Last updated: 28 January 2024
Security and Privacy Recommendations:
In General:
-
Stay away from social media. When really necessary, just use a private messenger
suggested below.
- If you can't remove it later, then don't put it online.
-
Avoid unauthorized access:
to set strong and complex passwords.
- Use encryption whenever possible.
- Don't leave your devices unattended.
- Don't plug in random stuff in your devices.
- Disable Bluetooth, WiFi, etc, when not required. Turn on Airplane mode as much as possible.
- Be very stingy with the permissions you grant to users or apps on your network or devices.
Remark: Kindly stop using an operating system that collects data like Windows 10/11 or the custom flavored
skinned Android by your phone's manufacturer; you deserve something better. Choose an alternative here. But
no matter which OS you choose beware that the desktop operating systems were not
designed with security in mind, so try avoiding desktops as much as possible and sticking to
an updated mobile device preferably running one of the OS recommended here.
Don't fall for flashing custom ROMs just for the sake of De-Googling your Android device as doing so would
seriously ruin your Security and thus, your Privacy. Use the Recommended operating system here or stick to
the stock ROM being updated regularly.
DO NOT USE A DEVICE IN ABSENCE OF REGULAR UPDATES
Operating system:
- π± Phone:
-
Graphene OS
GrapheneOS is the best choice when it comes to privacy and security. GrapheneOS is a Privacy and
Security-focused mobile OS with Android app compatibility developed as a non-profit open source project.
It's focused on the research and development of privacy and security technology, including substantial
improvements to sandboxing, exploit mitigations, and the permission model. It recently added support for
sandboxed play services.
If you can't get a pixel then avoid using ROMs that require you to keep the bootloader unlocked and
stick to your stock ROM.
π» PC:
A Linux distribution is an operating system made from a software collection that is based upon the Linux
kernel and, often, a package management system. (Rolling releases are preferred over stable release
distros).
-
Beginner/Migrating from Windows or MacOS:
Fedora is an operating system developed as a community project and sponsored by Red Hat (a subsidiary of IBM). It prefers flatpak as a dominant packaging style. It follows a
semi-rolling release cycle. Each Fedora release is supported for one year, with a new version
released every 6 months. It tends to be very up to date both in terms of applications and the
Linux kernel itself. If you are worried that you many unintentionally break your system,
then have a look at Fedora Silverblue (uses
GNOME) or Fedora Kinoite (uses KDE). Both of which
are immutable variants of Fedora with a strong focus on container workflows.
Already knowledgeable about linux:
Arch Linux is an independently developed, x86-64 general purpose GNU/Linux distribution versatile enough to
suit any role. Development focuses on simplicity, minimalism, and code elegance. Arch is installed as a
minimal base system, configured by the user upon which their own ideal environment is assembled by
installing only what is required or desired for their unique purposes. GUI configuration utilities are not
officially provided, and most system configuration is performed from the shell by editing simple text files.
Arch strives to stay bleeding edge, and typically offers the latest stable versions of most software.
Remark: If you are currently using an Instant Messenger like Telegram, LINE, Viber, WhatsApp, or plain SMS.
Please pick an alternative here.
Doesn't require phone number or even email address in most cases:
Element is the best client for the Matrix network. The Matrix open standard is an open-source audited
standard for secure, decentralized, real-time communication. Most other services can be bridged to it,
giving you a single place to get and send all your messages.
Remark: If you are currently using a privacy-hostile E-Mail provider like Gmail, Outlook, Yahoo, etc. Please
pick an alternative here. Email is not a private and inherently insecure protocol, so try dropping
it in favor of a secure messenger as suggested above. But in cases where you must have one,
stick to the recommendations below.
π§ Email & Calendar Provider:
- Proton:
-
Proton Mail
ProtonMail is an email service with a focus on privacy, encryption, security, and ease of use. They have
been in operation since 2013. ProtonMail is based in Genève, Switzerland. Accounts start with 500 MB of
storage with their free plan. They offer aliases too.
-
Proton Calendar
Proton Calendar, an encrypted calendar service, is accessible to Proton users through web or mobile
applications. The service offers automatic end-to-end encryption of all data, sharing capabilities,
import/export options, and more. Free-tier users can manage three calendars, while paid subscribers
have access to up to 25 calendars. Enhanced sharing features are exclusively available to paid
subscribers.
Tuta:
-
Tutanota Mail
Tutanota is an email service with a focus on security and privacy through the use of encryption.
Tutanota has been in operation since 2011 and is based in Hanover, Germany. Accounts start with
1GB of storage with their free plan.
-
Tutanota Calendar
Tuta provides a complimentary encrypted calendar on their supported platforms. The calendar
includes features such as automatic end-to-end encryption of all data, sharing options,
import/export capabilities, multi-factor authentication, and more. Access to multiple calendars
and advanced sharing features is restricted to users with paid subscriptions.
Remark: In the world of data breaches, a password manager and 2FA are your best defenses. But not all
password managers are equal. Secure and trusted ones are listed here.
π Password Manager/2FA:
- Offline:
-
KeePass (Android) (Desktop)
KeePass is a free open source password manager. Passwords can be stored in an encrypted database on your
device, which can be unlocked with one master key. Along with that, KeePass can also be used for 2FA,
too.
Online:
-
Bitwarden
Bitwarden is among the easiest and safest solutions to store all of your logins and passwords while
conveniently keeping them synced between all of your devices. If you don't want to use the Bitwarden cloud,
you can easily host your own Bitwarden server.
Remark: If you are currently using a Domain Name System (DNS) service provided by your ISP (and gracefully
providing them with a list of every internet resource you access along with the timestamps and duration of
your access) then switch to the provider recommended here. An additional benefit: Changing DNS may open
websites that were previously blocked.
Its highly recommended that DNS be setup with the native method supported by your operating system
rather than a third party application. If your setup requires blocking of ads, trackers, etc.
then the recommendation is to use a local blocklist setup rather than using an ad blocking DNS. This way ads
are blocked faster and your fingerprint is reduced too.
DNS Provider:
Quad9 is a free service that replaces your default ISP or enterprise Domain Name Server (DNS) configuration.
They have a strict Zero-logging policy offering DNS over HTTPS (DoH) and DNS over TLS (DoT), with QNAME
minimization. Quad9 is operated by the Quad9 Foundation, a Swiss public-benefit, not-for-profit foundation
with the purpose of improving the privacy and cybersecurity of Internet users, headquartered in Zurich. It
is the only global public resolver which is operated not-for-profit, in the public benefit. Quad9
is entirely subject to Swiss privacy law, and the Swiss government extends that protection of law
to Quad9's users throughout the world, regardless of citizenship or country of residence. Quad9 is currently
the only global recursive resolver which is not subject to United States law.
Remark: If you are currently not using or using a bad/fake VPN service, then its highly recommended that you
switch to the trusted no-logs VPN providers recommended here. Although VPN is not a silver bullet, yet, you
will have two main advantages:
The websites you visit wouldn't know your IP Address and your ISP wouldn't know the sites you visited.
For even better privacy, consider using TOR.
π VPN Provider:
Mullvad is a fast and inexpensive VPN with a serious focus on transparency and security. They have been in
operation since 2009. Mullvad is based in Sweden and does not have a free trial. They accept Bitcoin,
cash, bank wire, credit card, PayPal, and Swish.
-
IVPN is a VPN service offered by Privatus Limited based in Gibraltar. Privatus Limited has been
independently audited by cure53 and has undergone a no-logging audit and a comprehensive pentest
report. They Accept Bitcoin, Monero, and Cash as payment methods and all of their clients are
open source as well.
Free tier available:
-
ProtonVPN
ProtonVPN has been in operation since 2016. ProtonVPN is based in Switzerland and offers a
limited free pricing tier, as well as premium options.
Remark: Use TOR browser for most of your browsing and use Brave when doing something that inherently
requires you to be identified like banking. A browser is your gateway to the internet. Make sure you don't
have uninvited guests (trackers/ads) or your Jewelry (private data) hanging out the window. If you are
currently using a rigged gateway like Google Chrome, Microsoft Edge, etc. it's highly recommended that you
switch to the ones recommended here.
π Browser:
- Prioritizing Privacy:
-
TOR Browser
Tor Browser is the choice if you need anonymity. This browser provides you with access to the Tor Bridges
and Tor Network, along with extensions that can be automatically configured to fit its three security levels
- Standard, Safer and Safest (you change any setting other than these at your own peril).
Prioritizing Securtiy:
Brave Browser has some of the best privacy defaults and includes a built-in content blocker. Brave is built
upon the Chromium web browser project, so it should feel familiar and have minimal website compatibility
issues.
Remark: Your notes should be your notes, don't have a public audience for your private stuff (Cough-Google
Keep, Microsoft OneNote, Evernote). Switch to the recommended alternative here.
π Note Taking:
-
Joplin
Joplin is a free, open-source, and fully-featured note-taking and to-do application which can handle a large
number of markdown notes organized into notebooks and tags. It offers end-to-end encryption and can sync
through Nextcloud, Dropbox, and more. It also offers easy import from Evernote and plain-text notes.
Remark: If you are currently using an Office suite like Microsoft Office. Please pick an alternative
here.
π Office Suite:
LibreOffice is a free and open-source office productivity
software suite, a project of The Document Foundation. It's
the default Office suite installed on almost all Linux distros out of the box. It supports almost all
document formats from Microsoft Office. It does everything that a complete office suite would.
-
OnlyOffice
OnlyOffice is a free software office suite developed by
Ascensio System SIA, a company headquartered in Riga, Latvia. It features online document editors, a
platform for document management, corporate communication, mail, and project management tools.
It is highly compatible with Microsoft Office. If you are looking for a
complete replacement for say, Microsoft Office, then it's your best bet.
Works Online:
CryptPad provides an open-source, full-fledged office
suite with all the tools necessary for productive collaboration. Applications include: Rich Text,
Spreadsheets, Code/Markdown, Kanban, Slides, Whiteboard and Polls. The applications are complemented by a
set of collaboration features such as chat, contacts, color by author (code/markdown), and comments with
mentions (rich text). It can be self-hosted, but if you don't feel like it then CryptPad.fr is the official instance of the open-source CryptPad
project. It is administered by XWiki-SAS, the employee-owned French company which created and maintains the
product.
Remark: Share your files between your devices, with your friends and family, or anonymously online. Switch
to the recommended service here.
π€ File Sharing:
-
OnionShare
OnionShare is an open-source tool that lets you securely and anonymously share a file of any size. It works
by starting a web server accessible as a Tor onion service, with an unguessable URL that you can share with
the recipients to download or send files.
Remark: For your own sake STOP USING GOOGLE. Their results are biased and of course they have no privacy.
Switch to the recommended service here and search anonymously online.
π Search Engine:
-
DuckDuckGo
DuckDuckGo is the most popular private search engine and is the default for the Tor Browser. The
company is based in the USA.
-
Search
Brave Search is an independently indexed search engine by Brave that is optimized against Google.
Its recommended that you disable Anonymous usage metrics from settings as it is enabled by default.
Brave states that no personally identifiable information is collected. Other metrics that are
processed including your IP, are disposed off and not retained. It is the default search engine in
Brave Browser. The company is based in the USA.
Remark: Try doing as much of your work offline as possible, but if you need a cloud provider then use the
one recommended here.
π π¦ π File Storage/Cloud/Sync Services:
- With heavy dependence on Server:
-
Nextcloud
Nextcloud is a suite of free and open-source client-server software for creating your own file hosting
services on a private server you control or using others who do. It also comes with end-to-end encryption
(E2EE). They provide web office, calls, meetings, calendar, contacts, file storage, and much
more.
-
Proton Drive
Proton Drive is an E2EE general file storage service by the popular encrypted email provider Proton Mail.
Without much dependence on Server (Between two end points):
Syncthing is an open-source and peer-to-peer software. It can be used to synchronize files between two or
more devices over the network, be it a local network or the internet. It uses the Block Exchange Protocol to
transfer data between devices after encrypting it with TLS.
Remark: If you are using proprietary software for remotely connecting and controlling systems like
TeamViewer, Anydesk, etc. Please pick an alternative here that is less likely to do fishy things due to
their open-source nature. For even better privacy (and security) you can choose to host the software to get
your server via which the connections will be established.
π₯οΈ π₯ π Remote Desktop:
-
Rust Desk is a remote desktop software; the open source TeamViewer alternative, works out of the
box, no configuration required. You have full control of your data, with no concerns about
security. You can use a public rendezvous/relay server, or self-hosting, or write your own
server.
Remark: We all know how YouTube cares neither about its creators nor its viewers. I urge you to leave
YouTube (creators can sync all their content directly to Osysee) and
join me on Odysee that's ready for WEB 3.
π₯ π§ π° Video/Audio Streaming/Sharing and Blogging:
LBRY is a client for LBRY network. LBRY is a decentralized video sharing network. It uses two of the most
powerful censorship-resistant technologies (a BitTorrent-like network to store the video content and a
blockchain to store the indexes for those videos). The LBRY desktop and Android clients are recommended with
analytics disabled. They help you stream videos from the LBRY network, and store your subscription list in
your own LBRY account.
π₯ YouTube Frontends:
-
π₯οΈ Desktop:
-
FreeTube
FreeTube, a no-cost and open-source desktop tool designed for YouTube, stores your
subscription roster and playlists directly on your device while in use. By default, FreeTube
prevents all YouTube ads from appearing. Moreover, FreeTube offers the option to connect
with SponsorBlock, enabling you to bypass sponsored video segments for a seamless viewing
experience.
-
π» π iOS / tvOS / macOS:
-
Yattee
Yattee is a privacy-focused video player for iOS, tvOS, and macOS that is both free and
open-source, tailored for YouTube. When utilizing Yattee, your subscription list is stored
locally on your device. Before being able to utilize Yattee for YouTube viewing, additional
steps are required due to limitations imposed by the App Store.
-
π± π€ Android:
-
NewPipe
NewPipe is a free and open-source Android app that supports YouTube, SoundCloud,
media.ccc.de, Bandcamp, and PeerTube. When using NewPipe, your subscription list and
playlists are stored locally on your Android device.