Tools
These are what we recommend if you want to leave less data behind. None of the links are affiliate links, and nobody paid to be listed.
87 recommendations
How is the score calculated?
We score five criteria that can be checked from public facts, and add the points up. The same rule applies to every tool; our opinion is not part of it.
- Source code (code, up to 3 points)
- 0: closed
- 2: the apps are open, the server is not
- 3: every part is open
- Who can get at your data (data, up to 3 points)
- 0: the provider can read and store it
- 1: the provider sees it, but commits to not logging it
- 2: stored encrypted, the provider cannot read it
- 3: there is no provider, everything stays with you
- What you have to hand over (identity, up to 2 points)
- 0: a phone number or personal data
- 1: an email address or an account
- 2: nothing
- Independence (independent, up to 1 point)
- 0: depends on a single company's servers
- 1: works self-hosted, directly between devices, or without the internet
- Default behaviour (quiet, up to 1 point)
- 0: sends usage data or shows ads by default
- 1: does neither by default
The score does not measure how well a program is written or audited, nor how convenient it is. Open tools that run locally get 10 points easily, a service rarely does; so it is best used to compare within one category.
Browser
Your browser sees more of you than anything else, so start here.
- Mullvad Browsermullvad.netFingerprinting protection developed by the Tor Project, without the Tor network, for everyday browsing.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Tor Browsertorproject.orgRoutes your traffic through three relays, so the site can't see where you are coming from.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- LibreWolflibrewolf.netFirefox with the telemetry removed and strict protection set up in advance.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Firefoxmozilla.orgBuilt on an independent engine, and blocks most trackers out of the box.9/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 0/1
- Bravebrave.comChromium-based, blocks ads and trackers by default.9/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 0/1
Browser extension
A few well-chosen extensions beat many: every one of them also makes your browser more unique.
- NoScriptnoscript.netBlocks every script by default, and you allow back what you need site by site. Many sites won't work at first.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Multi-Account Containersaddons.mozilla.orgLocks sites into separate containers, so your social network can't see the cookies of your other tabs.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- JShelteraddons.mozilla.orgGives imprecise or false answers to the queries sites use to build a fingerprint.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- LocalCDNlocalcdn.orgServes common code libraries from your own machine, so the big content networks don't see where you go.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- ClearURLsclearurls.xyzStrips tracking codes off the end of links before you open or forward them.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
Search engine
Your search history says more about you than any of your profiles.
- SearXNGdocs.searxng.orgGathers results from several search engines and strips your identifiers. Can be self-hosted.8/10privacy scorecode 3/3data 1/3identity 2/2independent 1/1quiet 1/1
- Marginalia Searchmarginalia-search.comDeliberately surfaces small, text-heavy sites, blogs and forums instead of the big platforms.8/10privacy scorecode 3/3data 1/3identity 2/2independent 1/1quiet 1/1
- DuckDuckGoduckduckgo.comStores no search history and builds no profile of you.3/10privacy scorecode 0/3data 1/3identity 2/2independent 0/1quiet 0/1
- Startpagestartpage.comGives you Google results without Google learning who searched.3/10privacy scorecode 0/3data 1/3identity 2/2independent 0/1quiet 0/1
- Brave Searchsearch.brave.comWorks from its own index instead of passing on Google or Bing results.3/10privacy scorecode 0/3data 1/3identity 2/2independent 0/1quiet 0/1
- Mojeekmojeek.comWorks from its own independent index and doesn't track what you search for.3/10privacy scorecode 0/3data 1/3identity 2/2independent 0/1quiet 0/1
Messenger
Pick one where even the provider can't read what you write.
- Briarbriarproject.orgWorks without a server, directly between two phones: over Tor, Wi-Fi or Bluetooth, even with no internet.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- SimpleX Chatsimplex.chatHas no user identifiers at all, so nobody can tell who is talking to whom.9/10privacy scorecode 3/3data 2/3identity 2/2independent 1/1quiet 1/1
- Sessiongetsession.orgYou sign up without a phone number or email address, and messages travel through several nodes.9/10privacy scorecode 3/3data 2/3identity 2/2independent 1/1quiet 1/1
- Delta Chatdelta.chatA chat app that uses your existing email account, with end-to-end encryption.8/10privacy scorecode 3/3data 2/3identity 1/2independent 1/1quiet 1/1
- Elementelement.ioA client for the Matrix network: anyone can run a server, and rooms can be end-to-end encrypted.8/10privacy scorecode 3/3data 2/3identity 1/2independent 1/1quiet 1/1
- Threemathreema.chWorks without a phone number or email address, and runs on Swiss servers.7/10privacy scorecode 2/3data 2/3identity 2/2independent 0/1quiet 1/1
- Signalsignal.orgEvery message and call is end-to-end encrypted, and the company stores almost nothing about you.6/10privacy scorecode 3/3data 2/3identity 0/2independent 0/1quiet 1/1
Your inbox also holds the password reset for every other account you have.
- Thunderbirdthunderbird.netA mail client that keeps your mail on your own machine and has OpenPGP encryption built in.9/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 0/1
- SimpleLoginsimplelogin.ioYou give every site its own alias, so your real address never gets out, and an alias can be switched off at any time.7/10privacy scorecode 3/3data 1/3identity 1/2independent 1/1quiet 1/1
- addy.ioaddy.ioUnlimited email aliases, and it can be self-hosted.7/10privacy scorecode 3/3data 1/3identity 1/2independent 1/1quiet 1/1
- Proton Mailproton.meYour mailbox is stored encrypted, and Proton can't read your mail.6/10privacy scorecode 2/3data 2/3identity 1/2independent 0/1quiet 1/1
- Tutatuta.comEncrypts the subject line and the calendar as well as the mail.6/10privacy scorecode 2/3data 2/3identity 1/2independent 0/1quiet 1/1
Password manager
Every account needs its own long password, and nobody can keep those in their head.
- KeePassXCkeepassxc.orgYour passwords live in a single encrypted file on your own machine, with no cloud.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- KeePassDXkeepassdx.comOpens your KeePass files on your phone, with no cloud and no account.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Bitwardenbitwarden.comSyncs across all your devices, and only your master password opens the vault.8/10privacy scorecode 3/3data 2/3identity 1/2independent 1/1quiet 1/1
- Proton Passproton.meA password manager with email aliases, so you don't hand out your real address everywhere.6/10privacy scorecode 2/3data 2/3identity 1/2independent 0/1quiet 1/1
Two-factor authentication
If your password leaks, this is what stops the login.
- Aegisgetaegis.appKeeps your codes in an encrypted vault, and you can export them at any time.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Nitrokeynitrokey.comA physical security key whose firmware is open too, so what it does can be checked.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Ente Authente.ioSyncs your codes between your devices, end-to-end encrypted.9/10privacy scorecode 3/3data 2/3identity 2/2independent 1/1quiet 1/1
- YubiKeyyubico.comA physical key that a phishing site can't trick out of you.7/10privacy scorecode 0/3data 3/3identity 2/2independent 1/1quiet 1/1
VPN
Hides what you look at from your provider and from public Wi-Fi. It does not make you anonymous.
- Mullvad VPNmullvad.netYou sign up with an account number instead of an email address, and you can pay in cash.6/10privacy scorecode 2/3data 1/3identity 2/2independent 0/1quiet 1/1
- IVPNivpn.netA small, transparent company with regular independent security audits.6/10privacy scorecode 2/3data 1/3identity 2/2independent 0/1quiet 1/1
- Proton VPNprotonvpn.comEven the free plan has no data cap and no ads.5/10privacy scorecode 2/3data 1/3identity 1/2independent 0/1quiet 1/1
Anonymous and independent networks
For when even who talks to whom must stay hidden, or there is no internet to talk over.
- I2Pi2p.netA decentralised, anonymous network for sites and services inside the network.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- OnionShareonionshare.orgSend or receive a file over Tor, straight from your own machine, with no storage in between.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Meshtasticmeshtastic.orgEncrypted messages between small radio devices, over several kilometres, with no mobile network or internet.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
Ad and tracker blocking
Most trackers never start if their request never arrives.
- uBlock Originublockorigin.comFilters ads and trackers using few resources. It can do the most on Firefox.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Pi-holepi-hole.netFilters for every device on your home network, the TV and the phone included.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- RethinkDNSrethinkdns.comFirewall and DNS filter in one: shows which app connects where, and lets you block it.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- NetGuardnetguard.meSet app by app what may reach the internet, without root.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- AdGuard Homeadguard.comA network-wide filter like Pi-hole, with encrypted DNS built in.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Quad9quad9.netA non-profit DNS provider that filters malicious addresses and doesn't store your IP address.4/10privacy scorecode 0/3data 1/3identity 2/2independent 0/1quiet 1/1
- NextDNSnextdns.ioA DNS filter in the cloud: blocks trackers on all your devices with nothing to install.3/10privacy scorecode 0/3data 1/3identity 1/2independent 0/1quiet 1/1
Active resistance
These don't hide you, they mix noise into your data: a profile becomes worthless once it is full of false traces.
- AdNauseamadnauseam.ioHides the ads and clicks every one of them in the background, so your advertising profile becomes useless.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- TrackMeNottrackmenot.ioSends random searches to search engines in the background, so your real ones get lost among them.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Noisygithub.comA Python script that generates random DNS and web traffic, so your real traffic drowns in noise in your provider's logs.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- ISP Data Pollutiongithub.comA script for a home server that pollutes the data your internet provider gathers about you with constant random browsing.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- CanvasBlockeraddons.mozilla.orgGives every site slightly different, false canvas, audio and screen data, so your fingerprint can't be followed.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Chameleonsereneblue.github.ioEvery so often swaps your browser's identifier, time zone and language for another believable profile.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Fawkesgithub.comAlters your portraits so that a face recogniser learning from them memorises the wrong face. A research tool from 2020, weaker against newer systems.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Mistgithub.comAdds a watermark to the image that makes diffusion models' imitations fall apart.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- PhotoGuardgithub.comResearch code from MIT: protects a photo from being convincingly edited with a generative model.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Anti-DreamBoothgithub.comResearch code that stops a personalised image generator from being trained on a few photos of you.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Noiszynoiszy.comBrowses randomly in a background tab on sites you choose, manufacturing a false history.7/10privacy scorecode 0/3data 3/3identity 2/2independent 1/1quiet 1/1
- Glazeglaze.cs.uchicago.eduPuts a layer on your artwork that the eye barely sees, making it harder for an image generator to learn your style.7/10privacy scorecode 0/3data 3/3identity 2/2independent 1/1quiet 1/1
- Nightshadenightshade.cs.uchicago.eduThe offensive counterpart of Glaze: an image of yours scraped without permission poisons the model trained on it.7/10privacy scorecode 0/3data 3/3identity 2/2independent 1/1quiet 1/1
- Track Thistrackthis.linkA Mozilla experiment: opens a hundred tabs to the taste of a persona you pick, and confuses advertisers with it.6/10privacy scorecode 0/3data 3/3identity 2/2independent 0/1quiet 1/1
Files and cloud
What goes up encrypted can't be seen even by whoever owns the storage.
- Cryptomatorcryptomator.orgPuts an encrypted vault on any cloud storage you already have.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- VeraCryptveracrypt.ioEncrypts a whole disk, a USB stick or a single container file.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Syncthingsyncthing.netSyncs folders directly between your devices, with no cloud.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Nextcloudnextcloud.comYour own cloud for files, calendar and contacts, on your server.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- LocalSendlocalsend.orgSends files between nearby devices over the local network, with no internet and no account.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Standard Notesstandardnotes.comA notes app where every note is end-to-end encrypted, unreadable even to the provider.8/10privacy scorecode 3/3data 2/3identity 1/2independent 1/1quiet 1/1
- Ente Photosente.ioA photo library where your pictures are end-to-end encrypted, unseen even by the provider.8/10privacy scorecode 3/3data 2/3identity 1/2independent 1/1quiet 1/1
- Proton Driveproton.meCloud storage where both the files and the file names are encrypted.6/10privacy scorecode 2/3data 2/3identity 1/2independent 0/1quiet 1/1
Deleting and cleaning
What you share or throw away holds more of you than you can see.
- MAT20xacab.orgRemoves the metadata from images, documents and audio files before you share them.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- BleachBitbleachbit.orgClears out caches and histories, and overwrites the space left by deleted files.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Dangerzonedangerzone.rocksBreaks a suspicious document down to pixels in isolation and hands it back as a safe PDF.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
Everyday apps
The programs you are used to have counterparts that don't collect data about you.
- Organic Mapsorganicmaps.appOffline maps and navigation from OpenStreetMap data, with no tracking and no ads.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- NewPipenewpipe.netYouTube videos without a Google account, ads or Google's apps.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- FreeTubefreetubeapp.ioA desktop YouTube client: your subscriptions and history stay on your machine.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- F-Droidf-droid.orgAn app store with only open source Android apps, and no account.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- LibreOfficelibreoffice.orgAn office suite that keeps your documents on your machine, not in the cloud.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Jitsi Meetmeet.jit.siVideo calls from the browser, with no account needed for guests. Can be self-hosted.8/10privacy scorecode 3/3data 1/3identity 2/2independent 1/1quiet 1/1
Operating system
If the bottom layer is watching, the tools above it are worth little.
- GrapheneOSgrapheneos.orgHardened Android without Google services, or with them locked in a sandbox.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Tailstails.netBoots from a USB stick, sends everything through Tor, and leaves no trace on the machine at shutdown.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Linux Mintlinuxmint.comThe easiest switch for people coming from Windows: a familiar desktop with no built-in data collection.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Fedorafedoraproject.orgAn up-to-date Linux with strong default security settings.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Qubes OSqubes-os.orgEvery task runs in its own virtual machine, so a compromised app can't see the others.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- Whonixwhonix.orgTwo virtual machines: one lets the other's traffic out only through Tor, so your real IP address can't leak.10/10privacy scorecode 3/3data 3/3identity 2/2independent 1/1quiet 1/1
- O&O ShutUp10++oo-software.comIf you are staying on Windows: switch off the system's data collection settings in one place.7/10privacy scorecode 0/3data 3/3identity 2/2independent 1/1quiet 1/1