Resources
Techlore's Privacy & Security recommendations based on our strict criteria. For further assistance, we suggest our Go Incognito course and our coaching. There are external resources at the bottom for more recommendations.
-
If you just got caught in a data breach you've come to the right video. This is the ultimate guide to navigating data breaches. I'll teach how you how to figure out what data was breached, what to do with each breached data point, and how to prevent if from happening again! And no, you don't need credit monitoring services! We discuss MFA/2FA, password managers, have i been pwned, email aliasing services, phone aliasing, freezing your credit, protecting your SSN, and more!
-
Signal is one of the safest messengers, but that doesn't mean we can't make it safer! Welcome to the ultimate Signal hardening guide to make it as private, secure, & safe as possible. This video tutorial applies to iOS, Android, and touches on desktop devices using not just native Signal settings, but also other hardening techniques.
-
Welcome to Go Incognito, your guide to security, privacy & anonymity in our world. From digital protection, to physical safety, Go Incognito will cover all you need to advance through your privacy journey. Topics include FOSS, metadata, password management, permissions, two-factor authentication, search engines, browser configuration, proxies, VPNs, antiviruses, encryption, communication, Tor, operating systems, cryptocurrencies, networking, activism, and so much more.
-
NextDNS is an insanely powerful privacy and security tool allowing you to reclaim control across various devices via DNS. In this guide/tutorial, I will be explaining what NextDNS is and how it differs from most other DNS providers, all the settings offered, some of my suggested use-cases, blocklist recommendations, set-up, and many other things so you can feel confident using NextDNS. Enjoy!
-
How to threat model - one of the most misunderstood concepts in the entire privacy & security community. Welcome to our complete guide to it!
-
The ultimate guide showing how to make Linux as secure, private, and anonymous as we can make it. This video covers hardening Linux, security, privacy, anonymity, passwords, authentication, VPNs, biometrics, search engines, browsers, Tor, 2FA, virtual machines, Linux, communication, sandboxing, and more to reclaim your privacy and data today!
-
The ultimate guide showing how to make MacOS as secure, private, and anonymous as we can make it. This video covers hardening MacOS, security, privacy, anonymity, passwords, authentication, VPNs, biometrics, search engines, browsers, Tor, 2FA, virtual machines, Linux, communication and more to reclaim your privacy and data today! Say goodbye to Apple!
-
The ultimate guide showing how to make Windows as secure, private, and anonymous as you need it to be. This video covers security, privacy, anonymity, passwords, authentication, VPNs, biometrics, search engines, browsers, Tor, 2FA, virtual machines, Linux, communication and more to reclaim your privacy and data today!
-
The ultimate & complete guide to becoming anonymous, private, and secure on the internet. Learn everything you can do to get as close as anonymous as possible! This video tutorial will teach everything about passwords, 2FA, digital footprints, social media, VPNs, proxies, Tor, encrypted communication & messaging, web browsing, smartphones, computers, data privacy, real world privacy/security, FOSS (open source), anonymous shopping, and more for the web. Go Anonymous Today!
-
The ultimate guide showing how to make Android as secure, private, and anonymous as you need it to be. This video covers security, privacy, anonymity, passwords, authentication, VPNs, biometrics, search engines, browsers, Tor, 2FA, custom ROMS (GrapheneOS, LineageOS, CalyxOS) and more to reclaim your privacy and data today!
-
The ultimate security & privacy Apple iOS guide showing how to make iOS safe and anonymous as you need it to be. This video covers security, privacy, anonymity, passwords, authentication, VPNs, biometrics, search engines, browsers, Tor, 2FA, and so much more to cover everything related to Apple Privacy & Security! Reclaim your privacy today 🕵
Software, hardware and applications
Affiliate Link: Some services link to their official site, with a separate affiliate link if you choose to support Techlore. View our strict requirements here. To view all affiliates, visit here.
marks a favorite. They don't represent every threat model and shouldn't be over-analyzed.
Web Browsers #
Safari #
Apple's Safari offers users in the Apple ecosystem a moderately safe default browser with basic privacy & security precautions out-of-the-box. Consider using AdGuard for further protections. We strongly recommend Safari specifically to users using 'Lockdown Mode' on iOS, as it's the way only to exclude trusted websites.
AdGuard #
For those using Safari, AdGuard is a great option to block ads, trackers, phishing, use custom DNS, and more.
Cromite #
Cromite is a Chromium fork based on Bromite with built-in support for ad blocking and an eye for privacy. It is supported on Android, Windows, & Linux.
Password Managers #
KeePass #
KeePass is a secure & customizable password manager, but it requires work to function as conveniently as some users may expect. We have recommended clients below to make the experience as smooth as possible.
KeePassXC (client) #
KeePassXC is a modern, secure, & customizable KeePass client available on all major desktop operating systems with active development.
KeePassDX (client) #
KeePassDX is a KeePass client for Android available on F-Droid and the Google Play Store with a modern interface, active development, and strong trust in the community.
Strongbox (client) #
Strongbox is a beautiful KeePass client that integrates well with iOS & MacOS devices, even offering the option for E2EE syncing via iCloud. They also now use a local network sync to avoid the cloud altogether.
Proton Pass #
Proton Pass is a secure password manager integrated with the Proton ecosystem with an emphasis on a simple user experience. Its built-in email aliasing is an attractive feature, along with its UI/UX.
Bitwarden #
Bitwarden is a trusted, cloud-based option with zero-knowledge encryption to keep you safe. They offer an attractive experience for password management, with the option for self-hosting.
1Password #
1Password is an option for users who aren't happy with other offerings. It is similar to most 'mainstream' cloud-based managers, while having an excellent privacy & security record.
TOTP 2FA #
Ente Auth #
Ente's E2EE 2FA app. A cross platform TOTP app with secure online backups on all major operating systems.
Encryption #
Veracrypt #
Veracrypt offers users encrypted volumes, and on some operating systems full disk encryption. It is a great option for those needing maximum security.
GNU Privacy Guard #
GnuPG offers flexible encryption options across different mediums for users needing a more versatile option, at the cost of generally being more advanced.
7-zip #
7-Zip is an archiving tool with basic file encryption options. It is not as robust as the other options and should be used with caution for sensitive tasks.
Firewalls #
Portmaster #
Powerful (& beautiful) firewall program for Windows & Linux to give you finer control over what your device connects to.
Lulu #
Firewall program for MacOS to give you finer control over what your device connects to.
rethinkDNS #
Block malware, spyware, ads, and trackers across all apps with Rethink DNS. Servers in 300+ locations: Experience Blazing fast speeds.
Applications #
Exodus Privacy #
Analyzes privacy concerns in Android applications. Many iOS applications will use similar trackers, so this is a useful tool to check trackers for applications before downloading.
Operating systems
Affiliate Link: Some services link to their official site, with a separate affiliate link if you choose to support Techlore. View our strict requirements here. To view all affiliates, visit here.
marks a favorite. They don't represent every threat model and shouldn't be over-analyzed.
Desktop Operating Systems #
Fedora #
Fedora has strong out-of-the-box privacy & security practices, all backed by a trustworthy and commited team. Use Fedora Silverblue for an even more secure, atomic experience.
QubesOS #
Qubes separates programs & operating systems into secure environments for maximum safety. It can be slower and may have compatibility issues with certain hardware.
Whonix #
Whonix offers both a virtual and live environment with a goal of anonymity. All activities are routed through Tor with strong privacy & security precautions.
Arch #
Arch offers bleeding-edge updates with a more configurable option for users. Many looking to harden Linux themselves enjoy the flexibility offered by Arch.
MacOS #
For users unable to use Linux for one reason or another: MacOS can be a reasonably private & secure option for many threat models. Despite being proprietary, it offers decent protection and is a great alternative to Windows. Please refer to the guide below for our MacOS hardening guide.
Android #
GrapheneOS #
A private and secure mobile operating system with Android app compatibility via Sandboxed Google Play Services. Developed as a non-profit open source project.
CalyxOS #
CalyxOS maintains quality protection for most users, while offering many usability features via MicroG for app compatibility. Developed by a non-profit Calyx Institute with moderate device compatability.
DivestOS #
DivestOS attempts to fix some security issues with LineageOS (like bringing verified boot to some devices) while maintaing large device compatability & extra usability features.
MicroG #
MicroG is an open source replacement to proprietary Google Play Services. It allows apps & services to work as intended in a more privacy-respecting & transparent fashion on most custom ROMs.
Plexus #
While MicroG & de-googled ROMs try to maintain the compatability of Google Play Services, they are not perfect. Plexus allows you to check what apps do/don't work, deveoped by us at Techlore.
Other services
Affiliate Link: Some services link to their official site, with a separate affiliate link if you choose to support Techlore. View our strict requirements here. To view all affiliates, visit here.
marks a favorite. They don't represent every threat model and shouldn't be over-analyzed.
Search engines #
SearXNG #
SearXNG is an open source, configurable, self-hostable, metasearch engine that compiles results from countless search engines in the same place.
Brave Search #
Brave Search indexes its own results with Brave's crawlers while respecting user privacy.
Mullvad Leta #
Mullvad's Leta uses the Google Search API as a proxy to deliver Google results privately. It can only be accessed with an active Mullvad VPN subscription.
DuckDuckGo #
DuckDuckGo is a metasearch engine with mainly Bing results and an emphasis on user privacy.
Startpage #
Startpage is a metasearch engine with privately proxied Google and Bing results.
VPNs #
Mullvad VPN #
Mullvad is one of the most transparent providers with some of the most robust measures to keep users safe. Use the VPN Toolkit below to compare VPNs more thoroughly.
IVPN #
IVPN, similar to Mullvad is one of the most transparent providers with some of the most robust measures to keep users safe. Use the VPN Toolkit below to compare VPNs more thoroughly.
Proton VPN #
Proton VPN is included in the Proton ecosystem and offers a very safe experience. Use the VPN Toolkit below to compare VPNs more thoroughly.
Windscribe #
Windscribe is a great VPN provider for an excellent value. Use the VPN Toolkit below to compare VPNs more thoroughly.
DNS #
NextDNS #
NextDNS offers a highly customizable DNS solution for the upmost control across your devices in a simple interface.
Mullvad DNS #
Mullvad offers a free private & secure DNS service with several blocklist options for limited customization.
CONTROL D #
CONTROL D offers a highly customizable DNS solution for the upmost control across your devices. There's a discount available for Windscribe customers as they are from the same company.
Messengers #
Briar #
Briar is a Tor-routed, E2EE, P2P, anonymity-oriented messenger with some of the most robust protections. It can even be used without internet access.
Signal #
Signal is the gold standard for private & secure messaging, all with a simple interface. Threat modeling is necessary though, as Signal requires a phone number to register which may be problematic for some. We recommend using Signal with usernames for improved privacy. Use our hardening guide below for max safety.
SimpleX #
SimpleX prides itself on requiring no identifiers, is decentralized, and is audited with fairly competitive features. Your data is your own with no central servers.
Session #
Session strives for a balance between privacy, security, anonymity, & usability.
Matrix #
Matrix is a federated protocol with the option for E2EE. There is a degree of trust with each homeserver, especially regarding metadata. Its federation is both a pro & a con that users should be aware of before using.
Email #
Proton Mail #
Proton Mail checks all the right boxes when it comes to adding privacy & security protections over the inherently broken email system, all while seeking a simple experience in a larger suite.
Tuta #
Tuta offers a transparent service with trust, security, and privacy as its focus. They are open source and implement fantastic protections for their users.
StartMail #
StartMail offers a polished web client with a feature-rich experience.
Mailbox.org #
Mailbox.org offers privacy & security with an incredibly feature-rich experience. It may be overwhelming and cluttered to some, or a power user's dream.
Self-Host #
Self-hosting is commonly touted as the safest email approach, but this isn't always the case. Self-hosting comes with risks you should read in the referenced link.
Aliasing #
Proton Pass #
Proton Pass is a password manager with built-in support for email aliasing via SimpleLogin.
SimpleLogin #
SimpleLogin makes email aliasing easier than ever, all built with privacy & security from the ground up. SimpleLogin can also be self-hosted or utilized via Proton Pass.
addy.io #
addy.io (previously AnonAddy) is a private & secure email aliasing service with a very generous free option. It's the main alternative to SimpleLogin/Proton Pass.
MySudo #
MySudo is predominantly a phone number aliasing solution. Like most aliasing solutions, it's a transfer of trust from countless services to one.
Privacy.com #
Privacy.com is a card aliasing solution for shopping online. Like most aliasing solutions, it's a transfer of trust from countless services to one.
Guerrilla Mail #
Guerrilla Mail is a disposable email service, allowing users to generate ephemeral emails conveniently.
Cloud providers #
NextCloud #
Nextcloud is a self-hostable suite for photos, documents, files, contacts, and more. It's a robust service, with the main drawback being an unpolished E2EE offering. You can either use a trusted organization to host your data, or ideally you host your own data.
Proton Drive #
Proton's drive offering within the Proton ecosystem with security in mind. It's still not a complete suite for every operating system, but it has basic functionality for many use-cases.
MEGA #
MEGA is a more traditional cloud provider with E2EE and usable, source-available clients.
Cryptomator #
Cryptomator allows users to encrypt their files before uploading them to another mainstream cloud provider (Google Drive, Dropbox, iCloud etc.) - it's a great way to still use the cloud provider of your choice with improved security.
Notes, docs & photos #
Cryptee #
Cryptee offers E2EE notes, documents, & photos with a modern theme as a PWA. It is not collaborative nor designed for external sharing.
Notesnook #
Notesnook offers E2EE notes & documents for people looking for a feature-filled experience in their workflow.
Ente #
Safe Home for your photos and videos. Store, share, and discover your memories with absolute privacy.
Cryptocurrencies #
Monero #
Monero is one of the strongest, private-by-default cryptocurrencies to ensure the safety of transactions. Its wide adoption & community-first approach to privacy makes it the gold standard for private digital transactions with FCMP++ coming soon.
Zcash #
Encrypted electronic cash. The first cryptocurrency to develop zero-knowledge encryption for private peer-to-peer payments.
Haveno #
Haveno is a non-custodial, decentralized exchange platform for crypto and fiat currencies built on Tor and Monero.
Cake Wallet #
Cake Wallet is a wallet to store your Bitcoin, Monero, & Litecoin in a trusted place.
Coincards #
Coincards has a vast selection of Gift Cards from America's top merchants. They allow you to buy these gift cards with numerous cryptocurrencies—including Bitcoin and Monero.
Hardware 2FA #
Webhosting/VPS #
Njalla #
Njalla offers domains & servers with privacy at the forefront of their products and cryptocurrency options for payment.
OrangeWebsite #
OrangeWebsite offers web hosting, VPS, domains, and more with minimal registration requirements & Bitcoin for payment.
1984 Hosting #
1984 Hosting offers private VPS hosting and other services to keep their users safe.
Networking #
Other tools #
EasyOptOuts #
Easy & affordable data removal service. Nothing matches its value and we appreciate the transparency of the two owners.
Dangerzone #
Dangerzone is a program to safely open potentially suspicious attachments.
AlternativeTo #
AlternativeTo allows users to find more privacy-respecting alternatives to the software they use.
Objective-See #
Objective-See offers a suite of open source security & privacy tools for MacOS.
External resources
Explore our curated list of organizations and tools that offer valuable insights, advocacy, and support for protecting your online freedoms. We don't have all the answers and encourage everyone to get information from multiple places!