Passwords and data breaches
Firefox Monitor warns you if your email address has been exposed in an online data breach. See if your information has been exposed, learn how to better protect your online accounts, and get alerted if your email address appears in a new breach.
Check if your email or phone is in a data breach.
- The Facebook Phone Numbers Are Now Searchable in Have I Been Pwned
- Have you been ‘pwned’ in a data breach? Troy Hunt can tell (AP)
- The Legitimisation of Have I Been Pwned
The world’s most-loved password manager. 1Password is the easiest way to store and use strong passwords. Log in to sites and fill forms securely with a single click.
- 1Password Support
- Use 1Password as an authenticator for sites with two-factor authentication
- Toward better Master Passwords
- 1Password for Beginners (Martin Shelton)
- 1Password Strong Password Generator
- Security is not just a feature. It’s our foundation.
- Security Design white paper
Open Source Password Management for You and Your Business. The easiest and safest way for individuals and businesses to store, share, and secure sensitive data on any device.
- Bitwarden Help Center
- Bitwarden Authenticator (TOTP)
- Bitwarden Send
- Bitwarden for Beginners (Martin Shelton)
- Bitwarden Strong Password Generator
- Is Bitwarden audited?
Never forget a password again. Securely store passwords using industry standard encryption, quickly auto-type them into desktop applications, and use our browser extension to log into websites.
Note: KeePassXC is available as a desktop app for Linux, macOS, and Windows. On mobile the KeePassXC team recommends Strongbox or KeePassium for iOS and iPadOS, and KeePassDX or KeePass2Android for Android.
- KeePassXC Documentation and FAQ
- KeePassXC Paper Backup
- Strongbox Helpdesk
- Strongbox How To Guide
- KeePassDX FAQ
- KeePassDX Wiki
- KeePassXC for Beginners (Martin Shelton)
Have I Been Pwned / Troy Hunt
Pwned Passwords are 613,584,246 real world passwords previously exposed in data breaches. This exposure makes them unsuitable for ongoing use as they’re at much greater risk of being used to take over other accounts. They’re searchable online as well as being downloadable for use in other online systems.
Think you have a strong password? Find out here.
Okta and Randall Degges
PassProtect is a browser plugin that makes it easy for people to discover in real-time if a password they’re using has been exposed in a data breach. With a real time notification, PassProtect quickly alerts users of unsafe passwords so they can take immediate action without compromising privacy. By using k-anonymity, PassProtect ensures no passwords are ever seen, stored, or sent over the network during the checking process. PassProtect is powered by Have I Been Pwned? and is free, open source and secure.
An easy-to-use, open-source two-factor authentication app designed specifically for iOS.
Aegis Authenticator is a free, secure and open source app for Android to manage your 2-step verification tokens for your online services.
OTP Auth adds support for two-factor authentication to your iPhone and iPad. It can be used with Dropbox, Facebook, GitHub, Google and many more. Make your accounts safe again!
andOTP is a two-factor authentication App for Android.
FreeOTP is a two-factor authentication application for systems utilizing one-time password protocols. Tokens can be added easily by scanning a QR code. If you need to generate a QR code, try our QR code generator.
The industry’s #1 security key, enabling strong two-factor, multi-factor and passwordless authentication.
Secure Login. Open Source. Easy. The first open-source FIDO2 security key: Protect your online accounts against unauthorized access by using the most secure login method.
Nitrokey protects emails, files, hard drives, server certificates and online accounts.
Trail of Bits
Protect Your Digital Life. Built by the leaders in security research at Trail of Bits, iVerify helps you keep your devices and online accounts secure from vulnerabilities.
- Introducing iVerify, the security toolkit for iPhone users
- This App Will Tell You if Your iPhone Gets Hacked (Motherboard/VICE)
Analyze suspicious files and URLs to detect types of malware, automatically share them with the security community.
First Look Media
Take potentially dangerous PDFs, office documents, or images and convert them to a safe PDF.
Private conversations and meetings
Signal is a cross-platform messaging app. Privacy isn’t an optional mode – it’s just the way that Signal works. Every message, every call, every time.
- Disappearing messages
- View-once media messages
- Private contact discovery
- Sealed sender
- Private groups
- Encrypted profiles
- Face blurring tools
- Note to Self feature
- Private link previews
- Private GIF search
- Encrypted stickers
- Always Relay Calls feature
- Signal Support
- Government Requests
Secure Email Based in Switzerland.
- Security Features
- Getting started with ProtonMail the easy way
- All ProtonMail apps are now open source, as Android joins the list!
- Transparency Report
- Steve Gibson and Leo Laporte talk about ProtonMail on an episode of the Security Now podcast
Secure email for everybody. Tutanota is the world’s most secure email service, easy to use and private by design. Sign up for free encrypted email now.
- Encrypted email, free & easy
- Secure email made for you
- Features of the Secure Tutanota Mailbox
- Features of the Encrypted Calendar
- Transparency Report & Warrant Canary
Start & join meetings for free. No account needed.
- Jitsi Meet Security & Privacy
- User FAQ
- meet.jit.si Privacy Supplement
- The Tor Project endorsement
- Amnesty International endorsement
- This is what end-to-end encryption should look like!
Blueprint for Free Speech
Ricochet Refresh is an open-source project to allow private and anonymous instant messaging.
Chat with friends securely and anonymously using the Tor network.
Collaborative documents and file sharing
Collaboration suite, encrypted and open-source. CryptPad is built to enable collaboration while keeping data private. All content is encrypted and decrypted by your browser. This means documents, chats, and files are unreadable outside of the session where you are logged in. Even the service administrators do not have access to your information.
- Calendar app
- What is CryptPad
- CryptPad Documentation
- What we can’t know, what we must know, what we want to know
- Privacy, distributed computation, and architectures of resilience
- CryptPad discussed in an episode of the FLOSS Weekly podcast
Share confidential files with our end-to-end encrypted links. Your files get encrypted before they leave your device and never get decrypted until accessed by your recipient. Keep control of your files even after sharing them. Follow opens with access logs and revoke access immediately if needed.
Simple, encrypted file sharing. FileSend secures files with client-side AES-256 encryption and does not log IP addresses. Files are permanently deleted from our servers on download or after specified duration.
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.
Personal notes and office suite
Standard Notes is a safe place for your notes, thoughts, and life’s work. A free, open-source, and completely encrypted notes app.
LibreOffice is a free and powerful office suite, and a successor to OpenOffice.org (commonly known as OpenOffice). Its clean interface and feature-rich tools help you unleash your creativity and enhance your productivity.
Cloud storage and data encryption
Everything in Sync. Sync makes it easy to store, share and access your files from just about anywhere. Best of all, Sync protects your privacy with end-to-end encryption — ensuring that your data in the cloud is safe, secure and 100% private.
Keep your files safe in the cloud. Protect your personal and work files with end-to-end encryption & Swiss privacy.
- Cloud Storage Security Comparison
- Making security simple
- Cloud Storage + End-to-end Encryption
- Tresorit Knowledge Base
VeraCrypt is a free open source disk encryption software for Windows, macOS and Linux. Brought to you by IDRIX and based on TrueCrypt 7.1a.
- Beginner’s Tutorial
- Frequently Asked Questions
- Encryption toolkit for media makers: A VeraCrypt guide (Freedom of the Press Foundation)
Put a lock on your cloud. With Cryptomator, the key to your data is in your hands. Cryptomator encrypts your data quickly and easily. Afterwards you upload them protected to your favorite cloud service.
Get the browser that protects what’s important. No shady privacy policies or back doors for advertisers. Just a lightning fast browser that doesn’t sell you out.
- Facebook Container extension
- Firefox Multi-Account Containers extension
- Add-ons for Firefox
- Permission request messages for Firefox extensions
The browser reimagined. Three times faster than Chrome. Better privacy by default than Firefox. Uses 35% less battery on mobile.
We’re setting the new standard of trust online, empowering people to take control of their information. What you search for is your own business. Switch to the search engine that doesn’t track you.
An efficient blocker add-on for various browsers. Fast, potent, and lean.
Electronic Frontier Foundation (EFF)
HTTPS Everywhere is a Firefox, Chrome, and Opera extension that encrypts your communications with many major websites, making your browsing more secure.
Electronic Frontier Foundation (EFF)
Privacy Badger automatically learns to block invisible trackers.
Ghostery uncovers the trackers on each website and empowers you to control the ones you don’t want for a cleaner, faster, and safer browsing experience.
Privacy, simplified. Seamlessly take control of your personal information, no matter where the Internet takes you. Our app and browser extension stop you from being tracked, so you can Internet with peace of mind.
Have you noticed that Google search results often turn up a lot of Google content at the top? We did. This extension highlights “ten blue link”-type search results over infoboxes and other content. Works with Bing and Google.
A Real-Time Website Privacy Inspector. Who is peeking over your shoulder while you work, watch videos, learn, explore, and shop on the internet? Enter the address of any website, and Blacklight will scan it and reveal the specific user-tracking technologies on the site—and who’s getting your data. You may be surprised at what you learn.
Electronic Frontier Foundation (EFF)
See how trackers view your browser. Test your browser to see how well you are protected from tracking and fingerprinting. Want to learn more about tracking? Read up on how it works with our guide.
Electronic Frontier Foundation (EFF)
Google is running a Chrome “origin trial” to test out an experimental new tracking feature called Federated Learning of Cohorts (aka “FLoC”). According to Google, the trial currently affects 0.5% of users in selected regions, including Australia, Brazil, Canada, India, Indonesia, Japan, Mexico, New Zealand, the Philippines, and the United States. This page will try to detect whether you’ve been made a guinea pig in Google’s ad-tech experiment.
Have you ever wondered: Where does this link go? WhereGoes is a tool for tracking the redirection path of URLs and shortened links. It will trace URL routes and show you the entire path of redirects and meta-refreshes leading to the final destination.
Since GDPR came into our lives, we’ve all had to struggle with obtaining our basic privacy rights. With each cookie banner we have all been honing our skills, learning to navigate ambiguous options and distrust obvious buttons. Now is your chance to show what you have learnt.
Gautam krishna R.
Do you think that switching to your browser’s private browsing mode or incognito mode will make you anonymous? Sorry to disappoint you, but you are wrong! Everyone can track you. You can check it out for yourself.
Moniker and VPRO
Created by Moniker (Roel Wouters & Luna Maurer) and made in conjuction with We Are Data travelling installation, Clickclickclick.click reveals the browser events used to monitor our online behaviour.
A project which aims to increase transparency about the online data industry by illustrating who tracks us when we browse the internet.
Identity and Internet traffic protection
The Tor Project
Browse Privately. Explore Freely. Defend yourself against tracking and surveillance. Circumvent censorship.
Note: The Tor Browser is available for Android, Linux, macOS, and Windows. On iOS and iPadOS the Tor Project recommends the Onion Browser.
You have a right to privacy. In a society increasingly determined to erode that right, a fast, trustworthy and easy-to-use VPN is a good first step toward reclaiming it.
- Mullvad help center
- Connection check
- What is privacy?
- What is a VPN?
- Kill switch feature
- Always require VPN feature
- No-logging of user activity policy
- Mullvad’s account numbers get longer – and safer
- We value open source
- How we handle government requests for user data
- Swedish legislation relevant to us as a VPN provider
- About our servers
- How to use Bridge mode
Protect yourself online. High-speed Swiss VPN that safeguards your privacy.
- Support Center
- Understanding the VPN Threat Model
- VPN Security Features
- Kill Switch feature
- Permanent Kill Switch feature
- What is Secure Core VPN?
- All ProtonVPN apps are now open source and audited
- ProtonVPN Transparency Report & Warrant Canary
- Here are all the countries where the government is trying to ban VPNs
The free app that makes your Internet safer.
- Announcing 220.127.116.11: the fastest, privacy-first consumer DNS service
- Sure, The Internet Is Broken. So Let’s Go Fix It, Shall We? (Newco Shift)
I decided to create this small project after realising how easy it was for DNS leaks to occur without a user’s knowledge. It is especially alarming considering that some users may have a false sense of security about their anonymity when using an anonymity service such as TOR or a VPN service.
Border Gateway Protocol (BGP) is the postal service of the Internet. It’s responsible for looking at all of the available paths that data could travel and picking the best route. Unfortunately, it isn’t secure, and there have been some major Internet disruptions as a result. But fortunately there is a way to make it secure. You can use this tool to test if your ISP is implementing BGP safely.
Tails is a portable operating system that protects against surveillance and censorship.
Maps and navigation
Offline mobile maps & navigation based on OpenStreetMap.
OpenStreetMap Foundation (OSMF)
OpenStreetMap is a map of the world, created by people like you and free to use under an open license.
The new Translate app in iOS lets you quickly and easily translate your voice and text between any combination of eleven languages. On-device mode enables a fully offline experience for Translate. Use all the app features for downloaded languages and keep your translations private without needing to turn off your phone’s internet connection.
Try out the world’s best machine translation.
Better social media
Mastodon (e.g. mastodon.online)
Social networking, back in your hands. Follow friends and discover new ones among more than 4.4M people. Publish anything you want: links, pictures, text, video. All on a platform that is community-owned and ad-free.
Mastodon is made up of many different communities (aka istances) that are able to communicate with one another (meaning people in a community can follow people from other communities as well) and that are run by different people and organizations with different values and goals in mind. A pretty popular general purpose community that is currently accepting new sign-ups and is run by the main developers of the project is mastodon.online. You can find a list of other communities that are committed to active moderation against racism, sexism and transphobia here.
- What is Mastodon?
- Mastodon documentation
- Mastodon Blog
- Eugen Rochko’s toot about data collection
Pixelfed (e.g. pixelfed.social)
Photo Sharing. For Everyone. A free and ethical photo sharing platform.
- Pixelfed Blog
- pixelfed.social is a popular Pixelfed instance
- pixelfed.social Help Center
Internet censorship and shutdowns
Open Observatory of Network Interference (OONI)
OONI Explorer is an open data resource on internet censorship around the world. Since 2012, millions of network measurements have been collected from more than 200 countries. OONI Explorer sheds light on internet censorship and other forms of network interference worldwide.
Open Observatory of Network Interference (OONI)
Are websites and social media apps blocked? Is your network unusually slow? Run OONI Probe to find out! With this app, you will examine the blocking of websites and instant messaging apps, measure your network’s speed and performance, and check whether systems that could be responsible for censorship and surveillance are in your network.
NetBlocks Cost of Shutdown Tool™ (COST) is a data-driven online service that enables anyone – including journalists, researchers, advocates, policy makers, businesses, and others – to quickly and easily produce rough estimates of the economic cost of Internet disruptions.
Free and Open Source Speedtest. No Flash, No Java, No Websocket, No Bullsh*t.
This is a tool for anonymizing photographs taken at protests. It will remove identifying metadata (Exif data) from photographs, and also allow you to selectively blur parts of the image to cover faces and other identifiable information. All processing happens directly in the browser- no information is stored or sent anywhere.
FreeFileSync is a folder comparison and synchronization software that creates and manages backup copies of all your important files. Instead of copying every file every time, FreeFileSync determines the differences between a source and a target folder and transfers only the minimum amount of data needed. FreeFileSync is Open Source software, available for Windows, macOS, and Linux.
The YouTube DataViewer is a simple tool to extract hidden data from videos hosted on YouTube.
Reverse Image Search. Find where images appear online.
Moritz Ebeling and Leon Lukas Plum
Crytch is a webtool that makes private messaging fun, easy and secure.
Freedom of the Press Foundation and Guardian Project
Haven is for people who need a way to protect their personal spaces and possessions without compromising their own privacy, through an Android app and on-device sensors.
Qubes OS is a free and open-source, security-oriented operating system for single-user desktop computing. Qubes OS leverages Xen-based virtualization to allow for the creation and management of isolated compartments called qubes.
Page last updated: 9 May 2021