DNSCloak - An open-source DNSCrypt and DoH client for iOS by the Center for the Cultivation of Technology gemeinnuetzige GmbH.
- Nebulo - An open-source application for Android supporting DoH and DoT. It also supports caching DNS responses and locally logging DNS queries.
-
-
- Local DNS servers:
-
- - Stubby - An open-source application for Linux, macOS, and Windows that acts as a local DNS Privacy stub resolver using DoT.
- - Unbound - a validating, recursive, caching DNS resolver. It can also be ran network-wide and has supported DNS-over-TLS since version 1.7.3.
-
-
-
- Network wide DNS servers:
-
- - Pi-hole - A network-wide DNS server mainly for the Raspberry Pi. Blocks ads, tracking, and malicious domains for all devices on your network.
- - NoTrack - A network-wide DNS server like Pi-hole for blocking ads, tracking, and malicious domains.
-
-
- Further reading:
-
-
-
+DNSCrypt
+
+ With an open specification, DNSCrypt is an older, yet robust method for encrypting DNS.
+
+
+Anonymized DNSCrypt
+
+ A lightweight protocol that hides the client IP address by using pre-configured relays to forward encrypted DNS data. This is a relatively new protocol created in 2019 currently only supported by dnscrypt-proxy and a limited number of relays.
+
diff --git a/_includes/sections/email-alternatives.html b/_includes/sections/email-alternatives.html
deleted file mode 100644
index fa83fe6d..00000000
--- a/_includes/sections/email-alternatives.html
+++ /dev/null
@@ -1,34 +0,0 @@
- Email Alternatives
-
-{% include cardv2.html
-title="Bitmessage"
-image="/assets/img/tools/Bitmessage.png"
-description="Bitmessage is a P2P communications protocol used to send encrypted messages to another person or to many subscribers. It is decentralized and trustless,
-meaning that you need not inherently trust any entities like root certificate authorities. It uses strong authentication which means that the sender of a message cannot be spoofed, and it aims to hide \"non-content\" data."
-website="https://bitmessage.org/"
-forum="https://forum.privacytools.io/t/discussion-bitmessage/661"
-github="https://github.com/Bitmessage/PyBitmessage"
-windows="https://github.com/Bitmessage/PyBitmessage/releases"
-mac="https://github.com/Bitmessage/PyBitmessage/releases"
-linux="https://repology.org/project/pybitmessage/versions"
-%}
-
-{% include cardv2.html
-title="RetroShare"
-image="/assets/img/tools/RetroShare.png"
-description="Retroshare creates encrypted connections to your friends. Nobody can spy on you. Retroshare is completely decentralized. This means there are no central servers. It is entirely open-source and free. There are no costs, no ads, and no Terms of Service."
-website="https://retroshare.cc/"
-forum="https://forum.privacytools.io/t/discussion-retroshare/662"
-github="https://github.com/RetroShare/RetroShare"
-windows="https://retroshare.cc/downloads.html#windows"
-mac="https://retroshare.cc/downloads.html#mac"
-linux="https://retroshare.cc/downloads.html#gnulinux"
-freebsd="https://retroshare.cc/downloads.html#freebsd"
-%}
-
-
-Worth Mentioning
-
-
- - I2P-Bote - End-to-end encrypted decentralized mail system within the I2P network.
-
diff --git a/_includes/sections/email-clients.html b/_includes/sections/email-clients.html
index f1f8f814..3b79f346 100644
--- a/_includes/sections/email-clients.html
+++ b/_includes/sections/email-clients.html
@@ -1,50 +1,99 @@
- Email Clients
+ Desktop Email Clients
{% include cardv2.html
-title="Thunderbird"
-image="/assets/img/tools/Thunderbird.png"
-description="Thunderbird is a free, open source, cross-platform email, newsgroup, news feed, and chat (XMPP, IRC, Twitter) client developed by community, previously by the Mozilla Foundation."
-website="https://www.thunderbird.net/"
-forum="https://forum.privacytools.io/t/discussion-thunderbird/659"
-source="https://hg.mozilla.org/comm-central/"
-windows="https://www.thunderbird.net/en-US/"
-mac="https://www.thunderbird.net/en-US/"
-linux="https://www.thunderbird.net/en-US/"
-freebsd="https://www.freshports.org/mail/thunderbird/"
-openbsd="http://openports.se/mail/mozilla-thunderbird"
-netbsd="http://pkgsrc.se/mail/thunderbird"
+ title="Thunderbird"
+ image="/assets/img/svg/3rd-party/thunderbird.svg"
+ description="Thunderbird is a free, open source, cross-platform email, newsgroup, news feed, and chat (XMPP, IRC, Twitter) client developed by the Thunderbird community, and previously by the Mozilla Foundation."
+ website="https://www.thunderbird.net/"
+ privacy-policy="https://www.mozilla.org/privacy/thunderbird/"
+ forum="https://forum.privacytools.io/t/discussion-thunderbird/659"
+ source="https://hg.mozilla.org/comm-central/"
+ windows="https://www.thunderbird.net"
+ mac="https://www.thunderbird.net"
+ linux="https://www.thunderbird.net/"
+ freebsd="https://www.freshports.org/mail/thunderbird/"
+ openbsd="http://openports.se/mail/mozilla-thunderbird"
+ netbsd="http://pkgsrc.se/mail/thunderbird"
%}
{% include cardv2.html
-title="Claws Mail"
-image="/assets/img/tools/Claws-Mail.png"
-description="Claws Mail is a free and open source, GTK-based email and news client. It offers easy configuration and an abundance of features. It is included with Gpg4win, an encryption suite for Windows."
-website="https://www.claws-mail.org/"
-forum="https://forum.privacytools.io/t/discussion-claws-mail/660"
-git="https://git.claws-mail.org/"
-windows="https://www.claws-mail.org/win32/"
-mac="https://www.claws-mail.org/faq/index.php/Installation_and_Configuration#What_do_I_need_to_compile_Claws_Mail.3F"
-linux="https://www.claws-mail.org/downloads.php?section=downloads"
-freebsd="https://www.freshports.org/mail/claws-mail/"
-openbsd="http://openports.se/mail/claws-mail"
-netbsd="http://pkgsrc.se/mail/claws-mail"
+ title="Mailpile"
+ image="/assets/img/svg/3rd-party/mailpile.svg"
+ description="Mailpile is a free, community funded, open source email client with user-friendly encryption and privacy features."
+ website="https://www.mailpile.is/"
+ privacy-policy="https://www.mailpile.is/privacy.html"
+ tor="clgs64523yi2bkhz.onion"
+ forum="https://forum.privacytools.io/t/"
+ github="https://github.com/mailpile/Mailpile"
+ linux="https://www.mailpile.is/download/linux.html"
%}
-
-Privacy Email Tools
-
-
- - gpg4usb - A very easy to use and small portable editor to encrypt and decrypt any text-message or -file. For Windows and Linux. GPG tutorial.
- - Mailvelope - A browser extension that enables the exchange of encrypted emails following the OpenPGP encryption standard.
- - Enigmail - A security extension to Thunderbird and Seamonkey. It enables you to write and receive email messages signed and/or encrypted with the OpenPGP standard.
- - TorBirdy - TorBirdy configures Thunderbird to make connections over the Tor anonymity network. This extension is in beta and should be considered experimental.
- - Email Privacy Tester - This tool will send an Email to your address and perform privacy-related tests.
-
+{% include cardv2.html
+ title="Mailvelope"
+ image="/assets/img/svg/3rd-party/mailvelope.svg"
+ description="Mailvelope is a browser extension that enables the exchange of encrypted emails following the OpenPGP encryption standard."
+ website="https://www.mailvelope.com/en"
+ privacy-policy="https://www.mailvelope.com/en/privacy-policy"
+ forum="https://forum.privacytools.io/t/"
+ github="https://github.com/mailvelope/mailvelope"
+ firefox="https://addons.mozilla.org/firefox/addon/mailvelope/"
+ chrome="https://chrome.google.com/webstore/detail/mailvelope/kajibbejlbohfaggdiogboambcijhkke?hl"
+ edge="https://microsoftedge.microsoft.com/addons/detail/mailvelope/dgcbddhdhjppfdfjpciagmmibadmoapc"
+%}
Worth Mentioning
- - K-9 Mail - An independent mail application for Android. It supports both POP3 and IMAP mailboxes, but only supports push mail for IMAP.
- - GNU Privacy Guard - Email Encryption. GnuPG is a GPL Licensed alternative to the PGP suite of cryptographic software. Tutorial. Use GPGTools for macOS.
- - Mailpile (Beta) - A modern, fast web-mail client with user-friendly encryption and privacy features.
+ - NeoMutt - NeoMutt is an open-source command line mail reader (or MUA) for Linux and BSD. It’s a fork of Mutt with added features.
+
+
+
+ Mobile Email Clients
+
+ Android Email Clients
+
+{% include cardv2.html
+ title="FairEmail"
+ image="/assets/img/svg/3rd-party/fairemail.svg"
+ description="FairEmail is a minimal, open source email app, using open standards (IMAP, SMTP, OpenPGP) with a low data and battery usage."
+ website="https://email.faircode.eu/"
+ privacy-policy="https://github.com/M66B/FairEmail/blob/master/PRIVACY.md"
+ forum="https://forum.privacytools.io/t/"
+ github="https://github.com/M66B/FairEmail"
+ fdroid="https://f-droid.org/en/packages/eu.faircode.email/"
+ googleplay="https://play.google.com/store/apps/details?id=eu.faircode.email"
+%}
+
+{% include cardv2.html
+ title="K-9 Mail"
+ image="/assets/img/svg/3rd-party/k9mail.svg"
+ description="K-9 Mail is an independent mail application that supports both POP3 and IMAP mailboxes, but only supports push mail for IMAP."
+ website="https://k9mail.app/"
+ privacy-policy="https://k9mail.app/privacy"
+ forum="https://forum.privacytools.io/t/"
+ github="https://github.com/k9mail"
+ fdroid="https://f-droid.org/packages/com.fsck.k9/"
+ googleplay="https://play.google.com/store/apps/details?id=com.fsck.k9"
+%}
+
+ iOS Email Clients
+
+{% include cardv2.html
+ title="Canary Mail"
+ image="/assets/img/svg/3rd-party/canarymail.svg"
+ labels="color==warning::link==https://canarymail.io/faq.html::text==Closed source::tooltip==The source programming code for Canary Mail is not available. Canary Mail is a proprietary application."
+ description="Canary Mail is a paid email client designed to make end-to-end encryption seamless with security features such as a biometric app lock."
+ website="https://canarymail.io/"
+ privacy-policy="https://canarymail.io/privacy.html"
+ forum="https://forum.privacytools.io/t/"
+ ios="https://apps.apple.com/us/app/canary-mail/id1236045954"
+%}
+
+
+Worth Mentioning
+
+
+ - Letterbox - Letterbox is a free open-source mail client for iOS made as a part of an ongoing research project at the Freie Universität Berlin, Germany.
+
+
diff --git a/_includes/sections/email-providers.html b/_includes/sections/email-providers.html
index a0e9b178..31573a39 100644
--- a/_includes/sections/email-providers.html
+++ b/_includes/sections/email-providers.html
@@ -1,270 +1,237 @@
- Privacy-Conscious Email Providers - No Affiliates
+ Recommended Email Services
- All providers listed here are operating outside the US and support SMTP TLS. The table is sortable.
+ Our recommended providers operate outside of the US, adopt modern email technology, and meet our other criteria for listing. We also have a detailed comparison table of the below providers on the wiki.
-
-
-
- | Email Provider |
- Website |
- Since |
- Jurisdiction |
- Storage |
- Yearly Price |
- Bitcoin |
- Encryption |
- Own Domain |
-
-
+
-
+
+
+ 
+
+
+ ProtonMail {% include badge.html color="info" text="Free" %}
+ ProtonMail.com is an email service with a focus on privacy, encryption, security, and ease of use. They have been in operation since 2013. ProtonMail is based in Genève, Switzerland. Accounts start with 500 MB storage with their free plan.
-
-
- 
- |
-
- 
- |
- 2015 |
-
-
- Netherlands
-
- |
- 1 GB |
- Free |
- Accepted |
- Built-in |
- Yes |
-
+ Free accounts have some limitations and do not allow the use of the ProtonMail Bridge, which is required to use a recommended email client (e.g. Thunderbird) or to search email by body text. Paid accounts are available starting at €48/y which include features like ProtonMail Bridge, additional storage, custom domain support, and more. The webmail and mobile apps can only search To:, From:, Date: and Subject: (this is likely to change when v4.0 of ProtonMail is released).
-
-
- 
- |
-
-
- |
- 2010 |
-
-
- Switzerland
-
- |
- 2 GB |
- $ 60 |
- Accepted |
- No |
- Yes |
-
+ {% include badge.html color="success" text="Domains and Aliases" %}
+ Paid ProtonMail users can use their own domain with the service. Catch-all addresses are supported with custom domains for Professional and Visionary plans. ProtonMail also supports subaddressing, which is useful for users who don't want to purchase a domain.
-
-
- 
+ {% include badge.html color="success" text="Payment Methods" %}
+ ProtonMail accepts Bitcoin in addition to accepting credit/debit cards and PayPal.
- |
-
-
- |
- 2014 |
-
-
- Germany
-
- |
- 2 GB |
- 12 € |
- Accepted |
- Built-in |
- Yes |
-
+ {% include badge.html color="success" text="Account Security" %}
+ ProtonMail supports TOTP two factor authentication only. The use of a U2F security key is not yet supported. ProtonMail is planning to implement U2F upon completion of their Single Sign On (SSO) code.
-
-
- 
- |
-
-
- |
- 2013 |
-
-
- Belgium
-
- |
- 500 MB |
- Free |
- Accepted |
- Built-in |
- Yes |
-
+ {% include badge.html color="success" text="Data Security" %}
+ ProtonMail has zero access encryption at rest for your emails, address book contacts, and calendars. This means the messages and other data stored in your account are only readable by you.
-
-
- 
- |
-
-
- |
- 2003 |
-
-
- Switzerland
-
- |
- 1 GB |
- $ 49.95 |
- Accepted |
- Built-in |
- Yes |
-
+ {% include badge.html color="success" text="Email Encryption" %}
+ ProtonMail has integrated OpenPGP encryption in their webmail. Emails to other ProtonMail users are encrypted automatically, and encryption to non-ProtonMail users with an OpenPGP key can be enabled easily in your account settings. They also allow you to encrypt messages to non-ProtonMail users without the need for them to sign up for a ProtonMail account or use software like OpenPGP.
+ ProtonMail also supports the discovery of public keys via HTTP from their Web Key Directory (WKD). This allows users outside of ProtonMail to find the OpenPGP keys of ProtonMail users easily, for cross-provider E2EE.
-
-
- 
- |
-
-
- |
- 2009 |
-
-
- Germany
-
- |
- 2 GB |
- 12 € |
- No |
- Built-in |
- No |
-
+ {% include badge.html color="warning" text=".onion Service" %}
+ ProtonMail's login and services are accessible over Tor, protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
-
-
- 
- |
-
-
- 
- |
- 2013 |
-
-
- Switzerland
-
- |
- 500 MB |
- Free |
- Accepted |
- Built-in |
- Yes |
-
+ {% include badge.html color="info" text="Extra Functionality" %}
+ ProtonMail offers a "Visionary" account for €24/Month, which also enables access to ProtonVPN in addition to providing multiple accounts, domains, aliases, and extra storage.
+
+
+
+ 
+
+
+ Mailbox.org {% include badge.html color="info" text="€12/y" %}
+ Mailbox.org is an email service with a focus on being secure, ad-free, and privately powered by 100% eco-friendly energy. They have been in operation since 2014. Mailbox.org is based in Berlin, Germany. Accounts start with 2 GB of storage, which can be upgraded as needed.
-
-
- 
+ {% include badge.html color="success" text="Domains and Aliases" %}
+ Mailbox.org lets users use their own domain and they support catch-all addresses. Mailbox.org also supports subaddressing, which is useful for users who don't want to purchase a domain.
- |
-
-
- |
- 1999 |
-
-
- Norway
-
- |
- 1 GB |
- $ 19.95 |
- Accepted |
- No |
- Yes |
-
+ {% include badge.html color="warning" text="Payment Methods" %}
+ Mailbox.org doesn't accept Bitcoin or any other cryptocurrencies as a result of their payment processor BitPay suspending operations in Germany. However, they do accept Cash by mail, cash payment to bank account, bank transfer, credit card, PayPal and couple of German-specific processors: paydirekt and Sofortüberweisung.
-
-
- 
- |
-
-
- |
- 2015 |
-
-
- Netherlands
-
- |
- 25 GB |
- 29 € |
- No |
- No |
- Yes |
-
+ {% include badge.html color="success" text="Account Security" %}
+ Mailbox.org supports two factor authentication for their webmail only. You can use either TOTP or a Yubikey via the Yubicloud. Web standards such as U2F and WebAuthn are not yet supported.
-
-
- 
- |
-
-
- |
- 2014 |
-
-
- Netherlands
-
- |
- 10 GB |
- $ 59.95 |
- Accepted |
- Built-in |
- Yes |
-
+ {% include badge.html color="warning" text="Data Security" %}
+ Mailbox.org allows for encryption of incoming mail using their encrypted mailbox. New messages that you receive will then be immediately encrypted with your public key.
+ However, Open-Exchange, the software platform used by Mailbox.org, does not support the encryption of your address book and calendar. A standalone option may be more appropriate for that information.
-
-
- 
- |
-
-
- |
- 2011 |
-
-
- Germany
-
- |
- 1 GB |
- Free |
- No |
- Built-in |
- Yes |
-
+ {% include badge.html color="success" text="Email Encryption" %}
+ Mailbox.org has integrated encryption in their webmail, which simplifies sending messages to users with public OpenPGP keys. They also allow remote recipients to decrypt an email on Mailbox.org's servers. This feature is useful when the remote recipient does not have OpenPGP and cannot decrypt a copy of the email in their own mailbox.
+ Mailbox.org also supports the discovery of public keys via HTTP from their Web Key Directory (WKD). This allows users outside of Mailbox.org to find the OpenPGP keys of Mailbox.org users easily, for cross-provider E2EE.
-
-
+ {% include badge.html color="warning" text=".onion Service" %}
+ You can access your Mailbox.org account via IMAP/SMTP using their .onion service. However, their webmail interface cannot be accessed via their .onion service, and users may experience TLS certificate errors.
+
+ {% include badge.html color="info" text="Extra Functionality" %}
+ All accounts come with limited cloud storage that can be encrypted. Mailbox.org also offers the alias @secure.mailbox.org, which enforces the TLS encryption on the connection between mail servers, otherwise the message will not be sent at all. Mailbox.org also supports Exchange ActiveSync in addition to standard access protocols like IMAP and POP3.
+
+
+ 
+
+
+ Posteo {% include badge.html color="info" text="€12/y" %}
+ Posteo.de is an email provider that focuses on anonymous, secure, and private email. Their servers are powered by 100% sustainable energy. They have been in operation since 2009. Posteo is based in Germany and has a free 14-day trial. Posteo comes with 2 GB for the monthly cost and an extra gigabyte can be purchased for €0.25 per month.
+
+ {% include badge.html color="warning" text="Domains and Aliases" %}
+ Posteo does not allow the use of custom domains, however users may still make use of subaddressing.
+
+ {% include badge.html color="warning" text="Payment Methods" %}
+ Posteo does not accept Bitcoin or other cryptocurrencies as a form of payment, however they do accept cash-by-mail. They also accept credit/debit cards, bank transfers, and PayPal, and remove PII (personally identifiable information) that they receive in connection with these payment methods.
+
+ {% include badge.html color="success" text="Account Security" %}
+ Posteo supports two factor authentication for their webmail only. You can use either TOTP a Yubikey with TOTP. Web standards such as U2F and WebAuthn are not yet supported.
+
+ {% include badge.html color="warning" text="Data Security" %}
+ Posteo has zero access encryption for email storage. This means the messages stored in your account are only readable by you.
+ Posteo also supports the encryption of your address book contacts and calendars at rest. However, Posteo still uses standard CalDAV and CardDAV for calendars and contacts. These protocols do not support E2EE (End-To-End Encryption). A standalone option may be more appropiate.
+
+ {% include badge.html color="success" text="Email Encryption" %}
+ Posteo has integrated encryption in their webmail, which simplifies sending messages to users with public OpenPGP keys. They also support the discovery of public keys via HTTP from their Web Key Directory (WKD). This allows users outside of Posteo to find the OpenPGP keys of Posteo users easily, for cross-provider E2EE.
+
+ {% include badge.html color="danger" text=".onion Service" %}
+ Posteo does not operate a .onion service.
+
+ {% include badge.html color="info" text="Extra Functionality" %}
+ Posteo allows users to set up their own mailing lists. Each account can create one list for free.
+
+
+
+ 
+
+
+ Disroot {% include badge.html color="info" text="Free" %}
+ Disroot offers email amongst other services. The service is maintained by volunteers and its community. They have been in operation since 2015. Disroot is based in Amsterdam. Disroot is free and uses open source software such as Rainloop to provide service. Users support the service through donations and buying extra storage. The mailbox limit is 1 GB, but extra storage can be purchased 0.15€ per GB per month paid yearly.
+
+ {% include badge.html color="success" text="Domains and Aliases" %}
+ Disroot lets users use their own domain. They have aliases, however you must manually apply for them.
+
+ {% include badge.html color="success" text="Payment Methods" %}
+ Disroot accepts Bitcoin and Faircoin as payment methods. They also accept PayPal, direct bank deposit, and Patreon payments. Disroot is a not-for-profit organization that also accepts donations through Liberapay, Flattr, and Monero, but these payment methods cannot be used to purchase services.
+
+ {% include badge.html color="success" text="Account Security" %}
+ Disroot supports TOTP two factor authentication for webmail only. They do not allow U2F security key authentication.
+
+ {% include badge.html color="warning" text="Data Security" %}
+ Disroot uses full disk encryption. However, it doesn't appear to be "zero access", meaning it is technically possible for them to decrypt the data they have.
+ Disroot also uses the standard CalDAV and CardDAV protocols for calendars and contacts, which do not support E2EE. A standalone option may be more appropriate.
+
+ {% include badge.html color="success" text="Email Encryption" %}
+ Disroot allows for encrypted emails to be sent from their webmail application using OpenPGP. However, Disroot has not integrated a Web Key Directory (WKD) for users on their platform.
+
+ {% include badge.html color="danger" text=".onion Service" %}
+ Disroot does not operate a .onion service.
+
+ {% include badge.html color="info" text="Extra Functionality" %}
+ They offer other services such as NextCloud, XMPP Chat, Etherpad, Ethercalc, Pastebin, Online polls and a Gitea instance. They also have an app available in F-Droid.
+
+
+
+ 
+
+
+ Tutanota {% include badge.html color="info" text="Free" %}
+ Tutanota.com is an email service with a focus on security and privacy through the use of encryption. Tutanota has been in operation since 2011 and is based in Hanover, Germany. Accounts start with 1GB storage with their free plan.
+ Tutanota doesn't allow the use of third-party email clients. There are plans to allow Tutanota pull email from external email accounts using the IMAP protocol. Email import is currently not possible.
+ Emails can be exported individually or by bulk selection. Tutanota does not allow for subfolders as you might expect with other email providers.
+ Tutanota is working on a desktop client and they have an app available in F-Droid. They also have their app in conventional stores such as App Store on iOS and Google Play for Android.
+
+ {% include badge.html color="success" text="Domains and Aliases" %}
+ Paid Tutanota accounts can use up to 5 aliases and custom domains. Tutanota doesn't allow for subaddressing (plus addresses), but you can use a catch-all with a custom domain.
+
+ {% include badge.html color="danger" text="Payment Methods" %}
+ Tutanota accepts only credit cards and PayPal.
+
+ {% include badge.html color="success" text="Account Security" %}
+ Tutanota supports two factor authentication. Users can either use TOTP or U2F. U2F support is not yet available on Android.
+
+ {% include badge.html color="success" text="Data Security" %}
+ Tutanota has zero access encryption at rest for your emails, address book contacts, and calendars. This means the messages and other data stored in your account are only readable by you.
+
+ {% include badge.html color="warning" text="Email Encryption" %}
+ Tutanota does not use OpenPGP. Tutanota users can only receive encrypted emails when external users send them through a temporary Tutanota mailbox.
+ Tutanota does have plans to support AutoCrypt. This would allow for external users to send encrypted emails to Tutanota users as long as their email client supports the AutoCrypt headers.
+
+ {% include badge.html color="danger" text=".onion Service" %}
+ Tutanota does not operate a .onion service but may consider it in the future.
+
+ {% include badge.html color="info" text="Extra Functionality" %}
+ Tutanota offers the business version of Tutanota to non-profit organizations for free or with a heavy discount.
+
+ Tutanota also has a business feature called Secure Connect. This ensures customer contact to the business uses E2EE. The feature costs €240/y.
+
+
+
+ 
+
+
+ StartMail {% include badge.html color="info" text="Personal USD $59.95/y" %}
+ StartMail.com is an email service with a focus on security and privacy through the use of standard OpenPGP encryption. StartMail has been in operation since 2014 and is based in Boulevard 11, Zeist Netherlands. Accounts start with 10GB. They offer a 30-day trial.
+
+ {% include badge.html color="success" text="Domains and Aliases" %}
+ Personal accounts can use Custom or Generated aliases. Business accounts can use Domain aliases.
+
+ {% include badge.html color="warning" text="Payment Methods" %}
+ StartMail accepts Visa, MasterCard, American Express and Paypal. StartMail also has other payment options such as Bitcoin (currently only for Personal accounts) and SEPA Direct Debit for accounts older than a year.
+
+ {% include badge.html color="success" text="Account Security" %}
+ StartMail supports TOTP two factor authentication for webmail only. They do not allow U2F security key authentication.
+
+ {% include badge.html color="warning" text="Data Security" %}
+ StartMail has zero access encryption at rest, using their "user vault" system. When a user logs in, the vault is opened, and the email is then moved to the vault out of the queue where it is decrypted by the corresponding private key.
+
+ StartMail supports importing contacts however, they are only accessible in the webmail and not through protocols such as CalDAV. Contacts are also not stored using zero knowledge encryption, so a standalone option may be more appropriate.
+
+ {% include badge.html color="success" text="Email Encryption" %}
+ StartMail has integrated encryption in their webmail, which simplifies sending messages to users with public OpenPGP keys.
+
+ {% include badge.html color="danger" text=".onion Service" %}
+ StartMail does not operate a .onion service.
+
+ {% include badge.html color="info" text="Extra Functionality" %}
+ StartMail allows for proxying of images within emails. If a user allows the remote image to be loaded, the sender won't know what the user's IP address is.
+
+ Interesting Email Providers Under Development
-
-
- - Confidant Mail - An open-source non-SMTP cryptographic email system optimized for large file attachments. It is a secure and spam-resistant alternative to regular email and online file drop services. It
- uses GNU Privacy Guard (GPG) for content encryption and authentication, and TLS 1.2 with ephemeral keys for transport encryption.
- Become Your Own Email Provider with Mail-in-a-Box
-
-Take it a step further and get control of your email with this easy-to-deploy mail server in a box. Mail-in-a-Box lets you become your own mail service provider in a few easy steps. It's sort of like making your own Gmail, but one you control from top
-to bottom. Technically, Mail-in-a-Box turns a fresh cloud computer into a working mail server. But you don't need to be a technology expert to set it up. More: https://mailinabox.email/
-
-Related Information
-
-
- - Aging 'Privacy' Law Leaves Cloud E-Mail Open to Cops - Data stored in the cloud for longer than 6 months is considered abandoned and may be accessed by intelligence agencies without
- a warrant. Learning: Use an external email client like Thunderbird or Enigmail, download your emails and store them locally. Never leave them on the server.
- - With May First/Riseup Server Seizure, FBI Overreaches Yet Again
- - Autistici/Inventati server compromised - The cryptographic services offered by the Autistici/Inventati server have been compromised on 15th June 2004. It was discovered on 21st June 2005. One year
- later. During an enquiry on a single mailbox, the Postal Police may have tapped for a whole year every user's private communication going through the server autistici.org/inventati.org.
-
diff --git a/_includes/sections/email-warning.html b/_includes/sections/email-warning.html
new file mode 100644
index 00000000..ac524a13
--- /dev/null
+++ b/_includes/sections/email-warning.html
@@ -0,0 +1,10 @@
+
+
diff --git a/_includes/sections/file-encryption.html b/_includes/sections/file-encryption.html
index 96ec5f3f..3f8b10cc 100644
--- a/_includes/sections/file-encryption.html
+++ b/_includes/sections/file-encryption.html
@@ -7,7 +7,8 @@
{%
include cardv2.html
title="VeraCrypt - Disk Encryption"
- image="/assets/img/tools/VeraCrypt.png"
+ image="/assets/img/svg/3rd-party/veracrypt.svg"
+ image-dark="/assets/img/svg/3rd-party/veracrypt-dark.svg"
description="VeraCrypt is a source-available freeware utility used for on-the-fly encryption. It can create a virtual encrypted disk within a file or encrypt a partition or the entire storage device with pre-boot authentication. VeraCrypt is a fork of the discontinued TrueCrypt project. It was initially released on June 22, 2013. According to its developers, security improvements have been implemented and issues raised by the initial TrueCrypt code audit have been addressed."
website="https://veracrypt.fr/"
forum="https://forum.privacytools.io/t/discussion-veracrypt-file-encryption/1532"
@@ -20,9 +21,10 @@
{%
include cardv2.html
title="GNU Privacy Guard - Email Encryption"
- image="/assets/img/tools/GnuPG.png"
+ image="/assets/img/svg/3rd-party/gnupg.svg"
description="GnuPG is a GPL-licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP. Current versions of PGP (and Veridis' Filecrypt) are interoperable with GnuPG and other OpenPGP-compliant systems. GnuPG is a part of the Free Software Foundation's GNU software project, and has received major funding from the German government."
website="https://gnupg.org/"
+ privacy-policy="https://gnupg.org/privacy-policy.html"
forum="https://forum.privacytools.io/t/discussion-gnupg-file-encryption/1533"
git="https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git"
windows="https://gpg4win.org/download.html"
@@ -37,25 +39,33 @@
{%
include cardv2.html
- title="PeaZip - File Archive Encryption"
- image="/assets/img/tools/PeaZip.png"
- description="PeaZip is a free and open-source file manager and file archiver made by Giorgio Tani. It supports its native PEA archive format (featuring compression, multi volume split and flexible authenticated encryption and integrity check schemes) and other mainstream formats, with special focus on handling open formats. It also supports 180+ archive formats."
- website="http://www.peazip.org"
- forum="https://forum.privacytools.io/t/discussion-peazip-file-encryption/1534"
- source="https://osdn.net/projects/peazip"
- windows="https://www.peazip.org/peazip-64bit.html"
- linux="https://www.peazip.org/peazip-linux.html"
- freebsd="https://www.freshports.org/archivers/peazip/"
- openbsd="https://www.peazip.org/peazip-bsd.html"
- netbsd="https://www.peazip.org/peazip-bsd.html"
+ title="7 Zip"
+ image="/assets/img/svg/3rd-party/7zip.svg"
+ description='7-Zip is a free and open-source file archiver, a utility used to place groups of files within compressed containers. On Linux, MacOS etc. the command-line tool p7zip is used and integrates into various interfaces such as FileRoller, Xarchiver, Ark.'
+ website="https://7-zip.org"
+ forum="https://forum.privacytools.io/t/discussion-7-zip/3024"
+ source="https://sourceforge.net/projects/sevenzip/files/"
+ windows="https://7-zip.org/download.html"
+ linux="https://sourceforge.net/projects/p7zip/files"
+ freebsd="https://www.freshports.org/archivers/p7zip"
+ openbsd="https://sourceforge.net/projects/p7zip"
+ netbsd="https://sourceforge.net/projects/p7zip"
%}
Worth Mentioning
- - Cryptomator - Free client-side AES encryption for your cloud files. Open-source software: No backdoors, no registration.
- - DiskCryptor - A full disk and partition encryption system for Windows including the ability to encrypt the partition and disk on which the OS is installed.
+ - Cryptomator - Free client-side AES encryption for your cloud files. Open source software: No backdoors, no registration.
- Linux Unified Key Setup (LUKS) - A full disk encryption system for Linux using dm-crypt as the disk encryption backend. Included by default in Ubuntu. Available for Windows and Linux.
- - Hat.sh - A cross-platform, serverless JavaScript web application that provides secure file encryption using the AES-256-GCM algorithm in your browser. It can also be downloaded and run offline.
- - Keka - A macOS-only, open-source file archiver with the ability to encrypt files.
+ - Tomb - A simple zsh script for making LUKS containers on the commandline.
+ - Hat.sh - A cross-platform, serverless JavaScript web application that provides secure file encryption using the AES-256-GCM algorithm in your browser. It can also be downloaded and run offline.
+ -
+ Kryptor - Free and open source file encryption software for Windows, macOS, and Linux.
+ {% include badge.html
+ color="warning"
+ icon="fas fa-exclamation-triangle"
+ text="Beta"
+ tooltip="As Kryptor is still in beta, it may not be stable."
+ %}
+
diff --git a/_includes/sections/file-sharing.html b/_includes/sections/file-sharing.html
index 35660d75..68336e02 100644
--- a/_includes/sections/file-sharing.html
+++ b/_includes/sections/file-sharing.html
@@ -1,49 +1,46 @@
File Sharing
{% include cardv2.html
-title="Firefox Send"
-image="/assets/img/tools/Firefox-Send.png"
-website="https://send.firefox.com/"
-description="Firefox Send uses end-to-end encryption to keep your data secure from the moment you share to the moment your file is opened. It also offers security controls that you can set. You can choose when your file link expires, the number of downloads, and whether to add an optional password for an extra layer of security."
-forum="https://forum.privacytools.io/t/discussion-firefox-send/755"
-github="https://github.com/mozilla/send"
-web="https://send.firefox.com/"
-googleplay="https://play.google.com/store/apps/details?id=org.mozilla.firefoxsend"
+ title="OnionShare"
+ image="/assets/img/svg/3rd-party/onionshare.svg"
+ website="https://onionshare.org/"
+ tor="http://lldan5gahapx5k7iafb3s4ikijc4ni7gx5iywdflkba5y2ezyg6sjgyd.onion/"
+ description="OnionShare is an open-source tool that lets you securely and anonymously share a file of any size. It works by starting a web server accessible as a Tor onion service, with an unguessable URL that you can share with the recipients to download or send files."
+ forum="https://forum.privacytools.io/t/discussion-onionshare/754"
+ github="https://github.com/micahflee/onionshare"
+ windows="https://onionshare.org/#downloads"
+ mac="https://onionshare.org/#downloads"
+ linux="https://onionshare.org/#downloads"
+ freebsd="https://www.freshports.org/www/onionshare/"
+ openbsd="http://openports.se/net/onionshare"
%}
{% include cardv2.html
-title="OnionShare"
-image="/assets/img/tools/OnionShare.png"
-website="https://onionshare.org/"
-tor="http://elx57ue5uyfplgva.onion/"
-description="OnionShare is an open-source tool that lets you securely and anonymously share a file of any size. It works by starting a web server, making it accessible as a Tor onion service, and generating an unguessable URL for you to share so that the recipients can access and download the files."
-forum="https://forum.privacytools.io/t/discussion-onionshare/754"
-github="https://github.com/micahflee/onionshare"
-windows="https://onionshare.org/#downloads"
-mac="https://onionshare.org/#downloads"
-linux="https://onionshare.org/#downloads"
-freebsd="https://www.freshports.org/www/onionshare/"
-openbsd="http://openports.se/net/onionshare"
-%}
-
-{% include cardv2.html
-title="Magic Wormhole"
-image="/assets/img/tools/Magic-Wormhole.png"
-website="https://magic-wormhole.readthedocs.io"
-description="Magic Wormhole is a package that provides a library and a command-line tool named wormhole, which makes it possible to get arbitrary-sized files and directories (or short pieces of text) from one computer to another. Their motto: \"Get things from one computer to another, safely.\""
-forum="https://forum.privacytools.io/t/discussion-magic-wormhole/756"
-github="https://github.com/warner/magic-wormhole"
-windows="https://magic-wormhole.readthedocs.io/en/latest/welcome.html#installation"
-mac="https://magic-wormhole.readthedocs.io/en/latest/welcome.html#installation"
-linux="https://magic-wormhole.readthedocs.io/en/latest/welcome.html#installation"
-freebsd="https://www.freshports.org/net/py-magic-wormhole/"
-openbsd="https://pypi.org/project/magic-wormhole/"
-netbsd="https://pypi.org/project/magic-wormhole/"
+ title="Magic Wormhole"
+ image="/assets/img/png/3rd-party/magic_wormhole.png"
+ website="https://magic-wormhole.readthedocs.io"
+ description="Magic Wormhole is a package that provides a library and a command-line tool named wormhole, which makes it possible to get arbitrary-sized files and directories (or short pieces of text) from one computer to another. Their motto: \"Get things from one computer to another, safely.\""
+ forum="https://forum.privacytools.io/t/discussion-magic-wormhole/756"
+ github="https://github.com/warner/magic-wormhole"
+ windows="https://magic-wormhole.readthedocs.io/en/latest/welcome.html#installation"
+ mac="https://magic-wormhole.readthedocs.io/en/latest/welcome.html#installation"
+ linux="https://magic-wormhole.readthedocs.io/en/latest/welcome.html#installation"
+ freebsd="https://www.freshports.org/net/py-magic-wormhole/"
+ openbsd="https://pypi.org/project/magic-wormhole/"
+ netbsd="https://pypi.org/project/magic-wormhole/"
%}
Worth Mentioning
- - croc - Easily and securely send things from one computer to another.
- - FreedomBox - Designed to be your own inexpensive server at home. It runs free software and offers an increasing number of services ranging from a calendar or Jabber server, to a wiki, or VPN.
+ - FramaDrop - Stores a file of any size for 24h. Data is end-to-end encrypted from your browser, powered by LuFi.
+ {% include badge.html
+ color="warning"
+ icon="fas fa-exclamation-triangle"
+ link="https://framasoft.org/en/cgu/"
+ tooltip="FramaDrop logs IP addresses and fingerprints the browser for an unclear amount of time."
+ %}
+
+ - croc - Easily and securely send arbitrary-sized files from one computer to another. Similar to Magic Wormhole but without dependencies.
+ - FreedomBox - Designed to be your own inexpensive server at home. It runs free software and offers an increasing number of services ranging from a calendar or XMPP server, to a wiki, or VPN.
diff --git a/_includes/sections/file-sync.html b/_includes/sections/file-sync.html
index 6dea5561..bdf50f45 100644
--- a/_includes/sections/file-sync.html
+++ b/_includes/sections/file-sync.html
@@ -8,8 +8,8 @@
{%
include cardv2.html
title="Syncthing"
- image="/assets/img/tools/Syncthing.png"
- description="Syncthing replaces proprietary sync and cloud services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third-party and how it's transmitted over the Internet."
+ image="/assets/img/svg/3rd-party/syncthing.svg"
+ description="Syncthing replaces proprietary sync and cloud services with something open, trustworthy and decentralized. Your data is your data alone and you deserve to choose where it is stored, if it is shared with some third-party, and how it is transmitted over the Internet."
website="https://syncthing.net/"
forum="https://forum.privacytools.io/t/discussion-syncthing/1627/2"
github="https://github.com/syncthing?type=source"
@@ -20,23 +20,10 @@
googleplay="https://play.google.com/store/apps/details?id=com.github.catfriend1.syncthingandroid"
%}
-{%
- include cardv2.html
- title="SparkleShare"
- image="/assets/img/tools/SparkleShare.png"
- description="SparkleShare creates a special folder on your computer. You can add remotely hosted folders (or \"projects\") to this folder. These projects will be automatically kept in sync with both the host and all of your peers when someone adds, removes or edits a file."
- website="https://sparkleshare.org/"
- forum="https://forum.privacytools.io/t/discussion-sparkleshare/1626"
- github="https://github.com/hbons/SparkleShare"
- linux="https://www.sparkleshare.org/"
- mac="https://github.com/hbons/SparkleShare/releases/"
-%}
-
Worth Mentioning
-
- git-annex - Allows managing files with git, without checking the file contents into git. While that may seem paradoxical, it is useful when dealing with files larger than git can currently easily handle,
- whether due to limitations in memory, time, or disk space.
+ git-annex - Allows managing files with git, without checking the file contents into git. While that may seem paradoxical, it is useful when dealing with files larger than git can currently easily handle, whether due to limitations in memory, time, or disk space.
diff --git a/_includes/sections/fourteen-eyes.html b/_includes/sections/fourteen-eyes.html
index 153921fe..5b4c6e67 100644
--- a/_includes/sections/fourteen-eyes.html
+++ b/_includes/sections/fourteen-eyes.html
@@ -1,6 +1,6 @@
Global Mass Surveillance - The Fourteen Eyes
-
+
The UKUSA Agreement is an agreement between the United Kingdom, United States, Australia, Canada, and New Zealand to cooperatively collect, analyze, and share intelligence. Members of this group, known as the Five Eyes, focus on gathering and analyzing intelligence from different parts of the world. While Five Eyes countries have agreed to not spy on each other as adversaries, leaks by Snowden have revealed that some Five Eyes members monitor each other's citizens and share intelligence to avoid breaking domestic laws that prohibit them from spying on their own citizens. The Five Eyes alliance also cooperates with groups of third-party countries to share intelligence (forming the Nine Eyes and Fourteen Eyes); however, Five Eyes and third-party countries can and do spy on each other.
diff --git a/_includes/sections/header.html b/_includes/sections/header.html
index bdcef64c..06f6fec5 100644
--- a/_includes/sections/header.html
+++ b/_includes/sections/header.html
@@ -1,15 +1,18 @@
-
-
- 
- You are being watched. Private and state-sponsored organizations are monitoring and recording your online activities. privacytools.io provides services, tools and knowledge to protect your privacy against global mass surveillance.
+
+ You are being watched. Private and state-sponsored organizations are monitoring and recording your online activities. {{ site.name }} provides services, tools and knowledge to protect your privacy against global mass surveillance.
| 
+
+
+
+
+# License & Notices
+
+PrivacyTools was provided on an "as-is" basis, without warranty, and disclaiming liability for damages. The project was licensed under these terms [license](https://github.com/privacytools/privacytools.io/blob/master/LICENSE.txt).
diff --git a/_config.yml b/_config.yml
index eac523d4..25a9c243 100644
--- a/_config.yml
+++ b/_config.yml
@@ -1,6 +1,8 @@
-title: Privacy Tools - Encryption Against Global Mass Surveillance
-description: You are being watched. Knowledge, encryption and privacy tools to protect you against global mass surveillance.
+title: PrivacyTools - Encryption Against Global Mass Surveillance
+name: PrivacyTools
+description: You are being watched. PrivacyTools provides knowledge, encryption, and software recommendations to protect you against global mass surveillance.
url: "https://www.privacytools.io"
+production_url: "https://www.privacytools.io"
sass:
style: compressed
plugins:
diff --git a/_includes/badge.html b/_includes/badge.html
new file mode 100644
index 00000000..f069d819
--- /dev/null
+++ b/_includes/badge.html
@@ -0,0 +1,20 @@
+{% if include.link %}
+ {{ include.text }}
+{% else %}> {{ include.text }}{% endif %}
+
+{% else %}
+ {{include.text}}
+ {% else %}
+ > {% if include.icon %}{% endif %} {{include.text}}
+ {% endif %}
+
+{% endif %}
diff --git a/_includes/breadcrumbs.html b/_includes/breadcrumbs.html
new file mode 100644
index 00000000..b744bb53
--- /dev/null
+++ b/_includes/breadcrumbs.html
@@ -0,0 +1,23 @@
+
diff --git a/_includes/card.html b/_includes/card.html
index ec676c84..9a294a60 100644
--- a/_includes/card.html
+++ b/_includes/card.html
@@ -17,7 +17,7 @@
{% assign text = label_data[1] %}
{% assign tooltip = label_data[2] | default: "" %}
{% assign help_icon = '' %}
- {{text}} {{ help_icon
+ {{text}} {{ help_icon
}}
{% else %}
>{{text}}
diff --git a/_includes/cardv2.html b/_includes/cardv2.html
index 4b315a24..8982b84b 100644
--- a/_includes/cardv2.html
+++ b/_includes/cardv2.html
@@ -14,7 +14,7 @@
class="badge badge-{{color}}"
{% if tooltip %}
data-toggle="tooltip"
- title="{{ tooltip }}"
+ data-original-title="{{ tooltip }}"
> {{text}} {{ help_icon }}
{% else %}
> {{text}}
@@ -36,58 +36,89 @@
height="120"
width="120"
class="panel-pic"
- alt="{{include.title}}"
+ alt="{{include.title}} logo"
>
{{ include.description }}
{% if include.labels %}
{% assign labels = include.labels | split:"|" %}
- {% for label in labels %}
- {% assign label_data = label | split:":" %}
- {% assign color = label_data[0] %}
- {% assign text = label_data[1] %}
- {% assign tooltip = label_data[2] | default: false %}
- {% assign help_icon = '' %}
- {{text}} {{ help_icon }}
- {% else %}
- > {{text}}
+ {% for label in labels %}
+ {% assign label_data = label | split:"::" %}
+ {% for label_attr in label_data %}
+ {% assign attr = label_attr | split:"==" %}
+ {% if attr[0] == "color" %}
+ {% assign color = attr[1] %}
+ {% elsif attr[0] == "link" %}
+ {% assign link = attr[1] %}
+ {% elsif attr[0] == "text" %}
+ {% assign text = attr[1] %}
+ {% elsif attr[0] == "icon" %}
+ {% assign icon = attr[1] %}
+ {% elsif attr[0] == "tooltip" %}
+ {% assign tooltip = attr[1] %}
{% endif %}
-
- {% endfor %}
+ {% endfor %}
+ {% include badge.html
+ link=link
+ color=color
+ text=text
+ icon=icon
+ tooltip=tooltip
+ %}
+ {% assign color = nil %}
+ {% assign link = nil %}
+ {% assign text = nil %}
+ {% assign icon = nil %}
+ {% assign tooltip = nil %}
+ {% endfor %}
{% endif %}
CC0
+