1
1
mirror of https://github.com/privacyguides/privacyguides.org.git synced 2026-06-25 03:04:43 +00:00

refactor: Follow Hugo leaf vs branch conventions

This commit is contained in:
2026-05-13 01:14:25 -05:00
parent 757a274ac3
commit 88f1894219
99 changed files with 552 additions and 552 deletions
+81 -81
View File
@@ -8,9 +8,9 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="ai-chat/_index.md#koboldcpp" title="Kobold.cpp" image="ai-chat/kobold.png" subtitle="Kobold.cpp is an AI client that runs locally on your Windows, Mac, or Linux computer. It's an excellent choice if you are looking for heavy customization and tweaking, such as for role-playing purposes." >}}
{{< card link="ai-chat/_index.md#ollama-cli" title="Ollama" image="ai-chat/ollama.png" subtitle="Ollama is a command-line AI assistant that is available on macOS, Linux, and Windows. Ollama is a great choice if you're looking for an AI client that's easy-to-use, widely compatible, and fast due to its use of inference and other techniques." >}}
{{< card link="ai-chat/_index.md#llamafile" title="Llamafile" image="ai-chat/llamafile.webp" subtitle="Llamafile is a lightweight, single-file executable that allows users to run LLMs locally on their own computers without any setup involved. It is backed by Mozilla and available on Linux, macOS, and Windows." >}}
{{< card link="ai-chat/index.md#koboldcpp" title="Kobold.cpp" image="ai-chat/kobold.png" subtitle="Kobold.cpp is an AI client that runs locally on your Windows, Mac, or Linux computer. It's an excellent choice if you are looking for heavy customization and tweaking, such as for role-playing purposes." >}}
{{< card link="ai-chat/index.md#ollama-cli" title="Ollama" image="ai-chat/ollama.png" subtitle="Ollama is a command-line AI assistant that is available on macOS, Linux, and Windows. Ollama is a great choice if you're looking for an AI client that's easy-to-use, widely compatible, and fast due to its use of inference and other techniques." >}}
{{< card link="ai-chat/index.md#llamafile" title="Llamafile" image="ai-chat/llamafile.webp" subtitle="Llamafile is a lightweight, single-file executable that allows users to run LLMs locally on their own computers without any setup involved. It is backed by Mozilla and available on Linux, macOS, and Windows." >}}
{{< /cards >}}
</div>
@@ -18,9 +18,9 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="browser-extensions/_index.md#ublock-origin" title="uBlock Origin" image="browser-extensions/ublock_origin.svg" subtitle="uBlock Origin is a popular content blocker that could help you block ads, trackers, and fingerprinting scripts." >}}
{{< card link="browser-extensions/_index.md#ublock-origin-lite" title="uBlock Origin Lite" image="browser-extensions/ublock_origin_lite.svg" subtitle="uBlock Origin Lite is a Manifest V3 compatible content blocker. Compared to the original uBlock Origin, this extension does not require broad read/modify data permissions to function, which lowers the risk of Passive Attacks on your browser if a malicious rule is added to a filter list." >}}
{{< card link="browser-extensions/_index.md#adguard" title="AdGuard for iOS" image="browser-extensions/adguard.svg" subtitle="AdGuard for iOS is a free and open-source content-blocking extension for Safari that uses the native Content Blocker API." >}}
{{< card link="browser-extensions/index.md#ublock-origin" title="uBlock Origin" image="browser-extensions/ublock_origin.svg" subtitle="uBlock Origin is a popular content blocker that could help you block ads, trackers, and fingerprinting scripts." >}}
{{< card link="browser-extensions/index.md#ublock-origin-lite" title="uBlock Origin Lite" image="browser-extensions/ublock_origin_lite.svg" subtitle="uBlock Origin Lite is a Manifest V3 compatible content blocker. Compared to the original uBlock Origin, this extension does not require broad read/modify data permissions to function, which lowers the risk of Passive Attacks on your browser if a malicious rule is added to a filter list." >}}
{{< card link="browser-extensions/index.md#adguard" title="AdGuard for iOS" image="browser-extensions/adguard.svg" subtitle="AdGuard for iOS is a free and open-source content-blocking extension for Safari that uses the native Content Blocker API." >}}
{{< /cards >}}
</div>
@@ -28,7 +28,7 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="cryptocurrency/_index.md#monero" title="Monero" image="cryptocurrency/monero.svg" subtitle="Monero uses a blockchain with privacy-enhancing technologies that obfuscate transactions to achieve Anonymity. Every Monero transaction hides the transaction amount, sending and receiving addresses, and source of funds without any hoops to jump through, making it an ideal choice for cryptocurrency novices." >}}
{{< card link="cryptocurrency/index.md#monero" title="Monero" image="cryptocurrency/monero.svg" subtitle="Monero uses a blockchain with privacy-enhancing technologies that obfuscate transactions to achieve Anonymity. Every Monero transaction hides the transaction amount, sending and receiving addresses, and source of funds without any hoops to jump through, making it an ideal choice for cryptocurrency novices." >}}
{{< /cards >}}
</div>
@@ -36,9 +36,9 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="data-redaction/_index.md#mat2" title="MAT2" image="data-redaction/mat2.svg" subtitle="MAT2 is free, cross-platform software which allows you to remove metadata from image, audio, torrent, and document file types. It provides both a command line tool and a graphical user interface via an extension for Dolphin, the default file manager of KDE." >}}
{{< card link="data-redaction/_index.md#exiferaser-android" title="ExifEraser" image="data-redaction/exiferaser.svg" subtitle="ExifEraser is a modern, permissionless image metadata erasing application for Android." >}}
{{< card link="data-redaction/_index.md#exiftool-cli" title="ExifTool" image="data-redaction/exiftool.png" subtitle="ExifTool is the original Perl library and command-line application for reading, writing, and editing meta information (Exif, IPTC, XMP, and more) in a wide variety of file formats (JPEG, TIFF, PNG, PDF, RAW, and more)." >}}
{{< card link="data-redaction/index.md#mat2" title="MAT2" image="data-redaction/mat2.svg" subtitle="MAT2 is free, cross-platform software which allows you to remove metadata from image, audio, torrent, and document file types. It provides both a command line tool and a graphical user interface via an extension for Dolphin, the default file manager of KDE." >}}
{{< card link="data-redaction/index.md#exiferaser-android" title="ExifEraser" image="data-redaction/exiferaser.svg" subtitle="ExifEraser is a modern, permissionless image metadata erasing application for Android." >}}
{{< card link="data-redaction/index.md#exiftool-cli" title="ExifTool" image="data-redaction/exiftool.png" subtitle="ExifTool is the original Perl library and command-line application for reading, writing, and editing meta information (Exif, IPTC, XMP, and more) in a wide variety of file formats (JPEG, TIFF, PNG, PDF, RAW, and more)." >}}
{{< /cards >}}
</div>
@@ -46,9 +46,9 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="desktop-browsers/_index.md#mullvad-browser" title="Mullvad Browser" image="desktop-browsers/mullvad_browser.svg" subtitle="Mullvad Browser is a version of Tor Browser with Tor network integrations removed. It aims to provide to VPN users Tor Browser's anti-fingerprinting browser technologies, which are key protections against Mass Surveillance." >}}
{{< card link="desktop-browsers/_index.md#firefox" title="Firefox" image="desktop-browsers/firefox.svg" subtitle="Firefox provides strong privacy settings such as Enhanced Tracking Protection, which can help block various types of tracking." >}}
{{< card link="desktop-browsers/_index.md#brave" title="Brave" image="desktop-browsers/brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
{{< card link="desktop-browsers/index.md#mullvad-browser" title="Mullvad Browser" image="desktop-browsers/mullvad_browser.svg" subtitle="Mullvad Browser is a version of Tor Browser with Tor network integrations removed. It aims to provide to VPN users Tor Browser's anti-fingerprinting browser technologies, which are key protections against Mass Surveillance." >}}
{{< card link="desktop-browsers/index.md#firefox" title="Firefox" image="desktop-browsers/firefox.svg" subtitle="Firefox provides strong privacy settings such as Enhanced Tracking Protection, which can help block various types of tracking." >}}
{{< card link="desktop-browsers/index.md#brave" title="Brave" image="desktop-browsers/brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
{{< /cards >}}
</div>
@@ -56,7 +56,7 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="document-collaboration/_index.md#cryptpad" title="CryptPad" image="document-collaboration/cryptpad.svg" subtitle="CryptPad is a private-by-design alternative to popular, full-fledged office suites. All content on this web service is E2EE and can be shared with other users easily." >}}
{{< card link="document-collaboration/index.md#cryptpad" title="CryptPad" image="document-collaboration/cryptpad.svg" subtitle="CryptPad is a private-by-design alternative to popular, full-fledged office suites. All content on this web service is E2EE and can be shared with other users easily." >}}
{{< /cards >}}
</div>
@@ -64,13 +64,13 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="email-clients/_index.md#thunderbird" title="Thunderbird" image="email-clients/thunderbird.svg" subtitle="Thunderbird is a free, open-source, cross-platform email, newsgroup, news feed, and chat (XMPP, IRC, Matrix) client developed by the Thunderbird community, and previously by the Mozilla Foundation." >}}
{{< card link="email-clients/_index.md#apple-mail-macos" title="Apple Mail" image="email-clients/applemail.png" subtitle="Apple Mail is included in macOS and can be extended to have OpenPGP support with GPG Suite, which adds the ability to send PGP-encrypted email." >}}
{{< card link="email-clients/_index.md#fairemail-android" title="FairEmail" image="email-clients/fairemail.svg" subtitle="FairEmail is a minimal, open-source email app which uses open standards (IMAP, SMTP, OpenPGP) and minimizes data and battery usage." >}}
{{< card link="email-clients/_index.md#gnome-evolution-gnome" title="GNOME Evolution" image="email-clients/evolution.svg" subtitle="Evolution is a personal information management application that provides integrated mail, calendaring, and address book functionality. Evolution has extensive documentation to help you get started." >}}
{{< card link="email-clients/_index.md#kontact-kde" title="Kontact" image="email-clients/kontact.svg" subtitle="Kontact is a personal information manager (PIM) application from the KDE project. It provides a mail client, address book, RSS client, and an organizer." >}}
{{< card link="email-clients/_index.md#mailvelope-browser" title="Mailvelope" image="email-clients/mailvelope.svg" subtitle="Mailvelope is a browser extension that enables the exchange of encrypted emails following the OpenPGP encryption standard." >}}
{{< card link="email-clients/_index.md#neomutt-cli" title="NeoMutt" image="email-clients/mutt.svg" subtitle="NeoMutt is an open-source command line email reader for Linux and BSD. It's a fork of Mutt) with added features." >}}
{{< card link="email-clients/index.md#thunderbird" title="Thunderbird" image="email-clients/thunderbird.svg" subtitle="Thunderbird is a free, open-source, cross-platform email, newsgroup, news feed, and chat (XMPP, IRC, Matrix) client developed by the Thunderbird community, and previously by the Mozilla Foundation." >}}
{{< card link="email-clients/index.md#apple-mail-macos" title="Apple Mail" image="email-clients/applemail.png" subtitle="Apple Mail is included in macOS and can be extended to have OpenPGP support with GPG Suite, which adds the ability to send PGP-encrypted email." >}}
{{< card link="email-clients/index.md#fairemail-android" title="FairEmail" image="email-clients/fairemail.svg" subtitle="FairEmail is a minimal, open-source email app which uses open standards (IMAP, SMTP, OpenPGP) and minimizes data and battery usage." >}}
{{< card link="email-clients/index.md#gnome-evolution-gnome" title="GNOME Evolution" image="email-clients/evolution.svg" subtitle="Evolution is a personal information management application that provides integrated mail, calendaring, and address book functionality. Evolution has extensive documentation to help you get started." >}}
{{< card link="email-clients/index.md#kontact-kde" title="Kontact" image="email-clients/kontact.svg" subtitle="Kontact is a personal information manager (PIM) application from the KDE project. It provides a mail client, address book, RSS client, and an organizer." >}}
{{< card link="email-clients/index.md#mailvelope-browser" title="Mailvelope" image="email-clients/mailvelope.svg" subtitle="Mailvelope is a browser extension that enables the exchange of encrypted emails following the OpenPGP encryption standard." >}}
{{< card link="email-clients/index.md#neomutt-cli" title="NeoMutt" image="email-clients/mutt.svg" subtitle="NeoMutt is an open-source command line email reader for Linux and BSD. It's a fork of Mutt) with added features." >}}
{{< /cards >}}
</div>
@@ -78,17 +78,17 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="encryption/_index.md#cryptomator-cloud" title="Cryptomator" image="encryption/cryptomator.svg" subtitle="Cryptomator is an encryption solution designed for privately saving files to any cloud Service Provider, eliminating the need to trust that they won't access your files. It allows you to create vaults that are stored on a virtual drive, the contents of which are encrypted and synced with your cloud storage provider." >}}
{{< card link="encryption/_index.md#veracrypt-disk" title="VeraCrypt" image="encryption/veracrypt.svg" subtitle="VeraCrypt is a source-available freeware utility used for on-the-fly encryption. It can create a virtual encrypted disk within a file, encrypt a partition, or encrypt the entire storage device with pre-boot authentication." >}}
{{< card link="encryption/_index.md#bitlocker" title="BitLocker" image="encryption/bitlocker.png" subtitle="BitLocker is the full volume encryption solution bundled with Microsoft Windows that uses the Trusted Platform Module (TPM) for hardware-based security." >}}
{{< card link="encryption/_index.md#filevault" title="FileVault" image="encryption/filevault.png" subtitle="FileVault is the on-the-fly volume encryption solution built into macOS. FileVault takes advantage of the hardware security capabilities present on an Apple Silicon SoC or T2 Security Chip." >}}
{{< card link="encryption/_index.md#linux-unified-key-setup" title="LUKS" image="encryption/luks.png" subtitle="LUKS is the default FDE method for Linux. It can be used to encrypt full volumes, partitions, or create encrypted containers." >}}
{{< card link="encryption/_index.md#kryptor" title="Kryptor" image="encryption/kryptor.png" subtitle="Kryptor is a free and open-source file encryption and signing tool that makes use of modern and secure cryptographic algorithms. It aims to be a better version of age and Minisign to provide a simple, easier alternative to GPG." >}}
{{< card link="encryption/_index.md#tomb" title="Tomb" image="encryption/tomb.png" subtitle="Tomb is a command-line shell wrapper for LUKS. It supports steganography via third-party tools." >}}
{{< card link="encryption/_index.md#gnu-privacy-guard" title="GnuPG" image="encryption/gnupg.svg" subtitle="GnuPG is a GPL-licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF specification of OpenPGP." >}}
{{< card link="encryption/_index.md#gpg4win" title="GPG4win" image="encryption/gpg4win.svg" subtitle="GPG4win is a package for Windows from Intevation and g10 Code. It includes various tools that can assist you in using GPG on Microsoft Windows." >}}
{{< card link="encryption/_index.md#gpg-suite" title="GPG Suite" image="encryption/gpgsuite.png" subtitle="GPG Suite provides OpenPGP support for Apple Mail and other email clients on macOS." >}}
{{< card link="encryption/_index.md#openkeychain" title="OpenKeychain" image="encryption/openkeychain.svg" subtitle="OpenKeychain is an implementation of GnuPG for Android. It's commonly required by mail clients such as Thunderbird, FairEmail, and other Android apps to provide encryption support." >}}
{{< card link="encryption/index.md#cryptomator-cloud" title="Cryptomator" image="encryption/cryptomator.svg" subtitle="Cryptomator is an encryption solution designed for privately saving files to any cloud Service Provider, eliminating the need to trust that they won't access your files. It allows you to create vaults that are stored on a virtual drive, the contents of which are encrypted and synced with your cloud storage provider." >}}
{{< card link="encryption/index.md#veracrypt-disk" title="VeraCrypt" image="encryption/veracrypt.svg" subtitle="VeraCrypt is a source-available freeware utility used for on-the-fly encryption. It can create a virtual encrypted disk within a file, encrypt a partition, or encrypt the entire storage device with pre-boot authentication." >}}
{{< card link="encryption/index.md#bitlocker" title="BitLocker" image="encryption/bitlocker.png" subtitle="BitLocker is the full volume encryption solution bundled with Microsoft Windows that uses the Trusted Platform Module (TPM) for hardware-based security." >}}
{{< card link="encryption/index.md#filevault" title="FileVault" image="encryption/filevault.png" subtitle="FileVault is the on-the-fly volume encryption solution built into macOS. FileVault takes advantage of the hardware security capabilities present on an Apple Silicon SoC or T2 Security Chip." >}}
{{< card link="encryption/index.md#linux-unified-key-setup" title="LUKS" image="encryption/luks.png" subtitle="LUKS is the default FDE method for Linux. It can be used to encrypt full volumes, partitions, or create encrypted containers." >}}
{{< card link="encryption/index.md#kryptor" title="Kryptor" image="encryption/kryptor.png" subtitle="Kryptor is a free and open-source file encryption and signing tool that makes use of modern and secure cryptographic algorithms. It aims to be a better version of age and Minisign to provide a simple, easier alternative to GPG." >}}
{{< card link="encryption/index.md#tomb" title="Tomb" image="encryption/tomb.png" subtitle="Tomb is a command-line shell wrapper for LUKS. It supports steganography via third-party tools." >}}
{{< card link="encryption/index.md#gnu-privacy-guard" title="GnuPG" image="encryption/gnupg.svg" subtitle="GnuPG is a GPL-licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF specification of OpenPGP." >}}
{{< card link="encryption/index.md#gpg4win" title="GPG4win" image="encryption/gpg4win.svg" subtitle="GPG4win is a package for Windows from Intevation and g10 Code. It includes various tools that can assist you in using GPG on Microsoft Windows." >}}
{{< card link="encryption/index.md#gpg-suite" title="GPG Suite" image="encryption/gpgsuite.png" subtitle="GPG Suite provides OpenPGP support for Apple Mail and other email clients on macOS." >}}
{{< card link="encryption/index.md#openkeychain" title="OpenKeychain" image="encryption/openkeychain.svg" subtitle="OpenKeychain is an implementation of GnuPG for Android. It's commonly required by mail clients such as Thunderbird, FairEmail, and other Android apps to provide encryption support." >}}
{{< /cards >}}
</div>
@@ -96,9 +96,9 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="file-sharing/_index.md#send" title="Send" image="file-sharing/send.svg" subtitle="Send is a fork of Mozilla's discontinued Firefox Send service which allows you to send files to others with a link. Files are encrypted on your device so that they cannot be read by the server, and they can be optionally password-protected as well." >}}
{{< card link="file-sharing/_index.md#onionshare" title="OnionShare" image="file-sharing/onionshare.svg" subtitle="OnionShare is an open-source tool that lets you securely and anonymously share a file of any size. It works by starting a web server accessible as a Tor onion service, with an unguessable URL that you can share with the recipients to download or send files." >}}
{{< card link="file-sharing/_index.md#syncthing-p2p" title="Syncthing" image="file-sharing/syncthing.svg" subtitle="Syncthing is an open-source peer-to-peer continuous file synchronization utility. It is used to synchronize files between two or more devices over the local network or the internet." >}}
{{< card link="file-sharing/index.md#send" title="Send" image="file-sharing/send.svg" subtitle="Send is a fork of Mozilla's discontinued Firefox Send service which allows you to send files to others with a link. Files are encrypted on your device so that they cannot be read by the server, and they can be optionally password-protected as well." >}}
{{< card link="file-sharing/index.md#onionshare" title="OnionShare" image="file-sharing/onionshare.svg" subtitle="OnionShare is an open-source tool that lets you securely and anonymously share a file of any size. It works by starting a web server accessible as a Tor onion service, with an unguessable URL that you can share with the recipients to download or send files." >}}
{{< card link="file-sharing/index.md#syncthing-p2p" title="Syncthing" image="file-sharing/syncthing.svg" subtitle="Syncthing is an open-source peer-to-peer continuous file synchronization utility. It is used to synchronize files between two or more devices over the local network or the internet." >}}
{{< /cards >}}
</div>
@@ -106,13 +106,13 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="frontends/_index.md#redlib" title="Redlib" image="frontends/redlib.svg" subtitle="Redlib is an open-source frontend to the Reddit website that is also self-hostable. You can access Redlib through a number of public instances." >}}
{{< card link="frontends/_index.md#proxitok" title="ProxiTok" image="frontends/proxitok.svg" subtitle="ProxiTok is an open-source frontend to the TikTok website that is also self-hostable." >}}
{{< card link="frontends/_index.md#invidious" title="Invidious" image="frontends/invidious.svg" subtitle="Invidious is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="frontends/_index.md#piped" title="Piped" image="frontends/piped.svg" subtitle="Piped is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="frontends/_index.md#freetube" title="FreeTube" image="frontends/freetube.svg" subtitle="FreeTube is a free and open-source desktop application for YouTube. FreeTube extracts data from YouTube using its built-in API based on YouTube.js or the Invidious API." >}}
{{< card link="frontends/_index.md#libretube-android" title="LibreTube" image="frontends/libretube.svg" subtitle="LibreTube is a free and open-source Android application for YouTube which uses the Piped API." >}}
{{< card link="frontends/_index.md#newpipe-android" title="NewPipe" image="frontends/newpipe.svg" subtitle="NewPipe is a free and open-source Android application for YouTube, SoundCloud, media.ccc.de, Bandcamp, and PeerTube (1)." >}}
{{< card link="frontends/index.md#redlib" title="Redlib" image="frontends/redlib.svg" subtitle="Redlib is an open-source frontend to the Reddit website that is also self-hostable. You can access Redlib through a number of public instances." >}}
{{< card link="frontends/index.md#proxitok" title="ProxiTok" image="frontends/proxitok.svg" subtitle="ProxiTok is an open-source frontend to the TikTok website that is also self-hostable." >}}
{{< card link="frontends/index.md#invidious" title="Invidious" image="frontends/invidious.svg" subtitle="Invidious is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="frontends/index.md#piped" title="Piped" image="frontends/piped.svg" subtitle="Piped is a free and open-source frontend for YouTube that is also self-hostable." >}}
{{< card link="frontends/index.md#freetube" title="FreeTube" image="frontends/freetube.svg" subtitle="FreeTube is a free and open-source desktop application for YouTube. FreeTube extracts data from YouTube using its built-in API based on YouTube.js or the Invidious API." >}}
{{< card link="frontends/index.md#libretube-android" title="LibreTube" image="frontends/libretube.svg" subtitle="LibreTube is a free and open-source Android application for YouTube which uses the Piped API." >}}
{{< card link="frontends/index.md#newpipe-android" title="NewPipe" image="frontends/newpipe.svg" subtitle="NewPipe is a free and open-source Android application for YouTube, SoundCloud, media.ccc.de, Bandcamp, and PeerTube (1)." >}}
{{< /cards >}}
</div>
@@ -120,13 +120,13 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="health-and-wellness/_index.md#drip" title="Drip" image="health-and-wellness/drip.png" subtitle="Drip is a gender-inclusive and open source menstrual cycle tracker available on all mobile platforms. It relies on the 'sympto-thermal method' to predict ovulation." >}}
{{< card link="health-and-wellness/_index.md#euki" title="Euki" image="health-and-wellness/euki.svg" subtitle="Euki is a nonprofit-backed menstrual cycle tracker that also doubles as a medication tracker and sexual wellness knowledge base. It allows you to schedule the automatic deletion of your personal data in the app." >}}
{{< card link="health-and-wellness/_index.md#apple-health" title="Apple Health" image="health-and-wellness/apple-health.webp" subtitle="Apple Health is one of the default apps installed on iOS devices. It includes many health and wellness features (see Health Records), including menstrual cycle tracking." >}}
{{< card link="health-and-wellness/_index.md#apple-fitness" title="Apple Fitness" image="health-and-wellness/apple-fitness.webp" subtitle="Apple Fitness is the default fitness app for iOS. Apple Fitness always uses end-to-end encryption when syncing across multiple devices." >}}
{{< card link="health-and-wellness/_index.md#gadgetbridge" title="Gadgetbridge" image="health-and-wellness/gadgetbridge.svg" subtitle="Gadgetbridge is an open-source Android application which allows you to pair and manage your Bluetooth device without relying on the vendors application. When paired with a compatible smartwatch, it can mimic the health and wellness functionality of these watches without third-party data collection." >}}
{{< card link="health-and-wellness/_index.md#apple-health-records" title="Apple Health Records" image="health-and-wellness/apple-health.webp" subtitle="Apple Health Records is a built-in feature within Apple Health that allows you to view, store, and share your health records." >}}
{{< card link="health-and-wellness/_index.md#commonhealth" title="CommonHealth" image="health-and-wellness/commonhealth.png" subtitle="CommonHealth is a privacy-respecting Android app that allows people to access their electronic health records and securely share it to providers. All health data is stored on your device and can be protected with a passcode or biometric authentication." >}}
{{< card link="health-and-wellness/index.md#drip" title="Drip" image="health-and-wellness/drip.png" subtitle="Drip is a gender-inclusive and open source menstrual cycle tracker available on all mobile platforms. It relies on the 'sympto-thermal method' to predict ovulation." >}}
{{< card link="health-and-wellness/index.md#euki" title="Euki" image="health-and-wellness/euki.svg" subtitle="Euki is a nonprofit-backed menstrual cycle tracker that also doubles as a medication tracker and sexual wellness knowledge base. It allows you to schedule the automatic deletion of your personal data in the app." >}}
{{< card link="health-and-wellness/index.md#apple-health" title="Apple Health" image="health-and-wellness/apple-health.webp" subtitle="Apple Health is one of the default apps installed on iOS devices. It includes many health and wellness features (see Health Records), including menstrual cycle tracking." >}}
{{< card link="health-and-wellness/index.md#apple-fitness" title="Apple Fitness" image="health-and-wellness/apple-fitness.webp" subtitle="Apple Fitness is the default fitness app for iOS. Apple Fitness always uses end-to-end encryption when syncing across multiple devices." >}}
{{< card link="health-and-wellness/index.md#gadgetbridge" title="Gadgetbridge" image="health-and-wellness/gadgetbridge.svg" subtitle="Gadgetbridge is an open-source Android application which allows you to pair and manage your Bluetooth device without relying on the vendors application. When paired with a compatible smartwatch, it can mimic the health and wellness functionality of these watches without third-party data collection." >}}
{{< card link="health-and-wellness/index.md#apple-health-records" title="Apple Health Records" image="health-and-wellness/apple-health.webp" subtitle="Apple Health Records is a built-in feature within Apple Health that allows you to view, store, and share your health records." >}}
{{< card link="health-and-wellness/index.md#commonhealth" title="CommonHealth" image="health-and-wellness/commonhealth.png" subtitle="CommonHealth is a privacy-respecting Android app that allows people to access their electronic health records and securely share it to providers. All health data is stored on your device and can be protected with a passcode or biometric authentication." >}}
{{< /cards >}}
</div>
@@ -134,8 +134,8 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="language-tools/_index.md#languagetool" title="LanguageTool" image="language-tools/languagetool.svg" subtitle="LanguageTool is a multilingual grammar, style, and spell checker that supports more than 20 languages. According to their privacy policy, they do not store any content sent to their service for review, but for higher assurance the software is self-hostable." >}}
{{< card link="language-tools/_index.md#libretranslate" title="LibreTranslate" image="language-tools/libretranslate.png" subtitle="LibreTranslate is a free and open-source machine translation web interface and API server. It uses Argos Translate models on the backend for translations." >}}
{{< card link="language-tools/index.md#languagetool" title="LanguageTool" image="language-tools/languagetool.svg" subtitle="LanguageTool is a multilingual grammar, style, and spell checker that supports more than 20 languages. According to their privacy policy, they do not store any content sent to their service for review, but for higher assurance the software is self-hostable." >}}
{{< card link="language-tools/index.md#libretranslate" title="LibreTranslate" image="language-tools/libretranslate.png" subtitle="LibreTranslate is a free and open-source machine translation web interface and API server. It uses Argos Translate models on the backend for translations." >}}
{{< /cards >}}
</div>
@@ -143,8 +143,8 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="maps/_index.md#organic-maps" title="Organic Maps" image="maps/organic-maps.svg" subtitle="Organic Maps is an open-source, community-developed map display and satnav-style navigation app for walkers, drivers, and cyclists. The app offers worldwide, offline maps based on OpenStreetMap data, and navigation with privacy — no location tracking, no data collection, and no ads." >}}
{{< card link="maps/_index.md#osmand" title="OsmAnd" image="maps/osmand.svg" subtitle="OsmAnd is an open-source, offline map and navigation application based on OpenStreetMap that offers turn-by-turn navigation for walking, cycling, driving, as well as public transport. You can find a detailed overview of OsmAnd's supported features on the OpenStreet Map Wiki." >}}
{{< card link="maps/index.md#organic-maps" title="Organic Maps" image="maps/organic-maps.svg" subtitle="Organic Maps is an open-source, community-developed map display and satnav-style navigation app for walkers, drivers, and cyclists. The app offers worldwide, offline maps based on OpenStreetMap data, and navigation with privacy — no location tracking, no data collection, and no ads." >}}
{{< card link="maps/index.md#osmand" title="OsmAnd" image="maps/osmand.svg" subtitle="OsmAnd is an open-source, offline map and navigation application based on OpenStreetMap that offers turn-by-turn navigation for walking, cycling, driving, as well as public transport. You can find a detailed overview of OsmAnd's supported features on the OpenStreet Map Wiki." >}}
{{< /cards >}}
</div>
@@ -152,9 +152,9 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="mobile-browsers/_index.md#brave" title="Brave" image="mobile-browsers/brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
{{< card link="mobile-browsers/_index.md#cromite-android" title="Cromite" image="mobile-browsers/cromite.svg" subtitle="Cromite is a Chromium-based browser with built-in ad blocking, fingerprinting protections, and other privacy and security enhancements. It is a fork of the discontinued Bromite browser." >}}
{{< card link="mobile-browsers/_index.md#safari-ios" title="Safari (iOS)" image="mobile-browsers/safari.svg" subtitle="On iOS, any app that can browse the web is restricted to using an Apple-provided WebKit framework, so a browser like Brave does not use the Blink engine (the core component of Chromium) like its counterparts on other operating systems. Safari is the default browser in iOS." >}}
{{< card link="mobile-browsers/index.md#brave" title="Brave" image="mobile-browsers/brave.svg" subtitle="Brave Browser includes a built-in content blocker and privacy features, many of which are enabled by default. Brave is built upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility issues." >}}
{{< card link="mobile-browsers/index.md#cromite-android" title="Cromite" image="mobile-browsers/cromite.svg" subtitle="Cromite is a Chromium-based browser with built-in ad blocking, fingerprinting protections, and other privacy and security enhancements. It is a fork of the discontinued Bromite browser." >}}
{{< card link="mobile-browsers/index.md#safari-ios" title="Safari (iOS)" image="mobile-browsers/safari.svg" subtitle="On iOS, any app that can browse the web is restricted to using an Apple-provided WebKit framework, so a browser like Brave does not use the Blink engine (the core component of Chromium) like its counterparts on other operating systems. Safari is the default browser in iOS." >}}
{{< /cards >}}
</div>
@@ -162,8 +162,8 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="multi-factor-authentication/_index.md#ente-auth" title="Ente Auth" image="multi-factor-authentication/ente-auth.svg" subtitle="Ente Auth is a free and open-source app which stores and generates TOTP tokens. It can be used with an online account to back up and sync your tokens across your devices (and access them via a web interface) in a secure, end-to-end encrypted fashion." >}}
{{< card link="multi-factor-authentication/_index.md#aegis-authenticator-android" title="Aegis Authenticator" image="multi-factor-authentication/aegis.png" subtitle="Aegis Authenticator is a free and open-source app for Android to manage your 2-step verification tokens for your online services. Aegis Authenticator operates completely offline/locally, but includes the option to export your tokens for backup unlike many alternatives." >}}
{{< card link="multi-factor-authentication/index.md#ente-auth" title="Ente Auth" image="multi-factor-authentication/ente-auth.svg" subtitle="Ente Auth is a free and open-source app which stores and generates TOTP tokens. It can be used with an online account to back up and sync your tokens across your devices (and access them via a web interface) in a secure, end-to-end encrypted fashion." >}}
{{< card link="multi-factor-authentication/index.md#aegis-authenticator-android" title="Aegis Authenticator" image="multi-factor-authentication/aegis.png" subtitle="Aegis Authenticator is a free and open-source app for Android to manage your 2-step verification tokens for your online services. Aegis Authenticator operates completely offline/locally, but includes the option to export your tokens for backup unlike many alternatives." >}}
{{< /cards >}}
</div>
@@ -171,12 +171,12 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="news-aggregators/_index.md#akregator" title="Akregator" image="news-aggregators/akregator.svg" subtitle="Akregator is a news feed reader that is a part of the KDE project. It comes with a fast search, advanced archiving functionality, and an internal browser for easy news reading." >}}
{{< card link="news-aggregators/_index.md#newsflash" title="NewsFlash" image="news-aggregators/newsflash.png" subtitle="NewsFlash is an open-source, modern, and easy-to-use news feed reader for Linux. It can be used offline or with services like Inoreader or Nextcloud News." >}}
{{< card link="news-aggregators/_index.md#feeder" title="Feeder" image="news-aggregators/feeder.png" subtitle="Feeder is a modern RSS client for Android that has many features and works well with folders of RSS feeds." >}}
{{< card link="news-aggregators/_index.md#miniflux" title="Miniflux" image="news-aggregators/miniflux.svg" subtitle="Miniflux is a web-based news aggregator that you can self-host." >}}
{{< card link="news-aggregators/_index.md#netnewswire" title="NetNewsWire" image="news-aggregators/netnewswire.png" subtitle="NetNewsWire is a free and open-source feed reader for macOS and iOS with a focus on a native design and feature set." >}}
{{< card link="news-aggregators/_index.md#newsboat" title="Newsboat" image="news-aggregators/newsboat.svg" subtitle="Newsboat is an RSS/Atom feed reader for the text console. It's an actively maintained fork of Newsbeuter." >}}
{{< card link="news-aggregators/index.md#akregator" title="Akregator" image="news-aggregators/akregator.svg" subtitle="Akregator is a news feed reader that is a part of the KDE project. It comes with a fast search, advanced archiving functionality, and an internal browser for easy news reading." >}}
{{< card link="news-aggregators/index.md#newsflash" title="NewsFlash" image="news-aggregators/newsflash.png" subtitle="NewsFlash is an open-source, modern, and easy-to-use news feed reader for Linux. It can be used offline or with services like Inoreader or Nextcloud News." >}}
{{< card link="news-aggregators/index.md#feeder" title="Feeder" image="news-aggregators/feeder.png" subtitle="Feeder is a modern RSS client for Android that has many features and works well with folders of RSS feeds." >}}
{{< card link="news-aggregators/index.md#miniflux" title="Miniflux" image="news-aggregators/miniflux.svg" subtitle="Miniflux is a web-based news aggregator that you can self-host." >}}
{{< card link="news-aggregators/index.md#netnewswire" title="NetNewsWire" image="news-aggregators/netnewswire.png" subtitle="NetNewsWire is a free and open-source feed reader for macOS and iOS with a focus on a native design and feature set." >}}
{{< card link="news-aggregators/index.md#newsboat" title="Newsboat" image="news-aggregators/newsboat.svg" subtitle="Newsboat is an RSS/Atom feed reader for the text console. It's an actively maintained fork of Newsbeuter." >}}
{{< /cards >}}
</div>
@@ -184,11 +184,11 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="notebooks/_index.md#standard-notes" title="Standard Notes" image="notebooks/standard-notes.svg" subtitle="Standard Notes is a simple and private notes app that features cross-platform sync for seamless use. It features E2EE on every platform, and a powerful desktop experience with themes and custom editors." >}}
{{< card link="notebooks/_index.md#notesnook" title="Notesnook" image="notebooks/notesnook.svg" subtitle="Notesnook is a free (as in speech), open-source, and easy-to-use E2EE note-taking app focused on user privacy." >}}
{{< card link="notebooks/_index.md#joplin" title="Joplin" image="notebooks/joplin.svg" subtitle="Joplin is a free, open-source, and fully-featured E2EE note-taking and to-do application which can handle numerous Markdown notes organized into notebooks and tags." >}}
{{< card link="notebooks/_index.md#cryptee" title="Cryptee" image="notebooks/cryptee.svg" subtitle="Cryptee is an open-source, web-based E2EE document editor and photo storage application." >}}
{{< card link="notebooks/_index.md#org-mode" title="Org-mode" image="notebooks/org-mode.svg" subtitle="Org-mode is a major mode for GNU Emacs. Org-mode is for keeping notes, maintaining to-do lists, planning projects, and authoring documents with a fast and effective plain-text system." >}}
{{< card link="notebooks/index.md#standard-notes" title="Standard Notes" image="notebooks/standard-notes.svg" subtitle="Standard Notes is a simple and private notes app that features cross-platform sync for seamless use. It features E2EE on every platform, and a powerful desktop experience with themes and custom editors." >}}
{{< card link="notebooks/index.md#notesnook" title="Notesnook" image="notebooks/notesnook.svg" subtitle="Notesnook is a free (as in speech), open-source, and easy-to-use E2EE note-taking app focused on user privacy." >}}
{{< card link="notebooks/index.md#joplin" title="Joplin" image="notebooks/joplin.svg" subtitle="Joplin is a free, open-source, and fully-featured E2EE note-taking and to-do application which can handle numerous Markdown notes organized into notebooks and tags." >}}
{{< card link="notebooks/index.md#cryptee" title="Cryptee" image="notebooks/cryptee.svg" subtitle="Cryptee is an open-source, web-based E2EE document editor and photo storage application." >}}
{{< card link="notebooks/index.md#org-mode" title="Org-mode" image="notebooks/org-mode.svg" subtitle="Org-mode is a major mode for GNU Emacs. Org-mode is for keeping notes, maintaining to-do lists, planning projects, and authoring documents with a fast and effective plain-text system." >}}
{{< /cards >}}
</div>
@@ -196,8 +196,8 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="office-suites/_index.md#libreoffice" title="LibreOffice" image="office-suites/libreoffice.svg" subtitle="LibreOffice is a free and open-source office suite with extensive functionality." >}}
{{< card link="office-suites/_index.md#onlyoffice" title="OnlyOffice" image="office-suites/onlyoffice.svg" subtitle="OnlyOffice is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud." >}}
{{< card link="office-suites/index.md#libreoffice" title="LibreOffice" image="office-suites/libreoffice.svg" subtitle="LibreOffice is a free and open-source office suite with extensive functionality." >}}
{{< card link="office-suites/index.md#onlyoffice" title="OnlyOffice" image="office-suites/onlyoffice.svg" subtitle="OnlyOffice is a cloud-based free and open-source office suite with extensive functionality, including integration with Nextcloud." >}}
{{< /cards >}}
</div>
@@ -205,10 +205,10 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="passwords/_index.md#keepassxc" title="KeePassXC" image="passwords/keepassxc.svg" subtitle="KeePassXC is a community fork of KeePassX, a native cross-platform port of KeePass Password Safe, with the goal of extending and improving it with new features and bug fixes to provide a feature-rich, cross-platform, and modern open-source password manager." >}}
{{< card link="passwords/_index.md#keepassdx-android" title="KeePassDX" image="passwords/keepassdx.svg" subtitle="KeePassDX is a lightweight password manager for Android; it allows for editing encrypted data in a single file in KeePass format and can fill in forms securely." >}}
{{< card link="passwords/_index.md#keepassium-ios-macos" title="KeePassium" image="passwords/keepassium.svg" subtitle="KeePassium is a commercial, open-source password manager made by KeePassium Labs that's compatible with other KeePass applications. It provides autofill support, passkey management, automatic two-way synchronization through most cloud storage providers, and more." >}}
{{< card link="passwords/_index.md#gopass-cli" title="Gopass" image="passwords/gopass.svg" subtitle="Gopass is a minimal password manager for the command line written in Go. It can be used within scripting applications and works on all major desktop and server operating systems." >}}
{{< card link="passwords/index.md#keepassxc" title="KeePassXC" image="passwords/keepassxc.svg" subtitle="KeePassXC is a community fork of KeePassX, a native cross-platform port of KeePass Password Safe, with the goal of extending and improving it with new features and bug fixes to provide a feature-rich, cross-platform, and modern open-source password manager." >}}
{{< card link="passwords/index.md#keepassdx-android" title="KeePassDX" image="passwords/keepassdx.svg" subtitle="KeePassDX is a lightweight password manager for Android; it allows for editing encrypted data in a single file in KeePass format and can fill in forms securely." >}}
{{< card link="passwords/index.md#keepassium-ios-macos" title="KeePassium" image="passwords/keepassium.svg" subtitle="KeePassium is a commercial, open-source password manager made by KeePassium Labs that's compatible with other KeePass applications. It provides autofill support, passkey management, automatic two-way synchronization through most cloud storage providers, and more." >}}
{{< card link="passwords/index.md#gopass-cli" title="Gopass" image="passwords/gopass.svg" subtitle="Gopass is a minimal password manager for the command line written in Go. It can be used within scripting applications and works on all major desktop and server operating systems." >}}
{{< /cards >}}
</div>
@@ -216,8 +216,8 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="pastebins/_index.md#privatebin" title="PrivateBin" image="pastebins/privatebin.svg" subtitle="PrivateBin is a minimalist, open-source, online pastebin where the server cannot decrypt and read any pasted data you submit. Data is encrypted/decrypted in the browser using 256-bit AES." >}}
{{< card link="pastebins/_index.md#paaster" title="Paaster" image="pastebins/paaster.svg" subtitle="Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible." >}}
{{< card link="pastebins/index.md#privatebin" title="PrivateBin" image="pastebins/privatebin.svg" subtitle="PrivateBin is a minimalist, open-source, online pastebin where the server cannot decrypt and read any pasted data you submit. Data is encrypted/decrypted in the browser using 256-bit AES." >}}
{{< card link="pastebins/index.md#paaster" title="Paaster" image="pastebins/paaster.svg" subtitle="Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible." >}}
{{< /cards >}}
</div>
@@ -225,8 +225,8 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="social-networks/_index.md#mastodon" title="Mastodon" image="social-networks/mastodon.svg" subtitle="Mastodon is a social network based on open web protocols and free, open-source software. It uses the ActivityPub protocol, which is decentralized like email: Users can exist on different servers or even different platforms but still communicate with each other." >}}
{{< card link="social-networks/_index.md#element" title="Element" image="social-networks/element.svg" subtitle="Element is the flagship client for the Matrix protocol, an open standard that enables decentralized communication by way of federated chat rooms. Users can exist on different homeservers but still communicate with each other." >}}
{{< card link="social-networks/index.md#mastodon" title="Mastodon" image="social-networks/mastodon.svg" subtitle="Mastodon is a social network based on open web protocols and free, open-source software. It uses the ActivityPub protocol, which is decentralized like email: Users can exist on different servers or even different platforms but still communicate with each other." >}}
{{< card link="social-networks/index.md#element" title="Element" image="social-networks/element.svg" subtitle="Element is the flagship client for the Matrix protocol, an open standard that enables decentralized communication by way of federated chat rooms. Users can exist on different homeservers but still communicate with each other." >}}
{{< /cards >}}
</div>
@@ -234,7 +234,7 @@ weight: 30
<div class="pg-card-logos">
{{< cards >}}
{{< card link="tor/_index.md#tor-browser" title="Tor Browser" image="tor/tor.svg" subtitle="Tor Browser is the top choice if you need anonymity, as it provides you with access to the Tor network and bridges, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*." >}}
{{< card link="tor/_index.md#onion-browser-ios" title="Onion Browser" image="tor/onion_browser.svg" subtitle="Onion Browser is an open-source browser that lets you browse the web anonymously over the Tor network on iOS devices and is endorsed by the Tor Project." >}}
{{< card link="tor/index.md#tor-browser" title="Tor Browser" image="tor/tor.svg" subtitle="Tor Browser is the top choice if you need anonymity, as it provides you with access to the Tor network and bridges, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*." >}}
{{< card link="tor/index.md#onion-browser-ios" title="Onion Browser" image="tor/onion_browser.svg" subtitle="Onion Browser is an open-source browser that lets you browse the web anonymously over the Tor network on iOS devices and is endorsed by the Tor Project." >}}
{{< /cards >}}
</div>
@@ -3,9 +3,9 @@ title: "AI Chat"
description: Unlike OpenAI's ChatGPT and its Big Tech competitors, these AI tools run locally so your data never leaves your desktop device.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/_index.md#avoiding-censorship)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/index.md#avoiding-censorship)
The use of **AI chat**, also known as Large Language Models (LLMs), has become increasingly common since the release of ChatGPT in 2022. LLMs can help us write better, understand unfamiliar subjects, or answer a wide range of questions. They work by statistically predicting the next word in their responses based on a vast amount of data scraped from the web.
@@ -3,13 +3,13 @@ title: Browser Extensions
description: These browser extensions can enhance your browsing experience and protect your privacy.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
In general, we recommend keeping your browser extensions to a minimum to decrease your attack surface. They have privileged access within your browser, require you to trust the developer, can make you [stand out](https://en.wikipedia.org/wiki/Device_fingerprint#Browser_fingerprint), and [weaken](https://groups.google.com/a/chromium.org/g/chromium-extensions/c/0ei-UCHNm34/m/lDaXwQhzBAAJ) site isolation.
However, some provide functionality which can outweigh these downsides in certain situations, particularly when it comes to [content blocking](../../../wiki/basics/common-threats/_index.md#mass-surveillance-programs).
However, some provide functionality which can outweigh these downsides in certain situations, particularly when it comes to [content blocking](../../../wiki/basics/common-threats/index.md#mass-surveillance-programs).
Don't install extensions which you don't immediately have a need for, or ones that duplicate the functionality of your browser. For example, [Brave](../desktop-browsers/_index.md#brave) users don't need to install uBlock Origin, because Brave Shields already provides the same functionality.
Don't install extensions which you don't immediately have a need for, or ones that duplicate the functionality of your browser. For example, [Brave](../desktop-browsers/index.md#brave) users don't need to install uBlock Origin, because Brave Shields already provides the same functionality.
<div class="pg-card-logos">
{{< cards >}}
@@ -49,7 +49,7 @@ uBlock Origin also has a "Lite" version of their extension, which offers a limit
- ...you want a more resource (memory/CPU) efficient content blocker[^1]
- ...your browser only supports Manifest V3 extensions. This is the case for Chrome [^2] , Edge and most Chromium browsers.
**uBlock Origin Lite** is a Manifest V3 compatible content blocker. Compared to the original *uBlock Origin*, this extension does not require broad "read/modify data" permissions to function, which lowers the risk of [:material-bug-outline: Passive Attacks](../../../wiki/basics/common-threats/_index.md#security-and-privacy){ .pg-orange } on your browser if a malicious rule is added to a filter list.
**uBlock Origin Lite** is a Manifest V3 compatible content blocker. Compared to the original *uBlock Origin*, this extension does not require broad "read/modify data" permissions to function, which lowers the risk of [:material-bug-outline: Passive Attacks](../../../wiki/basics/common-threats/index.md#security-and-privacy){ .pg-orange } on your browser if a malicious rule is added to a filter list.
{{< cards >}}
{{< card link="https://github.com/uBlockOrigin/uBOL-home#readme" title="Repository" icon="code" >}}
@@ -70,7 +70,7 @@ uBlock Origin Lite only receives block list updates whenever the extension is up
### AdGuard
We recommend [Safari](../mobile-browsers/_index.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
We recommend [Safari](../mobile-browsers/index.md#safari-ios) for iOS users, which unfortunately is only supported by uBlock Origin **Lite**. Luckily, AdGuard provides an adequate alternative:
**AdGuard for iOS** is a free and open-source content-blocking extension for Safari that uses the native [Content Blocker API](https://developer.apple.com/documentation/safariservices/creating_a_content_blocker).
@@ -3,8 +3,8 @@ description: Unlike most cryptocurrencies, these ones provide transaction privac
title: Cryptocurrency
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Mass Surveillance" color="blue" >}}](../../../wiki/basics/common-threats/_index.md#mass-surveillance-programs)
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/_index.md#avoiding-censorship)
[{{< badge content="Mass Surveillance" color="blue" >}}](../../../wiki/basics/common-threats/index.md#mass-surveillance-programs)
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/index.md#avoiding-censorship)
<div class="pg-card-logos">
{{< cards >}}
@@ -14,7 +14,7 @@ title: Cryptocurrency
Making payments online is one of the biggest challenges to privacy. These cryptocurrencies provide transaction privacy by default (something which is **not** guaranteed by the majority of cryptocurrencies), provided you have a strong understanding of how to make private payments effectively. We strongly encourage you first read our payments overview article before making any purchases:
[Making Private Payments](../../../wiki/advanced/payments/_index.md)
[Making Private Payments](../../../wiki/advanced/payments/index.md)
{ .md-button }
> [!CAUTION]
@@ -22,7 +22,7 @@ Making payments online is one of the biggest challenges to privacy. These crypto
## Monero
**Monero** uses a blockchain with privacy-enhancing technologies that obfuscate transactions to achieve [:material-incognito: Anonymity](../../../wiki/basics/common-threats/_index.md#anonymity-vs-privacy){ .pg-purple }. Every Monero transaction hides the transaction amount, sending and receiving addresses, and source of funds without any hoops to jump through, making it an ideal choice for cryptocurrency novices.
**Monero** uses a blockchain with privacy-enhancing technologies that obfuscate transactions to achieve [:material-incognito: Anonymity](../../../wiki/basics/common-threats/index.md#anonymity-vs-privacy){ .pg-purple }. Every Monero transaction hides the transaction amount, sending and receiving addresses, and source of funds without any hoops to jump through, making it an ideal choice for cryptocurrency novices.
{{< cards >}}
{{< card link="https://getmonero.org" title="Homepage" icon="home" >}}
@@ -54,11 +54,11 @@ For optimal privacy, make sure to use a self-custody wallet where the [view key]
### Monero nodes
For maximum privacy (even with a self-custody wallet), you should run your own Monero node called the [Monero daemon](https://docs.getmonero.org/interacting/monerod-reference), which is included in the [CLI wallet](https://getmonero.org/downloads/#cli). Using another persons node will expose some information to them, such as the IP address that you connect to it from, the timestamps that you sync your wallet, and the transactions that you send from your wallet (though no other details about those transactions). Alternatively, you can connect to someone elses Monero node over [Tor](../../advanced/alternative-networks/_index.md#tor), [I2P](../../advanced/alternative-networks/_index.md#i2p-the-invisible-internet-project), or a [VPN](../../services/vpn/_index.md).
For maximum privacy (even with a self-custody wallet), you should run your own Monero node called the [Monero daemon](https://docs.getmonero.org/interacting/monerod-reference), which is included in the [CLI wallet](https://getmonero.org/downloads/#cli). Using another persons node will expose some information to them, such as the IP address that you connect to it from, the timestamps that you sync your wallet, and the transactions that you send from your wallet (though no other details about those transactions). Alternatively, you can connect to someone elses Monero node over [Tor](../../advanced/alternative-networks/index.md#tor), [I2P](../../advanced/alternative-networks/index.md#i2p-the-invisible-internet-project), or a [VPN](../../services/vpn/index.md).
### Buying Monero
[General tips for acquiring Monero](../../../wiki/advanced/payments/_index.md#acquisition)
[General tips for acquiring Monero](../../../wiki/advanced/payments/index.md#acquisition)
{ .md-button }
There are numerous centralized exchanges (CEX) as well as P2P marketplaces where you can buy and sell Monero. Some of them require identifying yourself (KYC) to comply with anti-money laundering regulations. However, due to Monero's privacy features, the only thing known to the seller is *that* you bought Monero, but not how much you own or where you spend it (after it leaves the exchange). Some reputable places to buy Monero include:
@@ -3,7 +3,7 @@ title: "Data and Metadata Redaction"
description: Use these tools to remove metadata like GPS location and other identifying information from photos and files you share.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Public Exposure" color="green" >}}](../../../wiki/basics/common-threats/_index.md#limiting-public-information)
[{{< badge content="Public Exposure" color="green" >}}](../../../wiki/basics/common-threats/index.md#limiting-public-information)
When sharing files, be sure to remove associated metadata. Image files commonly include [Exif](https://en.wikipedia.org/wiki/Exif) data. Photos sometimes even include GPS coordinates in the file metadata.
@@ -3,7 +3,7 @@ title: Desktop Browsers
description: These privacy-protecting browsers are what we currently recommend for standard/non-anonymous internet browsing on desktop systems.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
These are our currently recommended **desktop web browsers** and configurations for standard/non-anonymous browsing. We recommend [Mullvad Browser](#mullvad-browser) if you are focused on strong privacy protections and anti-fingerprinting out of the box, [Firefox](#firefox) for casual internet browsers looking for a good alternative to Google Chrome, and [Brave](#brave) if you need Chromium browser compatibility.
@@ -15,11 +15,11 @@ These are our currently recommended **desktop web browsers** and configurations
{{< /cards >}}
</div>
If you need to browse the internet anonymously, you should use [Tor](../tor/_index.md) instead. We make some configuration recommendations on this page, but all browsers other than Tor Browser will be traceable by *somebody* in some manner or another.
If you need to browse the internet anonymously, you should use [Tor](../tor/index.md) instead. We make some configuration recommendations on this page, but all browsers other than Tor Browser will be traceable by *somebody* in some manner or another.
## Mullvad Browser
**Mullvad Browser** is a version of [Tor Browser](../tor/_index.md#tor-browser) with Tor network integrations removed. It aims to provide to VPN users Tor Browser's anti-fingerprinting browser technologies, which are key protections against [:material-eye-outline: Mass Surveillance](../../../wiki/basics/common-threats/_index.md#mass-surveillance-programs){ .pg-blue }. It is developed by the Tor Project and distributed by [Mullvad](../../services/vpn/_index.md#mullvad), and does **not** require the use of Mullvad's VPN.
**Mullvad Browser** is a version of [Tor Browser](../tor/index.md#tor-browser) with Tor network integrations removed. It aims to provide to VPN users Tor Browser's anti-fingerprinting browser technologies, which are key protections against [:material-eye-outline: Mass Surveillance](../../../wiki/basics/common-threats/index.md#mass-surveillance-programs){ .pg-blue }. It is developed by the Tor Project and distributed by [Mullvad](../../services/vpn/index.md#mullvad), and does **not** require the use of Mullvad's VPN.
{{< cards >}}
{{< card link="https://mullvad.net/en/browser" title="Homepage" icon="home" >}}
@@ -30,7 +30,7 @@ If you need to browse the internet anonymously, you should use [Tor](../tor/_ind
[{{< badge content="macOS" color="indigo" >}}](https://mullvad.net/en/download/browser/macos)
[{{< badge content="Windows" color="red" >}}](https://mullvad.net/en/download/browser/windows)
Like [Tor Browser](../tor/_index.md), Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint identical to all other Mullvad Browser users, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*.
Like [Tor Browser](../tor/index.md), Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint identical to all other Mullvad Browser users, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*.
Therefore, it is imperative that you do not modify the browser at all outside adjusting the default [security levels](https://tb-manual.torproject.org/security-settings). When adjusting the security level, you **must** always restart the browser before continuing to use it. Otherwise, [the security settings may not be fully applied](https://www.privacyguides.org/articles/2025/05/02/tor-security-slider-flaw), putting you at a higher risk of fingerprinting and exploits than you may expect based on the setting chosen.
@@ -38,13 +38,13 @@ Modifications other than adjusting this setting would make your fingerprint uniq
### Anti-Fingerprinting
**Without** using a [VPN](../../services/vpn/_index.md), Mullvad Browser provides protections against [naive fingerprinting scripts](https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting) similar to other private browsers like Firefox+[Arkenfox](#arkenfox-advanced) or [Brave](#brave). Mullvad Browser provides these protections out of the box, at the expense of some flexibility and convenience that other private browsers can provide.
**Without** using a [VPN](../../services/vpn/index.md), Mullvad Browser provides protections against [naive fingerprinting scripts](https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting) similar to other private browsers like Firefox+[Arkenfox](#arkenfox-advanced) or [Brave](#brave). Mullvad Browser provides these protections out of the box, at the expense of some flexibility and convenience that other private browsers can provide.
==For the strongest anti-fingerprinting protection, we recommend using Mullvad Browser in conjunction **with** a VPN==, whether that is Mullvad or another recommended VPN provider. When using a VPN with Mullvad Browser, you will share a fingerprint and a pool of IP addresses with many other users, giving you a "crowd" to blend in with. This strategy is the only way to thwart advanced tracking scripts, and is the same anti-fingerprinting technique used by Tor Browser.
Note that while you can use Mullvad Browser with any VPN provider, other people on that VPN must also be using Mullvad Browser for this "crowd" to exist, something which is more likely on Mullvad VPN compared to other providers. Mullvad Browser does not have built-in VPN connectivity, nor does it check whether you are using a VPN before browsing; your VPN connection has to be configured and managed separately.
Mullvad Browser comes with the *uBlock Origin* and *NoScript* browser extensions pre-installed. While we typically discourage adding *additional* [browser extensions](../browser-extensions/_index.md), these extensions that come pre-installed with the browser should **not** be removed or configured outside their default values, because doing so would noticeably make your browser fingerprint distinct from other Mullvad Browser users. It also comes pre-installed with the Mullvad Browser Extension, which *can* be safely removed without impacting your browser fingerprint if you would like, but is also safe to keep even if you don't use Mullvad VPN.
Mullvad Browser comes with the *uBlock Origin* and *NoScript* browser extensions pre-installed. While we typically discourage adding *additional* [browser extensions](../browser-extensions/index.md), these extensions that come pre-installed with the browser should **not** be removed or configured outside their default values, because doing so would noticeably make your browser fingerprint distinct from other Mullvad Browser users. It also comes pre-installed with the Mullvad Browser Extension, which *can* be safely removed without impacting your browser fingerprint if you would like, but is also safe to keep even if you don't use Mullvad VPN.
### Private Browsing Mode
@@ -136,7 +136,7 @@ This prevents you from unintentionally connecting to a website in plain-text HTT
##### DNS over HTTPS
If you use a [DNS over HTTPS provider](../../services/dns/_index.md):
If you use a [DNS over HTTPS provider](../../services/dns/index.md):
- [x] Select **Max Protection** and choose a suitable provider
@@ -227,7 +227,7 @@ Brave allows you to select additional content filters within the internal `brave
##### Tor windows
[**Private Window with Tor**](https://support.brave.com/hc/articles/360018121491-What-is-a-Private-Window-with-Tor-Connectivity) allows you to route your traffic through the Tor network in Private Windows and access .onion services, which may be useful in some cases. However, Brave is **not** as resistant to fingerprinting as the Tor Browser is, and far fewer people use Brave with Tor, so you will stand out. If your threat model requires strong anonymity, use the [Tor Browser](../tor/_index.md#tor-browser).
[**Private Window with Tor**](https://support.brave.com/hc/articles/360018121491-What-is-a-Private-Window-with-Tor-Connectivity) allows you to route your traffic through the Tor network in Private Windows and access .onion services, which may be useful in some cases. However, Brave is **not** as resistant to fingerprinting as the Tor Browser is, and far fewer people use Brave with Tor, so you will stand out. If your threat model requires strong anonymity, use the [Tor Browser](../tor/index.md#tor-browser).
##### Data Collection
@@ -268,7 +268,7 @@ We recommend disabling search suggestions in Brave for the same reason we recomm
#### Brave Rewards and Wallet
**Brave Rewards** lets you receive Basic Attention Token (BAT) cryptocurrency for performing certain actions within Brave. It relies on a custodial account and KYC from a select number of providers. We do not recommend BAT as a [private cryptocurrency](../cryptocurrency/_index.md), nor do we recommend using a [custodial wallet](../../../wiki/advanced/payments/_index.md#wallet-custody), so we would discourage using this feature.
**Brave Rewards** lets you receive Basic Attention Token (BAT) cryptocurrency for performing certain actions within Brave. It relies on a custodial account and KYC from a select number of providers. We do not recommend BAT as a [private cryptocurrency](../cryptocurrency/index.md), nor do we recommend using a [custodial wallet](../../../wiki/advanced/payments/index.md#wallet-custody), so we would discourage using this feature.
**Brave Wallet** operates locally on your computer, but does not support any private cryptocurrencies, so we would discourage using this feature as well.
@@ -296,6 +296,6 @@ Our best-case criteria represents what we would like to see from the perfect pro
- Should not include add-on functionality (bloatware) that does not impact user privacy.
- Should not collect telemetry by default.
- Should provide an open-source sync server implementation.
- Should default to a [private search engine](../../services/search-engines/_index.md).
- Should default to a [private search engine](../../services/search-engines/index.md).
[^1]: Brave's implementation is detailed at [Brave Privacy Updates: Partitioning network-state for privacy](https://brave.com/privacy-updates/14-partitioning-network-state).
@@ -3,7 +3,7 @@ title: Document Collaboration
description: Most online office suites do not support end-to-end encryption, meaning the cloud provider has access to everything you do.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
<div class="pg-card-logos">
{{< cards >}}
@@ -3,19 +3,19 @@ title: "Email Clients"
description: These email clients are privacy-respecting and support OpenPGP email encryption.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/_index.md#attacks-against-specific-individuals)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals)
The **email clients** we recommend support both [OpenPGP](../encryption/_index.md#openpgp) and strong authentication such as [Open Authorization (OAuth)](../../../wiki/basics/account-creation/_index.md#sign-in-with-oauth). OAuth allows you to use [Multi-Factor Authentication](../../../wiki/basics/multi-factor-authentication/_index.md) to prevent account theft.
The **email clients** we recommend support both [OpenPGP](../encryption/index.md#openpgp) and strong authentication such as [Open Authorization (OAuth)](../../../wiki/basics/account-creation/index.md#sign-in-with-oauth). OAuth allows you to use [Multi-Factor Authentication](../../../wiki/basics/multi-factor-authentication/index.md) to prevent account theft.
<details class="warning" markdown>
<summary>Email does not provide forward secrecy</summary>
When using end-to-end encryption (E2EE) technology like OpenPGP, email will still have [some metadata](../../../wiki/basics/email-security/_index.md#email-metadata-overview) that is not encrypted in the header of the email.
When using end-to-end encryption (E2EE) technology like OpenPGP, email will still have [some metadata](../../../wiki/basics/email-security/index.md#email-metadata-overview) that is not encrypted in the header of the email.
OpenPGP also does not support [forward secrecy](https://en.wikipedia.org/wiki/Forward_secrecy), which means if either your or the recipient's private key is ever stolen, all previous messages encrypted with it will be exposed: [How do I protect my private keys?](../../../wiki/basics/email-security/_index.md#how-do-i-protect-my-private-keys) Consider using a medium that provides forward secrecy:
OpenPGP also does not support [forward secrecy](https://en.wikipedia.org/wiki/Forward_secrecy), which means if either your or the recipient's private key is ever stolen, all previous messages encrypted with it will be exposed: [How do I protect my private keys?](../../../wiki/basics/email-security/index.md#how-do-i-protect-my-private-keys) Consider using a medium that provides forward secrecy:
[Real-time Communication](../../services/messengers/_index.md)
[Real-time Communication](../../services/messengers/index.md)
{ .md-button }
</details>
@@ -77,13 +77,13 @@ These options can be found in :material-menu: → **Settings** → **Privacy & S
#### Thunderbird-user.js (advanced)
[`thunderbird-user.js`](https://github.com/HorlogeSkynet/thunderbird-user.js) is a set of configuration options that aims to disable as many of the web-browsing features within Thunderbird Desktop as possible in order to reduce attack surface and maintain privacy. Some of the changes are backported from the [Arkenfox project](../desktop-browsers/_index.md#arkenfox-advanced).
[`thunderbird-user.js`](https://github.com/HorlogeSkynet/thunderbird-user.js) is a set of configuration options that aims to disable as many of the web-browsing features within Thunderbird Desktop as possible in order to reduce attack surface and maintain privacy. Some of the changes are backported from the [Arkenfox project](../desktop-browsers/index.md#arkenfox-advanced).
## Platform Specific
### Apple Mail (macOS)
**Apple Mail** is included in macOS and can be extended to have OpenPGP support with [GPG Suite](../encryption/_index.md#gpg-suite), which adds the ability to send PGP-encrypted email.
**Apple Mail** is included in macOS and can be extended to have OpenPGP support with [GPG Suite](../encryption/index.md#gpg-suite), which adds the ability to send PGP-encrypted email.
{{< cards >}}
{{< card link="https://support.apple.com/guide/mail/welcome/mac" title="Homepage" icon="home" >}}
@@ -27,9 +27,9 @@ The options listed here are available on multiple platforms and great for creati
### Cryptomator (Cloud)
<small>Protects against the following threat(s):</small>
[{{< badge content="Passive Attacks" color="amber" >}}](../../../wiki/basics/common-threats/_index.md#security-and-privacy)
[{{< badge content="Passive Attacks" color="amber" >}}](../../../wiki/basics/common-threats/index.md#security-and-privacy)
**Cryptomator** is an encryption solution designed for privately saving files to any cloud [:material-server-network: Service Provider](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers){ .pg-teal }, eliminating the need to trust that they won't access your files. It allows you to create vaults that are stored on a virtual drive, the contents of which are encrypted and synced with your cloud storage provider.
**Cryptomator** is an encryption solution designed for privately saving files to any cloud [:material-server-network: Service Provider](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers){ .pg-teal }, eliminating the need to trust that they won't access your files. It allows you to create vaults that are stored on a virtual drive, the contents of which are encrypted and synced with your cloud storage provider.
{{< cards >}}
{{< card link="https://cryptomator.org" title="Homepage" icon="home" >}}
@@ -55,7 +55,7 @@ Cryptomator's documentation details its intended [security target](https://docs.
### VeraCrypt (Disk)
<small>Protects against the following threat(s):</small>
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/_index.md#attacks-against-specific-individuals)
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals)
**VeraCrypt** is a source-available freeware utility used for on-the-fly encryption. It can create a virtual encrypted disk within a file, encrypt a partition, or encrypt the entire storage device with pre-boot authentication.
@@ -77,9 +77,9 @@ TrueCrypt has been [audited a number of times](https://en.wikipedia.org/wiki/Tru
## Operating System Encryption
<small>Protects against the following threat(s):</small>
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/_index.md#attacks-against-specific-individuals)
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals)
Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](../../../wiki/basics/hardware/_index.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in.
Built-in OS encryption solutions generally leverage hardware security features such as a [secure cryptoprocessor](../../../wiki/basics/hardware/index.md#tpmsecure-cryptoprocessor). Therefore, we recommend using the built-in encryption solutions for your operating system. For cross-platform encryption, we still recommend [cross-platform tools](#multi-platform) for additional flexibility and to avoid vendor lock-in.
<details class="warning" markdown>
@@ -100,11 +100,11 @@ Powering off your devices when theyre not in use provides the highest level o
BitLocker is [officially supported](https://support.microsoft.com/en-us/windows/bitlocker-overview-44c0c61c-989d-4a69-8822-b95cd49b1bbf) on the Pro, Enterprise, and Education editions of Windows. The Home edition only supports automatic [Device Encryption](https://support.microsoft.com/en-us/windows/device-encryption-in-windows-cf7e2b6f-3e70-4882-9532-18633605b7df) and must meet specific hardware requirements. If youre using the Home edition, we recommend [upgrading to Pro](https://support.microsoft.com/en-us/windows/upgrade-windows-home-to-windows-pro-ef34d520-e73f-3198-c525-d1a218cc2818), which can be done without reinstalling Windows or losing your files.
Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](../../../wiki/os/windows/group-policies/_index.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
Pro and higher editions also support the more secure pre-boot [TPM+PIN](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/faq#what-is-the-difference-between-a-tpm-owner-password--recovery-password--recovery-key--pin--enhanced-pin--and-startup-key) feature, configured through the appropriate [group policy](../../../wiki/os/windows/group-policies/index.md#bitlocker-drive-encryption) settings. The PIN is rate limited and the TPM will panic and lock access to the encryption key either permanently or for a period of time if someone attempts to brute force access.
### FileVault
**FileVault** is the on-the-fly volume encryption solution built into macOS. FileVault takes advantage of the [hardware security capabilities](../../../wiki/os/macos/_index.md#hardware-security) present on an Apple Silicon SoC or T2 Security Chip.
**FileVault** is the on-the-fly volume encryption solution built into macOS. FileVault takes advantage of the [hardware security capabilities](../../../wiki/os/macos/index.md#hardware-security) present on an Apple Silicon SoC or T2 Security Chip.
{{< cards >}}
{{< card link="https://support.apple.com/guide/mac-help/encrypt-mac-data-with-filevault-mh11785/mac" title="Documentation" icon="document-text" >}}
@@ -151,7 +151,7 @@ udisksctl unlock -b /dev/loop0
## Command-line
<small>Protects against the following threat(s):</small>
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/_index.md#attacks-against-specific-individuals)
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals)
Tools with command-line interfaces are useful for integrating [shell scripts](https://en.wikipedia.org/wiki/Shell_script).
@@ -180,9 +180,9 @@ Tools with command-line interfaces are useful for integrating [shell scripts](ht
## OpenPGP
<small>Protects against the following threat(s):</small>
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/_index.md#attacks-against-specific-individuals)
[{{< badge content="Passive Attacks" color="amber" >}}](../../../wiki/basics/common-threats/_index.md#security-and-privacy)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals)
[{{< badge content="Passive Attacks" color="amber" >}}](../../../wiki/basics/common-threats/index.md#security-and-privacy)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
OpenPGP is sometimes needed for specific tasks such as digitally signing and encrypting email. PGP has many features and is [complex](https://latacora.micro.blog/2019/07/16/the-pgp-problem.html) as it has been around a long time. For tasks such as signing or encrypting files, we suggest the above options.
@@ -221,7 +221,7 @@ When encrypting with PGP, you have the option to configure different options in
### GPG Suite
**GPG Suite** provides OpenPGP support for [Apple Mail](../email-clients/_index.md#apple-mail-macos) and other email clients on macOS.
**GPG Suite** provides OpenPGP support for [Apple Mail](../email-clients/index.md#apple-mail-macos) and other email clients on macOS.
We recommend taking a look at their [First steps](https://gpgtools.tenderapp.com/kb/how-to/first-steps-where-do-i-start-where-do-i-begin-setup-gpgtools-create-a-new-key-your-first-encrypted-email) and [Knowledge Base](https://gpgtools.tenderapp.com/kb) for support.
@@ -236,7 +236,7 @@ Currently, GPG Suite does [not yet](https://gpgtools.com/sequoia) have a stable
### OpenKeychain
**OpenKeychain** is an implementation of GnuPG for Android. It's commonly required by mail clients such as [Thunderbird](../email-clients/_index.md#thunderbird), [FairEmail](../email-clients/_index.md#fairemail-android), and other Android apps to provide encryption support.
**OpenKeychain** is an implementation of GnuPG for Android. It's commonly required by mail clients such as [Thunderbird](../email-clients/index.md#thunderbird), [FairEmail](../email-clients/index.md#fairemail-android), and other Android apps to provide encryption support.
{{< cards >}}
{{< card link="https://openkeychain.org" title="Homepage" icon="home" >}}
@@ -3,7 +3,7 @@ title: File Sharing and Sync
description: Discover how to privately share your files between your devices, with your friends and family, or anonymously online.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
Discover how to privately share your files between your devices, with your friends and family, or anonymously online.
@@ -17,7 +17,7 @@ Discover how to privately share your files between your devices, with your frien
## File Sharing
If you already use [Proton Drive](../../services/cloud/_index.md#proton-drive)[^1] or have a [Bitwarden](../../services/passwords/_index.md#bitwarden) Premium[^2] subscription, consider using the file sharing capabilities that they each offer, both of which use end-to-end encryption. Otherwise, the standalone options listed here ensure that the files you share are not read by a remote server.
If you already use [Proton Drive](../../services/cloud/index.md#proton-drive)[^1] or have a [Bitwarden](../../services/passwords/index.md#bitwarden) Premium[^2] subscription, consider using the file sharing capabilities that they each offer, both of which use end-to-end encryption. Otherwise, the standalone options listed here ensure that the files you share are not read by a remote server.
### Send
@@ -36,7 +36,7 @@ ffsend upload --host https://send.vis.ee/ FILE
### OnionShare
**OnionShare** is an open-source tool that lets you securely and [:material-incognito: anonymously](../../../wiki/basics/common-threats/_index.md#anonymity-vs-privacy){ .pg-purple } share a file of any size. It works by starting a web server accessible as a Tor onion service, with an unguessable URL that you can share with the recipients to download or send files.
**OnionShare** is an open-source tool that lets you securely and [:material-incognito: anonymously](../../../wiki/basics/common-threats/index.md#anonymity-vs-privacy){ .pg-purple } share a file of any size. It works by starting a web server accessible as a Tor onion service, with an unguessable URL that you can share with the recipients to download or send files.
{{< cards >}}
{{< card link="https://onionshare.org" title="Homepage" icon="home" >}}
@@ -48,7 +48,7 @@ ffsend upload --host https://send.vis.ee/ FILE
[{{< badge content="Windows" color="red" >}}](https://onionshare.org/#download)
[{{< badge content="Flathub" >}}](https://flathub.org/apps/org.onionshare.OnionShare)
OnionShare provides the option to connect via [Tor bridges](https://docs.onionshare.org/2.6.2/en/tor.html#automatic-censorship-circumvention) to circumvent [:material-close-outline: Censorship](../../../wiki/basics/common-threats/_index.md#avoiding-censorship){ .pg-blue-gray }.
OnionShare provides the option to connect via [Tor bridges](https://docs.onionshare.org/2.6.2/en/tor.html#automatic-censorship-circumvention) to circumvent [:material-close-outline: Censorship](../../../wiki/basics/common-threats/index.md#avoiding-censorship){ .pg-blue-gray }.
### Criteria
@@ -3,13 +3,13 @@ title: "Frontends"
description: These open-source frontends for various internet services allow you to access content without JavaScript or other annoyances.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
Sometimes services will try to force you to sign up for an account by blocking access to content with annoying popups. They might also break without JavaScript enabled. These frontends can allow you to circumvent these restrictions.
If you choose to self-host these frontends, it is important that you have other people using your instance as well in order for you to blend in. You should be careful with where and how you are hosting, as other peoples' usage will be linked to your hosting.
When you are using an instance run by someone else, make sure to read the privacy policy of that specific instance (if available). They can be modified by their owners and therefore may not reflect the default policy. Some instances have [Tor](../tor/_index.md) .onion addresses, which may grant some privacy as long as your search queries don't contain personally identifiable information.
When you are using an instance run by someone else, make sure to read the privacy policy of that specific instance (if available). They can be modified by their owners and therefore may not reflect the default policy. Some instances have [Tor](../tor/index.md) .onion addresses, which may grant some privacy as long as your search queries don't contain personally identifiable information.
<div class="pg-card-logos">
{{< cards >}}
@@ -35,11 +35,11 @@ When you are using an instance run by someone else, make sure to read the privac
{{< /cards >}}
> [!NOTE]
> The [Old Reddit](https://old.reddit.com) website doesn't require as much JavaScript as the new Reddit website does, but it has recently blocked access to IP addresses reserved for public VPNs. You can use Old Reddit in conjunction with the [Tor](../tor/_index.md) Onion that was [launched in October 2022](https://forum.torproject.org/t/reddit-onion-service-launch/5305) at [https://old.reddittorjg6rue252oqsxryoxengawnmo46qy4kyii5wtqnwfj4ooad.onion](https://old.reddittorjg6rue252oqsxryoxengawnmo46qy4kyii5wtqnwfj4ooad.onion).
> The [Old Reddit](https://old.reddit.com) website doesn't require as much JavaScript as the new Reddit website does, but it has recently blocked access to IP addresses reserved for public VPNs. You can use Old Reddit in conjunction with the [Tor](../tor/index.md) Onion that was [launched in October 2022](https://forum.torproject.org/t/reddit-onion-service-launch/5305) at [https://old.reddittorjg6rue252oqsxryoxengawnmo46qy4kyii5wtqnwfj4ooad.onion](https://old.reddittorjg6rue252oqsxryoxengawnmo46qy4kyii5wtqnwfj4ooad.onion).
> [!TIP]
> Redlib is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/_index.md#tor-browser) on the Safest security level.
> Redlib is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/index.md#tor-browser) on the Safest security level.
## TikTok
@@ -48,7 +48,7 @@ When you are using an instance run by someone else, make sure to read the privac
**ProxiTok** is an open-source frontend to the [TikTok](https://tiktok.com) website that is also self-hostable.
There are a number of public instances, with some that offer a [Tor](../tor/_index.md) onion service or an [I2P](../../advanced/alternative-networks/_index.md#i2p-the-invisible-internet-project) eepsite.
There are a number of public instances, with some that offer a [Tor](../tor/index.md) onion service or an [I2P](../../advanced/alternative-networks/index.md#i2p-the-invisible-internet-project) eepsite.
{{< cards >}}
{{< card link="https://github.com/pablouser1/ProxiTok#readme" title="Repository" icon="code" >}}
@@ -56,7 +56,7 @@ There are a number of public instances, with some that offer a [Tor](../tor/_ind
{{< /cards >}}
> [!TIP]
> ProxiTok is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/_index.md#tor-browser) on the Safest security level.
> ProxiTok is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/index.md#tor-browser) on the Safest security level.
## YouTube
@@ -67,7 +67,7 @@ There are a number of public instances, with some that offer a [Tor](../tor/_ind
**Invidious** is a free and open-source frontend for [YouTube](https://youtube.com) that is also self-hostable.
There are a number of public instances, with some that offer a [Tor](../tor/_index.md) onion service or an [I2P](../../advanced/alternative-networks/_index.md#i2p-the-invisible-internet-project) eepsite.
There are a number of public instances, with some that offer a [Tor](../tor/index.md) onion service or an [I2P](../../advanced/alternative-networks/index.md#i2p-the-invisible-internet-project) eepsite.
{{< cards >}}
{{< card link="https://invidious.io" title="Homepage" icon="home" >}}
@@ -79,7 +79,7 @@ There are a number of public instances, with some that offer a [Tor](../tor/_ind
> [!TIP]
> Invidious is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/_index.md#tor-browser) on the Safest security level. It does not provide privacy by itself, and we dont recommend logging into any accounts.
> Invidious is useful if you want to disable JavaScript in your browser, such as [Tor Browser](../tor/index.md#tor-browser) on the Safest security level. It does not provide privacy by itself, and we dont recommend logging into any accounts.
### Piped
@@ -114,7 +114,7 @@ When using FreeTube, your subscription list, playlists, watch history and search
[{{< badge content="Flathub" >}}](https://flathub.org/apps/details/io.freetubeapp.FreeTube)
> [!WARNING]
> When using FreeTube, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](../../services/vpn/_index.md) or [Tor](../tor/_index.md) if your [threat model](../../../wiki/basics/threat-modeling/_index.md) requires hiding your IP address.
> When using FreeTube, your IP address may still be known to YouTube, [Invidious](https://instances.invidious.io), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](../../services/vpn/index.md) or [Tor](../tor/index.md) if your [threat model](../../../wiki/basics/threat-modeling/index.md) requires hiding your IP address.
By default, FreeTube blocks all YouTube advertisements. In addition, FreeTube optionally integrates with [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments.
@@ -133,7 +133,7 @@ Your subscription list and playlists are saved locally on your Android device.
[{{< badge content="GitHub" >}}](https://github.com/libre-tube/LibreTube/releases)
> [!WARNING]
> When using LibreTube, your IP address will be visible to YouTube, [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](../../services/vpn/_index.md) or [Tor](../tor/_index.md) if your [threat model](../../../wiki/basics/threat-modeling/_index.md) requires hiding your IP address.
> When using LibreTube, your IP address will be visible to YouTube, [Piped](https://github.com/TeamPiped/Piped/wiki/Instances), or [SponsorBlock](https://sponsor.ajay.app) depending on your configuration. Consider using a [VPN](../../services/vpn/index.md) or [Tor](../tor/index.md) if your [threat model](../../../wiki/basics/threat-modeling/index.md) requires hiding your IP address.
By default, LibreTube blocks all YouTube advertisements. Additionally, LibreTube uses [SponsorBlock](https://sponsor.ajay.app) to help you skip sponsored video segments. You are able to fully configure the types of segments that SponsorBlock will skip, or disable it completely. There is also a button on the video player itself to disable it for a specific video if desired.
@@ -154,7 +154,7 @@ Your subscription list and playlists are saved locally on your Android device.
1. The default instance is [FramaTube](https://framatube.org), however more can be added via **Settings****Content****PeerTube instances**.
> [!WARNING]
> When using NewPipe, your IP address will be visible to the video providers used. Consider using a [VPN](../../services/vpn/_index.md) or [Tor](../tor/_index.md) if your [threat model](../../../wiki/basics/threat-modeling/_index.md) requires hiding your IP address.
> When using NewPipe, your IP address will be visible to the video providers used. Consider using a [VPN](../../services/vpn/index.md) or [Tor](../tor/index.md) if your [threat model](../../../wiki/basics/threat-modeling/index.md) requires hiding your IP address.
## Criteria
@@ -165,7 +165,7 @@ We only consider frontends if one of the following is true for a platform:
- Normally only accessible with JavaScript enabled.
- Normally only accessible with an account.
- Blocks access from commercial [VPNs](../../services/vpn/_index.md).
- Blocks access from commercial [VPNs](../../services/vpn/index.md).
Recommended frontends...
@@ -3,7 +3,7 @@ title: "Health and Wellness"
description: These applications are what we currently recommend for all health- and fitness-related activites on your phone.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
Keep track of your health and fitness-related goals with these apps. Unlike their mainstream alternatives, your personal health information will be kept private.
@@ -3,8 +3,8 @@ title: "Language Tools"
description: These language tools do not send your input text to a server and can be used offline and self-hosted.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
<div class="pg-card-logos">
{{< cards >}}
@@ -46,7 +46,7 @@ LanguageTool offers integration with a variety of [office suites](https://langua
{{< card link="https://github.com/LibreTranslate/LibreTranslate#mirrors" title="Public Instances" icon="server" >}}
{{< /cards >}}
You can use LibreTranslate through a number of public instances, with some that offer a [Tor](../tor/_index.md) onion service or an [I2P](../../advanced/alternative-networks/_index.md#i2p-the-invisible-internet-project) eepsite. You can also host the software yourself for maximum control over the text submitted for translation.
You can use LibreTranslate through a number of public instances, with some that offer a [Tor](../tor/index.md) onion service or an [I2P](../../advanced/alternative-networks/index.md#i2p-the-invisible-internet-project) eepsite. You can also host the software yourself for maximum control over the text submitted for translation.
We use a self-hosted instance of LibreTranslate to automatically translate posts on our [forum](https://discuss.privacyguides.net) to multiple languages.
@@ -3,7 +3,7 @@ title: Maps and Navigation
description: Privacy-respecting map providers and navigation apps which don't build an advertising profile based on your searches and locations.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
<div class="pg-card-logos">
{{< cards >}}
@@ -3,7 +3,7 @@ title: Mobile Browsers
description: These browsers are what we currently recommend for standard/non-anonymous internet browsing on your phone.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
<div class="pg-card-logos">
{{< cards >}}
@@ -13,7 +13,7 @@ description: These browsers are what we currently recommend for standard/non-ano
{{< /cards >}}
</div>
These are our currently recommended **mobile web browsers** and configurations for standard/non-anonymous internet browsing. If you need to browse the internet anonymously, you should use [Tor](../tor/_index.md) instead.
These are our currently recommended **mobile web browsers** and configurations for standard/non-anonymous internet browsing. If you need to browse the internet anonymously, you should use [Tor](../tor/index.md) instead.
## Brave
@@ -33,7 +33,7 @@ Brave is built upon the Chromium web browser project, so it should feel familiar
### Recommended Brave Configuration
Tor Browser is the only way to truly browse the internet anonymously. When you use Brave, we recommend changing the following settings to protect your privacy from certain parties, but all browsers other than the [Tor Browser](../tor/_index.md#tor-browser) will be traceable by *somebody* in some regard or another.
Tor Browser is the only way to truly browse the internet anonymously. When you use Brave, we recommend changing the following settings to protect your privacy from certain parties, but all browsers other than the [Tor Browser](../tor/index.md#tor-browser) will be traceable by *somebody* in some regard or another.
=== "Android"
@@ -3,10 +3,10 @@ title: Multifactor Authentication
description: These tools assist you with securing your internet accounts with multifactor authentication without sending your secrets to a third party.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/_index.md#attacks-against-specific-individuals)
[{{< badge content="Targeted Attacks" color="red" >}}](../../../wiki/basics/common-threats/index.md#attacks-against-specific-individuals)
> [!NOTE]
> [Hardware security key recommendations](../../hardware/security-keys/_index.md) have been moved to their own category.
> [Hardware security key recommendations](../../hardware/security-keys/index.md) have been moved to their own category.
**Multifactor authentication apps** implement a security standard adopted by the Internet Engineering Task Force (IETF) called **Time-based One-time Passwords**, or **TOTP**. This is a method where websites share a secret with you which is used by your authenticator app to generate a six (usually) digit code based on the current time, which you enter while logging in for the website to check. Typically, these codes are regenerated every 30 seconds, and once a new code is generated the old one becomes useless. Even if a hacker gets one six-digit code, there is no way for them to reverse that code to get the original secret or otherwise be able to predict what any future codes might be.
@@ -3,7 +3,7 @@ title: "News Aggregators"
description: These news aggregator clients let you keep up with your favorite blogs and news sites using internet standards like RSS.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
A **news aggregator** is software which aggregates digital content from online newspapers, blogs, podcasts, and other resources to one location for easy viewing. Using one can be a great way to keep up with your favorite content.
@@ -3,7 +3,7 @@ title: "Notebooks"
description: These encrypted note-taking apps let you keep track of your notes without giving them to a third party.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
Keep track of your notes and journals without giving them to a third party.
@@ -105,7 +105,7 @@ Cryptee is a PWA, which means that it works seamlessly across all modern devices
### Org-mode
**Org-mode** is a [major mode](https://gnu.org/software/emacs/manual/html_node/elisp/Major-Modes.html) for GNU Emacs. Org-mode is for keeping notes, maintaining to-do lists, planning projects, and authoring documents with a fast and effective plain-text system. File synchronization is possible with tools like [Syncthing](../file-sharing/_index.md#syncthing-p2p).
**Org-mode** is a [major mode](https://gnu.org/software/emacs/manual/html_node/elisp/Major-Modes.html) for GNU Emacs. Org-mode is for keeping notes, maintaining to-do lists, planning projects, and authoring documents with a fast and effective plain-text system. File synchronization is possible with tools like [Syncthing](../file-sharing/index.md#syncthing-p2p).
{{< cards >}}
{{< card link="https://orgmode.org" title="Homepage" icon="home" >}}
@@ -3,7 +3,7 @@ title: "Office Suites"
description: These office suites offer their full functionality without an account and can be used offline.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
<div class="pg-card-logos">
{{< cards >}}
@@ -3,7 +3,7 @@ title: "Pastebins"
description: These tools allow you to have full control of any pasted data you share to other parties.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/_index.md#privacy-from-service-providers)
[{{< badge content="Service Providers" color="indigo" >}}](../../../wiki/basics/common-threats/index.md#privacy-from-service-providers)
<div class="pg-card-logos">
{{< cards >}}
@@ -3,8 +3,8 @@ title: Social Networks
description: Find a new social network that doesnt pry into your data or monetize your profile.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/_index.md#avoiding-censorship)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/index.md#avoiding-censorship)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
<div class="pg-card-logos">
{{< cards >}}
@@ -19,7 +19,7 @@ A growing problem among social media platforms is censorship in two different fo
The social networks we recommend solve the issue of censorship by operating atop an open and decentralized social networking protocol. They also don't require an account merely to view publicly available content.
You should note that **no** social networks are appropriate for private or sensitive communications. For chatting directly with others, you should use a recommended [instant messenger](../../services/messengers/_index.md) with strong end-to-end encryption, and only use direct messages on social media in order to establish a more private and secure chat platform with your contacts.
You should note that **no** social networks are appropriate for private or sensitive communications. For chatting directly with others, you should use a recommended [instant messenger](../../services/messengers/index.md) with strong end-to-end encryption, and only use direct messages on social media in order to establish a more private and secure chat platform with your contacts.
## Decentralization
@@ -183,8 +183,8 @@ With this setting enabled, unverified users (i.e., those who have not used the *
- Must be free and open-source software.
- Must use a federated protocol to communicate with other instances of the social networking software.
- Must not have non-technical restrictions on who can be federated with.
- Must be usable within a standard [web browser](../desktop-browsers/_index.md).
- Must be usable within a standard [web browser](../desktop-browsers/index.md).
- Must make public content accessible to visitors without an account.
- Must allow you to limit who can follow your profile.
- Must allow you to post content visible only to your followers.
- Must support modern web application security standards/features (including [multifactor authentication](../multi-factor-authentication/_index.md)).
- Must support modern web application security standards/features (including [multifactor authentication](../multi-factor-authentication/index.md)).
@@ -3,26 +3,26 @@ title: "Tor Browser"
description: Protect your internet browsing from prying eyes by using the Tor network, a secure network which circumvents censorship.
---
<small>Protects against the following threat(s):</small>
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/_index.md#surveillance-as-a-business-model)
[{{< badge content="Mass Surveillance" color="blue" >}}](../../../wiki/basics/common-threats/_index.md#mass-surveillance-programs)
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/_index.md#avoiding-censorship)
[{{< badge content="Surveillance Capitalism" color="purple" >}}](../../../wiki/basics/common-threats/index.md#surveillance-as-a-business-model)
[{{< badge content="Mass Surveillance" color="blue" >}}](../../../wiki/basics/common-threats/index.md#mass-surveillance-programs)
[{{< badge content="Censorship" >}}](../../../wiki/basics/common-threats/index.md#avoiding-censorship)
**Tor** is a group of volunteer-operated servers that allows you to connect for free and improve your privacy and security on the Internet. Individuals and organizations can also share information over the Tor network with ".onion hidden services" without compromising their privacy. Because Tor traffic is difficult to block and trace, Tor is an effective censorship circumvention tool.
[Detailed Tor Overview :material-arrow-right-drop-circle:](../../../wiki/advanced/tor-overview/_index.md)
[Detailed Tor Overview :material-arrow-right-drop-circle:](../../../wiki/advanced/tor-overview/index.md)
{ .md-button .md-button--primary }
[:material-movie-open-play-outline: Video: Why You Need Tor](https://www.privacyguides.org/videos/2025/03/02/why-you-need-tor)
{ .md-button }
> [!TIP]
> Before connecting to Tor, please ensure you've read our [overview](../../../wiki/advanced/tor-overview/_index.md) on what Tor is and how to connect to it safely. We often recommend connecting to Tor through a trusted [VPN provider](../../services/vpn/_index.md), but you have to do so **properly** to avoid decreasing your anonymity.
> Before connecting to Tor, please ensure you've read our [overview](../../../wiki/advanced/tor-overview/index.md) on what Tor is and how to connect to it safely. We often recommend connecting to Tor through a trusted [VPN provider](../../services/vpn/index.md), but you have to do so **properly** to avoid decreasing your anonymity.
There are a variety of ways to connect to the Tor network from your device, the most commonly used being the **Tor Browser**, a fork of Firefox designed for [:material-incognito: anonymous](../../../wiki/basics/common-threats/_index.md#anonymity-vs-privacy){ .pg-purple } browsing for desktop computers and Android.
There are a variety of ways to connect to the Tor network from your device, the most commonly used being the **Tor Browser**, a fork of Firefox designed for [:material-incognito: anonymous](../../../wiki/basics/common-threats/index.md#anonymity-vs-privacy){ .pg-purple } browsing for desktop computers and Android.
Some of these apps are better than others; making a determination comes down to your threat model. If you are a casual Tor user who is not worried about your ISP collecting evidence against you, using mobile browser apps like [Onion Browser](#onion-browser-ios) to access the Tor network is probably fine. Increasing the number of people who use Tor on an everyday basis helps reduce the bad stigma of Tor, and lowers the quality of "lists of Tor users" that ISPs and governments may compile.
If more complete anonymity is paramount to your situation, you should **only** be using the desktop Tor Browser client, ideally in a [Whonix](../../os/desktop/_index.md#whonix) + [Qubes](../../os/desktop/_index.md#qubes-os) configuration. Mobile browsers are less common on Tor (and more fingerprintable as a result), and other configurations are not as rigorously tested against deanonymization.
If more complete anonymity is paramount to your situation, you should **only** be using the desktop Tor Browser client, ideally in a [Whonix](../../os/desktop/index.md#whonix) + [Qubes](../../os/desktop/index.md#qubes-os) configuration. Mobile browsers are less common on Tor (and more fingerprintable as a result), and other configurations are not as rigorously tested against deanonymization.
<div class="pg-card-logos">
{{< cards >}}
@@ -51,7 +51,7 @@ If more complete anonymity is paramount to your situation, you should **only** b
The Tor Browser is designed to prevent fingerprinting, or identifying you based on your browser configuration. Therefore, it is imperative that you do **not** modify the browser beyond the default [security levels](https://tb-manual.torproject.org/security-settings). When modifying the security level setting, you **must** always restart the browser before continuing to use it. Otherwise, [the security settings may not be fully applied](https://www.privacyguides.org/articles/2025/05/02/tor-security-slider-flaw), putting you at a higher risk of fingerprinting and exploits than you may expect based on the setting chosen.
In addition to installing Tor Browser on your computer directly, there are also operating systems designed specifically to connect to the Tor network such as [Whonix](../../os/desktop/_index.md#whonix) on [Qubes OS](../../os/desktop/_index.md#qubes-os), which provide even greater security and protections than the standard Tor Browser alone.
In addition to installing Tor Browser on your computer directly, there are also operating systems designed specifically to connect to the Tor network such as [Whonix](../../os/desktop/index.md#whonix) on [Qubes OS](../../os/desktop/index.md#qubes-os), which provide even greater security and protections than the standard Tor Browser alone.
## Onion Browser (iOS)
@@ -68,4 +68,4 @@ In addition to installing Tor Browser on your computer directly, there are also
Onion Browser does not provide the same levels of privacy protections as Tor Browser does on desktop platforms. For casual use it is a perfectly fine way to access hidden services, but if you're concerned about being traced or monitored by advanced adversaries you should not rely on this as an anonymity tool.
[Notably](https://github.com/privacyguides/privacyguides.org/issues/2929), Onion Browser does not *guarantee* all requests go through Tor. When using the built-in version of Tor, [your real IP **will** be leaked via WebRTC and audio/video streams](https://onionbrowser.com/faqs) due to limitations of WebKit. It is *safer* to use Onion Browser alongside [Orbot](../../advanced/alternative-networks/_index.md#orbot), but this still comes with some limitations on iOS.
[Notably](https://github.com/privacyguides/privacyguides.org/issues/2929), Onion Browser does not *guarantee* all requests go through Tor. When using the built-in version of Tor, [your real IP **will** be leaked via WebRTC and audio/video streams](https://onionbrowser.com/faqs) due to limitations of WebKit. It is *safer* to use Onion Browser alongside [Orbot](../../advanced/alternative-networks/index.md#orbot), but this still comes with some limitations on iOS.