c13f2aeee14b7b27ed59
|
||||
Signer #1 certificate SHA-1 digest: 23e108677a2e1b1d6e6b056f3bb951df7ad5570c
|
||||
Signer #1 certificate MD5 digest: dbbcd0cac71bd6fa2102a0297c6e0dd3
|
||||
```
|
||||
|
||||
## F-Droid
|
||||
|
||||
{ align=right width=120px }
|
||||
|
||||
==We only recommend F-Droid as a way to obtain apps which cannot be obtained via the means above.== F-Droid is often recommended as an alternative to Google Play, particularly within the privacy community. The option to add third-party repositories and not be confined to Google's walled garden has led to its popularity. F-Droid additionally has [reproducible builds](https://f-droid.org/en/docs/Reproducible_Builds) for some applications and is dedicated to free and open-source software. However, there are some security-related downsides to how F-Droid builds, signs, and delivers packages:
|
||||
|
||||
Due to their process of building apps, apps in the *official* F-Droid repository often fall behind on updates. F-Droid maintainers also reuse package IDs while signing apps with their own keys, which is not ideal as it gives the F-Droid team ultimate trust. Additionally, the requirements for an app to be included in the official F-Droid repo are less strict than other app stores like Google Play, meaning that F-Droid tends to host a lot more apps which are older, unmaintained, or otherwise no longer meet [modern security standards](https://developer.android.com/google/play/requirements/target-sdk).
|
||||
|
||||
Other popular third-party repositories for F-Droid such as [IzzyOnDroid](https://apt.izzysoft.de/fdroid) alleviate some of these concerns. The IzzyOnDroid repository pulls builds directly from code forges (GitHub, GitLab, etc.) and is the next best thing to the developers' own repositories. They also offer [reproducible builds](https://android.izzysoft.de/articles/named/iod-rbs-mirrors-clients) for hundreds of applications and have developers who verify the reproducibility of developer-signed APKs. Furthermore, the IzzyOnDroid team conducts [additional security scans](https://android.izzysoft.de/articles/named/iod-scan-apkchecks) of apps housed in the repo, which usually result in [deliberations](https://github.com/gouravkhunger/QuotesApp/issues/22) between them and app developers toward privacy improvements in their apps. Note that apps may be removed from the IzzyOnDroid repo in [certain circumstances](https://gitlab.com/IzzyOnDroid/repo#are-apps-removed-from-the-repo--and-when-does-that-happen).
|
||||
|
||||
The [F-Droid](https://f-droid.org/en/packages) and [IzzyOnDroid](https://apt.izzysoft.de/fdroid) repositories are home to countless apps, so they can be useful places to search for and discover open-source apps that you can then download through other means such as the Play Store, Aurora Store, or by getting the APK directly from the developer. You should use your best judgment when looking for new apps via this method, and keep an eye on how frequently the app is updated. Outdated apps may rely on unsupported libraries, among other things, posing a potential security risk.
|
||||
|
||||
<div class="admonition note" markdown>
|
||||
<p class="admonition-title">F-Droid Basic</p>
|
||||
|
||||
In some rare cases, the developer of an app will only distribute it through F-Droid ([Gadgetbridge](../health-and-wellness.md#gadgetbridge) is one example of this). If you really need an app like that, we recommend using the newer [F-Droid Basic](https://f-droid.org/en/packages/org.fdroid.basic) client instead of the original F-Droid app to obtain it. F-Droid Basic supports automatic background updates without privileged extension or root, and has a reduced feature set (limiting attack surface).
|
||||
|
||||
</div>
|
||||
|
Before Width: | Height: | Size: 1.6 KiB After Width: | Height: | Size: 1.6 KiB |
|
Before Width: | Height: | Size: 447 B After Width: | Height: | Size: 447 B |
|
Before Width: | Height: | Size: 719 B After Width: | Height: | Size: 719 B |
|
Before Width: | Height: | Size: 639 B After Width: | Height: | Size: 639 B |
|
Before Width: | Height: | Size: 1.1 KiB After Width: | Height: | Size: 1.1 KiB |
|
Before Width: | Height: | Size: 2.7 KiB After Width: | Height: | Size: 2.7 KiB |
|
Before Width: | Height: | Size: 1.2 KiB After Width: | Height: | Size: 1.2 KiB |
|
Before Width: | Height: | Size: 1.3 KiB After Width: | Height: | Size: 1.3 KiB |
|
Before Width: | Height: | Size: 6.9 KiB After Width: | Height: | Size: 6.9 KiB |
|
Before Width: | Height: | Size: 1.8 KiB After Width: | Height: | Size: 1.8 KiB |
|
Before Width: | Height: | Size: 1.7 KiB After Width: | Height: | Size: 1.7 KiB |
|
Before Width: | Height: | Size: 1.6 KiB After Width: | Height: | Size: 1.6 KiB |
|
Before Width: | Height: | Size: 4.6 KiB After Width: | Height: | Size: 4.6 KiB |
|
Before Width: | Height: | Size: 4.8 KiB After Width: | Height: | Size: 4.8 KiB |
|
Before Width: | Height: | Size: 2.2 KiB After Width: | Height: | Size: 2.2 KiB |
|
Before Width: | Height: | Size: 8.7 KiB After Width: | Height: | Size: 8.7 KiB |
|
Before Width: | Height: | Size: 8.6 KiB After Width: | Height: | Size: 8.6 KiB |
|
Before Width: | Height: | Size: 344 B After Width: | Height: | Size: 344 B |
@@ -3,7 +3,7 @@ title: Self-Hosting
|
||||
meta_title: "Self-Hosting Software and Services - Privacy Guides"
|
||||
description: For our more technical readers, self-hosting software and services can provide additional privacy assurances since you have maximum control over your data.
|
||||
cover: router.webp
|
||||
weight: 3
|
||||
weight: 40
|
||||
---
|
||||
<small>Protects against the following threat(s):</small>
|
||||
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
---
|
||||
title: Services
|
||||
weight: 1
|
||||
weight: 20
|
||||
---
|
||||
|
||||
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
|
Before Width: | Height: | Size: 1.2 KiB After Width: | Height: | Size: 1.2 KiB |
|
Before Width: | Height: | Size: 3.7 KiB After Width: | Height: | Size: 3.7 KiB |
|
Before Width: | Height: | Size: 3.7 KiB After Width: | Height: | Size: 3.7 KiB |
|
Before Width: | Height: | Size: 2.9 KiB After Width: | Height: | Size: 2.9 KiB |
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
|
Before Width: | Height: | Size: 2.3 KiB After Width: | Height: | Size: 2.3 KiB |
|
Before Width: | Height: | Size: 1.4 KiB After Width: | Height: | Size: 1.4 KiB |
|
Before Width: | Height: | Size: 836 B After Width: | Height: | Size: 836 B |
|
Before Width: | Height: | Size: 828 B After Width: | Height: | Size: 828 B |
+1
-2
@@ -1,6 +1,5 @@
|
||||
---
|
||||
meta_title: "The Best Private Instant Messengers - Privacy Guides"
|
||||
title: Real-Time Communication
|
||||
title: Instant Messengers
|
||||
icon: material/chat-processing
|
||||
description: Encrypted messengers like Signal and SimpleX keep your sensitive communications secure from prying eyes.
|
||||
cover: real-time-communication.webp
|
||||
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
|
Before Width: | Height: | Size: 16 KiB After Width: | Height: | Size: 16 KiB |
|
Before Width: | Height: | Size: 8.8 KiB After Width: | Height: | Size: 8.8 KiB |
|
Before Width: | Height: | Size: 2.7 KiB After Width: | Height: | Size: 2.7 KiB |
|
Before Width: | Height: | Size: 2.6 KiB After Width: | Height: | Size: 2.6 KiB |
|
Before Width: | Height: | Size: 3.0 KiB After Width: | Height: | Size: 3.0 KiB |
|
Before Width: | Height: | Size: 1.1 KiB After Width: | Height: | Size: 1.1 KiB |
|
Before Width: | Height: | Size: 4.8 KiB After Width: | Height: | Size: 4.8 KiB |
|
Before Width: | Height: | Size: 1.4 KiB After Width: | Height: | Size: 1.4 KiB |
|
Before Width: | Height: | Size: 6.0 KiB After Width: | Height: | Size: 6.0 KiB |
|
Before Width: | Height: | Size: 1.0 KiB After Width: | Height: | Size: 1.0 KiB |
|
Before Width: | Height: | Size: 2.0 KiB After Width: | Height: | Size: 2.0 KiB |
|
Before Width: | Height: | Size: 3.0 KiB After Width: | Height: | Size: 3.0 KiB |
|
Before Width: | Height: | Size: 3.2 KiB After Width: | Height: | Size: 3.2 KiB |
|
Before Width: | Height: | Size: 1.9 KiB After Width: | Height: | Size: 1.9 KiB |
@@ -1,4 +1,4 @@
|
||||
---
|
||||
title: Software
|
||||
weight: 2
|
||||
weight: 30
|
||||
---
|
||||
|
||||
Reference in New Issue
Block a user