The reference anonymity browser. Bundled with Tor + NoScript + safe defaults.
Free · GPLv3
Tools — browsers, password managers, hardware
Adjacent tooling that doesn't fit into the other categories — hardened browsers, anonymity-OS distros, password managers, file-share, hardware wallets reviewed in their own right. We don't earn affiliates on most of these; they're listed because they belong in the kit.
last reviewed 2026-05-13
› Tools — browsers, password managers, hardware » Browsers 1Live USB OS that routes all traffic through Tor by default.
Free · GPL
Offline, file-based password vault. No cloud, no account.
Free · GPLv3
Open-source TOTP/HOTP for Android — encrypted local vault, exportable backups.
Free · GPLv3
Cross-platform TOTP app with E2E-encrypted sync. Free tier, no account required for local-only use.
Free · sync optional
P2P file-share over Tor onion services. No third-party hosting.
Free · GPLv3
Client-side encryption for cloud storage — Dropbox / GDrive / iCloud see only ciphertext.
Free (desktop) · ~$15 one-time (mobile)
Decentralised messenger with no user IDs at all. The only major messenger that doesn't identify users.
Free · open-source · self-hostable relays
●
Element
Federated E2E chat. Self-hostable, open-source, hosts most XMR/privacy community rooms.
Free · federated · self-hostable · clients on all platforms
●
Cwtch
Tor-only multi-party chat. No accounts, no servers, every conversation an ephemeral .onion.
Free · Tor-only · multi-platform · ephemeral groups
●
Threema
Swiss paid one-time messenger. Phone-number optional, anonymous IDs, no metadata.
$5 one-time · Swiss · audited · no phone required
End-to-end encrypted messaging over Nostr relays. PGP-encrypted payloads, no accounts, no servers, no logs.
Free · MacOS/Win/Linux/Web · PGP over Nostr
Swap aggregator as a terminal. `ssh swap.kyc.rip` or `brew install kyc-rip`.
Same as kyc.rip — no aggregator markup · free CLI
Ghost Mail, Dead Drop, SMS Wall, Ghost Chat — privacy primitives in one portal.
Per-service pricing · wallet-funded XMR / BTC / LN
Batch USDT/ETH dispersal — pay 1000 recipients in one transaction.
No-wallet mode: ~5 USDT base + 4.5 USDT/recipient · BYO mode: gas only
●
404.cash
Crypto checkout widget for merchants — XMR / BTC / LN / USDT, no KYC.
Per-tx fee 0.5-1% · BYOK or managed routing
E2E-encrypted notes app. Open-source, audited, accepts crypto on paid tiers.
Free · paid from $90/yr · BTC/XMR · self-host option
E2E password manager from Proton. Free tier, accepts crypto, includes 2FA + alias support.
Free · Pro from $5/mo · BTC accepted on annual
Open-source Rust reimplementation of the Bitwarden server. Self-host the official client backend on a $4 VPS.
Free · Rust · self-host · Bitwarden-client compatible
Hardened Android for Pixel hardware. Verified boot, sandboxed Play Services, no Google account required.
Free · Pixel hardware required · install via web flasher
●
CalyxOS
Privacy-focused Android distribution. Pixel + select hardware. MicroG bundled, Tor-aware, Datura firewall.
Free · Pixel + select hardware · install via flasher
Steel seed-phrase backup. Fire/water/EMP-resistant. One-time purchase.
€89 one-time · BTC accepted · physical product
Self-hostable Bitcoin block + mempool explorer. Reference UX for inspecting on-chain activity.
Free · self-hostable · public + Tor mirror
Live monitor of public Monero remote nodes. Sortable by uptime, country, transport. Onion mirror + JSON API.
Free · public + Tor mirror · JSON API
Hardware FIDO2 / U2F / PIV / OpenPGP token. Phishing-resistant 2FA across every account that supports it.
$50 one-time · physical · WebAuthn/U2F/OpenPGP
Browser-based proxy bridge that lets censored users reach the Tor network. Run one to help, or use one to connect.
Free · WebRTC · browser ext / mobile / standalone
Encrypted-in-browser pastebin. The server never sees plaintext. Self-host on a $4 VPS.
Free · PHP · self-host or public instances
●
CryptPad
Encrypted-in-browser real-time office suite. Documents, sheets, slides — server never sees plaintext.
Free · AGPL · self-host or cryptpad.fr public
●
FreeTube
Privacy-respecting YouTube desktop client. No Google account, no ads, downloads + Sponsorblock built in.
Free · AGPL · MacOS/Win/Linux
●
NewPipe
Android YouTube + SoundCloud + PeerTube client. No Google services, no account, F-Droid first.
Free · GPLv3 · F-Droid · Android only
●
Veilid
P2P privacy-focused application framework from Cult of the Dead Cow. Anti-Tor in design — every node also routes.
Free · Rust · P2P framework · alpha