Security & Privacy Tools

Browser extensions

uBlock Origin Mozilla Add-onuBlock Origin is not an "ad blocker", it's a wide-spectrum content blocker with CPU and memory efficiency as a primary feature.
Privacy Badger Mozilla Add-onPrivacy Badger automatically learns to block invisible trackers. Instead of keeping lists of what to block, Privacy Badger learns by watching which domains appear to be tracking you as you browse the Web.
HTTPS Everywhere Mozilla Add-onMany sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.
Cookie AutoDelete Mozilla Add-onControl your cookies! This WebExtension is inspired by Self Destructing Cookies. When a tab closes, any cookies not being used are automatically deleted. Whitelist the ones you trust while deleting the rest. Support for Container Tabs.
DDG Privacy Essentials Mozilla Add-onPrivacy, simplified. Our add-on provides the privacy essentials you need to seamlessly take control of your personal information, no matter where the internet takes you: tracker blocking, smarter encryption, DuckDuckGo private search, and more.
I don't care about cookies Mozilla Add-onThis add-on will remove cookie warnings from almost all websites! You can report any website which still warns you about cookies: make a right click and choose 'Report a cookie warning' from the menu.
minerBlock Mozilla Add-onMinerBlock is an efficient browser extension that focuses on blocking browser-based cryptocurrency miners all over the web. This extension uses two different approaches to block miners. The first one is based on blocking requests/scripts loaded from a blacklist, this is the traditional approach adopted by most ad-blockers and other mining blockers. The other approach which makes MinerBlock more efficient against cryptojacking is detecting potential mining behavior inside loaded scripts and kills them immediately. This makes the extension able to block inline scripts as well as miners running through proxies. Source code available on GitHub.
ClearURLS Mozilla Add-onThis extension will automatically remove tracking elements from URLs to help protect your privacy when browse through the Internet.
Cloud Firewall Mozilla Add-onBlock connections to pages and web resources hosted in major cloud services if the user wishes to do so. Supports blocking Google, Amazon, Facebook, Apple, Microsoft and Cloudflare.
CSS Exfil Protection Mozilla Add-onCSS Exfil is a method attackers can use to steal data from web pages using Cascading Style Sheets (CSS). This plugin sanitizes and blocks any CSS rules which may be designed to steal data.
Disconnect Mozilla Add-onVisualize and block the otherwise invisible websites that track your search and browsing history.
Don't touch my tabs! (rel=noopener Mozilla Add-onPrevent tabs opened by a hyperlink from hijacking the previous tab by adding the rel=noopener attribute to all hyperlinks (excluding same-domain hyperlinks).
Firefox Multi-Account Containers Mozilla Add-onFirefox Multi-Account Containers lets you keep parts of your online life separated into color-coded tabs that preserve your privacy. Cookies are separated by container, allowing you to use the web with multiple identities or accounts simultaneously.
Google search link fix (also Yandex) Mozilla Add-onThis extension prevents Google and Yandex search pages from modifying search result links when you click them. This is useful when copying links but it also helps privacy by preventing the search engines from recording your clicks.
HTTPZ Mozilla Add-onHTTPZ is meant to be unobtrusive and lightweight, it respects your privacy, and is free of trans fats. Additionally, it is very configurable, and should be slightly more secure than some of the alternatives out there, since it has a couple of built-in defenses against SSL-stripping attacks.
Link Cleaner Mozilla Add-onClean URLs that are about to be visited: removes utm_* parameters; on item pages of aliexpress and amazon, removes tracking parameters; skip redirect pages of facebook, steam and reddit
Privacy-Oriented Origin Policy Mozilla Add-onPrevent Firefox from sending Origin headers when they are least likely to be necessary, to protect your privacy.
Skip Redirect Mozilla Add-onSome web pages use intermediary pages before redirecting to a final page. This add-on tries to extract the final url from the intermediary url and goes there straight away if successful.
Temporary Containers Mozilla Add-onOpen tabs, websites, and links in automatically managed disposable containers. Containers isolate data websites store (cookies, storage, and more) from each other, enhancing your privacy and security while you browse.
TrackMeNot Mozilla Add-onAn artware browser add-on to protect privacy in web-search. By issuing randomized queries to common search-engines, TrackMeNot obfuscates your search profile and registers your discontent with surreptitious tracking.
Redirect AMP to HTML Mozilla Add-onThis web extension enables users to choose to opt-out of using Accelerated Mobile Pages (AMP) and choose to use the standard web instead.
user.jsThis is not an extension, instead it is a Firefox user.js config file. This file is a template which aims to provide as much privacy and enhanced security as possible, and to reduce tracking and fingerprinting as much as possible - while minimizing any loss of functionality and breakage (but it will happen).



  1. Only privacy/security focused alternatives will be suggested.
  2. Many replacements are based off this Wikipedia article (List of Google products)
  3. Products from companies such as Microsoft, Apple, Yahoo, Amazon, etc. will not be recommended unless there is a very good reason to. This includes companies/apps/services they own.
  4. Controversial services will have a disclaimer attached if needed.
  5. 5-eyes, 9-eyes, and 14-eyes services will be listed and marked as such. Both the location the company is registered and the server IP are taken into consideration.
    5Australia, Canada, New Zealand, UK, USA
    9Denmark, France, Netherlands, Norway
    14Germany, Belgium, Italy, Sweden, Spain

Web-based products

Back to top

Search (Web & Images)

DuckDuckGo5-eyesOne of the best privacy-focused search engines. Domain is hosted in USA which could potentially be problematic for some.
Startpage9-eyesAnother privacy search engine that claims to not track any of your data. They operate servers in both USA and Europe. Note: Startpage was recently acquired. See Issue #12. Thanks @pydo, @ThijsRay, and @DatAres37. Also see this comment in Issue #99 from @danarel on Startpage.
searx.meOpen-source (thanks for clarification u/Sheezdudeln) privacy search engine. Domain hosted in Germany.
MetaGer14-eyesMetaGer is the search engine project from the registered nonprofit organization SUMA E.V. in Germany.
Qwant9-eyesMajor improvements since 2018's guide. would prefer better info other than an outdated reference
SwisscowsA Swiss search engine that offers a unique search experience for the web, images, videos, music, and more. They are currently funding a mail service. Read through their datacenter about page, it's really interesting.
Mojeek5-eyesUnlike other privacy search engines which act as a "middle man" between you and Google/Bing/Yahoo, Mojeek has their own crawler and index. The results aren't as complete as some of the others, but it is still impressive and they are actively building their index to include more results with better accuracy.
EkoruPrivacy focused search engine that also aims to clean up the oceans. Thanks @mynamesleon
CyberdDecentralized Google. A web 3 alternative for the Google search engine. In Beta testing mode. Uses IPFS and Tendermint consensus for security and economic incentives. Please see their ELI-5 FAQ for more info.
Infinity Search5-eyesInfinity Search is a privacy metasearch engine that does not log any information about its users. In terms of privacy, it works the same way as DuckDuckGo. It is free to use and is funded by non-tracking advertisements and affiliate links. It is also completely open-source.
Runnaroo5-eyes"Runnaroo was built from the ground up to provide an all around better search experience." Thanks @codingepaduli


PeerTubeDecentralized, federated video hosting network. Still quite small, but is growing and has a dedicated community. Although there is no central database/server, all the separate instances can still talk to one another. This allows for data exchange and a way to view anyone's videos while only associating with one instance. Thanks @kdkasad for clarifying federation.
BitChute5-eyesAlso P2P, but not decentralized. Due to it being proprietary, if BitChute goes down then the whole thing goes down (unlike PeerTube). (thanks u/up-sky-7)
DTubeLooks very similar to YouTube. Advertised as "first crypt-decentralized video-platform". Built on Steemit and IPFS.
Bit.tubeAppears to be a crypto-powered decentralized video sharing service. (thanks u/rudolf323)
InvidiousAn open-source front-end alternative to YouTube. Seems to work pretty well from my experience so far, and it hasn't triggered anything on my adblocker/privacy extensions. Also offers downloads in many formats for videos (including .vtt subtitles).
HooktubeA slightly better way to use actual YouTube. (Use as a "last resort")
LBRYA decentralized platform for distributing and supporting creators's work. It aims to be Open, Community driven "digital marketplace". It can be used in a similar way to YouTube: browsing, subscribing to channels, there is a mechanism to send "tips" to creators. Looks up videos based on a blockchain and is open-source and uncensored. It already has some "larger" creators like Minutephysics, Veritasium, Barnacules and Lunduke.
US.TVPeerTube instance hosted by
FreeTubeOpen-source desktop YouTube client that uses the API to serve content.


Local newspaperSupport independent and qualitative journalism in your community.
AllSidesUnbiased news source (primarily for US politics). Thanks @jeanofthedead
MinifluxMiniflux is a minimalist and opinionated feed reader. Completely open-source, along with automatically removing pixel trackers.


SympaSympa is an open-source mailing list manager. It provides advanced features with a rich and secure web interface.
GNU MailmanMailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more.
Discourse5-eyesDiscourse is the 100% open-source discussion platform built for the next decade of the Internet. Use it as a mailing list, discussion forum, or long-form chat room.
Groups.io5-eyesa privacy focused email list system that does not track you, nor your members. It is not open source. Data is hosted on one central server but the server is encrypted. It has modern email group features such as a wiki, integrations, and RSS import support.
  • Use other forum sites relating to specific topics. This is a very broad service.


DeepL14-eyesDeepL is an artifical intelligence translation service. Please keep in mind DeepL tracks the text you translate unless you purchase Pro. See sections 4 & 5 of their privacy policy for more information. Thanks u/TheCy-FiJuggernaut
ApertiumA free, open-source translation system.

Google Ads/AdMob/AdSense

EthicalAdsA developer-focused, privacy-obsessed ad network from the fine folks at Read the Docs. Source code can be on GitHub.

Google Alerts

F5Bot5-eyesEmails you when your selected keywords are mentioned on Reddit, Hacker News, or Lobsters.

G Suite (enterprise cloud)

NextcloudNextcloud 19 now has Community Document Server and ONLYOFFICE apps integrated which allows self-hosted instances of docs/sheets/slides. Users are able to edit documents in real time. Thanks @k3tan172 and @plutocrat
Open-XchangeA secure hosted email and productivity platform, designed for providers of all sizes to offer their customers email, calendar, storage, encryption and more.


JoomlaSelf-hosted and open-source content management system (CMS).
Write.asSelf-advertised as privacy-focused.
WordPress self-hostedThe open-source version of WordPress. A very popular tool and a recognized name.
concrete55-eyesOpen-source CMS.
Noblogs9-eyesA privacy/security focused blogging platform.
GhostOpen-source modern CMS. Boasts "over 19x faster than WordPress". Thanks @peterge1998
Bear5-eyesFree, no-nonsense, super-fast blogging. No javascript, no stylesheets, no trackers. Just your words.
SimpleblogsFLOSS blogging platform with a focus on privacy. Easy to self-host (standard rails app, ships with AWS deployment scripts. AWS is not required). Access restricted to accounts which you create and hand out. Good for private blogs but not for commercial/public blogging.


Matomo9/14-eyes(Matomo/parent company) - Open-source analytics platform. (thanks u/Newblik)
Fathom5-eyesSimple analytics for bloggers & businesses
Plausible5-eyesOpen-source, privacy-focused web analytics.
GoatCounter14-eyesSimple web statistics. No tracking of personal data. Open-source and may be self-hosted. Free for non-commercial use; paid plans available.
Simple Analytics9-eyesGreat analytics with privacy and simplicity in mind. Paid plans only (with free trials).
Toasted Analytics5-eyesSimple, privacy friendly analytics with event tracking. Paid only (with free trial)
ShynetShynet is a self-hosted analytics tool that doesn't make use of cookies. It is privacy focused and fully open-source. Thanks @woutfeys
SupabaseSupabase is an opensource alternative to Firebase. As of right now you can use their hosting plan for free as it's in alpha, or you can self host (note on self hosting). Thanks @woutfeys
GoAccessAn open-source web server analysis tool. Installs on your web server (ideally), but works just as well if you download your logs someplace else. Interactive; cursor around in the report and see what's going on. Can generate HTML reports. Can also generate realtime interactive HTML reports if you run it in server mode. Lightweight, only requires UTF-8 support and ncurses (ncursesw, if you want a UTF-8 enabled console). Available in the default package repositories of multiple Linux distros. Thanks @virtadpt
OffenOpen-source and self-hosted, Offen is a fair and lightweight web analytics alternative that treats operators and users as equal parties.
UmamiA simple, easy to use, open-source/self-hosted web analytics solution.
Kindmetrics5/14-eyesAn open-source analytics tool. Landing page and company is based in Sweden, CDN in EU, Servers on Digitalocean (USA) datacenter in Germany.
userTrackSelf-hosted alternative to Google Analytics, similar to Matomo but cheaper for premium features. Includes user segments, heatmaps, session recordings and A/B testing.
Piwik PRO5-eyesAn analytics suite with a focus on user privacy and data security.


PhotoprismSelf-hosted and open-source Personal Photo Management powered by Go and Google TensorFlow.
ownPhotosSelf-hosted and open-source Google Photos alternative.
Piwigo9-eyesSelf-hosted and open-source cloud photo manager. You can also sign up for an "as a service" account.
JottaCloud9-eyesNorway based cloud storage provider with free and paid plans. Thanks @mynamesleon
CrypteeEncrypted photo storage in a simple solution similar to Google Photos.
PhotoStructureSelf-hosted photo and video manager. Cross-platform (macOS, Windows, Linux, Docker). Scales to millions of assets, with automatic organization, auto-transcoding, and advanced de-duplication.
LycheeAn open-source self-hosted photo-management tool that includes built-in support for videos. Thanks @m0yP


Lightning Calendar (Thunderbird)Developed by Mozilla Foundation and open-source. Integrates into Thunderbird and SeaMonkey.
Tutanota Calendar14-eyesDeveloped by Tutanota. Free cross-platform encrypted calendar. Allows importing of other Calendar files. Can't be synced to other calendar software.
Fruux14-eyesOpen-source calendar using "sabre/dav" (FOSS WebDAV, CardDAV, and CalDAV). They mention privacy quite a bit on their site. Very large number of features, and supports nearly every device: Windows, iOS, Linux, Android, BlackBerry, SailFish, and also a webapp for browsers.
EteSyncSecure, end-to-end encrypted, and open-source sync for your contacts, calendars and tasks.
Baïkala lightweight CalDAV+CardDAV server. It offers an extensive web interface with easy management of users, address books and calendars. It is fast and simple to install and only needs a basic php capable server. The data can be stored in a MySQL or a SQLite database. Thanks @mahdi1234
NextcloudNextcloud also offers a calendar solution using CalDAV and CardDAV. Thanks @mahdi1234 for pointing this out.
RadicaleSelf-hosted calendar server written in Python. WebUI for desktop, CalDav/CardDav for mobile sync. Can use a reverse proxy with Nginx for HTTPS.
Mailfence Calendar14-eyesSupports vCal/iCal import, export and can be accessed by using CalDAV. Users can share their calendars with group members and can also create polls.

Docs/Sheets/Slides (cloud)

CryptPad9-eyesOpen-source "zero knowledge" collaborative cloud editor. They offer Rich Text, Code, Presentation, Sheet (beta), Poll, Kanban, Whiteboard, and CryptDrive. 100% Client side encryption. Tons of useful features.
EtherpadSelf-hosted collaborative editor. Does not use the browser. Not the greatest interface, but it's open-source and you have full control over who can see your data.
CrypteeOpen-source and privacy focused photo and document storage/editing. Based in Estonia, so your files are outside the reach of any 14-eyes country. They don't even require an email address to sign up.
LibreOffice Online14-eyesSelf-hosted instance of LibreOffice that you can run in your browser. Thanks @flubberding
ONLYOFFICEOpen-source private cloud replacement for Google Docs'suite and Office 360. Also available as a self contained rich application.
Arcane OfficeA decentralized office suite with high-security and zero-knowledge on your data. With Arcane Office, you have maximum control on your personal stuff. Full-featured online document and spreadsheet editor. Secure storage to save your photos. All free for personal use. Thanks @taraletti

Docs/Sheets/Slides (offline)

LibreOfficeOpen-source offline document suites.
LyXIt's an open-source (and offline) document processor using TeX/LaTeX. It's different than Docs or Word but amazing, once you get used to it. Thanks @Glitchy-Tozier
ONLYOFFICEOffline version of ONLYOFFICE, an open-source private cloud replacement for Google Docs'suite and Office 360. Also available as a self contained rich application. Thanks @PalmoliveDev
CrypteeOffline version of Cryptee for web. Runs as a progressive web app. Works most modern phone browsers (Chrome, Opera or Firefox on Android; Safari on iOS). Also works in desktop browsers that support PWA (the website lists that only Chrome works, but others will work too.
CalligraCalligra Suite is an office and graphic art suite by KDE. It is available for desktop PCs, tablet computers, and smartphones. It contains applications for word processing, spreadsheets, presentation, vector graphics, and editing databases. (Free and Open-source Software)


Njalla14-eyesPrivacy-focused domain registration. Competitive pricing and a large list of available domain extensions. They also offer VPS hosting. Built by people who built The Pirate Bay among others. (thanks u/brais33 and u/HumbleBasis6). Note: some users may have issues with them legally owning your domain.
Porkbun5-eyesDomain registration with free WHOIS privacy.
OrangewebsiteAn Iceland-based freedom of speech web hosting provider. They never actually ask for your name, at least when you pay in Bitcoin.


ownCloudOpen-source and self-hosted. Provide your own storage.
NextcloudAlso self-hosted. Spin-off of ownCloud. Also offers Calendar and Contacts (thanks @chribre)
Syncthing9-eyesAn open-source continuous file synchronization program. It synchronizes files between two or more computers in real time, safely protected from prying eyes. Your data is your data alone and you deserve to choose where it is stored, whether it is shared with some third party, and how it's transmitted over the internet.
SiaFully decentralized cloud storage.
TresoritPrimarily meant for businesses, but offers a free version for individuals as well. (thanks u/xNick26)
Sync5-eyesEnd-to-end encrypted Google Drive/Dropbox replacement.
JottaCloud9-eyesNorway based cloud storage provider with free and paid plans. Thanks @mynamesleon
Armored9-eyesNextcloud instance hosted by Paid plans with 30-day trial. Servers in a "secure bunker" in Norway. Supports other Nextcloud features such as Nextcloud Talk.
seafileOpen-source and self-hosted file sync&share solution.
Cozy Cloud9-eyesFrench based cloud storage provider with free and paid plans. Can also be self-hosted and is open-Source. And it also offers a collaborative notes editor.
Mailfence Documents14-eyesDocuments can be accessed using WebDAV or edited online. Users can drag and drop files in folders and categorize them with tags.
Filecloud Community EditionPowerful, secure Dropbox-like enterprise class file sharing and sync solution for home or business.

Hangouts (text/video messaging)

Signal5-eyesWhistleblower and privacy advocate Edward Snowden recommends Signal.
ToxTox is unique as it uses P2P technology to ensure the network never goes down, as long as there are users to keep it alive. They specifically say on the website "Tox has no central servers that can be raided, shut down, or forced to turn over data".
Wire5-eyesUses end-to-end encryption. Looks to be more of a corporate service with tiered plans.
Element5-eyesOpen-source privacy-focused chat service with end-to-end encryption. They offer webapps, desktop apps, iOS, and Android (Play Store and F-Droid). Uses the "Matrix" protocol for decentralized communication.
ThreemaSwiss-based GDPR-compliant instant messenger. Has apps for both iOS and Android. Unlike Signal, no phone number is required (nor is an email) to sign up. End-to-end encrypted. Thanks to @nathanvogel
Keybase5-eyesencrypted chat like Signal with features like Slack. Does not require a phone number to sign up. Also has file storage. Note: Keybase was acquired by Zoom, Inc. in May 2020 ( Keybase blog, Zoom blog). Thanks @notpushkin & @multimob.
Jitsi5-eyesJitsi is an open-source secure video conferencing platform. No account is needed to use it, simply enter a Room Name to join or host a meeting. The host is able to kick rogue users from the call. Works directly in your browser, with apps available for iOS and Android. It is not necessary to self-host, but self-hosting is an option for those who wish to. Very low latency and easy to set up. A free public server is available at (5-eyes server)
Jami5-eyesAudio / Video Calls, Conferences, Messaging app with peer-to-peer and end-to-end encrypted communications.
MumbleA free, open-source, low latency, high quality voice chat application.
SessionOpen-source. It is an end-to-end encrypted messenger that removes sensitive metadata collection. No phone number required to create an account.
  • See this article for why I didn't include WhatsApp and why you should NOT use it (if someone has a better Outline link, that would be much appreciated).
  • I have also removed Telegram. See Issue #29 from @arsv.

Gmail (mail service)

Forward EmailA free and open-source email forwarding service focused on a user's right to privacy.
ProtonmailOne of the top privacy-focused email providers. Servers are in Switzerland in an underground guarded bunker that they claim can "survive a nuclear attack".
Tutanota14-eyesOpen-source and one one of the top rated privacy-focused email providers. Located in Germany.
Posteo14-eyesCompletely anonymous mail provider located in Germany.
mailbox.org14-eyesPaid email provider, also located in Germany.
Disroot9-eyesDecentralized email service.
StartMail9-eyesOperated by the same people who run StartPage.
SimpleLoginOpen-source, self-hosted, and privacy focused email forwarding service.
MigaduPaid email provider, located in Switzerland. Focus on privacy.
Fastmail5-eyesPaid email provider, located in Australia and US.
Runbox9-eyesPrivacy focusued email provider. Thanks @petertorelli
nextCloudNow also provides an email service (self-hosted). Thanks @je-vv EmailPaid secure email service provided by
Thexyz5-eyesThexyz is a Canadian company offering privacy-conscious business email. Premium webmail costs USD $2.95 per month.
Mailfence14-eyesA secure and private email provider much like Protonmail and Tutanota. There are no google analytics nor hidden cookies. There are options to pay anonymously via cryptocurrency. It features a wide array of collaboration tools, such as groups, calendar, contacts, documents with editing space. Offers free, paid, and freemium plans. Can pay with cryptocurrency and has a warrant canary. Thanks @resto1231
CTemplarPrivacy-focused email provider located in Iceland.
Anonaddy9-eyesOpen-source Anonymous forwarding email service. Forwarded email can be encrypted (OpenPGP) to prevent Google from reading it. Accepts cryptocurrencies (including Monero).
  • This is just for the Gmail service, not a client


JoplinOpen-source notes/todo app. Available for Windows, macOS, Linux, Android, and iOS. Also offers a terminal version. It can import Evernote .enex files if you use that. It can also sync with Nextcloud (mentioned above).
Standard Notes F-DroidEncrypted note storage with loads of features. Offers a web app as well as downloads for most operating systems. Has a paid plan, but the free tier has many useful features as well.
TurtlEncrypted collaborative notebook with possibility of running your own server.
QOwnNotesOpen-source file editor with Markdown support. (thanks u/maqp2)
EteSyncSecure, end-to-end encrypted, and open-source sync for your contacts, calendars and tasks.
GitJournalYour Markdown notes stores in any Git Repo. Available for both Android (Play Store) and iOS.
Nextcloud NotesA distraction free notes taking app for Nextcloud. It provides categories for better organization and supports formatting using Markdown syntax. Notes are saved as files in your Nextcloud, so you can view and edit them with every Nextcloud client.

Play Music, Movies, & TV

JellyfinOpen-source alternative to the Play media services. You do need to provide your own content, however. In active development with frequent updates (to the source, that is).
FunkwhaleSelf-hosted, decentralized music service. Provide your own audio. (thanks u/DashEquals)
AirsonicSelf-hosted open-source media streamer. Has features for transcoding audio on-the-fly for "virtually any audio format". You can also set bandwidth limits if you need to. Looks very powerful.
Music Player DaemonA "flexible, powerful, server-side application for playing music".
Popcorn TimeOpen-source software for desktop and mobile that let you easily stream movie/TV torrents. Be careful if your country or ISP has policies against torrenting, a VPN is recommended. Thanks @je-vv
Nuclear Music PlayerStreaming music player that finds music from free sources automatically.
TriblerOpen-source peer-to-peer file sharing that provides a "Youtube"-like streaming experience. Tribler uses Tor-like onion routing to protect the privacy of its users.
  • I can no longer recommend Emby as they are no longer open source.
  • Thanks to u/eA8KESARaW6iqCpHsbE4 for suggesting Jellyfin and pointing out that Emby isn't open source.


Open Font Library5-eyesLots of Serif and Sans-Serif fonts that can be directly embedded into a website.
google webfonts helper5-eyesHassle-free way for webmasters to self-host open-source fonts from Google Fonts
Brick9-eyesOpen-source fonts that work in a very similar way to Google fonts. Most of the fonts render nicer than Google Fonts.


MoodleSelf-hosted open-source Classroom software for schools. Very powerful. Thanks @jankapunkt
ILIASAnother self-hosted open-source classroom software. Thanks again to @jankapunkt
CanvasPaid service by Instructure. Also available as a self-hosted, open-source option. To ensure privacy, use the self-hosted option.

Maps/Street View

OpenStreetMap9-eyesCollaborative project to create a free, editable map of the world (from Wikipedia). Completely crowdsourced. Very strong alternative to Maps.
Qwant MapsMaps from the makers of Qwant search engine. Thanks @mynamesleon
BenmapsAnother maps alternative based on OpenStreetMap. Thanks @dimqua


TransportrAn open-source Transit app on Android that takes information from several providers (e.g Deutsche Bahn in Germany) and enables you to use them in the app. Visualises the routes on an online OpenStreetMap map. Works in most of Western-Europe, as well as the USA, Australia, Canada, New Zealand, Brazil, Nicaragua, Costa Rica, the UAE and Ghana. Beware: most information-providers only have beta or alpha support, it may be a good idea to keep a second app as a fallback option


No known alternatives.


BlockSurveyBlockSurvey enables digital rights (identity and data ownership) to users using Blockstack's blockchain. Users truly own their data with BlockSurvey. All your data is protected using your key and only you can access it. There are no trackers, cookies, or fingerprints on the forms of data providers. Thanks @compressstudio

Operating systems

Back to top


Ubuntu TouchUbuntu, but for phones.
LineageOS5-eyesOpen-source and based on Android, but without the crap.
SailfishOSPrivacy-focused mobile OS by Jolla with a proprietary UI and Android compatibility layer on top of an open-source Mer GNU/Linux base.
GrapheneOSOpen-source Android-based OS with an emphasis on security and privacy. Features advanced hardening and privacy protections throughout the system.
CopperheadOS5-eyes-eyesA security and privacy focused mobile operating system compatible with Android apps. Available as Google-free secure Android on the latest secure android phone.
postmarketOSOpen-source mobile Linux OS. Can install different user interfaces such as Plasma Mobile. Thanks @okias
Replicant5-eyesFree Android distribution. Puts the emphasis on "freedom and privacy/security".
CalyxOSOpen-source Android-based OS with an emphasis on security and privacy. Provides good combination of privacy and security together with usability. Optional support for MicroG.
  • You'll either need a rooted device with an unlocked bootloader, or a specific device depending on which OS you like.
  • Please see Issue #55 for details on /e/.

Chrome OS

GalliumOS"A fast and lightweight Linux distro for ChromeOS devices". Based on Xubuntu.
Qubes OS"A reasonably secure operating system", at least according to their website. Edward Snowden recommends it.
Subgraph OSA desktop computing and communications platform that is designed to be resistant to network-borne exploit and malware attacks.
TailsFor the uber-paranoid. Runs live and the entire OS is routed through Tor right from boot. Built on Debian.
KnoppixAnother Live OS, runs from CD/DVD/USB. Can also be installed if desired.
Parrot OSDebian-based and privacy focused. Fully sandboxed. (thanks u/Safe_Airport)
PureOS5-eyesThe OS of Purism Laptops (mentioned in the Hardware section). Very clean UI. Editor note: I could not get this working on a UEFI Dell laptop. The group behind PureOS does not provide any UEFI support.
GhostBSDThis is a secure open-source OS based on FreeBSD, preconfigured to be a sane desktop environment for all users.
Any other form of LinuxUbuntu; Debian; Mint; Fedora; Arch or Manjaro (Manjaro is objectively much easier to get running than Arch); Trisquel; Gentoo; Alpine (thanks u/privacyfreak555); etc etc etc

Wear OS

AsteroidOS14-eyesThe cleanest (and only) open-source alternative for Wear OS. Make sure you buy a watch that supports it!

Android Auto

No known alternatives.

Android TV

KodiIt's incredibly powerful and backed by one of the strongest communities around. Tons of plugins to do nearly anything you want. Software installs on nearly any platform.
OSMCFree, open-source media center OS. Kodi is pre-installed. Thanks to @g4rret and @lgiard for clarifying the difference between Kodi and OSMC!

Desktop apps

Back to top


Ungoogled ChromiumChromium (which Chrome and countless other browsers are built on top of) is one of the cleanest and light-weight browsers available. This version cuts out all the Google crap.
FirefoxBuilt by Mozilla, "The Privacy Company". Huge extension library; great for privacy.
Waterfox5-eyesBased on Firefox, but 64-bit only with an emphasis on speed and privacy. Has a "classic" version built off older Firefox for legacy extension support and also an "alpha" version built off Quantum. It doesn't collect any telemetry and also removes Pocket from the alpha release. Project is run by Alex Kontos and is constantly in active development. Looks very clean and fast. Android versions are in the works too. UPDATE: @Nudin pointed out in Issue #85 that Waterfox is now apart of System1.
VivaldiPrivacy-focused browser. Appears to be very customizable and feature-rich.
Tor BrowserFirefox-based browser routed through the Tor network. Automatically has a few privacy extensions installed (such as HTTPS Everywhere). Read this article for more info on how it works and the benefits of using Tor. Available for Windows, Linux, macOS, and Android.


KDE MarbleStrong alternative for G Earth. Currently only on Linux, but is being ported to other platforms. Thanks to @PopeRigby

Android Studio (not specifically for Android development, just in general)

VSCodiumVSCodium is Visual Studio Code but without all the Microsoft telemetry and branding.
VimOpen-source text editor. Thanks @moon-chilled
EmacsAnother open-source text editor. Thanks @moon-chilled
AtomAtom is a free and open-source text and source code editor for macOS, Linux, and Microsoft Windows with support for plug-ins written in Node.js, and embedded Git Control, developed by GitHub. Atom is a desktop application built using web technologies. (From Wikipedia) Thanks @woutfeys

Mobile apps

Back to top

Play Store

F-DroidCatalogue of FOSS apps for Android. Easy to install and keeps track of updates. Also has a browser version if you don't want to install the app.
Yalp Store (fork) F-DroidYalp downloads Play Store apps as APK files. Helpful if you want to stay away from the Play Store, but require an app that is only available there. This version is a fork of the original project that is no longer active. Thank @onlyjob
APKMirrorAn online library of user-uploaded APK files. Helpful if you need a specific older version of an app or don't want to download it through Google Play.
Aurora Store F-DroidAurora Store is simply a fork of the Yalp Store no longer a fork of Yalp, but is now its own project (see their readme). Update: Removed note on using microG as Aurora Store does not use it. Thanks @notpushkin
FossdroidUses the same library as F-Droid, but with a modern UI similar to that of the Play Store and the ability to view apps by popularity.
G-DroidAlso uses the F-Droid repo but with a different UI.
APKGrabberFork of APKUpdater. Both are great tools for avoiding app stores (on Android).
Aurora DroidYet another F-Droid client, potentially has a few bugs (thanks u/OfficialJohnGL4)
  • When searching for replacements, check the alternative stores (such as F-Droid) before checking the Play Store.

Chrome (Android)

Fennec F-Droid F-DroidA privacy-focused version of Firefox Android available on F-Droid. It's focused on removing any proprietary bits found in official Mozilla's builds. (thanks u/SupremeLisper)
BromitePrivacy-focused/open-source build of Chromium with built-in ad blocking. (thanks u/SupremeLisper)


Simple Calculator F-DroidAlso part of the SMT project. Available on F-Droid.
Calculator N+ or NCalc+Open-source feature-rich calculator. App itself is no longer in development, but the developer does encourage pull requests. I've used it frequently and it works great. Not on F-Droid, but a 3rd party play store can probably find it; or the APK's are available as releases on GitHub. You can also compile from source.
Calculator++ F-DroidOpen-source calculator packed with features. Thanks @ghost


DAVx⁵ F-DroidDAVx⁵ is an open-source CalDAV/CardDAV suite and sync app for Android.
ICSx⁵ F-DroidICSx⁵ is an Android app to subscribe to remote (“Webcal”) or local iCalendar files (like time tables of your school/university or event files of your sports team). Thanks @je-vv
Fruux (mobile app)Same service from above provides an Android app.
Etar F-DroidOpen-source material design Calendar that integrates with the Android Calendar API. Can integrate with CalDAV/CardDAV servers.
Simple Calendar F-DroidOpen-source. Part of the Simple Mobile Tools project.


Open Camera F-DroidOpen-source camera for Android. Thanks @je-vv


Clock + F-DroidOpen-source Alarm clock, timer, and stop watch.
Simple Alarm ClockExactly as it's name says; simple alarm clock yet adds many improvements over other apps. No dock mode or world clock.
Insane Alarm!Developer states that he had "spent a night out with the boys and drank a bit too much but needed to be up in the morning". So, he made the loudest alarm clock possible based off an emergency alarm from when he was in the military. This app doesn't mess around, use it wisely.


Fruux (mobile app)Fruux also provides a contacts app.
Simple Contacts F-DroidOpen-source. Part of the Simple Mobile Tools project.
Open Contacts F-DroidOpen-source contacts. (thanks u/consentio)
EteSync F-DroidSecure, end-to-end encrypted, and open-source sync for your contacts, calendars and tasks.

Android Messages (specifically SMS/MMS, not IM)

QKSMS F-DroidOpen-source. Very clean and feature rich SMS app. Available on F-Droid. F-DroidOpen-source and utilizes Signal's encryption protocol. Seamlessly works with SMS. End-to-end encryption with other Silence users. Available on F-Droid.
SignalSignal possesses SMS/MMS capabilities on Android. Using it as your default SMS app has the advantage of having your SMS and your online-messaging-service integrated within one app. Doing so will also show stats within the app of how many messages you send are encrypted, and offers to send invites to your contacts. Thanks @Glitchy-Tozier for suggesting it be listing as SMS/MMS alternative.

Gboard (Google Keyboard)

AnySoftKeyboard F-DroidOpen-source keyboard. Available on F-Droid.
Hacker's Keyboard F-DroidAlso open-source. Very useful for developers or sysadmins on the go.
kboard F-DroidOpen-source. Has features for phrases, "lenny faces", macros and more. Note: Project appears to be abandoned.
Simple Keyboard F-DroidOpen-source keyboard.
Indic KeyboardOpen-source keyboard that supports many languages that other keyboards sometimes don't support. Not on F-Droid, but can be built from source or possibly through a Play Store alternative.
OpenBoard F-DroidNew 100% FOSS keyboard, based on AOSP. Similar to "Simple Keyboard". Thanks @Glitchy-Tozier


ownCloud Android F-DroidownCloud Android client. Available on F-Droid.
Nextcloud Android F-DroidNextcloud Android client. Available on F-Droid.
Syncthing Android F-DroidWrapper of Syncthing for Android. Available on F-Droid. Also consider Syncthing-Fork which uses a native Android UI rather than the default web UI.

Gmail (smartphone app)

ProtonmailCan be downloaded from the Play Store, but may work with one of the store replacements above (such as Yalp).
Tutanota F-Droid14-eyesClient available from F-Droid.
Disroot F-DroidAvailable from F-Droid.
K-9 Mail F-DroidAvailable on F-Droid.
FairEmail F-DroidAvailable on F-Droid.
DeltaChat F-DroidAn email app with a chat-based UI and privacy support with autocrypt. provides IMAP settings for Android/iOS and an iOS profile. Thanks @avasts Issue #45

Keep (or any stock note-taking app)

Notepad F-DroidOpen-source. Supports Markdown and HTML. Very clean and feature-rich. Offline only.
JoplinScroll down on the GitHub page until you reach the Android download links. No F-Droid repo, but you can download the APK directly instead of using the Play Store.
Standard NotesEncrypted note storage with loads of features.
Omni Notes F-DroidVery feature rich, open-source, material design notes app. Very active development. Available on F-Droid.
Carnet F-DroidI had some trouble finding info on this one. Looks like it has pretty seamless/painless ownCloud and NextCloud integration. Also available on F-Droid.
Markor F-DroidOpen-source notes/to-do app for Android. Supports Markdown editing. Available on F-Droid. App is 100% offline, as stated on the GitHub README.
Orgzly F-DroidOpen-source. Notes are stored in the plain-text Org mode format. Supports searching, metadata, and manual sync with Dropbox or local directory, which can be synced using e.g. Syncthing.
NotallyA beautiful, light and minimalistic notes app with no trackers, ads or analytics of any kind. Not on F-Droid, but available from this alternative market.
Nextcloud Notes for Android F-DroidAn android client for Nextcloud Notes App.


Maps F-DroidOpen-source navigation app based on MAPS.ME. Searching for addresses doesn't always work and finding businesses can be a slight hassle, but overall one of the better apps I've used.
OsmAnd F-DroidOpenStreetMap for Android. (thanks u/masao77). As OsmAnd is primarily crowdsourced, many regions may not be totally accurate. If you would like to help improve OpenStreetMap and OsmAnd, check out StreetComplete (available from F-Droid.
TransportrPrimarily European, this is an open-source public transport app. Thanks to @lgiard
Öffi (Offi) F-DroidÖffi is a public transport Android app (also shows delays and replacement bus service for more and more transport authorities in Europe and beyond) - similar to Transportr


Flym F-DroidOpen-source Material Design RSS reader.
Feeder F-DroidUse good old-fashioned RSS feeds with Feeder


Piwigo AndroidYou need to have Piwigo set up first.
Stingle Photos5-eyesA convenient, easy to use Gallery/Camera application with Backup and Sync functionality for your photos and videos which seamlessly provides strong security, privacy and encryption. All photos and videos are encrypted prior to being stored and backed up, so they are secure at rest, in transit and on cloud storage.


No known alternatives.

  • Realistically, there most likely is not a privacy friendly alternative to Google Pay. Get a wallet with RFID protection and keep your cards with you.


NewPipe F-DroidPowerful open-source YouTube alternative. Supports audio only; background playback; picture-in-picture; no ads.
YouTube VancedPlease read the XDA post before deciding to use this.


andOTP F-DroidOpen-source 2FA app.
FreeOTP+ F-DroidFreeOTP is no longer in development so this fork should be used instead as it is currently in development.
Aegis F-DroidOpen-source 2FA for Android. Available on F-Droid.
AuthenticatoriOS - Open-source 2FA for iOS. (thanks u/SomeoneWannaBe)
TofuiOS - Open-source 2FA for iOS.

Play Music/Play Movies & TV

Audinaut F-DroidAn open-source Airsonic client for Android.
MALP F-DroidAn open-source Android client for MPD. Available on F-Droid.


Keybase5-eyesEncrypted chat like Signal with features like Slack. Does not require a phone number to sign up. Also has file storage. Note: Keybase was acquired by Zoom, Inc. in May 2020 ( Keybase blog, Zoom blog). Thanks @notpushkin & @multimob.
Conversations F-Droid14-eyesAn open-source Android Jabber/XMPP client. It's a paid app on Google Play, but you can also build it from source for free if you want to.
Element F-Droid5-eyesAndroid app - The open-source Android client for Element.
Jitsi Meet (F-Droid) F-DroidJitsi is an open-source secure video conferencing platform. No account is needed to use it, simply enter a Room Name to join or host a meeting. The host is able to kick rogue users from the call. Works directly in your browser, with apps available for iOS and Android. It is not necessary to self-host, but self-hosting is an option for those who wish to. Very low latency and easy to set up. A free public server is available at (5-eyes server)
Jami F-Droid5-eyesAudio / Video Calls, Conferences, Messaging app with peer-to-peer and end-to-end encrypted communications.
Mumla (client for Mumble)Third-party Android client for Mumble.
BriarAn open-source app which supports Peer-to-Peer encrypted messaging. No phone number required for signing up. If the internet’s down, Briar can sync via Bluetooth or Wi-Fi, keeping the information flowing in a crisis. If the internet’s up, Briar can sync via the Tor network, protecting users and their relationships from surveillance. Can install through a third-party F-Droid repo.
SessionOpen-source. It is an end-to-end encrypted messenger that removes sensitive metadata collection. No phone number required to create an account. Can be downloaded from the Play Store or as an APK file from GitHub. Also has apps for iOS and Desktop.

Duo (video calls)

Jitsi Meet (F-Droid) F-DroidJitsi is an open-source secure video conferencing platform. No account is needed to use it, simply enter a Room Name to join or host a meeting. The host is able to kick rogue users from the call. Works directly in your browser, with apps available for iOS and Android. It is not necessary to self-host, but self-hosting is an option for those who wish to. Very low latency and easy to set up. A free public server is available at (5-eyes server)
Jami F-Droid5-eyesAudio / Video Calls, Conferences, Messaging app with peer-to-peer and end-to-end encrypted communications.


Mycroft AndroidAndroid client for Mycroft. Must be built in IDE; no pre-built binaries are available.
AraOpen-source virtual assistant for Android. Can replace Google Assistant (home button functionality) on most devices. Either uses the authors server by default, or you can run your own server. Thanks @FultonBrowne (author of Ara)

Play Services Framework

microGA re-implementation of Google’s proprietary Android user space apps and libraries. It allows to use more precise navigation (which is proprietary in standard Android ROMs) and optionally receive push messages (requires connection to Google's servers, but also supports routing this connection through Tor). Thanks @notpushkin

Android home screen launchers

Shade LauncherOpen-source Android launcher styled after the Google Pixel launcher. Available to download from an alternative F-Droid, APK Mirror, or GitHub Releases.
OmegaOpen-source launcher. Active development with lots of nice features. Downloads available from GitHub. Previously known as ZimLX which has since been replaced by Omega.
Lawnchair F-DroidAnother open-source launcher, also built to look similar to Google's launcher (it is built off AOSP Launcher3). Available from F-Droid and also APKMirror. (thanks u/droidonomy)
KISS Launcher F-DroidFast, open-source and small launcher. KISS mainly relies on an app-search-bar, which makes it very easy to open up apps quickly. Thanks @Glitchy-Tozier


Blokada F-DroidFrom the website: "If you want to efficiently block ads, trackers, malware, save on your data plan, speed up your device and protect your privacy with just one application, then Blokada is for you. It is free, secure and open-source." Uses internal VPN on Android to block ads.
TrackerControl F-DroidFrom the GitHub README: Allows users to monitor and control the widespread, ongoing, hidden data collection in mobile apps about user behaviour ("tracking"). To detect tracking, TrackerControl checks all network traffic against the Disconnect blocklist, used and trusted by the Mozilla Firefox browser. Thanks @E5dZEUpc3BKaJrHnQVZd5zE


Back to top


This listShows compatibility for rooting Android devices.
Purism Librem 55-eyesFrom the company that makes Purism laptops. Runs PureOS. Thanks @brandonnodnarb
PinePhone5-eyesFrom the company that makes the Pine A64 Single Board Computer. Runs a variety of mainline Linux OSs with UIs adapted for mobile.


TUXEDO14-eyesPrivacy-focused laptop maker out of Germany. Tech specs are very competent and can easily compete with other modern systems. Fully Linux compatible. They also offer desktops. (thanks u/itsec_ho)
Purism Laptops5-eyesPrivacy-focused laptop running PureOS. Good designs and decent hardware.
Pinebook ProMid-range Linux/FreeBSD alternative to Chromebook.


Microsoft Wireless HDMI adapter5-eyesThe only reason I'm recommending this Microsoft product is because there is no possible way for it to extract any data and ship it off to Microsoft. If anyone is able to find proof that it can, I will remove it.

Google Home

Mycroft5-eyesOpen-source virtual personal assistant. Can be run on a Raspberry Pi. (thanks u/Kentto7)
Home AssistantOpen-source home automation. (thanks u/bilange)


No known alternatives.

Useful links, tools, and advice


Everything you need to become a Privacy Wizard.


Back to top

Permanent RecordPublishedEdward Snowden
Ten Arguments for Deleting Your Social Media Accounts Right NowPublishedJaron Lanier
The Age of Surveillance CapitalismPublishedShoshana Zuboff
The Attention MerchantsPublishedTim Wu
ZuckedPublishedRoger McNamee

Blog posts

Back to top

Google Chrome’s users take a back seat to its bottom linePublishedBennett Cyphers and Mitch Stoltz - EFF
Quitting Facebook & GooglePublishedJ. Nathan Matias
How to fight back against Google AMP as a web user and a web developerPublishedMarko Saric

News articles

Back to top

Google Can Survive Too Much Innovation. You Can't.PublishedRobert Sher - Forbes
The truth about Google's famous '20% time' policyPublishedJillian D'Onfro - Business Insider
The Binge BreakerPublishedBianca Bosker - The Atlantic
How Malware Keeps Sneaking Past Google Play’s DefensesPublishedLily Hay Newman - WIRED
Forget Killer Robots — Bias Is the Real AI DangerPublishedWill Knight - MIT Technology Review
Google managers kept blacklists of conservative employees and one manager considered holding 'trials,' a new lawsuit allegesPublishedJulie Bort - Business Insider
A longtime Google engineer quits, saying the company is ’100% competitor-focused’ and ‘can no longer innovate’PublishedJillian D'Onfro - CNBC
Facebook and Google are doomed, George Soros saysPublishedHamza Shaban - Washington Post
Google Isn't Listening, So Its Employees Are SuingPublishedKate Conger - Gizmodo
Google sees major claims of harassment and discrimination as lawsuits proceedPublishedSam Levin - The Guardian
How to stop Google from tracking everything you do onlinePublishedTodd Haselton - CNBC
Google will always do evilPublishedJessica Conditt - Engadget
Google’s new ‘AI principles’ forbid its use in weapons and human rights violationsPublishedDevin Coldewey - TechCrunch
Google Plans to Launch Censored Search Engine in China, Leaked Documents RevealPublishedRyan Gallagher - The Intercept
Google’s China plan isn’t just evil — it’s bad for businessPublishedJosh Rogin - Washington Post
How Google Protected Andy Rubin, the ‘Father of Android’PublishedDaisuke Wakabayashi and Katie Benner - New York Times
A New Google+ Blunder Exposed Data From 52.5 Million UsersPublishedLily Hay Newman - WIRED
Three Years of Misery Inside Google, the Happiest Company in TechPublishedNitasha Tiku - WIRED
Google’s latest user-hostile design change makes ads and search results look identicalPublishedNatasha Lomas - TechCrunch
You Are Now Remotely ControlledPublishedShoshana Zuboff - New York Times

The lighter side

  • Movies & TV:
    • Snowden (2016) - Based on the true story of Edward Snowden, the CIA/NSA/etc whistleblower. Directed by Oliver Stone.
    • Deep Web (2015) - Documentary (narrated by Keanu Reeves) about Ross Ulbricht aka. Dread Pirate Roberts and the infamous "Silk Road" dark market. Directed by Alex Winter.
    • The Great Hack (2019) - Documentary about the Facebook–Cambridge Analytica data scandal. Thanks @woutfeys
    • Mr. Robot - Hacker-drama starring Rami Malek. Producers hired actual hackers as consultants to ensure the show is as accurate as possible; real-world tools used in the show.
    • Silicon Valley - Satirical tech comedy about a compression startup struggling to take off in Silicon Valley, California.
    • Shoshana Zuboff on surveillance capitalism | VPRO Documentary - Invidious instance and Hooktube
  • Podcasts:
    • Darknet Diaries (by Jack Rhysider) - Highlights real-life hackers and their stories. Covers privacy topics a fair bit.
    • The WAN Show (Linus Tech Tips) - Not specifically privacy, but they cover all sorts of tech news.
    • The Privacy, Security, & OSINT Show - "This weekly podcast presents ideas to help you become digitally invisible, stay secure from cyber threats, and make you a better online investigator."
    • Security Now! - "TechTV's Leo Laporte and I spend somewhat shy of two hours each week to discuss important issues of personal computer security." (Thanks u/Abaddon182)
  • Other:
    • xkcd - They have comics for everything.
    • System32 Comics Instagram and Reddit - Comedic computer comics.

Closing remarks

It's a shame that Google, with their immense resources, power, and influence, don't see the benefits of helping people secure themselves online. Instead, they force people like us to scour the web for alternatives and convince our friends and family to do the same, while they sell off our data to the highest bidder.

Hopefully this guide can serve as a starting point for those new to privacy, or be a good refresher for the experts.

Good luck and stay safe!