The reference anonymity browser. Bundled with Tor + NoScript + safe defaults.
Free · GPLv3
Tools — browsers, password managers, hardware
Adjacent tooling that doesn't fit into the other categories — hardened browsers, anonymity-OS distros, password managers, file-share, hardware wallets reviewed in their own right. We don't earn affiliates on most of these; they're listed because they belong in the kit.
last reviewed 2026-05-13
› Tools — browsers, password managers, hardware » Browsers 2Tor-Browser-derived browser without Tor. Use with Mullvad VPN.
Free
Live USB OS that routes all traffic through Tor by default.
Free · GPL
●
Qubes OS
Security-via-compartmentalisation desktop OS. Every app runs in its own Xen VM.
Free · GPLv2
Offline, file-based password vault. No cloud, no account.
Free · GPLv3
Open-source cloud password manager. Optional self-host.
Free tier · paid $10/yr · self-host free
Open-source TOTP/HOTP for Android — encrypted local vault, exportable backups.
Free · GPLv3
Cross-platform TOTP app with E2E-encrypted sync. Free tier, no account required for local-only use.
Free · sync optional
P2P file-share over Tor onion services. No third-party hosting.
Free · GPLv3
Full-disk + container encryption with plausible deniability.
Free · Apache 2.0
Client-side encryption for cloud storage — Dropbox / GDrive / iCloud see only ciphertext.
Free (desktop) · ~$15 one-time (mobile)
Decentralised messenger with no user IDs at all. The only major messenger that doesn't identify users.
Free · open-source · self-hostable relays
●
Briar
Peer-to-peer messenger over Tor, Bluetooth, or Wi-Fi. No servers, no metadata.
Free · F-Droid + Play Store · Android primary
●
Element
Federated E2E chat. Self-hostable, open-source, hosts most XMR/privacy community rooms.
Free · federated · self-hostable · clients on all platforms
●
Cwtch
Tor-only multi-party chat. No accounts, no servers, every conversation an ephemeral .onion.
Free · Tor-only · multi-platform · ephemeral groups
End-to-end encrypted messaging over Nostr relays. PGP-encrypted payloads, no accounts, no servers, no logs.
Free · MacOS/Win/Linux/Web · PGP over Nostr
Swap aggregator as a terminal. `ssh swap.kyc.rip` or `brew install kyc-rip`.
Same as kyc.rip — no aggregator markup · free CLI
Stablecoin issuance + flow intelligence — track USDT/USDC supply across chains.
Free · no signup · public API
E2E-encrypted notes app. Open-source, audited, accepts crypto on paid tiers.
Free · paid from $90/yr · BTC/XMR · self-host option
E2E password manager from Proton. Free tier, accepts crypto, includes 2FA + alias support.
Free · Pro from $5/mo · BTC accepted on annual
Open-source Rust reimplementation of the Bitwarden server. Self-host the official client backend on a $4 VPS.
Free · Rust · self-host · Bitwarden-client compatible
Hardened Android for Pixel hardware. Verified boot, sandboxed Play Services, no Google account required.
Free · Pixel hardware required · install via web flasher
●
CalyxOS
Privacy-focused Android distribution. Pixel + select hardware. MicroG bundled, Tor-aware, Datura firewall.
Free · Pixel + select hardware · install via flasher
Self-hostable Bitcoin block + mempool explorer. Reference UX for inspecting on-chain activity.
Free · self-hostable · public + Tor mirror
Live monitor of public Monero remote nodes. Sortable by uptime, country, transport. Onion mirror + JSON API.
Free · public + Tor mirror · JSON API
Newsroom-grade anonymous-source submission system. Run by ~70 outlets (NYT, WaPo, ProPublica, Guardian).
Free · audited · run by ~70 newsrooms
Browser-based proxy bridge that lets censored users reach the Tor network. Run one to help, or use one to connect.
Free · WebRTC · browser ext / mobile / standalone
Encrypted-in-browser pastebin. The server never sees plaintext. Self-host on a $4 VPS.
Free · PHP · self-host or public instances
●
CryptPad
Encrypted-in-browser real-time office suite. Documents, sheets, slides — server never sees plaintext.
Free · AGPL · self-host or cryptpad.fr public
●
FreeTube
Privacy-respecting YouTube desktop client. No Google account, no ads, downloads + Sponsorblock built in.
Free · AGPL · MacOS/Win/Linux
●
NewPipe
Android YouTube + SoundCloud + PeerTube client. No Google services, no account, F-Droid first.
Free · GPLv3 · F-Droid · Android only
●
Veilid
P2P privacy-focused application framework from Cult of the Dead Cow. Anti-Tor in design — every node also routes.
Free · Rust · P2P framework · alpha