Privacy hardening
Hardening means closing the gaps in the tools you already use: your browser, passwords, messages and files.
Start with what you use every day. Each entry says whether its code is open and what it asks of you.
Order: what the tool asks of you (nothing, an account, ID), then open code before closed code, then A to Z. Affiliate links and sponsors never change it.
Browsers
-
LibreWolf
Asks of you: nothing Code: open source- Custom version of Firefox focused on privacy, security and freedom.
- Aims to remove telemetry and data collection. uBlock Origin is included.
- Windows, Linux, macOS and OpenBSD.
Visit LibreWolf Checked 2026-10-19
-
Mullvad Browser
Asks of you: nothing Code: open source- Built with the Tor Project to minimize tracking and fingerprints.
- Aims to give all users similar fingerprints and uses letterboxing.
- Linux, macOS and Windows. Free whether or not you use Mullvad VPN.
Visit Mullvad Browser Latest release: 2026-10-14 Checked 2026-10-19
-
Firefox
Asks of you: nothing Code: not stated- Made by Mozilla, which says it is not owned by shareholders.
- Blocks trackers automatically. Says it will never sell your personal data.
- Windows, macOS, Linux, iOS and Android.
- Its page makes no open source statement.
Visit Firefox Checked 2026-10-19
Extensions
-
uBlock Origin
Asks of you: nothing Code: open source- Content blocker for Chromium and Firefox, built to use little CPU and memory.
- Works best on Firefox, on desktop and Android. Its Chrome Web Store listing was removed.
- GPLv3 license.
Visit uBlock Origin Latest release: 2026-09-16 Checked 2026-10-19
Search engines
-
SearXNG
Asks of you: nothing Code: open source- Free metasearch engine that gathers results from up to 264 search services.
- Says users are neither tracked nor profiled. You can run your own instance or use it over Tor.
- AGPL-3.0 license.
Visit SearXNG Checked 2026-10-19
-
DuckDuckGo
Asks of you: nothing Code: not stated- Says: "DuckDuckGo never tracks you."
- Says its ads run in partnership with Microsoft and that viewing them is anonymous.
- The page we read does not say where its search results come from.
Visit DuckDuckGo Checked 2026-10-19
-
Mojeek
Asks of you: nothing Code: not stated- Search engine with its own index of more than nine billion pages.
- Says it has provided independent search without tracking for over 15 years.
Visit Mojeek Checked 2026-10-19
Password managers
-
KeePassDX
Asks of you: nothing Code: open source- Password manager for Android that opens KeePass database files.
- GPL-3.0 license.
Visit KeePassDX Latest release: 2026-10-17 Checked 2026-10-19
-
KeePassXC
Asks of you: nothing Code: open source- Open source password manager that keeps your passwords in an offline encrypted file.
- Says no data is stored on remote servers.
- Windows, macOS and Linux. GPLv3 license.
Visit KeePassXC Latest release: 2026-03-10 Checked 2026-10-19
-
Bitwarden
Asks of you: an account Code: open source- Open source, end-to-end encrypted password manager.
- Always free for basic password management.
- Says it publishes the results of its third-party security audits.
- Enterprise plans can be self-hosted.
Visit Bitwarden Latest release: 2026-10-15 Checked 2026-10-19
-
Proton Pass
Asks of you: an account Code: open source- End-to-end encrypted password manager with a free plan: unlimited logins, notes and cards.
- The free plan includes 10 hide-my-email aliases.
- Its comparison table lists Proton Pass as open source.
Visit Proton Pass Checked 2026-10-19
Two-factor and security keys
-
Aegis Authenticator
Asks of you: nothing Code: open source- Free, open source authenticator app for Android.
Visit Aegis Authenticator Latest release: 2026-09-06 Checked 2026-10-19
-
Nitrokey
Asks of you: nothing Code: open source- German company that sells open source security hardware, including security keys.
- Says its products are made in Germany.
Visit Nitrokey Latest release: 2026-09-30 Checked 2026-10-19
-
YubiKey
Asks of you: nothing Code: not stated- Security key series that supports FIDO2, U2F, smart card, OTP and OpenPGP.
- Its page does not say where it is made and makes no open source statement.
Visit YubiKey Checked 2026-10-19
-
Ente Auth
Asks of you: not stated Code: open source- Open source 2FA authenticator with end-to-end encrypted cloud backups.
- Apps for mobile, desktop and web. Free.
Visit Ente Auth Checked 2026-10-19
Messengers
-
SimpleX Chat
Asks of you: nothing Code: open source- Messenger without user identifiers, not even random ones.
- Says no single entity controls the network and anyone can run servers.
- Desktop, iOS and Android.
Visit SimpleX Chat Latest release: 2026-09-26 Checked 2026-10-19
-
Briar
Asks of you: not stated Code: open source- Peer-to-peer messaging that bypasses central servers, over Bluetooth, Wi-Fi or Tor.
- Free and open source. Distributed on Google Play and F-Droid.
- Its page does not say whether an account is required.
Visit Briar Checked 2026-10-19
-
Molly
Asks of you: not stated Code: open source- Independent Signal fork for Android with a passphrase-encrypted database and Tor support through Orbot.
- Says it is fully free software with no proprietary blobs.
Visit Molly Latest release: 2026-07-31 Checked 2026-10-19
-
Signal
Asks of you: not stated Code: open source- Messenger run by an independent nonprofit, with end-to-end encryption.
- Built on the open source Signal Protocol.
- Its page does not say whether a phone number is required.
Visit Signal Latest release: 2026-10-13 Checked 2026-10-19
Encryption
-
Cryptomator
Asks of you: nothing Code: open source- Client-side encryption for the files you keep in any cloud.
- Open source. The desktop download is free.
Visit Cryptomator Latest release: 2026-06-29 Checked 2026-10-19
-
GnuPG
Asks of you: nothing Code: open source- Free implementation of the OpenPGP standard, used from the command line.
- Free software since 1997, under the GNU GPL.
- A Windows version is available through Gpg4win.
Visit GnuPG Checked 2026-10-19
-
VeraCrypt
Asks of you: nothing Code: open source- Free open source disk encryption software for Windows, macOS and Linux, based on TrueCrypt 7.1a.
- Its 1.19 release notes mention fixes from a Quarkslab audit funded by OSTIF.
Visit VeraCrypt Latest release: 2026-06-12 Checked 2026-10-19
Metadata cleaners
-
BleachBit
Asks of you: nothing Code: open source- Open source cleaner for temporary files, browser caches, logs and traces.
- Secure deletion of files. Windows and Linux.
- GPLv3 license.
Visit BleachBit Latest release: 2026-09-08 Checked 2026-10-19
-
ExifTool
Asks of you: nothing Code: not stated- Reads, writes and edits metadata in a wide variety of files.
- Deletes metadata individually, in groups or altogether. Its page says removal is not guaranteed to be complete.
Visit ExifTool Checked 2026-10-19
-
MAT2
Asks of you: nothing Code: not stated- Metadata removal tool for many common file formats, written in Python 3.
- A library with a command-line interface and file manager extensions.
Visit MAT2 Checked 2026-10-19
File sharing
-
Syncthing
Asks of you: nothing Code: open source- Continuous file synchronization between your own computers, with no central server.
- Windows, macOS, Linux, FreeBSD and more. MPL-2.0 license, per its repository.
Visit Syncthing Latest release: 2026-10-06 Checked 2026-10-19
See also
- VPN providers
- Tor and anonymous networks
- Encrypted DNS
- VPN and Tor leak tests
- Router and firewall software
- Bitcoin wallets
- Hardware wallets
- Monero wallets
- CoinJoin tools
- Privacy coins
- Private payments
- Operating systems for computers
- Operating systems for phones
- Private e-mail providers
- E-mail alias services
- All tools
- How we check
- How we make money