diff --git a/content/tools/all.md b/content/tools/all.md
deleted file mode 100644
index 17e79328..00000000
--- a/content/tools/all.md
+++ /dev/null
@@ -1,370 +0,0 @@
----
-title: All Privacy Tools
-weight: 10
----
-
-
-If you're looking for a specific solution to something, these are the hardware and software tools we recommend in a variety of categories. Our **recommended privacy tools** are primarily chosen based on security features, with additional emphasis on decentralized and open-source tools. They are applicable to a variety of threat models ranging from protection against global mass surveillance programs and avoiding big tech companies to mitigating attacks, but only you can determine what will work best for your needs.
-
-## Service Providers
-
-### Calendar Sync
-
-{{< cards >}}
- {{< card link="../tools/calendar-sync/#tuta" title="Tuta" image="../services/calendar/tuta.svg" subtitle="Tuta is a self-hosted, open-source calendar sync service that allows you to synchronize your calendar data across devices securely." >}}
- {{< card link="../tools/calendar-sync/#proton-calendar" title="Proton Calendar" image="../services/calendar/proton-calendar.svg" subtitle="Proton Calendar is a privacy-focused calendar service developed by the makers of Proton Mail." >}}
-{{< /cards >}}
-
-### Cloud Storage
-
-{{< cards >}}
- {{< card link="../services/cloud/#proton-drive" title="Proton Drive" image="../services/cloud/protondrive.svg" subtitle="Proton Drive is an encrypted cloud storage provider from the popular encrypted email provider Proton Mail." >}}
- {{< card link="../services/cloud/#tresorit" title="Tresorit" image="../services/cloud/tresorit.svg" subtitle="Tresorit is a Swiss-Hungarian encrypted cloud storage provider founded in 2011. Tresorit is owned by the Swiss Post, the national postal service of Switzerland." >}}
- {{< card link="../services/cloud/#peergos" title="Peergos" image="../services/cloud/peergos.svg" subtitle="Peergos is a decentralized protocol and open-source platform for storage, social media, and applications. It provides a secure and private space where users can store, share, view, and edit their photos, videos, documents, etc." >}}
-{{< /cards >}}
-
-### Data Removal Services
-
-{{< cards >}}
- {{< card link="../services/data-broker-removals/#easyoptouts" title="EasyOptOuts" image="../services/data-broker-removals/easyoptouts.svg" subtitle="EasyOptOuts is a paid data removal service that removes your information from data brokers and people search sites." >}}
- {{< card link="../services/data-broker-removals/#google-results-about-you" title="Results about you" image="../services/data-broker-removals/google.svg" subtitle="Google's *Results about you* is a free data removal service that allows you to request the removal of certain personal information from Google Search results." >}}
-{{< /cards >}}
-
-### DNS
-
-#### DNS Providers
-
-We [**recommend**](dns.md#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Mullvad](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) and [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended.
-
-#### Encrypted DNS Proxies
-
-{{< cards >}}
- {{< card link="../services/dns/#rethinkdns" title="RethinkDNS" image="../services/dns/rethinkdns.svg" subtitle="RethinkDNS is an open-source encrypted DNS proxy for Android that supports DNS-over-HTTPS and DNS-over-TLS." >}}
- {{< card link="../services/dns/#dnscrypt-proxy" title="DNSCrypt-Proxy" image="../services/dns/dnscrypt-proxy.svg" subtitle="DNSCrypt-Proxy is a cross-platform encrypted DNS proxy that supports DNS-over-HTTPS, DNS-over-TLS, and DNSCrypt." >}}
-{{< /cards >}}
-
-### Email Aliasing Services
-
-{{< cards >}}
- {{< card link="../services/email-aliasing/#addy" title="Addy" image="../services/email-aliasing/addy.svg" subtitle="Addy is a privacy-focused email aliasing service that allows you to create and manage email aliases to protect your real email address." >}}
- {{< card link="../services/email-aliasing/#simplelogin" title="SimpleLogin" image="../services/email-aliasing/simplelogin.svg" subtitle="SimpleLogin is a privacy-focused email aliasing service that allows you to create and manage email aliases to protect your real email address." >}}
-{{< /cards >}}
-
-### Email Providers
-
-{{< cards >}}
- {{< card link="../services/email/#proton-mail" title="Proton Mail" image="../services/email/protonmail.svg" subtitle="Proton Mail is a privacy-focused email provider developed by the makers of Proton VPN." >}}
- {{< card link="../services/email/#mailbox-mail" title="Mailbox" image="../services/email/mailbox-mail.svg" subtitle="Mailbox is a privacy-focused email provider that offers end-to-end encryption and a suite of collaboration tools." >}}
- {{< card link="../services/email/#tuta" title="Tuta" image="../services/email/tuta.svg" subtitle="Tutanota is a privacy-focused email provider that offers end-to-end encryption and a user-friendly interface." >}}
-{{< /cards >}}
-
-### Financial Services
-
-#### Payment Masking Services
-
-{{< cards >}}
- {{< card link="../services/financial-services/#privacycom-us" title="Privacy.com" image="../services/financial-services/privacy_com.svg" subtitle="Privacy.com is a US-based payment masking service that allows you to create virtual credit cards for online purchases." >}}
- {{< card link="../services/financial-services/#mysudo-us-paid" title="MySudo" image="../services/financial-services/mysudo.svg" subtitle="MySudo is a US-based payment masking service that allows you to create virtual credit cards for online purchases, as well as providing private phone numbers and email addresses." >}}
-{{< /cards >}}
-
-#### Online Gift Card Marketplaces
-
-{{< cards >}}
- {{< card link="../services/financial-services/#coincards" title="Coincards" image="../services/financial-services/coincards.svg" subtitle="Coincards is a Canadian online gift card marketplace that allows you to buy and sell gift cards for various retailers." >}}
-{{< /cards >}}
-
-### Instant Messengers
-
-{{< cards >}}
- {{< card link="../services/messengers/#signal" title="Signal" image="../services/messengers/signal.svg" subtitle="Signal is a cross-platform, open-source instant messenger that offers end-to-end encryption for secure communication." >}}
- {{< card link="../services/messengers/#simplex-chat" title="SimpleX Chat" image="../services/messengers/simplex.svg" subtitle="SimpleX Chat is a cross-platform, open-source instant messenger that offers end-to-end encryption for secure communication." >}}
- {{< card link="../services/messengers/#briar" title="Briar" image="../services/messengers/briar.svg" subtitle="Briar is a cross-platform, open-source instant messenger that offers end-to-end encryption for secure communication." >}}
-{{< /cards >}}
-
-### Photo Backups
-
-{{< cards >}}
- {{< card link="../services/photo-backups/#ente-photos" title="Ente Photos" image="../services/photo-backups/ente.svg" subtitle="Ente Photos is a self-hosted, open-source photo management service that allows you to store, organize, and share your photos securely." >}}
-{{< /cards >}}
-
-### Password Managers
-
-{{< cards >}}
- {{< card link="../services/passwords/#bitwarden" title="Bitwarden" image="../services/passwords/bitwarden.svg" subtitle="Bitwarden is a cross-platform, open-source password manager that offers end-to-end encryption and a user-friendly interface." >}}
- {{< card link="../services/passwords/#proton-pass" title="Proton Pass" image="../services/passwords/protonpass.svg" subtitle="Proton Pass is a cross-platform password manager developed by the makers of Proton Mail." >}}
- {{< card link="../services/passwords/#1password" title="1Password" image="../services/passwords/1password.svg" subtitle="1Password is a cross-platform password manager that offers end-to-end encryption and a user-friendly interface." >}}
- {{< card link="../services/passwords/#psono" title="Psono" image="../services/passwords/psono.svg" subtitle="Psono is a cross-platform, open-source password manager that offers end-to-end encryption and a user-friendly interface." >}}
-{{< /cards >}}
-
-> [!NOTE]
-> For local or self-hosted password managers, see our [Password Managers (Local)](#password-managers-local) section below.
-
-### Photo Management
-
-{{< cards >}}
- {{< card link="../services/photo-management/#ente-photos" title="Ente Photos" image="../services/photo-management/ente.svg" subtitle="Ente Photos is a self-hosted, open-source photo management service that allows you to store, organize, and share your photos securely." >}}
-{{< /cards >}}
-
-### Search Engines
-
-{{< cards >}}
- {{< card link="../services/search-engines/#brave-search" title="Brave Search" image="../services/search-engines/brave-search.svg" subtitle="Brave Search is a privacy-focused search engine developed by the makers of the Brave browser." >}}
- {{< card link="../services/search-engines/#duckduckgo" title="DuckDuckGo" image="../services/search-engines/duckduckgo.svg" subtitle="DuckDuckGo is a privacy-focused search engine that does not track its users." >}}
- {{< card link="../services/search-engines/#searxng" title="SearXNG" image="../services/search-engines/searxng.svg" subtitle="SearXNG is a free and open-source metasearch engine that aggregates results from various search engines while respecting user privacy." >}}
- {{< card link="../services/search-engines/#startpage" title="Startpage" image="../services/search-engines/startpage.svg#only-light" image-dark="../services/search-engines/startpage-dark.svg#only-dark" subtitle="Startpage is a privacy-focused search engine that serves Google search results without tracking its users." >}}
-{{< /cards >}}
-
-### VPN Providers
-
-{{< cards >}}
- {{< card link="../services/vpn/#mullvad" title="Mullvad" image="../services/vpn/mullvad.svg" subtitle="Mullvad is a Swedish VPN provider that offers strong privacy features and a strict no-logs policy." >}}
- {{< card link="../services/vpn/#proton-vpn" title="Proton VPN" image="../services/vpn/protonvpn.svg" subtitle="Proton VPN is a Swiss VPN provider developed by the makers of Proton Mail." >}}
- {{< card link="../services/vpn/#ivpn" title="IVPN" image="../services/vpn/ivpn-mini.svg" subtitle="IVPN is a British VPN provider that offers strong privacy features and a strict no-logs policy." >}}
-{{< /cards >}}
-
-## Software
-
-### AI Chat
-
-{{< cards >}}
- {{< card link="../tools/ai-chat/#koboldcpp" title="Kobold.cpp" image="../software/ai-chat/kobold.png" subtitle="Kobold.cpp is a cross-platform, open-source implementation of the LLaMA language model that can run on a variety of hardware." >}}
- {{< card link="../tools/ai-chat/#llamafile" title="Llamafile" image="../software/ai-chat/llamafile.webp" subtitle="Llamafile is a web-based interface for running LLaMA language models in the browser using WebAssembly." >}}
- {{< card link="../tools/ai-chat/#ollama-cli" title="Ollama (CLI)" image="../software/ai-chat/ollama.png" subtitle="Ollama is a command-line interface for running LLaMA language models on your local machine." >}}
-{{< /cards >}}
-
-### Cryptocurrency
-
-{{< cards >}}
- {{< card link="../tools/cryptocurrency/#monero" title="Monero" image="../software/cryptocurrency/monero.svg" subtitle="Monero is a privacy-focused cryptocurrency that uses ring signatures, stealth addresses, and confidential transactions to provide strong privacy guarantees for its users." >}}
-{{< /cards >}}
-
-### Data and Metadata Redaction
-
-{{< cards >}}
- {{< card link="../tools/data-redaction/#mat2" title="MAT2" image="../software/data-redaction/mat2.svg" subtitle="MAT2 (Metadata Anonymisation Toolkit 2) is a cross-platform, open-source tool for removing metadata from various file types." >}}
- {{< card link="../tools/data-redaction/#exiferaser-android" title="ExifEraser (Android)" image="../software/data-redaction/exiferaser.svg" subtitle="ExifEraser is an Android app for removing EXIF metadata from photos." >}}
- {{< card link="../tools/data-redaction/#exiftool-cli" title="ExifTool (CLI)" image="../software/data-redaction/exiftool.png" subtitle="ExifTool is a command-line application for reading, writing, and editing metadata in a wide variety of file formats." >}}
-{{< /cards >}}
-
-### Document Collaboration
-
-{{< cards >}}
- {{< card link="../tools/document-collaboration/#cryptpad" title="CryptPad" image="../software/document-collaboration/cryptpad.svg" subtitle="CryptPad is a web-based, end-to-end encrypted collaboration suite that includes tools for document editing, spreadsheets, presentations, and more." >}}
-{{< /cards >}}
-
-### Encryption Software
-
-#### Operating System Encryption
-
-> [!TIP]
-> For encrypting your OS drive, we typically recommend using the encryption tool your operating system provides, whether that is BitLocker on Windows, FileVault on macOS, or LUKS on Linux. These tools are included with the operating system and take advantage of hardware encryption elements such as a secure cryptoprocessor.
-
-#### Cross-Platform Tools
-
-{{< cards >}}
- {{< card link="../software/encryption/#cryptomator" title="Cryptomator" image="../software/encryption/cryptomator.svg" subtitle="Cryptomator is a cross-platform, open-source encryption tool that allows you to encrypt your files and folders before uploading them to cloud storage providers." >}}
- {{< card link="../software/encryption/#veracrypt-disk" title="VeraCrypt (FDE)" image="../software/encryption/veracrypt.svg" subtitle="VeraCrypt is a cross-platform, open-source encryption tool that allows you to create encrypted containers, encrypt entire drives, and perform full disk encryption (FDE)." >}}
- {{< card link="../software/encryption/#kryptor" title="Kryptor" image="../software/encryption/kryptor.png" subtitle="Kryptor is a cross-platform, open-source encryption tool that allows you to encrypt your files and folders using AES-256 encryption." >}}
- {{< card link="../software/encryption/#tomb" title="Tomb" image="../software/encryption/tomb.png" subtitle="Tomb is a cross-platform, open-source encryption tool that allows you to create encrypted containers for storing your sensitive data." >}}
-{{< /cards >}}
-
-#### OpenPGP Clients
-
-{{< cards >}}
- {{< card link="../software/encryption/#gnupg" title="GnuPG" image="../software/encryption/gnupg.svg" subtitle="GnuPG (GNU Privacy Guard) is a free and open-source implementation of the OpenPGP standard for encrypting and signing data and communications." >}}
- {{< card link="../software/encryption/#gpg4win" title="GPG4Win (Windows)" image="../software/encryption/gpg4win.svg" subtitle="GPG4Win is a Windows-based suite of tools that includes GnuPG for encryption and signing, as well as additional tools for key management and integration with email clients." >}}
- {{< card link="../software/encryption/#gpg-suite" title="GPG Suite (macOS)" image="../software/encryption/gpgsuite.png" subtitle="GPG Suite is a macOS-based suite of tools that includes GnuPG for encryption and signing, as well as additional tools for key management and integration with email clients." >}}
- {{< card link="../software/encryption/#openkeychain" title="OpenKeychain" image="../software/encryption/openkeychain.svg" subtitle="OpenKeychain is an Android app that provides OpenPGP encryption and signing capabilities, allowing you to secure your communications and files on your mobile device." >}}
-{{< /cards >}}
-
-### File Sharing and Sync
-
-{{< cards >}}
- {{< card link="../software/file-sharing/#send" title="Send" image="../software/file-sharing/send.svg" subtitle="Send is a free, end-to-end encrypted file sharing service developed by Mozilla." >}}
- {{< card link="../software/file-sharing/#onionshare" title="OnionShare" image="../software/file-sharing/onionshare.svg" subtitle="OnionShare is a free, open-source tool that allows you to securely and anonymously share files of any size using the Tor network." >}}
- {{< card link="../software/file-sharing/#syncthing-p2p" title="Syncthing (P2P)" image="../software/file-sharing/syncthing.svg" subtitle="Syncthing is a free, open-source peer-to-peer file synchronization tool that allows you to sync files between devices without relying on a central server." >}}
-{{< /cards >}}
-
-### Frontends
-
-{{< cards >}}
- {{< card link="../software/frontends/#redlib" title="Redlib (Reddit, Web)" image="../software/frontends/redlib.svg" subtitle="Redlib is a web-based frontend for Reddit that blocks ads and trackers while providing a clean and user-friendly interface." >}}
- {{< card link="../software/frontends/#proxitok" title="ProxiTok (TikTok, Web)" image="../software/frontends/proxitok.svg" subtitle="ProxiTok is a web-based frontend for TikTok that blocks ads and trackers while providing a clean and user-friendly interface." >}}
- {{< card link="../software/frontends/#freetube" title="FreeTube (YouTube, Desktop)" image="../software/frontends/freetube.svg" subtitle="FreeTube is a desktop application that serves as a privacy-focused frontend for YouTube, allowing you to watch videos without ads or tracking." >}}
- {{< card link="../software/frontends/#libretube-android" title="LibreTube (YouTube, Android)" image="../software/frontends/libretube.svg" subtitle="LibreTube is an Android app that serves as a privacy-focused frontend for YouTube, allowing you to watch videos without ads or tracking." >}}
- {{< card link="../software/frontends/#newpipe-android" title="NewPipe (YouTube, Android)" image="../software/frontends/newpipe.svg" subtitle="NewPipe is an Android app that serves as a privacy-focused frontend for YouTube, allowing you to watch videos without ads or tracking." >}}
- {{< card link="../software/frontends/#invidious" title="Invidious (YouTube, Web)" image="../software/frontends/invidious.svg" subtitle="Invidious is a web-based frontend for YouTube that blocks ads and trackers while providing a clean and user-friendly interface." >}}
- {{< card link="../software/frontends/#piped" title="Piped (YouTube, Web)" image="../software/frontends/piped.svg" subtitle="Piped is a web-based frontend for YouTube that blocks ads and trackers while providing a clean and user-friendly interface." >}}
-{{< /cards >}}
-
-### Health and Wellness Apps
-
-{{< cards >}}
- {{< card link="../software/health-and-wellness/#drip" title="Drip" image="../software/health-and-wellness/drip.png" subtitle="Drip is a self-hosted, open-source health and wellness app that allows you to track your habits, goals, and overall well-being securely." >}}
- {{< card link="../software/health-and-wellness/#euki" title="Euki" image="../software/health-and-wellness/euki.svg" subtitle="Euki is a self-hosted, open-source period and fertility tracking app that allows you to track your menstrual cycle and related health data securely." >}}
- {{< card link="../software/health-and-wellness/#apple-health" title="Apple Health" image="../software/health-and-wellness/apple-health.webp#only-light" image-dark="../software/health-and-wellness/apple-health-dark.webp#only-dark" subtitle="Apple Health is a health and wellness app developed by Apple that allows you to track your health data on iOS devices." >}}
- {{< card link="../software/health-and-wellness/#apple-fitness" title="Apple Fitness" image="../software/health-and-wellness/apple-fitness.webp" subtitle="Apple Fitness is a fitness tracking app developed by Apple that provides workout tracking and fitness-related features on iOS devices." >}}
- {{< card link="../software/health-and-wellness/#gadgetbridge" title="Gadgetbridge" image="../software/health-and-wellness/gadgetbridge.svg#only-light" image-dark="../software/health-and-wellness/gadgetbridge-dark.svg#only-dark" subtitle="Gadgetbridge is an open-source Android app that allows you to connect and manage various fitness trackers and smartwatches without relying on proprietary apps." >}}
- {{< card link="../software/health-and-wellness/#apple-health-records" title="Apple Health Records" image="../software/health-and-wellness/apple-health.webp#only-light" image-dark="../software/health-and-wellness/apple-health-dark.webp#only-dark" subtitle="Apple Health Records is a feature of the Apple Health app that allows you to securely store and manage your medical records on iOS devices." >}}
- {{< card link="../software/health-and-wellness/#commonhealth" title="CommonHealth" image="../software/health-and-wellness/commonhealth.png" subtitle="CommonHealth is an open-source Android app that allows you to track and manage your health data securely, with a focus on interoperability and user control." >}}
-{{< /cards >}}
-
-### Language Tools
-
-{{< cards >}}
- {{< card link="../software/language-tools/#languagetool" title="LanguageTool" image="../software/language-tools/languagetool.svg#only-light" image-dark="../software/language-tools/languagetool-dark.svg#only-dark" subtitle="LanguageTool is a cross-platform, open-source grammar and spell checker that supports multiple languages." >}}
- {{< card link="../software/language-tools/#libretranslate" title="LibreTranslate" image="../software/language-tools/libretranslate.png" subtitle="LibreTranslate is a free and open-source machine translation API that supports multiple languages." >}}
-{{< /cards >}}
-
-### Maps and Navigation Apps
-
-{{< cards >}}
- {{< card link="../software/maps/#organic-maps" title="Organic Maps" image="../software/maps/organic-maps.svg" subtitle="Organic Maps is a free, open-source offline maps and navigation app for Android and iOS." >}}
- {{< card link="../software/maps/#osmand" title="OsmAnd" image="../software/maps/osmand.svg" subtitle="OsmAnd is a free, open-source offline maps and navigation app for Android and iOS." >}}
-{{< /cards >}}
-
-### Multi-Factor Authentication Tools
-
-> [!NOTE]
-> [Hardware security keys](#security-keys) have been moved to their own category.
-
-{{< cards >}}
- {{< card link="../software/multi-factor-authentication/#ente-auth" title="Ente Auth" image="../software/multi-factor-authentication/ente-auth.svg" subtitle="Ente Auth is a self-hosted, open-source multi-factor authentication (MFA) tool that allows you to generate time-based one-time passwords (TOTPs) for securing your online accounts." >}}
- {{< card link="../software/multi-factor-authentication/#aegis-authenticator-android" title="Aegis Authenticator (Android)" image="../software/multi-factor-authentication/aegis.png" subtitle="Aegis Authenticator is an open-source multi-factor authentication (MFA) app for Android that allows you to generate time-based one-time passwords (TOTPs) for securing your online accounts." >}}
-{{< /cards >}}
-
-### News Aggregators
-
-{{< cards >}}
- {{< card link="../software/news-aggregators/#akregator" title="Akregator" image="../software/news-aggregators/akregator.svg" subtitle="Akregator is a free, open-source news aggregator for the KDE desktop environment that allows you to subscribe to and read RSS feeds." >}}
- {{< card link="../software/news-aggregators/#newsflash" title="NewsFlash" image="../software/news-aggregators/newsflash.png" subtitle="NewsFlash is a free, open-source news aggregator for Linux that allows you to subscribe to and read RSS feeds." >}}
- {{< card link="../software/news-aggregators/#feeder-android" title="Feeder (Android)" image="../software/news-aggregators/feeder.png" subtitle="Feeder is a free, open-source news aggregator for Android that allows you to subscribe to and read RSS feeds." >}}
- {{< card link="../software/news-aggregators/#miniflux" title="Miniflux" image="../software/news-aggregators/miniflux.svg#only-light" image-dark="../software/news-aggregators/miniflux-dark.svg#only-dark" subtitle="Miniflux is a self-hosted, open-source news aggregator that allows you to subscribe to and read RSS feeds securely." >}}
- {{< card link="../software/news-aggregators/#netnewswire" title="NetNewsWire" image="../software/news-aggregators/netnewswire.png" subtitle="NetNewsWire is a free, open-source news aggregator for macOS and iOS that allows you to subscribe to and read RSS feeds." >}}
- {{< card link="../software/news-aggregators/#newsboat" title="Newsboat" image="../software/news-aggregators/newsboat.svg" subtitle="Newsboat is a free, open-source news aggregator for the command line that allows you to subscribe to and read RSS feeds." >}}
-{{< /cards >}}
-
-### Notebooks
-
-{{< cards >}}
- {{< card link="../software/notebooks/#standard-notes" title="Standard Notes" image="../software/notebooks/standard-notes.svg" subtitle="Standard Notes is a cross-platform, open-source note-taking app that focuses on simplicity and security." >}}
- {{< card link="../software/notebooks/#notesnook" title="Notesnook" image="../software/notebooks/notesnook.svg" subtitle="Notesnook is a cross-platform, open-source note-taking app that offers end-to-end encryption and a user-friendly interface." >}}
- {{< card link="../software/notebooks/#joplin" title="Joplin" image="../software/notebooks/joplin.svg" subtitle="Joplin is a cross-platform, open-source note-taking and to-do application that supports end-to-end encryption." >}}
- {{< card link="../software/notebooks/#cryptee" title="Cryptee" image="../software/notebooks/cryptee.svg#only-light" image-dark="../software/notebooks/cryptee-dark.svg#only-dark" subtitle="Cryptee is a cross-platform, open-source note-taking and photo storage app that offers end-to-end encryption." >}}
- {{< card link="../software/notebooks/#org-mode" title="Org-mode" image="../software/notebooks/org-mode.svg" subtitle="Org-mode is an open-source organizational tool for Emacs that allows you to manage your notes, tasks, and projects in a plain text format." >}}
-{{< /cards >}}
-
-### Office Suites
-
-{{< cards >}}
- {{< card link="../software/office-suites/#libreoffice" title="LibreOffice" image="../software/office-suites/libreoffice.svg" subtitle="LibreOffice is a free and open-source office suite that includes applications for word processing, spreadsheets, presentations, and more." >}}
- {{< card link="../software/office-suites/#onlyoffice" title="OnlyOffice" image="../software/office-suites/onlyoffice.svg" subtitle="OnlyOffice is a free and open-source office suite that includes applications for word processing, spreadsheets, presentations, and more." >}}
-{{< /cards >}}
-
-### Password Managers (Local)
-
-{{< cards >}}
- {{< card link="../software/passwords/#keepassxc" title="KeePassXC" image="../software/passwords/keepassxc.svg" subtitle="KeePassXC is a cross-platform, open-source password manager that offers end-to-end encryption and a user-friendly interface." >}}
- {{< card link="../software/passwords/#keepassdx-android" title="KeePassDX (Android)" image="../software/passwords/keepassdx.svg" subtitle="KeePassDX is an open-source password manager for Android that offers end-to-end encryption and a user-friendly interface." >}}
- {{< card link="../software/passwords/#keepassium-ios-macos" title="KeePassium (iOS & macOS)" image="../software/passwords/keepassium.svg" subtitle="KeePassium is a password manager for iOS and macOS that supports KeePass databases and offers end-to-end encryption." >}}
- {{< card link="../software/passwords/#gopass-cli" title="Gopass (CLI)" image="../software/passwords/gopass.svg" subtitle="Gopass is a command-line password manager that offers end-to-end encryption and a user-friendly interface." >}}
-{{< /cards >}}
-
-### Pastebins
-
-{{< cards >}}
- {{< card link="../software/pastebins/#privatebin" title="PrivateBin" image="../software/pastebins/privatebin.svg" subtitle="PrivateBin is a minimalist, open-source pastebin service that allows you to share text and code snippets securely with end-to-end encryption." >}}
- {{< card link="../software/pastebins/#paaster" title="Paaster" image="../software/pastebins/paaster.svg" subtitle="Paaster is a self-hosted, open-source pastebin service that allows you to share text and code snippets securely with end-to-end encryption." >}}
-{{< /cards >}}
-
-### Social Networks
-
-{{< cards >}}
- {{< card link="../software/social-networks/#mastodon" title="Mastodon" image="../software/social-networks/mastodon.svg" subtitle="Mastodon is a decentralized, open-source social network that allows users to create and join communities called instances." >}}
- {{< card link="../software/social-networks/#element" title="Element" image="../software/social-networks/element.svg" subtitle="Element is a cross-platform, open-source messaging app that serves as a client for the Matrix protocol, which can be used for real-time communication and social networking." >}}
-{{< /cards >}}
-
-## Hardware
-
-### Security Keys
-
-{{< cards >}}
- {{< card link="../hardware/security-keys/#yubico-security-key" title="Yubico Security Key" image="../hardware/security-keys/mini/yubico.svg" subtitle="The Yubico Security Key is a hardware security key that supports the FIDO2 standard for strong, phishing-resistant authentication." >}}
- {{< card link="../hardware/security-keys/#yubikey" title="YubiKey" image="../hardware/security-keys/mini/yubico.svg" subtitle="The YubiKey is a hardware security key that supports multiple authentication protocols, including FIDO2, U2F, and OTP." >}}
- {{< card link="../hardware/security-keys/#nitrokey" title="Nitrokey" image="../hardware/security-keys/mini/nitrokey.svg" subtitle="Nitrokey is a hardware security key that supports multiple authentication protocols, including FIDO2, U2F, and OTP." >}}
-{{< /cards >}}
-
-### Mobile Phones
-
-{{< cards >}}
- {{< card link="../hardware/mobile-phones/#google-pixel" title="Google Pixel" image="../hardware/mobile-phones/google-pixel.png" subtitle="The Google Pixel is a line of smartphones developed by Google that runs on the Android operating system." >}}
-{{< /cards >}}
-
-## Operating Systems
-
-### Mobile
-
-#### Custom Android Operating Systems
-
-{{< cards >}}
- {{< card link="../os/android/distributions/#grapheneos" title="GrapheneOS" image="../os/android/grapheneos.svg#only-light" subtitle="GrapheneOS is a privacy and security-focused custom Android operating system that is designed to run on Google Pixel devices." >}}
-{{< /cards >}}
-
-#### Android Apps
-
-{{< cards >}}
- {{< card link="../os/android/general-apps/#shelter" title="Shelter (Work Profiles)" image="../os/android/shelter.svg" subtitle="Shelter is an open-source Android app that allows you to create and manage work profiles on your device, providing a secure and isolated environment for your apps and data." >}}
- {{< card link="../os/android/general-apps/#secure-camera" title="Secure Camera" image="../os/android/secure_camera.svg#only-light" subtitle="Secure Camera is an open-source Android app that provides a secure and privacy-focused camera experience by isolating the camera app in a work profile." >}}
- {{< card link="../os/android/general-apps/#secure-pdf-viewer" title="Secure PDF Viewer" image="../os/android/secure_pdf_viewer.svg#only-light" subtitle="Secure PDF Viewer is an open-source Android app that provides a secure and privacy-focused PDF viewing experience by isolating the PDF viewer app in a work profile." >}}
-{{< /cards >}}
-
-#### Ways to Obtain Android Apps
-
-{{< cards >}}
- {{< card link="../os/android/obtaining-apps/#obtainium" title="Obtainium" image="../os/android/obtainium.svg" subtitle="Obtainium is an open-source app manager for Android that allows you to download and manage apps from various sources." >}}
- {{< card link="../os/android/obtaining-apps/#aurora-store" title="Aurora Store" image="../os/android/aurora-store.webp" subtitle="Aurora Store is an open-source Google Play client for Android that allows you to download and manage apps from the Google Play Store without a Google account." >}}
-{{< /cards >}}
-
-### Desktop/PC
-
-{{< cards >}}
- {{< card link="../os/desktop/#qubes-os" title="Qubes OS (Xen VM Distribution)" image="../os/desktop/qubes_os.svg" subtitle="Qubes OS is a security-focused desktop operating system that uses Xen-based virtualization to isolate different tasks and applications in separate virtual machines." >}}
- {{< card link="../os/desktop/#fedora-linux" title="Fedora Linux" image="../os/desktop/fedora.svg" subtitle="Fedora Linux is a free and open-source Linux distribution developed by the Fedora Project, sponsored by Red Hat." >}}
- {{< card link="../os/desktop/#opensuse-tumbleweed" title="openSUSE Tumbleweed" image="../os/desktop/opensuse-tumbleweed.svg" subtitle="openSUSE Tumbleweed is a rolling release version of the openSUSE Linux distribution that provides the latest software updates and features." >}}
- {{< card link="../os/desktop/#arch-linux" title="Arch Linux" image="../os/desktop/archlinux.svg" subtitle="Arch Linux is a lightweight and flexible Linux distribution that follows a rolling release model and emphasizes simplicity and user control." >}}
- {{< card link="../os/desktop/#fedora-atomic-desktops" title="Fedora Atomic Desktops" image="../os/desktop/fedora.svg" subtitle="Fedora Atomic Desktops is a variant of Fedora Linux that focuses on providing a secure and immutable desktop environment using containerization technologies." >}}
- {{< card link="../os/desktop/#nixos" title="NixOS" image="../os/desktop/nixos.svg" subtitle="NixOS is a unique Linux distribution that uses the Nix package manager to provide reproducible builds and declarative configuration management." >}}
- {{< card link="../os/desktop/#whonix" title="Whonix (Tor)" image="../os/desktop/whonix.svg" subtitle="Whonix is a security-focused desktop operating system that routes all internet traffic through the Tor network for enhanced privacy and anonymity." >}}
- {{< card link="../os/desktop/#tails-live-boot" title="Tails (Live Boot)" image="../os/desktop/tails.svg" subtitle="Tails is a live bootable operating system that focuses on privacy and anonymity, routing all internet traffic through the Tor network and leaving no trace on the host machine." >}}
- {{< card link="../os/desktop/#secureblue" title="Secureblue" image="../os/desktop/secureblue.svg" subtitle="Secureblue is a security-focused desktop operating system that uses a hardened Linux kernel and various security tools to provide a secure computing environment." >}}
- {{< card link="../os/desktop/#kicksecure" title="Kicksecure" image="../os/desktop/kicksecure.svg" subtitle="Kicksecure is a security-focused desktop operating system that uses a hardened Linux kernel and various security tools to provide a secure computing environment." >}}
-{{< /cards >}}
-
-### Router Firmware
-
-{{< cards >}}
- {{< card link="../os/router-firmware/#openwrt" title="OpenWrt" image="../os/router-firmware/openwrt.svg#only-light" subtitle="OpenWrt is a free and open-source router firmware that provides advanced features and customization options for a wide range of routers." >}}
- {{< card link="../os/router-firmware/#opnsense" title="OPNsense" image="../os/router-firmware/opnsense.svg" subtitle="OPNsense is a free and open-source firewall and routing platform based on FreeBSD that provides advanced security features and a user-friendly interface." >}}
-{{< /cards >}}
-
-### Alternative Networks
-
-{{< cards >}}
- {{< card link="../advanced/alternative-networks/#i2p" title="I2P (Invisible Internet Project)" image="../advanced/alternative-networks/i2p.svg#only-light" subtitle="I2P (Invisible Internet Project) is an anonymous network layer that allows for secure and private communication over the internet by routing traffic through a network of volunteer-operated nodes." >}}
- {{< card link="../advanced/alternative-networks/#tor" title="Tor" image="../advanced/alternative-networks/tor.svg" subtitle="Tor is a free and open-source software that enables anonymous communication by routing internet traffic through a network of volunteer-operated servers." >}}
- {{< card link="../advanced/alternative-networks/#orbot" title="Orbot (Mobile Tor Proxy)" image="../advanced/alternative-networks/orbot.svg" subtitle="Orbot is an Android app that allows you to use the Tor network on your mobile device, providing anonymity and privacy for your internet traffic." >}}
- {{< card link="../advanced/alternative-networks/#snowflake" title="Snowflake" image="../advanced/alternative-networks/snowflake.svg#only-light" subtitle="Snowflake is a pluggable transport for the Tor network that uses WebRTC to create temporary proxies, allowing users to bypass censorship and access the Tor network from restricted environments." >}}
-{{< /cards >}}
-
-### Device Integrity Verification
-
-{{< cards >}}
- {{< card link="../advanced/device-integrity/#mobile-verification-toolkit" title="Mobile Verification Toolkit" image="../advanced/device-integrity/mvt.webp#only-light" subtitle="The Mobile Verification Toolkit (MVT) is an open-source tool developed by Amnesty International that allows you to check your mobile device for signs of compromise or surveillance." >}}
- {{< card link="../advanced/device-integrity/#imazing-ios" title="iMazing (iOS)" image="../advanced/device-integrity/imazing.png" subtitle="iMazing is a desktop application for managing iOS devices that can be used to perform a forensic analysis of an iOS device to check for signs of compromise or surveillance." >}}
- {{< card link="../advanced/device-integrity/#auditor-android" title="Auditor (Android)" image="../advanced/device-integrity/auditor.svg#only-light" subtitle="Auditor is an open-source Android app developed by the Guardian Project that allows you to check your Android device for signs of compromise or surveillance." >}}
-{{< /cards >}}
diff --git a/content/tools/all/_index.md b/content/tools/all/_index.md
new file mode 100644
index 00000000..ab719171
--- /dev/null
+++ b/content/tools/all/_index.md
@@ -0,0 +1,435 @@
+---
+title: All Privacy Tools
+weight: 10
+---
+
+
+If you're looking for a specific solution to something, these are the hardware and software tools we recommend in a variety of categories. Our **recommended privacy tools** are primarily chosen based on security features, with additional emphasis on decentralized and open-source tools. They are applicable to a variety of threat models ranging from protection against global mass surveillance programs and avoiding big tech companies to mitigating attacks, but only you can determine what will work best for your needs.
+
+## Service Providers
+
+### Calendar Sync
+
+{{< cards >}}
+ {{< card link="../services/calendar/#tuta" title="Tuta" image="../services/calendar/tuta.svg" subtitle="Tuta offers a free and encrypted calendar across their supported platforms. Features include automatic E2EE of all data, sharing features, import/export functionality, multifactor authentication, and more." >}}
+ {{< card link="../services/calendar/#proton-calendar" title="Proton Calendar" image="../services/calendar/proton-calendar.svg" subtitle="Proton Calendar is an encrypted calendar service available to Proton members via its web or mobile clients. Features include automatic E2EE of all data, sharing features, import/export functionality, and more." >}}
+{{< /cards >}}
+
+### Cloud Storage
+
+{{< cards >}}
+ {{< card link="../services/cloud/#proton-drive" title="Proton Drive" image="../services/cloud/protondrive.svg" subtitle="Proton Drive is an encrypted cloud storage provider from the popular encrypted email provider Proton Mail. The initial free storage is limited to 2 GB, but with the completion of certain steps, additional storage can be obtained up to 5 GB." >}}
+ {{< card link="../services/cloud/#tresorit" title="Tresorit" image="../services/cloud/tresorit.svg" subtitle="Tresorit is a Swiss-Hungarian encrypted cloud storage provider founded in 2011. Tresorit is owned by the Swiss Post, the national postal service of Switzerland." >}}
+ {{< card link="../services/cloud/#peergos" title="Peergos" image="../services/cloud/peergos.svg" subtitle="Peergos is a decentralized protocol and open-source platform for storage, social media, and applications. It provides a secure and private space where users can store, share, view, and edit their photos, videos, documents, etc." >}}
+{{< /cards >}}
+
+### Data Removal Services
+
+{{< cards >}}
+ {{< card link="../services/data-broker-removals/#easyoptouts-paid" title="EasyOptOuts" image="../services/data-broker-removals/easyoptouts.svg" subtitle="EasyOptOuts is a $20/year service which will search a number of different data broker sites and automatically submit opt-out requests on your behalf. They will perform the first search and removal process immediately, and then re-run the process every 4 months in case your data shows up on new sites over time." >}}
+ {{< card link="../services/data-broker-removals/#google-results-about-you-free" title="Google Results about you" image="../services/data-broker-removals/google.svg" subtitle="Results about you is a free tool which helps you discover whether your personal contact information, including your home address, phone number, and email address, appears in Google search results. If any personal information is found, you can request its removal." >}}
+{{< /cards >}}
+
+### DNS
+
+#### DNS Providers
+
+We [**recommend**](services/dns/#recommended-providers) a number of encrypted DNS servers based on a variety of criteria, such as [Mullvad](https://mullvad.net/en/help/dns-over-https-and-dns-over-tls) and [Quad9](https://quad9.net) amongst others. We recommend for you to read our pages on DNS before choosing a provider. In many cases, using an alternative DNS provider is not recommended.
+
+#### Encrypted DNS and filtering clients
+
+{{< cards >}}
+ {{< card link="../services/dns/#control-d" title="Control D" image="../services/dns/control-d.svg" subtitle="Control D is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. In addition to their paid plans, they offer a number of preconfigured DNS resolvers you can use for free." >}}
+ {{< card link="../services/dns/#nextdns" title="NextDNS" image="../services/dns/nextdns.svg" subtitle="NextDNS is a customizable DNS service which lets you block security threats, unwanted content, and advertisements on a DNS level. They offer a fully functional free plan for limited use." >}}
+ {{< card link="../services/dns/#rethinkdns" title="RethinkDNS" image="../services/dns/rethinkdns.svg" subtitle="RethinkDNS is an open-source Android client that supports DoH, DoT, DNSCrypt and DNS Proxy. It also provides additional functionality such as caching DNS responses, locally logging DNS queries, and using the app as a firewall." >}}
+ {{< card link="../services/dns/#dnscrypt-proxy" title="DNSCrypt-Proxy" image="../services/dns/dnscrypt-proxy.svg" subtitle="DNSCrypt-Proxy is a DNS proxy with support for DNSCrypt, DoH, and Anonymized DNS." >}}
+{{< /cards >}}
+
+### Email Aliasing Services
+
+{{< cards >}}
+ {{< card link="../services/email-aliasing/#addyio" title="Addy.io" image="../services/email-aliasing/addy.svg" subtitle="Addy.io lets you create 10 domain aliases on a shared domain for free, or unlimited standard aliases. The number of shared aliases (which end in a shared domain like @addy.io) that you can create depends on the plan you are subscribed to." >}}
+ {{< card link="../services/email-aliasing/#simplelogin" title="SimpleLogin" image="../services/email-aliasing/simplelogin.svg" subtitle="SimpleLogin is a free service which provides email aliases on a variety of shared domain names, and optionally provides paid features like unlimited aliases and custom domains." >}}
+{{< /cards >}}
+
+### Email Providers
+
+{{< cards >}}
+ {{< card link="../services/email/#proton-mail" title="Proton Mail" image="../services/email/protonmail.svg" subtitle="Proton Mail is an email service with a focus on privacy, encryption, security, and ease of use. They have been in operation since 2013. Proton AG is based in Geneva, Switzerland." >}}
+ {{< card link="../services/email/#mailbox-mail" title="Mailbox Mail" image="../services/email/mailbox-mail.svg" subtitle="Mailbox Mail (formerly Mailbox.org) is an email service with a focus on being secure, ad-free, and powered by 100% eco-friendly energy. They have been in operation since 2014. Mailbox Mail is based in Berlin, Germany." >}}
+ {{< card link="../services/email/#tuta" title="Tuta" image="../services/email/tuta.svg" subtitle="Tuta (formerly Tutanota) is an email service with a focus on security and privacy through the use of encryption. Tuta has been in operation since 2011 and is based in Hanover, Germany." >}}
+{{< /cards >}}
+
+### Financial Services
+
+#### Payment Masking Services
+
+{{< cards >}}
+ {{< card link="../services/financial-services/#privacycom-us" title="Privacy.com (US)" image="../services/financial-services/privacy_com.svg" subtitle="Privacy.com's free plan allows you to create up to 12 virtual cards per month, set spend limits on those cards, and shut off cards instantly. Their paid plans provide higher limits on the number of cards that can be created each month." >}}
+ {{< card link="../services/financial-services/#mysudo-us-paid" title="MySudo (US, Paid)" image="../services/financial-services/mysudo.svg" subtitle="MySudo provides up to 9 virtual cards depending on the plan you purchase. Their paid plans additionally include functionality which may be useful for making purchases privately, such as virtual phone numbers and email addresses, although we typically recommend other email aliasing providers for extensive email aliasing use." >}}
+{{< /cards >}}
+
+#### Online Gift Card Marketplaces
+
+{{< cards >}}
+ {{< card link="../services/financial-services/#coincards" title="Coincards" image="../services/financial-services/coincards.svg" subtitle="Coincards allows you to purchase gift cards for a large variety of merchants. Their homepage has a complete listing of the various countries where their service is available." >}}
+{{< /cards >}}
+
+### Instant Messengers
+
+{{< cards >}}
+ {{< card link="../services/messengers/#signal" title="Signal" image="../services/messengers/signal.svg" subtitle="Signal is a mobile app developed by Signal Messenger LLC. The app provides instant messaging and calls secured with the Signal protocol, an extremely secure encryption protocol which supports forward secrecy and post-compromise security." >}}
+ {{< card link="../services/messengers/#molly-android" title="Molly (Android)" image="../services/messengers/molly.svg" subtitle="If you use Android and your threat model requires protecting against targeted attacks you may consider using this alternative app, which features a number of security and usability improvements, to access the Signal network. Molly is an alternative Signal client for Android which allows you to encrypt the local database with a passphrase at rest, to have unused RAM data securely shredded, to route your connection via Tor, and more." >}}
+ {{< card link="../services/messengers/#simplex-chat" title="SimpleX Chat" image="../services/messengers/simplex.svg" subtitle="SimpleX Chat is an instant messenger that doesn't depend on any unique identifiers such as phone numbers or usernames. Its decentralized network makes SimpleX Chat an effective tool against censorship." >}}
+ {{< card link="../services/messengers/#briar" title="Briar" image="../services/messengers/briar.svg" subtitle="Briar is an encrypted instant messenger that connects to other clients using the Tor network, making it an effective tool at circumventing censorship. Briar can also connect via Wi-Fi or Bluetooth when in local proximity." >}}
+{{< /cards >}}
+
+### Photo Backups
+
+{{< cards >}}
+ {{< card link="../services/photo-backups/#ente-photos" title="Ente Photos" image="../services/photo-backups/ente.svg" subtitle="Ente Photos is an end-to-end encrypted photo backup service which supports automatic backups on iOS and Android. Their code is fully open source, both on the client side and on the server side." >}}
+{{< /cards >}}
+
+### Password Managers
+
+{{< cards >}}
+ {{< card link="../services/passwords/#bitwarden" title="Bitwarden" image="../services/passwords/bitwarden.svg" subtitle="Bitwarden is a free and open-source password and passkey manager. It aims to solve password management problems for individuals, teams, and business organizations." >}}
+ {{< card link="../services/passwords/#proton-pass" title="Proton Pass" image="../services/passwords/protonpass.svg" subtitle="Proton Pass is an open-source, end-to-end encrypted password manager developed by Proton, the team behind Proton Mail. It securely stores your login credentials, generates unique email aliases, and supports and stores passkeys." >}}
+ {{< card link="../services/passwords/#1password" title="1Password" image="../services/passwords/1password.svg" subtitle="1Password is a password manager with a strong focus on security and ease-of-use that allows you to store passwords, passkeys, credit cards, software licenses, and any other sensitive information in a secure digital vault. Your vault is hosted on 1Password's servers for a monthly fee." >}}
+ {{< card link="../services/passwords/#psono" title="Psono" image="../services/passwords/psono.svg" subtitle="Psono is a free and open-source password manager from Germany, with a focus on password management for teams. Psono supports secure sharing of passwords, files, bookmarks, and emails." >}}
+{{< /cards >}}
+
+> [!NOTE]
+> For local or self-hosted password managers, see our [Password Managers (Local)](#password-managers-local) section below.
+
+### Search Engines
+
+{{< cards >}}
+ {{< card link="../services/search-engines/#brave-search" title="Brave Search" image="../services/search-engines/brave-search.svg" subtitle="Brave Search is a search engine developed by Brave. It includes unique features such as Discussions, which highlights conversation-focused results such as forum posts." >}}
+ {{< card link="../services/search-engines/#duckduckgo" title="DuckDuckGo" image="../services/search-engines/duckduckgo.svg" subtitle="DuckDuckGo is one of the more mainstream private search engine options. Notable DuckDuckGo search features include bangs and a variety of instant answers." >}}
+ {{< card link="../services/search-engines/#startpage" title="Startpage" image="../services/search-engines/startpage.svg" subtitle="Startpage is a private search engine. One of Startpage's unique features is the Anonymous View, which puts forth efforts to standardize user activity to make it more difficult to be uniquely identified." >}}
+ {{< card link="../services/search-engines/#searxng" title="SearXNG" image="../services/search-engines/searxng.svg" subtitle="SearXNG is an open-source, self-hostable, metasearch engine. It is an actively maintained fork of SearX." >}}
+{{< /cards >}}
+
+### VPN Providers
+
+{{< cards >}}
+ {{< card link="../services/vpn/#proton-vpn" title="Proton VPN" image="../services/vpn/protonvpn.svg" subtitle="Proton VPN is a strong contender in the VPN space, and they have been in operation since 2016. Proton AG is based in Switzerland and offers a limited free tier, as well as a more featured premium option." >}}
+ {{< card link="../services/vpn/#ivpn" title="IVPN" image="../services/vpn/ivpn.svg" subtitle="IVPN is another premium VPN provider, and they have been in operation since 2009. IVPN is based in Gibraltar and does not offer a free trial." >}}
+ {{< card link="../services/vpn/#mullvad" title="Mullvad" image="../services/vpn/mullvad.svg" subtitle="Mullvad is a fast and inexpensive VPN with a serious focus on transparency and security. They have been in operation since 2009. Mullvad is based in Sweden and offers a 14-day money-back guarantee for payment methods that allow it." >}}
+{{< /cards >}}
+
+## Software
+
+### AI Chat
+
+{{< cards >}}
+ {{< card link="../software/ai-chat/#koboldcpp" title="Kobold.cpp" image="../software/ai-chat/kobold.png" subtitle="Kobold.cpp is an AI client that runs locally on your Windows, Mac, or Linux computer. It's an excellent choice if you are looking for heavy customization and tweaking, such as for role-playing purposes." >}}
+ {{< card link="../software/ai-chat/#ollama-cli" title="Ollama" image="../software/ai-chat/ollama.png" subtitle="Ollama is a command-line AI assistant that is available on macOS, Linux, and Windows. Ollama is a great choice if you're looking for an AI client that's easy-to-use, widely compatible, and fast due to its use of inference and other techniques." >}}
+ {{< card link="../software/ai-chat/#llamafile" title="Llamafile" image="../software/ai-chat/llamafile.webp" subtitle="Llamafile is a lightweight, single-file executable that allows users to run LLMs locally on their own computers without any setup involved. It is backed by Mozilla and available on Linux, macOS, and Windows." >}}
+{{< /cards >}}
+
+### Browser Extensions
+
+{{< cards >}}
+ {{< card link="../software/browser-extensions/#ublock-origin" title="uBlock Origin" image="../software/browser-extensions/ublock_origin.svg" subtitle="uBlock Origin is a popular content blocker that could help you block ads, trackers, and fingerprinting scripts." >}}
+ {{< card link="../software/browser-extensions/#ublock-origin-lite" title="uBlock Origin Lite" image="../software/browser-extensions/ublock_origin_lite.svg" subtitle="uBlock Origin Lite is a Manifest V3 compatible content blocker. Compared to the original uBlock Origin, this extension does not require broad read/modify data permissions to function, which lowers the risk of Passive Attacks on your browser if a malicious rule is added to a filter list." >}}
+ {{< card link="../software/browser-extensions/#adguard" title="AdGuard for iOS" image="../software/browser-extensions/adguard.svg" subtitle="AdGuard for iOS is a free and open-source content-blocking extension for Safari that uses the native Content Blocker API." >}}
+{{< /cards >}}
+
+### Cryptocurrency
+
+{{< cards >}}
+ {{< card link="../software/cryptocurrency/#monero" title="Monero" image="../software/cryptocurrency/monero.svg" subtitle="Monero uses a blockchain with privacy-enhancing technologies that obfuscate transactions to achieve Anonymity. Every Monero transaction hides the transaction amount, sending and receiving addresses, and source of funds without any hoops to jump through, making it an ideal choice for cryptocurrency novices." >}}
+{{< /cards >}}
+
+### Data and Metadata Redaction
+
+{{< cards >}}
+ {{< card link="../software/data-redaction/#mat2" title="MAT2" image="../software/data-redaction/mat2.svg" subtitle="MAT2 is free, cross-platform software which allows you to remove metadata from image, audio, torrent, and document file types. It provides both a command line tool and a graphical user interface via an extension for Dolphin, the default file manager of KDE." >}}
+ {{< card link="../software/data-redaction/#exiferaser-android" title="ExifEraser" image="../software/data-redaction/exiferaser.svg" subtitle="ExifEraser is a modern, permissionless image metadata erasing application for Android." >}}
+ {{< card link="../software/data-redaction/#exiftool-cli" title="ExifTool" image="../software/data-redaction/exiftool.png" subtitle="ExifTool is the original Perl library and command-line application for reading, writing, and editing meta information (Exif, IPTC, XMP, and more) in a wide variety of file formats (JPEG, TIFF, PNG, PDF, RAW, and more)." >}}
+{{< /cards >}}
+
+### Desktop Browsers
+
+{{< cards >}}
+ {{< card link="../software/desktop-browsers/#mullvad-browser" title="Mullvad Browser" image="../software/desktop-browsers/mullvad_browser.svg" subtitle="Mullvad Browser is a version of Tor Browser with Tor network integrations removed. It aims to provide to VPN users Tor Browser's anti-fingerprinting browser technologies, which are key protections against Mass Surveillance." >}}
+ {{< card link="../software/desktop-browsers/#firefox" title="Firefox" image="../software/desktop-browsers/firefox.svg" subtitle="Firefox provides strong privacy settings such as Enhanced Tracking Protection, which can help block various types of tracking." >}}
+ {{< card link="../software/desktop-browsers/#brave" title="Brave" image="../software/desktop-browsers/brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
+{{< /cards >}}
+
+### Document Collaboration
+
+{{< cards >}}
+ {{< card link="../software/document-collaboration/#cryptpad" title="CryptPad" image="../software/document-collaboration/cryptpad.svg" subtitle="CryptPad is a private-by-design alternative to popular, full-fledged office suites. All content on this web service is E2EE and can be shared with other users easily." >}}
+{{< /cards >}}
+
+### Email Clients
+
+{{< cards >}}
+ {{< card link="../software/email-clients/#thunderbird" title="Thunderbird" image="../software/email-clients/thunderbird.svg" subtitle="Thunderbird is a free, open-source, cross-platform email, newsgroup, news feed, and chat (XMPP, IRC, Matrix) client developed by the Thunderbird community, and previously by the Mozilla Foundation." >}}
+ {{< card link="../software/email-clients/#apple-mail-macos" title="Apple Mail" image="../software/email-clients/applemail.png" subtitle="Apple Mail is included in macOS and can be extended to have OpenPGP support with GPG Suite, which adds the ability to send PGP-encrypted email." >}}
+ {{< card link="../software/email-clients/#fairemail-android" title="FairEmail" image="../software/email-clients/fairemail.svg" subtitle="FairEmail is a minimal, open-source email app which uses open standards (IMAP, SMTP, OpenPGP) and minimizes data and battery usage." >}}
+ {{< card link="../software/email-clients/#gnome-evolution-gnome" title="GNOME Evolution" image="../software/email-clients/evolution.svg" subtitle="Evolution is a personal information management application that provides integrated mail, calendaring, and address book functionality. Evolution has extensive documentation to help you get started." >}}
+ {{< card link="../software/email-clients/#kontact-kde" title="Kontact" image="../software/email-clients/kontact.svg" subtitle="Kontact is a personal information manager (PIM) application from the KDE project. It provides a mail client, address book, RSS client, and an organizer." >}}
+ {{< card link="../software/email-clients/#mailvelope-browser" title="Mailvelope" image="../software/email-clients/mailvelope.svg" subtitle="Mailvelope is a browser extension that enables the exchange of encrypted emails following the OpenPGP encryption standard." >}}
+ {{< card link="../software/email-clients/#neomutt-cli" title="NeoMutt" image="../software/email-clients/mutt.svg" subtitle="NeoMutt is an open-source command line email reader for Linux and BSD. It's a fork of Mutt) with added features." >}}
+{{< /cards >}}
+
+### Encryption Software
+
+#### Operating System Encryption
+
+> [!TIP]
+> For encrypting your OS drive, we typically recommend using the encryption tool your operating system provides, whether that is BitLocker on Windows, FileVault on macOS, or LUKS on Linux. These tools are included with the operating system and take advantage of hardware encryption elements such as a secure cryptoprocessor.
+
+#### Recommended tools
+
+{{< cards >}}
+ {{< card link="../software/encryption/#cryptomator-cloud" title="Cryptomator" image="../software/encryption/cryptomator.svg" subtitle="Cryptomator is an encryption solution designed for privately saving files to any cloud Service Provider, eliminating the need to trust that they won't access your files. It allows you to create vaults that are stored on a virtual drive, the contents of which are encrypted and synced with your cloud storage provider." >}}
+ {{< card link="../software/encryption/#veracrypt-disk" title="VeraCrypt" image="../software/encryption/veracrypt.svg" subtitle="VeraCrypt is a source-available freeware utility used for on-the-fly encryption. It can create a virtual encrypted disk within a file, encrypt a partition, or encrypt the entire storage device with pre-boot authentication." >}}
+ {{< card link="../software/encryption/#bitlocker" title="BitLocker" image="../software/encryption/bitlocker.png" subtitle="BitLocker is the full volume encryption solution bundled with Microsoft Windows that uses the Trusted Platform Module (TPM) for hardware-based security." >}}
+ {{< card link="../software/encryption/#filevault" title="FileVault" image="../software/encryption/filevault.png" subtitle="FileVault is the on-the-fly volume encryption solution built into macOS. FileVault takes advantage of the hardware security capabilities present on an Apple Silicon SoC or T2 Security Chip." >}}
+ {{< card link="../software/encryption/#linux-unified-key-setup" title="LUKS" image="../software/encryption/luks.png" subtitle="LUKS is the default FDE method for Linux. It can be used to encrypt full volumes, partitions, or create encrypted containers." >}}
+ {{< card link="../software/encryption/#kryptor" title="Kryptor" image="../software/encryption/kryptor.png" subtitle="Kryptor is a free and open-source file encryption and signing tool that makes use of modern and secure cryptographic algorithms. It aims to be a better version of age and Minisign to provide a simple, easier alternative to GPG." >}}
+ {{< card link="../software/encryption/#tomb" title="Tomb" image="../software/encryption/tomb.png" subtitle="Tomb is a command-line shell wrapper for LUKS. It supports steganography via third-party tools." >}}
+ {{< card link="../software/encryption/#gnu-privacy-guard" title="GnuPG" image="../software/encryption/gnupg.svg" subtitle="GnuPG is a GPL-licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF specification of OpenPGP." >}}
+ {{< card link="../software/encryption/#gpg4win" title="GPG4win" image="../software/encryption/gpg4win.svg" subtitle="GPG4win is a package for Windows from Intevation and g10 Code. It includes various tools that can assist you in using GPG on Microsoft Windows." >}}
+ {{< card link="../software/encryption/#gpg-suite" title="GPG Suite" image="../software/encryption/gpgsuite.png" subtitle="GPG Suite provides OpenPGP support for Apple Mail and other email clients on macOS." >}}
+ {{< card link="../software/encryption/#openkeychain" title="OpenKeychain" image="../software/encryption/openkeychain.svg" subtitle="OpenKeychain is an implementation of GnuPG for Android. It's commonly required by mail clients such as Thunderbird, FairEmail, and other Android apps to provide encryption support." >}}
+{{< /cards >}}
+
+### File Sharing and Sync
+
+{{< cards >}}
+ {{< card link="../software/file-sharing/#send" title="Send" image="../software/file-sharing/send.svg" subtitle="Send is a fork of Mozilla's discontinued Firefox Send service which allows you to send files to others with a link. Files are encrypted on your device so that they cannot be read by the server, and they can be optionally password-protected as well." >}}
+ {{< card link="../software/file-sharing/#onionshare" title="OnionShare" image="../software/file-sharing/onionshare.svg" subtitle="OnionShare is an open-source tool that lets you securely and anonymously share a file of any size. It works by starting a web server accessible as a Tor onion service, with an unguessable URL that you can share with the recipients to download or send files." >}}
+ {{< card link="../software/file-sharing/#syncthing-p2p" title="Syncthing" image="../software/file-sharing/syncthing.svg" subtitle="Syncthing is an open-source peer-to-peer continuous file synchronization utility. It is used to synchronize files between two or more devices over the local network or the internet." >}}
+{{< /cards >}}
+
+### Frontends
+
+{{< cards >}}
+ {{< card link="../software/frontends/#redlib" title="Redlib" image="../software/frontends/redlib.svg" subtitle="Redlib is an open-source frontend to the Reddit website that is also self-hostable. You can access Redlib through a number of public instances." >}}
+ {{< card link="../software/frontends/#proxitok" title="ProxiTok" image="../software/frontends/proxitok.svg" subtitle="ProxiTok is an open-source frontend to the TikTok website that is also self-hostable." >}}
+ {{< card link="../software/frontends/#invidious" title="Invidious" image="../software/frontends/invidious.svg" subtitle="Invidious is a free and open-source frontend for YouTube that is also self-hostable." >}}
+ {{< card link="../software/frontends/#piped" title="Piped" image="../software/frontends/piped.svg" subtitle="Piped is a free and open-source frontend for YouTube that is also self-hostable." >}}
+ {{< card link="../software/frontends/#freetube" title="FreeTube" image="../software/frontends/freetube.svg" subtitle="FreeTube is a free and open-source desktop application for YouTube. FreeTube extracts data from YouTube using its built-in API based on YouTube.js or the Invidious API." >}}
+ {{< card link="../software/frontends/#libretube-android" title="LibreTube" image="../software/frontends/libretube.svg" subtitle="LibreTube is a free and open-source Android application for YouTube which uses the Piped API." >}}
+ {{< card link="../software/frontends/#newpipe-android" title="NewPipe" image="../software/frontends/newpipe.svg" subtitle="NewPipe is a free and open-source Android application for YouTube, SoundCloud, media.ccc.de, Bandcamp, and PeerTube (1)." >}}
+{{< /cards >}}
+
+### Health and Wellness Apps
+
+{{< cards >}}
+ {{< card link="../software/health-and-wellness/#drip" title="Drip" image="../software/health-and-wellness/drip.png" subtitle="Drip is a gender-inclusive and open source menstrual cycle tracker available on all mobile platforms. It relies on the 'sympto-thermal method' to predict ovulation." >}}
+ {{< card link="../software/health-and-wellness/#euki" title="Euki" image="../software/health-and-wellness/euki.svg" subtitle="Euki is a nonprofit-backed menstrual cycle tracker that also doubles as a medication tracker and sexual wellness knowledge base. It allows you to schedule the automatic deletion of your personal data in the app." >}}
+ {{< card link="../software/health-and-wellness/#apple-health" title="Apple Health" image="../software/health-and-wellness/apple-health.webp" subtitle="Apple Health is one of the default apps installed on iOS devices. It includes many health and wellness features (see Health Records), including menstrual cycle tracking." >}}
+ {{< card link="../software/health-and-wellness/#apple-fitness" title="Apple Fitness" image="../software/health-and-wellness/apple-fitness.webp" subtitle="Apple Fitness is the default fitness app for iOS. Apple Fitness always uses end-to-end encryption when syncing across multiple devices." >}}
+ {{< card link="../software/health-and-wellness/#gadgetbridge" title="Gadgetbridge" image="../software/health-and-wellness/gadgetbridge.svg" subtitle="Gadgetbridge is an open-source Android application which allows you to pair and manage your Bluetooth device without relying on the vendor’s application. When paired with a compatible smartwatch, it can mimic the health and wellness functionality of these watches without third-party data collection." >}}
+ {{< card link="../software/health-and-wellness/#apple-health-records" title="Apple Health Records" image="../software/health-and-wellness/apple-health.webp" subtitle="Apple Health Records is a built-in feature within Apple Health that allows you to view, store, and share your health records." >}}
+ {{< card link="../software/health-and-wellness/#commonhealth" title="CommonHealth" image="../software/health-and-wellness/commonhealth.png" subtitle="CommonHealth is a privacy-respecting Android app that allows people to access their electronic health records and securely share it to providers. All health data is stored on your device and can be protected with a passcode or biometric authentication." >}}
+{{< /cards >}}
+
+### Language Tools
+
+{{< cards >}}
+ {{< card link="../software/language-tools/#languagetool" title="LanguageTool" image="../software/language-tools/languagetool.svg" subtitle="LanguageTool is a multilingual grammar, style, and spell checker that supports more than 20 languages. According to their privacy policy, they do not store any content sent to their service for review, but for higher assurance the software is self-hostable." >}}
+ {{< card link="../software/language-tools/#libretranslate" title="LibreTranslate" image="../software/language-tools/libretranslate.png" subtitle="LibreTranslate is a free and open-source machine translation web interface and API server. It uses Argos Translate models on the backend for translations." >}}
+{{< /cards >}}
+
+### Maps and Navigation Apps
+
+{{< cards >}}
+ {{< card link="../software/maps/#organic-maps" title="Organic Maps" image="../software/maps/organic-maps.svg" subtitle="Organic Maps is an open-source, community-developed map display and satnav-style navigation app for walkers, drivers, and cyclists. The app offers worldwide, offline maps based on OpenStreetMap data, and navigation with privacy — no location tracking, no data collection, and no ads." >}}
+ {{< card link="../software/maps/#osmand" title="OsmAnd" image="../software/maps/osmand.svg" subtitle="OsmAnd is an open-source, offline map and navigation application based on OpenStreetMap that offers turn-by-turn navigation for walking, cycling, driving, as well as public transport. You can find a detailed overview of OsmAnd's supported features on the OpenStreet Map Wiki." >}}
+{{< /cards >}}
+
+### Multi-Factor Authentication Tools
+
+> [!NOTE]
+> [Hardware security keys](#security-keys) have been moved to their own category.
+
+{{< cards >}}
+ {{< card link="../software/multi-factor-authentication/#ente-auth" title="Ente Auth" image="../software/multi-factor-authentication/ente-auth.svg" subtitle="Ente Auth is a free and open-source app which stores and generates TOTP tokens. It can be used with an online account to back up and sync your tokens across your devices (and access them via a web interface) in a secure, end-to-end encrypted fashion." >}}
+ {{< card link="../software/multi-factor-authentication/#aegis-authenticator-android" title="Aegis Authenticator" image="../software/multi-factor-authentication/aegis.png" subtitle="Aegis Authenticator is a free and open-source app for Android to manage your 2-step verification tokens for your online services. Aegis Authenticator operates completely offline/locally, but includes the option to export your tokens for backup unlike many alternatives." >}}
+{{< /cards >}}
+
+### Mobile Browsers
+
+{{< cards >}}
+ {{< card link="../software/mobile-browsers/#brave" title="Brave" image="../software/mobile-browsers/brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
+ {{< card link="../software/mobile-browsers/#cromite-android" title="Cromite" image="../software/mobile-browsers/cromite.svg" subtitle="Cromite is a Chromium-based browser with built-in ad blocking, fingerprinting protections, and other privacy and security enhancements. It is a fork of the discontinued Bromite browser." >}}
+ {{< card link="../software/mobile-browsers/#safari-ios" title="Safari (iOS)" image="../software/mobile-browsers/safari.svg" subtitle="On iOS, any app that can browse the web is restricted to using an Apple-provided WebKit framework, so a browser like Brave does not use the Blink engine (the core component of Chromium) like its counterparts on other operating systems. Safari is the default browser in iOS." >}}
+{{< /cards >}}
+
+### News Aggregators
+
+{{< cards >}}
+ {{< card link="../software/news-aggregators/#akregator" title="Akregator" image="../software/news-aggregators/akregator.svg" subtitle="Akregator is a news feed reader that is a part of the KDE project. It comes with a fast search, advanced archiving functionality, and an internal browser for easy news reading." >}}
+ {{< card link="../software/news-aggregators/#newsflash" title="NewsFlash" image="../software/news-aggregators/newsflash.png" subtitle="NewsFlash is an open-source, modern, and easy-to-use news feed reader for Linux. It can be used offline or with services like Inoreader or Nextcloud News." >}}
+ {{< card link="../software/news-aggregators/#feeder" title="Feeder" image="../software/news-aggregators/feeder.png" subtitle="Feeder is a modern RSS client for Android that has many features and works well with folders of RSS feeds." >}}
+ {{< card link="../software/news-aggregators/#miniflux" title="Miniflux" image="../software/news-aggregators/miniflux.svg" subtitle="Miniflux is a web-based news aggregator that you can self-host." >}}
+ {{< card link="../software/news-aggregators/#netnewswire" title="NetNewsWire" image="../software/news-aggregators/netnewswire.png" subtitle="NetNewsWire is a free and open-source feed reader for macOS and iOS with a focus on a native design and feature set." >}}
+ {{< card link="../software/news-aggregators/#newsboat" title="Newsboat" image="../software/news-aggregators/newsboat.svg" subtitle="Newsboat is an RSS/Atom feed reader for the text console. It's an actively maintained fork of Newsbeuter." >}}
+{{< /cards >}}
+
+### Notebooks
+
+{{< cards >}}
+ {{< card link="../software/notebooks/#standard-notes" title="Standard Notes" image="../software/notebooks/standard-notes.svg" subtitle="Standard Notes is a simple and private notes app that features cross-platform sync for seamless use. It features E2EE on every platform, and a powerful desktop experience with themes and custom editors." >}}
+ {{< card link="../software/notebooks/#notesnook" title="Notesnook" image="../software/notebooks/notesnook.svg" subtitle="Notesnook is a free (as in speech), open-source, and easy-to-use E2EE note-taking app focused on user privacy." >}}
+ {{< card link="../software/notebooks/#joplin" title="Joplin" image="../software/notebooks/joplin.svg" subtitle="Joplin is a free, open-source, and fully-featured E2EE note-taking and to-do application which can handle numerous Markdown notes organized into notebooks and tags." >}}
+ {{< card link="../software/notebooks/#cryptee" title="Cryptee" image="../software/notebooks/cryptee.svg" subtitle="Cryptee is an open-source, web-based E2EE document editor and photo storage application." >}}
+ {{< card link="../software/notebooks/#org-mode" title="Org-mode" image="../software/notebooks/org-mode.svg" subtitle="Org-mode is a major mode for GNU Emacs. Org-mode is for keeping notes, maintaining to-do lists, planning projects, and authoring documents with a fast and effective plain-text system." >}}
+{{< /cards >}}
+
+### Office Suites
+
+{{< cards >}}
+ {{< card link="../software/office-suites/#libreoffice" title="LibreOffice" image="../software/office-suites/libreoffice.svg" subtitle="LibreOffice is a free and open-source office suite with extensive functionality." >}}
+ {{< card link="../software/office-suites/#onlyoffice" title="OnlyOffice" image="../software/office-suites/onlyoffice.svg" subtitle="OnlyOffice is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud." >}}
+{{< /cards >}}
+
+### Password Managers (Local)
+
+{{< cards >}}
+ {{< card link="../software/passwords/#keepassxc" title="KeePassXC" image="../software/passwords/keepassxc.svg" subtitle="KeePassXC is a community fork of KeePassX, a native cross-platform port of KeePass Password Safe, with the goal of extending and improving it with new features and bug fixes to provide a feature-rich, cross-platform, and modern open-source password manager." >}}
+ {{< card link="../software/passwords/#keepassdx-android" title="KeePassDX" image="../software/passwords/keepassdx.svg" subtitle="KeePassDX is a lightweight password manager for Android; it allows for editing encrypted data in a single file in KeePass format and can fill in forms securely." >}}
+ {{< card link="../software/passwords/#keepassium-ios-macos" title="KeePassium" image="../software/passwords/keepassium.svg" subtitle="KeePassium is a commercial, open-source password manager made by KeePassium Labs that's compatible with other KeePass applications. It provides autofill support, passkey management, automatic two-way synchronization through most cloud storage providers, and more." >}}
+ {{< card link="../software/passwords/#gopass-cli" title="Gopass" image="../software/passwords/gopass.svg" subtitle="Gopass is a minimal password manager for the command line written in Go. It can be used within scripting applications and works on all major desktop and server operating systems." >}}
+{{< /cards >}}
+
+### Pastebins
+
+{{< cards >}}
+ {{< card link="../software/pastebins/#privatebin" title="PrivateBin" image="../software/pastebins/privatebin.svg" subtitle="PrivateBin is a minimalist, open-source, online pastebin where the server cannot decrypt and read any pasted data you submit. Data is encrypted/decrypted in the browser using 256-bit AES." >}}
+ {{< card link="../software/pastebins/#paaster" title="Paaster" image="../software/pastebins/paaster.svg" subtitle="Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible." >}}
+{{< /cards >}}
+
+### Social Networks
+
+{{< cards >}}
+ {{< card link="../software/social-networks/#mastodon" title="Mastodon" image="../software/social-networks/mastodon.svg" subtitle="Mastodon is a social network based on open web protocols and free, open-source software. It uses the ActivityPub protocol, which is decentralized like email: Users can exist on different servers or even different platforms but still communicate with each other." >}}
+ {{< card link="../software/social-networks/#element" title="Element" image="../software/social-networks/element.svg" subtitle="Element is the flagship client for the Matrix protocol, an open standard that enables decentralized communication by way of federated chat rooms. Users can exist on different homeservers but still communicate with each other." >}}
+{{< /cards >}}
+
+### Tor Browser
+
+{{< cards >}}
+ {{< card link="../software/tor/#tor-browser" title="Tor Browser" image="../software/tor/tor.svg" subtitle="Tor Browser is the top choice if you need anonymity, as it provides you with access to the Tor network and bridges, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*." >}}
+ {{< card link="../software/tor/#onion-browser-ios" title="Onion Browser" image="../software/tor/onion_browser.svg" subtitle="Onion Browser is an open-source browser that lets you browse the web anonymously over the Tor network on iOS devices and is endorsed by the Tor Project." >}}
+{{< /cards >}}
+
+## Hardware
+
+### Security Keys
+
+{{< cards >}}
+ {{< card link="../hardware/security-keys/#yubico-security-key" title="Yubico Security Key" image="../hardware/security-keys/yubico-security-key.webp" subtitle="The Yubico Security Key series is the most cost-effective hardware security key with FIDO Level 2 certification. It supports FIDO2/WebAuthn and FIDO Universal 2nd Factor (U2F), and works out of the box with most services that support a security key as a second factor, as well as many password managers." >}}
+ {{< card link="../hardware/security-keys/#yubikey" title="YubiKey" image="../hardware/security-keys/yubikey.png" subtitle="The YubiKey series from Yubico are among the most popular security keys with FIDO Level 2 Certification. The YubiKey 5 Series has a wide range of features such as FIDO2/WebAuthn and FIDO U2F, TOTP and HOTP authentication, Personal Identity Verification (PIV), and OpenPGP." >}}
+ {{< card link="../hardware/security-keys/#nitrokey" title="Nitrokey" image="../hardware/security-keys/nitrokey-square.svg" subtitle="Nitrokey has a cost-effective security key capable of FIDO2/WebAuthn and FIDO U2F called the Nitrokey Passkey. For support for features such as PIV, OpenPGP, and TOTP and HOTP authentication, you need to purchase one of their other keys like the Nitrokey 3. Currently, only the Nitrokey 3A Mini has FIDO Level 1 Certification." >}}
+{{< /cards >}}
+
+### Mobile Phones
+
+{{< cards >}}
+ {{< card link="../hardware/mobile-phones/#google-pixel" title="Google Pixel" image="../hardware/mobile-phones/google-pixel.png" subtitle="Google Pixel phones are the only devices we recommend for purchase. Pixel phones have stronger hardware security than any other Android devices currently on the market, due to proper AVB support for third-party operating systems and Google’s custom Titan security chips acting as the Secure Element." >}}
+{{< /cards >}}
+
+## Operating Systems
+
+### Mobile
+
+#### Custom Android Operating Systems
+
+{{< cards >}}
+ {{< card link="../os/android/distributions/#grapheneos" title="GrapheneOS" image="../os/android/distributions/grapheneos.svg" subtitle="GrapheneOS hardens the Android stack on supported Pixels with verified boot, firmware updates, and sandboxed Play." >}}
+{{< /cards >}}
+
+#### Android Apps
+
+{{< cards >}}
+ {{< card link="../os/android/general-apps/#shelter" title="Shelter" image="../os/android/general-apps/shelter.svg" subtitle="Shelter uses a managed work profile to isolate or duplicate apps with optional cross-profile controls." >}}
+ {{< card link="../os/android/general-apps/#secure-camera" title="Secure Camera" image="../os/android/general-apps/secure_camera.svg" subtitle="Secure Camera captures media with minimal metadata and modern Android storage APIs." >}}
+ {{< card link="../os/android/general-apps/#secure-pdf-viewer" title="Secure PDF Viewer" image="../os/android/general-apps/secure_pdf_viewer.svg" subtitle="Secure PDF Viewer renders PDFs in a sandboxed WebView without broad file permissions." >}}
+{{< /cards >}}
+
+#### Ways to Obtain Android Apps
+
+{{< cards >}}
+ {{< card link="../os/android/obtaining-apps/#obtainium" title="Obtainium" image="../os/android/obtaining-apps/obtainium.svg" subtitle="Obtainium is an app manager which allows you to install and update apps directly from the developer’s own releases page (i.e. GitHub, GitLab, the developer’s website, etc.), rather than a centralized app store/repository." >}}
+ {{< card link="../os/android/obtaining-apps/#grapheneos-app-store" title="GrapheneOS App Store" subtitle="GrapheneOS’s app store is available on GitHub. It supports Android 12 and above and is capable of updating itself. The app store has standalone applications built by the GrapheneOS project such as the Auditor, Camera, and PDF Viewer." >}}
+ {{< card link="../os/android/obtaining-apps/#aurora-store" title="Aurora Store" image="../os/android/obtaining-apps/aurora-store.webp" subtitle="Aurora Store is a Google Play Store client which does not require a Google account, Google Play Services, or microG to download apps." >}}
+ {{< card link="../os/android/obtaining-apps/#f-droid" title="F-Droid" image="../os/android/obtaining-apps/f-droid.svg" subtitle="We only recommend F-Droid as a way to obtain apps which cannot be obtained via the means above. F-Droid is often recommended as an alternative to Google Play, particularly within the privacy community. The option to add third-party repositories and not be confined to Google’s walled garden has led to its popularity." >}}
+{{< /cards >}}
+
+### Desktop/PC
+
+{{< cards >}}
+ {{< card link="../os/desktop/#fedora-linux" title="Fedora Linux" image="../os/desktop/fedora.svg" subtitle="Fedora Linux is our recommended desktop distribution for people new to Linux. Fedora generally adopts newer technologies (e.g., Wayland and PipeWire) before other distributions. These new technologies often come with improvements in security, privacy, and usability in general." >}}
+ {{< card link="../os/desktop/#opensuse-tumbleweed" title="openSUSE Tumbleweed" image="../os/desktop/opensuse-tumbleweed.svg" subtitle="openSUSE Tumbleweed is a stable rolling release distribution. openSUSE Tumbleweed uses Btrfs and Snapper to ensure that snapshots can be rolled back should there be a problem." >}}
+ {{< card link="../os/desktop/#arch-linux" title="Arch Linux" image="../os/desktop/archlinux.svg" subtitle="Arch Linux is a lightweight, do-it-yourself (DIY) distribution, meaning that you only get what you install. For more information see their FAQ." >}}
+ {{< card link="../os/desktop/#fedora-atomic-desktops" title="Fedora Atomic Desktops" image="../os/desktop/fedora.svg" subtitle="Fedora Atomic Desktops are variants of Fedora which use the rpm-ostree package manager and have a strong focus on containerized workflows and Flatpak for desktop applications. All of these variants follow the same release schedule as Fedora Workstation, benefiting from the same fast updates and staying very close to upstream." >}}
+ {{< card link="../os/desktop/#nixos" title="NixOS" image="../os/desktop/nixos.svg" subtitle="NixOS is an independent distribution based on the Nix package manager with a focus on reproducibility and reliability." >}}
+ {{< card link="../os/desktop/#whonix" title="Whonix" image="../os/desktop/whonix.svg" subtitle="Whonix is based on Kicksecure, a security-focused fork of Debian. It aims to provide privacy, security, and anonymity on the internet. Whonix is best used in conjunction with Qubes OS." >}}
+ {{< card link="../os/desktop/#tails" title="Tails" image="../os/desktop/tails.svg" subtitle="Tails is a live operating system based on Debian that routes all communications through Tor, which can boot on on almost any computer from a DVD, USB stick, or SD card installation. It uses Tor to preserve privacy and anonymity while circumventing censorship, and it leaves no trace of itself on the computer it is used on after it is powered off." >}}
+ {{< card link="../os/desktop/#qubes-os" title="Qubes OS" image="../os/desktop/qubes_os.svg" subtitle="Qubes OS is an open-source operating system designed to provide strong security for desktop computing through secure virtual machines (or “qubes”). Qubes is based on Xen, the X Window System, and Linux. It can run most Linux applications and use most of the Linux drivers." >}}
+ {{< card link="../os/desktop/#secureblue" title="Secureblue" image="../os/desktop/secureblue.svg" subtitle="Secureblue is a security-focused operating system based on Fedora Atomic Desktops. It includes a number of security features intended to proactively defend against the exploitation of both known and unknown vulnerabilities, and ships with Trivalent, their hardened, Chromium-based web browser." >}}
+ {{< card link="../os/desktop/#kicksecure" title="Kicksecure" image="../os/desktop/kicksecure.svg" subtitle="Kicksecure—in oversimplified terms—is a set of scripts, configurations, and packages that substantially reduce the attack surface of Debian. It covers a lot of privacy and hardening recommendations by default. It also serves as the base OS for Whonix." >}}
+{{< /cards >}}
+
+### Router Firmware
+
+{{< cards >}}
+ {{< card link="../os/router-firmware/#openwrt" title="OpenWrt" image="../os/router-firmware/openwrt.svg" subtitle="OpenWrt is a Linux-based operating system; it’s primarily used on embedded devices to route network traffic. It includes util-linux, uClibc, and BusyBox. All the components have been optimized for home routers." >}}
+ {{< card link="../os/router-firmware/#opnsense" title="OPNsense" image="../os/router-firmware/opnsense.svg" subtitle="OPNsense is an open-source, FreeBSD-based firewall and routing platform which incorporates many advanced features such as traffic shaping, load balancing, and VPN capabilities, with many more features available in the form of plugins." >}}
+{{< /cards >}}
+
+### Alternative Networks
+
+{{< cards >}}
+ {{< card link="../advanced/alternative-networks/#tor" title="Tor" image="../advanced/alternative-networks/tor.svg" subtitle="The Tor network is a group of volunteer-operated servers that allows you to connect for free and improve your privacy and security on the Internet. Individuals and organizations can also share information over the Tor network with “.onion hidden services” without compromising their privacy." >}}
+ {{< card link="../advanced/alternative-networks/#orbot" title="Orbot" image="../advanced/alternative-networks/orbot.svg" subtitle="Orbot is a mobile application which routes traffic from any app on your device through the Tor network." >}}
+ {{< card link="../advanced/alternative-networks/#snowflake" title="Snowflake" image="../advanced/alternative-networks/snowflake.svg" subtitle="Snowflake allows you to donate bandwidth to the Tor Project by operating a “Snowflake proxy” within your browser." >}}
+ {{< card link="../advanced/alternative-networks/#i2p-the-invisible-internet-project" title="I2P" image="../advanced/alternative-networks/i2p.svg" subtitle="I2P is a network layer which encrypts your connections and routes them via a network of computers distributed around the world. It is mainly focused on creating an alternative, privacy-protecting network rather than making regular internet connections anonymous." >}}
+{{< /cards >}}
+
+### Device Integrity Verification
+
+{{< cards >}}
+ {{< card link="../advanced/device-integrity/#mobile-verification-toolkit" title="MVT" image="../advanced/device-integrity/mvt.webp" subtitle="Mobile Verification Toolkit (MVT) is a collection of utilities which simplifies and automates the process of scanning mobile devices for potential traces of targeting or infection by known spyware campaigns. MVT was developed by Amnesty International and released in 2021 in the context of the Pegasus Project." >}}
+ {{< card link="../advanced/device-integrity/#imazing-ios" title="iMazing" image="../advanced/device-integrity/imazing.png" subtitle="iMazing provides a free spyware analyzer tool for iOS devices which acts as a GUI-wrapper for MVT. This can be much easier to run compared to MVT itself, which is a command-line tool designed for technologists and forensic investigators." >}}
+ {{< card link="../advanced/device-integrity/#auditor-android" title="Auditor" image="../advanced/device-integrity/auditor.svg" subtitle="Auditor is an app which leverages hardware security features to provide device integrity monitoring by actively validating the identity of a device and the integrity of its operating system. Currently, it only works with GrapheneOS or the stock operating system for supported devices." >}}
+{{< /cards >}}
+
+## Self-Hosting
+
+### DNS Filtering
+
+{{< cards >}}
+ {{< card link="../self-hosting/dns-filtering/#pi-hole" title="Pi-hole" image="../self-hosting/dns-filtering/pi-hole.svg" subtitle="Pi-hole is an open-source DNS sinkhole which features a friendly web interface to view insights and manage blocked content. Pi-hole is designed to be hosted on a Raspberry Pi, but it is not limited to such hardware." >}}
+ {{< card link="../self-hosting/dns-filtering/#adguard-home" title="AdGuard Home" image="../self-hosting/dns-filtering/adguard-home.svg" subtitle="AdGuard Home is an open-source DNS sinkhole which features a polished web interface to view insights and manage blocked content." >}}
+{{< /cards >}}
+
+### Email Servers
+
+{{< cards >}}
+ {{< card link="../self-hosting/email-servers/#stalwart" title="Stalwart" image="../self-hosting/email-servers/stalwart.svg" subtitle="Stalwart is a newer mail server written in Rust which supports JMAP in addition to the standard IMAP, POP3, and SMTP. It has a wide variety of configuration options, but also defaults to very reasonable settings in terms of both security and features, making it easy to use immediately." >}}
+ {{< card link="../self-hosting/email-servers/#mailcow" title="Mailcow" image="../self-hosting/email-servers/mailcow.svg" subtitle="Mailcow is an advanced mail server perfect for those with Linux experience. It has everything you need in a Docker container: a mail server with DKIM support, antivirus and spam monitoring, webmail and ActiveSync with SOGo, and web-based administration with 2FA support." >}}
+ {{< card link="../self-hosting/email-servers/#mail-in-a-box" title="Mail-in-a-Box" image="../self-hosting/email-servers/mail-in-a-box.svg" subtitle="Mail-in-a-Box is an automated setup script for deploying a mail server on Ubuntu. Its goal is to make it easier for people to set up their own mail server." >}}
+{{< /cards >}}
+
+### File Management
+
+{{< cards >}}
+ {{< card link="../self-hosting/file-management/#photoprism" title="PhotoPrism" image="../self-hosting/file-management/photoprism.svg" subtitle="PhotoPrism is a platform for managing photos. It supports album syncing and sharing as well as a variety of other features. It does not include end-to-end encryption, so it’s best hosted on a server that you trust and is under your control." >}}
+ {{< card link="../self-hosting/file-management/#freedombox" title="FreedomBox" image="../self-hosting/file-management/freedombox.svg" subtitle="FreedomBox is an operating system designed to be run on a single-board computer (SBC). The purpose is to make it easy to set up server applications for use cases like sharing files." >}}
+ {{< card link="../self-hosting/file-management/#nextcloud" title="Nextcloud" image="../self-hosting/file-management/nextcloud.svg" subtitle="Nextcloud is a suite of free and open-source client-server software for creating your own file hosting services on a private server you control." >}}
+{{< /cards >}}
diff --git a/content/tools/self-hosting/_index.md b/content/tools/self-hosting/_index.md
index 7a654d7b..6bffe5b4 100644
--- a/content/tools/self-hosting/_index.md
+++ b/content/tools/self-hosting/_index.md
@@ -150,7 +150,7 @@ Tool recommendations in other categories of the website also provide a self-host
[:octicons-info-16:](https://github.com/simple-login/app#prerequisites){ .card-link title="Admin Documentation" }
[:octicons-code-16:](https://github.com/simple-login){ .card-link title="Source Code" }
-- { .twemoji } [**Ente Photos**](../photo-management.md#ente-photos)
+- { .twemoji } [**Ente Photos**](../photo-backups/_index.md#ente-photos)
---
diff --git a/content/tools/services/photo-backups/_index.md b/content/tools/services/photo-backups/_index.md
index e00bf3d2..9ac2e8f5 100644
--- a/content/tools/services/photo-backups/_index.md
+++ b/content/tools/services/photo-backups/_index.md
@@ -1,6 +1,6 @@
---
-title: Photo Management
-description: These photo management tools keep your personal photos safe from the prying eyes of cloud storage providers and other unauthorized parties.
+title: Photo Backups
+description: These photo backup tools keep your personal photos safe from the prying eyes of cloud storage providers and other unauthorized parties.
---
Protects against the following threat(s):
@@ -14,7 +14,7 @@ description: These photo management tools keep your personal photos safe from th
{{< /cards >}}
-Most cloud **photo management solutions** like Google Photos, Flickr, and Amazon Photos don't secure your photos against being accessed by the cloud storage provider themselves. These options keep your personal photos private, while allowing you to share them only with family and trusted people.
+Most cloud **photo backup** solutions like Google Photos, Flickr, and Amazon Photos don't secure your photos against being accessed by the cloud storage provider themselves. These options keep your personal photos private, while allowing you to share them only with family and trusted people.
## Ente Photos