Git Product home page Git Product logo

ultimate-privacy-guide's Introduction

Archived (Organized and better version is https://resources.cspi.network/)

Ultimate Privacy Guide

The ultimate & full guide on how to protect your privacy online & physical.

Installation

NpmJS

npm i express-favicon express helmet path

Usage

node index.js

License

MIT © CSPI


A better world is a world where you have freedom, have rights about your privacy and not being monitored 24/7 and your information getting selled without you knowing/without your consent. Take back your privacy.
Sharing this to others to protect themselves will be really appreciated.

Contents

Cloaking

Notes

  • Laverna - An open source & encrypted note-taking app.
  • Obsidian - Obsidian is not an old note-taking app like Evernote but like Roam Research. This app will be your second brain with your notes. Obsidian is one of the best Markdown note-taking app in the world.
  • Notesnook - Notesnook is a security-focused note-taking app. Security is the main sailing point of this note-taking app.
  • SafeRoom - Saferoom is a note-taking app that allows users to create encrypted notes, including PDF, video, audio and images. The app protects data by encrypting the data before syncing with other devices. Saferoom ensures that the data always stays encrypted and secured against leaks.
  • Bear - Flexible writing app for crafting notes and prose.
  • EteSync - Secure, end-to-end encrypted, and privacy respecting sync for your contacts, calendars, tasks and notes.
  • Joplin - Open source note taking app that supports end to end encrypted sync wth cloud providers.
  • Standard Notes - Is a safe place for your notes, thoughts, and life's work.
  • TinyList - Create and share notes and checklists, without sacrificing your privacy.
  • HedgeDoc - Formerly CodiMD (community). An awesome platform to write and share markdown.
  • Notally - A beautiful notes app.
  • Quillnote - Take beautiful markdown notes and stay organized with task lists.
  • Logseq - A privacy-first alternative to WorkFlowy.
  • Nextcloud Notes - The Notes app is a distraction free notes taking app for Nextcloud.
  • Vikunja - The open-source to-do app to organize your life.
  • AppFlowy - Open Source Notion Alternative. You are in charge of your data and customizations.

Messaging

  • Signal - End-to-end encryption keeps your conversations secure.
  • Keybase - End-to-end encryption for messaging and file-sharing.
  • Dust - Blockchain based messaging app.
  • Jami - An peer to peer and end to end encrypted messager that utlizes a distributed hash table for sending messages.
  • Element - Secure and independent communication, connected via Matrix.
  • Wickr - A anonymous, end-to-end encrypted & ephemeral messaging app(Owned by Amazon).
  • Matrix (Protocol) - An open network for secure, decentralized communication.
  • Jabber / XMPP (Protocol) - The universal and open messaging standard. Tried and tested. Independent. Privacy-focused. E2E encrypted.
    • Conversations - Jabber/XMPP client for Android 4.0+ smartphones that has been optimized to provide a unique mobile experience.
    • AstraChat - Another XMPP client.
  • DeltaChat - Chat over encrypted e-mail.
  • Session - Extreme focus on privacy. Blockchain technology.
  • SimpleX Chat - The first chat platform that is 100% private by design - it has no access to your connection graph
  • Threema - The messenger that puts security and privacy first. Pay once, chat forever. No collection of user data. Open Source client.
  • Status - Status is a secure messaging app, crypto wallet, and Web3 browser built with state of the art technology.
  • Tox - Tox is easy-to-use software that connects you with friends and family without anyone else listening in.
  • Briar - Peer-to-peer encrypted messaging and forums.
  • Tinfoil Chat - Onion-routed, endpoint secure messaging system.
  • Berty - The privacy-first messaging app that works with or without internet access, cellular data or trust in the network(Not released yet).
Extra
  • Chatcrypt - End-to-end encrypted online group chat that does not store anything in the cloud. No databases, no accounts, no chat logs.
  • LeapChat - End-to-end encrypted online chat group, open source & anonymous.

Analytics

  • Plausible - Simple and privacy-friendly alternative to Google Analytics.
  • Matomo - Google Analytics alternative that protects your data and your customers' privacy.
  • Umami - A simple, fast, website analytics alternative to Google Analytics.
  • Aurora - 100% Cookie-Free Open Website Analytics. Collect Anonymous Data. Make your Audience Happy Now!
  • Nullitics - Zero-effort open-source cheap analytics.
  • Ackee - Self-hosted website analytics.
  • Shynet - Modern, privacy-friendly, and detailed web analytics that works without cookies or JS.
  • Pirsch - Pirsch is a simple, privacy-friendly, open-source alternative to Google Analytics — lightweight, cookie-free and easily integrated into any website or backend.

Browsers

  • Brave - Is fast, secure, and privacy-focused by default with a built-in ad blocker.
  • Librewolf - A fork of firefox, focused on privacy, security, and freedom.
  • Tor - Defend yourself against tracking and surveillance. Circumvent censorship.
  • Speek - An open source chat app that uses TOR.
  • Epic - Privacy focused web browser.
  • Bromite - Bromite is a Chromium fork with ad blocking and enhanced privacy; take back your browser.
  • Firefox - Privacy-first web browser with lots of addons to further increase privacy.
  • Pale Moon - Pale Moon is an Open Source, Goanna-based web browser available for Microsoft Windows and Linux (with contributed other operating system support), focusing on efficiency and customization. Make sure to get the most out of your browser!
  • Chromium - Chromium is a free and open-source web browser project, principally developed and maintained by Google.
  • Waterfox - Waterfox is an open-source web browser for x64, ARM64, and PPC64LE systems. It is intended to be ethical and maintain support for legacy extensions dropped by Firefox, from which it is forked.
  • Iridium - An open source browser that highly focuses in speed, privacy & ease of use.
  • SnowHaze - SnowHaze offers a browser with your privacy and security in mind. It blocks invasive ads and trackers, protects you from browser fingerprinting, is lightning fast, and much more.
  • Vanadium - Privacy and security enhanced releases of Chromium for GrapheneOS.

Cloud Storage

  • OnionShare - Tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.
  • Mega - End-to-end encrypted cloud storage and cloud collaboration platform.
  • Tresorit - End-to-end encrypted cloud storage service.
  • Nextcloud - A self hosted cloud collaboration platform that supports file syncing, team chat, and Voice over IP.
  • Icedrive - End-to-end encrypted & zero-knowledge cloud storage.
  • Storj - Client side encrypted also supports S3.
  • Tebi - Server encrypted only also supports S3.
  • Sia - An encrypted and decentralized storage platform and marketplace, where files are stored as redundant segments spread out across multiple provider nodes.
  • Zpan - Self hosted cloud disk base.
  • Seafile - High performance file syncing and sharing. It includes a Wiki, WYSIWYG editing and other knowledge management features.

Search Engines

  • Searx - An open source privacy-respecting metasearch engine.
  • DuckDuckGo - Emphasizes protecting searchers privacy and avoiding the filter bubble of personalized search results.
  • Yacy - Peer based, open source & decentralized search engine server.
  • Startpage - Privacy respecting search engine that allows you to browse sites in a proxied view for anonymity.
  • Brave Search - A privacy respecting search engine with its own index, which doesn't rely on search engines like Google or Bing.
  • Whoogle Search - A self-hosted, ad-free, privacy-respecting Google metasearch engine.
  • SearX - Privacy-respecting metasearch engine.

Anonymous Mail Forwarding

Email Providers

  • ProtonMail - End-to-end encryption and zero access encryption to secure emails.
  • OnionMail - Best email provider using Tor.
  • Tutanota - Encrypted, open-source & multi platform.
  • Preveil - End-to-end encrypted cloud email and file sharing service.
  • Soverin - A private mailbox that’s truly yours.
  • Guerrilla Mail - Guerilla Mail is the second-best email service provider for sending private, anonymous emails.
  • Lavabit - A secure & open source email client.
  • Mailfence - Secure and private email.
  • FairEmail - Fully featured, open source, privacy friendly email app for Android.
  • K9 - Open Source Email App for Android.
  • Thunderbird - A free customizable open source email client.

Operating Systems

  • Tails - Portable operating system that protects against surveillance and censorship.
  • Whonix - Hardened fork of Debian, with strong privacy and anti-tracking features.
  • Linux - Linux is a family of open-source Unix-like operating systems based on the Linux.
  • Kali Linux - Kali Linux is a Debian-derived Linux distribution designed for digital forensics and penetration testing. It is maintained and funded by Offensive Security.
  • GrapheneOS - GrapheneOS is an open source privacy and security focused mobile OS with Android app compatibility.
  • CalyxOS - CalyxOS lets you have your cake and eat it too, with "Privacy by Design".
  • LineageOS - A free and open-source operating system for various devices, based on the Android mobile platform.
  • DivestOS - LineageOS fork with increased security and privacy.
  • Replicant - A free software mobile operating system putting the emphasis on freedom and privacy/security.
  • UBPorts - Ubuntu Touch is the touch-friendly mobile version of Ubuntu.
  • postmarketOS - Touch optimised and pre-configured version of Alpine Linux.
  • PureOS - Operating system developed by purism for the Librem 5.
  • Plasma Mobile - Plasma, in your pocket. Privacy-respecting, open source and secure phone ecosystem.
  • Trisquel - If you want a really lightweight and privacy-focus OS. Trisquel is for you.
  • mobian - Debian for mobile.

Social Networks and Platforms

  • Pixelfed - Decentralized, federated and Open Source alternative to Instagram with posts, videos, stories, tags, etc.
  • Barinsta - Android instagram alternative client with enhanced privacy features(Your requests will be sent to instagram).
  • Bibliogram - Watch Instagram's public profile in a friendlier page that loads faster, gives downloadable images, eliminates ads and doesn't urge you to sign up.
  • Peertube - A free, open and decentralized alternative to video platforms.
  • Odysee - Odysee is a video platform backed by the creators of lbry and uses the lbry blockchain protocol.
  • DTube - A full-featured video sharing website, decentralized.
  • Piped - An alternative privacy-friendly YouTube frontend which is efficient by design.
  • Invidious - Alternative and privacy respecting YouTube frontend.
  • ViewTube - ViewTube is an alternative privacy-friendly YouTube frontend written in Vue.js
  • NewPipe - Alternative Android YouTube app. No account needed, privacy respecting, no ads.
  • SkyTube - Alternative Android YouTube app. No account needed, privacy respecting, no ads.
  • FreeTube - FreeTube is an open source desktop YouTube player built with privacy in mind. (Uses Local RSS API or Invidious for backend).
  • ProxiTok - Open source alternative frontend for TikTok.
  • Pleroma - Pleroma is a free, federated social networking server built on open protocols.
    • Soapbox - A frontend for Pleroma with a focus on custom branding and ease of use.
  • Mastodon - Free, federated microblogging social network built on open protocols.
  • Nitter - Nitter is a free and open source alternative Twitter front-end focused on privacy.
    • Fritter - A free, open-source Nitter client for Android.
  • Feetter - Create, sync and manage Nitter feeds without registration from any device.
  • Kizie - Cleaner, better and privacy focussed Twitter client for Web.
  • Lemmy - A federated and open alternative to Reddit in Rust.
  • Aether - Peer-to-peer ephemeral public communities.
  • SaidIt - Open source Reddit clone.
  • Libreddit - Private Reddit front-end written in Rust
  • Teddit - Alternative Reddit front-end focused on privacy
  • Infinity - A beautiful Reddit client for Android.
  • Slide - Slide is an open sourced, ad free Reddit browser for Android and iOS.
  • Owncast - Take control over your live stream video by running it yourself. Streaming + chat out of the box.
  • livego - Live video streaming server in golang.
  • Wikiless - A free open source alternative Wikipedia front-end focused on privacy.
  • mgin - A minimalist, tor-friendly, read-only Imgur proxy insipired by software like Invidious, Nitter, and Bibliogram.
  • rimgo - An alternative frontend for Imgur. Read-only, no-js, Based on rimgu and rewritten in Go.
  • Minds - An open-source social media platform with a focus on providing a safe place for digital brands, companies, or people who are looking to network.
  • Gab

Password Manager

  • Dashlane - A highly secure, very easy to use, and includes a wide range of additional features.
  • 1Password - Feature rich, easy to use & excellent for families.
  • Sticky Password - Sticky Password is a basic password manager with a couple of really cool features including local data storage and a portable USB version of the program.
  • Bitwarden - An open source cloud based password manager.
    • vaultwarden - Unofficial Bitwarden compatible self-hosted server, formerly known as bitwarden_rs.
  • KeepassXC - Securely store passwords using industry standard encryption, no sync just storage.
  • Padloc - The last password manager you'll ever want to use.

VPN

All of them has been proven that they do not log, but still use them at your own risk.

  • IVPN - An open source and one of the highest rating no logging VPN in Reddit.
  • VyprVPN - VyprVPN is a popular VPN service created by Switzerland-based Golden Frog.
  • NordVPN - NordVPN is a another top leading VPN that supports over 5k+ servers in 59 countries and works in any streaming platforms.
  • Mullvad - An open source and recommended VPN in Reddit.
  • ExpressVPN - A top leading fast & no logging VPN(Owned by Kape Technology).
  • Windscribe - Your online privacy is under attack. Windscribe sets you free.
  • CyberGhost VPN - Fast, secure & anonymous VPN service(Owned by Kape Technology).
  • VeePN - Fast, ultra secure, and easy to use VPN service to protect your privacy online based in Panama.
  • SurfShark - Surfshark is an award-winning, secure VPN that encrypts your online data to help you stay private & protected every day, hassle-free.
  • PIA - Open source & a really secure VPN that has been proven that they do not log in the court 2x(Owned by Kape Technology).
  • ProtonVPN - High-speed Swiss VPN that safeguards your privacy.

Browser Extensions

  • Adblock Plus - The Adblock Plus for Chrome™ ad blocker has been downloaded over 500 million times and is one of the most popular and trusted on the market. Users get fast, sleek ad-blocking capabilities to enjoy sites like YouTube™ interruption free.
  • Forget Me Not - Make the browser forget website data (like cookies, local storage, etc.), except for the data you want to keep by adding domains to a whitelist, graylist, blacklist, or redlist.
  • DuckDuckGo Privacy Essentials - Simple and seamless privacy protection for your browser.
  • Click&Clean - Deletes typed URLs, Cache, Cookies, your Download and Browsing History...instantly, with just 1-click on Click&Clean button!
  • Privacy Badger - Privacy Badger automatically discovers trackers based on their behavior. Privacy Badger sends the Global Privacy Control signal to opt you out of data sharing and selling, and the Do Not Track signal to tell companies not to track you. If trackers ignore your wishes, Privacy Badger will learn to block them.
  • Startpage - Take back your online privacy by using Startpage as your default search engine. This search engine extension protects users from being tracked while allowing them to search the web in complete privacy.
  • WebRTC Leak Prevent - Prevent WebRTC leaks in Chrome by controlling hidden WebRTC privacy settings.
  • Unshorten.link - With the Unshorten.link extension, any shortened link (such as bit.ly or t.co) you click on will be automatically expanded and analyzed for malware giving you a clear view of where the link is taking you.
  • Onion Search Engine - Onion Search Engine protects your privacy and does not spy on you. Search the normal network and the onion network.
  • Ghostery - Ghostery is a powerful privacy extension. Block ads, stop trackers and speed up websites.
  • User-Agent Switcher & Manager - Spoof websites trying to gather information about your web navigation to deliver distinct content you may not want.
  • Disconnect - Make the web faster, more private, and more secure. Disconnect lets you visualize and block the invisible websites that track you. Load the pages you go to 44% faster. Stop tracking by thousands of third-party sites.
  • uBlock Origin - Free, open-source ad content blocker. Easy on CPU and memory.
  • ClearURLs - This extension will automatically remove tracking elements from URLs to help protect your privacy when browsing the Internet and sharing links.
  • Blur - Protect your Passwords, Payments, and Privacy. Blur makes it easy to keep track of and secure all your personal information online.
  • Decentraleyes - Protects you against tracking through "free", centralized, content delivery.
  • NoScript - Maximum protection for your browser: NoScript allows active content only for trusted domains of your choice to prevent exploitation.
  • Cookie Autodelete - When a tab closes, any cookies not being used are automatically deleted. Prevent tracking by other cookies and add only the ones you trust.
  • Change Timezone - Easily change your timezone to a desired value and protect your privacy.
  • xBrowserSync - Sync your browser securely & anonymous.
  • HTTPs Everywhere - HTTPS Everywhere is an extension created by EFF and the Tor Project which automatically switches thousands of sites from insecure 'http' to secure 'https'.  It will protect you against many forms of surveillance and account hijacking, and some forms of censorship.
  • Don't track me Google - This extension gets rid of Google's ugly (tracking) URL. This speeds up loading search results and allows you to normally copy links.

2FA

  • Aegis - A free, secure and open source app for Android to manage your 2-step verification tokens. Supports variety of imports from other apps(Google Authenticator, Authy etc.), vault encryption and exporting keys(plaintext or encrypted).
  • andOTP - Open source two-factor authentication for Android.
  • FreeOTPPlus - Enhanced fork of FreeOTP-Android providing a feature-rich 2FA authenticator.
  • RavioOTP - A native, lightweight and secure one-time-password(OTP) solution for iOS users.
  • Authenticator Pro - Two-Factor Authentication(2FA) client for Android + Wear OS.

Android Launchers

  • Lawnchair - No clever tagline needed.
  • OpenLauncher - Customizable and Open Source Launcher for Android.
  • KISS - Lightning fast, open-source, < 200kb Android launcher.
  • Olauncher - Minimal AF (ad-free) launcher app for Android.
  • Posidon Launcher - Posidon launcher is a minimal, one page homescreen with a vertical scrolling feed.
  • Pie Launcher - Android home screen launcher that uses a dynamic pie menu instead of fixed positioned icons.
  • Simple App Launcher - A simple holder for favourite apps for quick & easy app launcher icon management.
  • Rootless Pixel Launcher - The Launcher3 fork known as "Rootless Pixel Launcher".

Captchas

  • DoomCaptcha - Captchas don't have to be boring(This project is just for fun, It's security can easily be break).
  • hCaptcha - Privacy-first CAPTCHA for web, mobile, and more.

Android Keyboards

  • OpenBoard - 100% FOSS keyboard, based on AOSP.
  • FlorisBoard - FlorisBoard is a free and open-source keyboard for Android 6.0+ devices. It aims at being modern, user-friendly and customizable while fully respecting your privacy. Currently in early-beta state.
  • AnySoftKeyboard - The only Android keyboard you'll ever need. Free as in speech and Free as in beer.
  • Indic Keyboard - Indic Keyboard is a versatile keyboard for Android users who wish to use Indic and Indian languages to type messages, compose emails and generally prefer to use them in addition to English on their phone.
  • Simple Keyboard - Simply keyboard and nothing more.

Android App Store

  • F-Droid - F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform.
    • Droid-ify - Lightweight F-Droid client with Material UI.
    • Aurora Droid - Aurora Droid is a modern FOSS client for F-Droid.
    • Foxy Droid - Unofficial F-Droid client in the style of the classic one.
  • FossDroid - Fossdroid's aim is to promote free and open source apps on the Android platform: newest, trendiest and the most popular ones.
  • SkyDroid - Decentralized App Store for Android.
  • Aurora Store - Aurora Store is an open-source alternative Google Play Store frontend client with privacy and modern design in mind.

Android Files Manager

Payments

  • Monero - Monero is cash for a connected world. It's fast, private, untraceable and secure.
  • Cash - Use person-to-person payments using physical notes and coins.
  • Bitcoin - Bitcoin is not anonymous nor private. Bitcoin is traceable, transparent and pseudonymous. You need to be really careful when using Bitcoin so you don't leave any traces that can later be used against you to harm your privacy. See aantonop's video.

Privacy Tools

  • εxodus - The privacy audit platform for Android applications. Find how many trackers have your apps.
    • ClassyShark3xodus - Checks apk(s) for known trackers (provided by Exodus) +other warnings and specs.
  • Plexus - Remove the fear of Android app compatibility on de-Googled devices. Find if an app will work on a De-Googled device.
  • Netguard - A simple way to block access to the internet per application.

Remote Access and Control

  • RustDesk - Open-source remote desktop client software, written in Rust. Works out of the box, full control of your data, with no concerns about security.
  • screego - Screen sharing for developers.
  • Remmina - Remote access screen and file sharing to your desktop (RDP).
  • UltraVNC - UltraVNC is a powerful, easy to use and free - remote pc access softwares - that can display the screen of another computer (via internet or network) on your own screen.
  • MeshCentral - The open source, multi-platform, self-hosted, feature packed web site for remote device management.

Crypto Wallets

  • Exodus - Control your crypto with over 155+ cryptocurrency assets.
  • Samourai Wallet - Anonymous Bitcoin wallet for Android.

Teamworking Tools

  • Zulip - Chat for distributed teams.
  • Revolt - User-first chat platform built with modern web technologies.
  • Twake - Work in a team faster. Twake covers all of your organizational needs through a single platform.
  • RocketChat - Control your communication, manage your data, and have your own collaboration platform to improve team productivity.
  • Nextcloud Talk - Keep conversations private with Nextcloud Talk.
  • Mattermost - Open-source Slack alternative.
  • Aliucord - Discord Android app mod inspired by desktop Discord client mods without Discord Tracking.

Databases

  • Supabase - Open source Firebase alternative.
  • Appwrite - Secure open-source backend server for web, mobile & Flutter developers.
  • CondensationDB - Condensation is an open-source zero trust, distributed database enabling to build modern applications while ensuring data ownership and security.
  • Mongo - The MongoDB database open source for self hosting.
  • Apache Cassandra - Manage massive amounts of data, fast, without losing sleep.
  • Apache Hadoop - The Apache Hadoop project develops open-source software for reliable, scalable, distributed computing.
  • MariaDB - MariaDB is one of the most popular open source relational databases.

Download Manager

  • Persepolis Download Manager - Persepolis is a download manager & a GUI for Aria2. It's written in Python. Persepolis is a sample of free and open source software. It's developed for GNU/Linux distributions, BSDs, MacOS, and Microsoft Windows.
  • uGet Download Manager - uGet is a lightweight yet powerful Open Source download manager for GNU/Linux developed with GTK+, which also comes packaged as a portable Windows app. It is also available for Android.
  • Motrix - A full-featured download manager.
  • FireDM - FireDM is a python open source (Internet Download Manager) with multi-connections, high speed engine, it downloads general files and videos from youtube and tons of other streaming websites. It is availabe for Linux & Windows.
  • Xtreme Download Manager - Xtreme Download Manager(XDM) is a powerful tool to increase download speeds up to 500%, save streaming videos from YouTube, DailyMotion, Facebook, Vimeo, Google Video and 1000+ other websites, resume broken/dead downloads, schedule and convert downloads.
  • axel - Lightweight CLI download accelerator. It supports HTTP, HTTPS, FTP and FTPS protocols.

File Management & Sharing

  • Blaze - A fast, p2p and radically different way to transfer files.
  • Send - Simple, private file sharing. (Mozilla Send Fork)
  • Lufi - Let's Upload that FIle — File sharing software.
  • Croc - Easily and securely send things from one computer to another.
  • Dat-cp - Copy files between hosts on a network using the peer-to-peer Dat network.
  • Magic Wormhole - Get things from one computer to another, safely.
  • QRcp - Transfer files over wifi from your computer to your mobile device by scanning a QR code without leaving the terminal.
  • Snapdrop - A Progressive Web App for local file sharing inspired by Apple's Airdrop.
  • Paperless-ng - A supercharged version of paperless: scan, index and archive all your physical documents.
    • Paperless - [Now archived] Scan, index, and archive all of your paper documents.
  • OnionShare - An open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network.
  • Sharik - Sharik works with Wi-Fi connection or Tethering (Wi-Fi Hotspot). No internet connection needed. Available for Android, iOS, Linux, MacOS & Windows.

Fonts

Maps & Navigation

  • Open Street Map (OSM) - OpenStreetMap is built by a community of mappers that contribute and maintain data about roads, trails, cafés, railway stations, and much more, all over the world.
    • OSMAnd - Android/iOS Navigation app using OSM. It is a feature-rich app with all you expect.
  • Qwant Maps - An OpenStreetMap-based private Google Maps alternative.
  • Organic Maps - Great offline maps for hikers and cyclists.

DNS

Media Streaming Platforms

  • Jellyfin - Jellyfin is the volunteer-built media solution that puts you in control of your media. Stream to any device from your own server, with no strings attached.
  • Dim - Dim is a self-hosted media manager. With minimal setup, Dim will organize and beautify your media collections, letting you access and play them anytime from anywhere.
  • Stremio - Stremio is a modern media center that's a one-stop solution for your video entertainment.
  • Funkwhale - A social platform to enjoy and share music (SoundCloud alternative).
  • Subsonic - Your complete, personal music streamer.
  • Ampache - A web based audio/video streaming application and file manager.
  • Koel - a personal music streaming server that works.
  • Nuclear - Modern music player focused on streaming from free sources.
  • Navidrome - Lightweight, fast and self-contained personal music streamer.
  • Spot - Native Spotify client built in GTK and Rust.
  • psst - Fast and multi-platform Spotify client with native GUI.
  • ncspot - Cross-platform ncurses Spotify client written in Rust, inspired by ncmpc and the likes.
  • saikou - An Android Anilist only client, which lets you stream & download Anime & Manga.
  • hakuneko - Manga & Anime Downloader for Linux, Windows & MacOS.
  • AnimeXStream - An Android app to watch anime on your phone without ads.
  • animity - Android app to watch anime on your phone without ads and best streaming quality available.
  • Beatbump - Alternative frontend for YouTube Music; no ads and custom API wrapper.
  • dzr - Command line Deezer player for Linux, BSD, Android+Termux

Office

  • LibreOffice - Free and open source offline office.
  • OnlyOffice - Free and open source online office for collaboration.
  • Cryptpad - Collaboration suite, encrypted and open-source.
  • Etherpad - Highly customizable open source online editor providing collaborative editing in really real-time.

Translation

  • Libretranslate - Open Source Machine Translation - 100% Self-Hosted. No Limits. No Ties to Proprietary Services.
  • Apertium - A free/open-source machine translation platform, runs offline on your computer.
  • Softcatala - Open Source Translation tool - Only Catalan/Spanish/English/French (uses apertium).
  • TranslateLocally – Free/open-source neural MT, runs offline on your computer.
  • Lingva - Alternative front-end for Google Translate.
  • Simplytranslate - Alternative front-end for Google Translate and LibreTranslate.

Video and Audio Conferencing

  • Jitsi Meet - More secure, more flexible, and completely free video conferencing. No account needed, no installation needed.
  • Jami - P2P audio and video conferences.
  • BigBlueButton - BigBlueButton is a web conferencing system designed for online learning.
  • PeerCalls - Group peer to peer video calls for everyone written in Go and TypeScript.
  • Jam - Jam is your own open source Clubhouse for mini conferences, friends, communities.
  • Mumble - Mumble is an open source voice communication application with advanced features.

Video Editing

  • Olive Video Editor - Free open-source advanced non-linear video editor currently in Alpha state.
  • kdenlive - Open source video editor. Free and easy to use for any purpose, forever.
  • Shotcut - Shotcut is a free, open source and simple cross-platform video editor.

Location Tracking

  • Nextcloud Phonetrack - Nextcloud app to track location history with an Android app. Supports caching positions offline and sending them to the server in batches. The first-party app has good battery saving options.
  • OwnTracks - Location tracking for displaying the current location only (limited location history functionality).
  • Traccar - Location tracking software made for dedicated GPS logging devices.
  • Find My Device - Find your Android Device via SMS.

Blogs

Photo Storage

  • Photoprism - Feature rich server-based application for browsing, organizing and sharing your personal photo collection. The most similar to Google Photos.
  • Pigallery2 - A self-hosted directory-first photo gallery website.
  • Photoview - Photo gallery for self-hosted personal servers with Facial Recognition.
  • Photostructure - Self-hosted photo library that makes browsing and sharing a lifetime of memories delightful.
  • LibrePhotos - Active OwnPhotos fork. Self hosted alternative to Google Photos.
  • Nextcloud - The open source self-hosted productivity platform that keeps you in control. It has a Photos plugin to help you organize and visualize your photos.
  • Stingle Photos - Open source solution that provides strong security, privacy and encryption to backup your photos.
  • Crypt.ee - A private and encrypted place for all your photos, documents, notes and more.
  • DigiKam - Awesome Professional Photo Management with the Power of Open Source.
  • Photok - Photok is a free Photo-Safe. It stores your photos encrypted on your device and hides them from others.

Encryption

  • Veracrypt - VeraCrypt is a free open source disk encryption software for Windows, macOS and Linux.
  • Hat.sh - A Free, Fast, Secure and Serverless File Encryption.
  • Cryptomator - Cryptomator encrypts your data quickly and easily. Afterwards you upload them protected to your favorite cloud service.
  • Stegcloak - Hide secrets with invisible characters in plain text securely using passwords.
  • Picocrypt - A very small (hence "Pico"), very simple, yet very secure file encryption tool.
  • Photok - Photok is a free Photo-Safe. It stores your photos encrypted on your device and hides them from others.

Domain Registrar

  • Njalla - Privacy-aware domain service, sitting in between the domain service registrations and you, acting like a privacy shield.
  • OrangeWebsite
  • 1984 Hosting

Android Dialer

  • Simple Dialer - A lightweight app for handling your calls, no matter where are you. Comes with a handy call log for easy call initiation.
  • Koler - Uniquely stylized phone app with customizable features.

Browser Leaks Test

Network

  • paping - Cross-platform TCP port testing, emulating the functionality of ping (port ping).
  • chping - A powerful Paping alternative made using NodeJS.

Github

Others

Mass Surveillance Projects

They are summarized here because the information of these projects are big, for more information please click their name.

NSA
  • Prism - Collects information from big tech companies databases.
  • XKeyscore - Collects Internet activity, emails, chats, browsing histories & more.
  • FASCIA - Collects location data of people around the world.
  • Optic Nerve - Collects private webcam still images from users while they are using a Yahoo! webcam application
  • Boundless Informant - Boundless Informant is a big data analysis and data visualization tool used by the United States National Security Agency.
  • Dishfire - Collects text messages on a daily basis from around the world.
  • Mystic - Collects telephone calls, including metadata and a full record call’s contents.
  • [Muscular](https://en.wikipedia.org/wiki/Muscular_(surveillance_program) - Wiretaps of Google and Yahoo unencrypted internal networks.
  • MainWay - NSA database containing metadata of hundreds of billions of telephone calls.
  • BullRun - Eavesdrop on encrypted communications by nfluencing and weakening encryption standards, by obtaining master encryption keys, and by gaining access to data before or after it is encrypted either by agreement, by force of law, or by computer network exploitation(hacking).
  • FAMS Quiet Skies - Surveillance travelers.

Platforms Users Reviews

Hardening

All of these are optional but some of them should be used in daily basis or admired.

Authentication
  • Use a strong password.
  • Don't reuse passwords.
  • Use a secure password manager.
  • Enable 2FA authentication If necesary.
  • Keep backup codes safe.
  • Sign up for breach alerts or check your passwords regularly If they are pwned.
  • Use PIN.
  • Don't save your passwords in browsers.
  • Avoid logging in someone else's device.
  • Avoid password hints.
  • Never answer online security questions truthfully.
  • Don’t use a 4-digit PIN.
  • Avoid using SMS for 2FA.
  • Avoid using your PM to Generate OTPs.
  • Avoid face unlock.
  • Avoid fingerprint unlock.
  • Watch our for keyloggers.
  • Consider a hardware token.
  • Consider offline/local password manager.
  • Consider unique usernames.
Web Browsing
  • Block ads.
  • Ensure website is legimate.
  • Watch out for browser malware.
  • Use a privacy-respecting browser.
  • Use a private search engine.
  • Remove unnecessary browser extensions.
  • Keep browser up-to-date.
  • Check for HTTPs.
  • Use privacy hardening extensions.
  • Use DNS-Over-HTTPs.
  • Multi session containers.
  • Use incognito If necessary.
  • Understand your browser privacy.
  • Manage cookies.
  • Block third-party cookies.
  • Beware of redirects.
  • Do not sign into your browser.
  • Disallow prediction services.
  • Avoid GTranslate for webpages.
  • Disable web notifications.
  • Disable automatic downloads.
  • Disallow access sensors.
  • Disallow location.
  • Disable camera/microphone access.
  • Disable browser password saves
  • Disable browser autofill.
  • Protect from exfil attack.
  • Deactive ActiveX
  • Disable WebRTC.
  • Spoof HTML5 Canvas Sig.
  • Spoof Useragent.
  • Disregard DNT.
  • Prevent HSTS Tracking.
  • Prevent automatic browser connections.
  • Enable 1st-party isolation.
  • Strip tracking params for URLs.
  • First launch security.
  • Use the browser Tor.
  • Disable Javascript in specific sites If necesary.
Email
  • Have more than one email address, be sure to have long-term control on them.
  • Keep personal email address private.
  • Keep your account secure.
  • Disable automatic loading of remote content.
  • Use plaintext.
  • Don't connect third-party apps to your email account.
  • Don't share sensitive data via email.
  • Consider switching to a secure email provider.
  • Use smart key.
  • Use aliasing/anonymous forwarding.
  • Subaddressing.
  • Use a custom domain.
  • Sync with a client for backup.
  • Be careful with mail signatures.
  • Be careful with auto replies.
  • Choose the right mail protocol.
  • Use self hosting email providers/client.
  • Always use TLS Ports.
  • DNS Availability.
  • Prevent DDoS & bruteforce attacks.
  • Maintain IP blacklist.
Secure Messaging
  • Only use fully end-to-end encrypted messengers.
  • Use only open source messaging platforms.
  • Use a trustworthy messaging platform.
  • Check security things.
  • Ensure your recipients environment is secure.
  • Disable cloud services.
  • Secure group chats.
  • Create a safe environment for communication.
  • Agree on a communication plan.
  • Strip exif/meta-data from media.
  • Defang URLs.
  • Enable ephemeral messages.
  • Avoid SMS.
  • Watch out for trackers.
  • Consider jurisdiction
  • Use an anonymous platform.
  • Ensure forward secrecy is supported.
  • Consider a decentralized platform.

Social Media

  • Secure your account.
  • Check privacy settings.
  • Think of all interactions as public.
  • Think of all interactions as permanent.
  • Don't reveal too much.
  • Be careful of what you upload.
  • Don't share email or phone number.
  • Don't grant unnecessary permissions.
  • Be careful of 3rd-party integrations.
  • Avoid publishing geo data while still onsite.
  • Remove metadata before uploading media.
  • Implement image cloaking.
  • Consider spoofing GPS in home visinity.
  • Consider false information.
  • Don't have any social media accounts.
Networking
  • Use a VPN.
  • Change your router password.
  • Use WPA2 & a strong password.
  • Implement a network-wide VPN.
  • Protect against DNS leaks.
  • Use a secure VPN protocol.
  • Secure DNS.
  • Avoid the free router from your ISP.
  • Whitelist MAC Addresses.
  • Change the router's local IP Address.
  • Don't reveal personal information in SSID.
  • Opt-out router listings.
  • Hide your SSID.
  • Disable WPS.
  • Disable UPnP.
  • Use a Guest Network for Guests.
  • Change your router's default IP.
  • Kill unused processes and services on your router.
  • Don't have any open ports.
  • Disable unused ports.
  • Disable cloud-based management.
  • Manage range correctly.
  • Route all traffic through Tor.
  • Disable WiFi on all devices.
Phone
  • Encrypt your device.
  • Keep app count to a minimum.
  • Regularly check app permissions.
  • Only install apps from official source.
  • Be careful of phone charging threats.
  • Set up a mobile carrier pin.
  • Opt-out of caller id listings.
  • Opt-out of personalized ads.
  • Erase after too many login attemps.
  • Monitor trackers.
  • Reduce background activity.
  • Sandbox Mobile apps.
  • Tor traffic.
  • Restart device regularly.
  • Avoid SMS.
  • Keep your personal number private.
  • Use secure browsers.
  • Consider running a custom ROM.
  • Uninstall useless or unused apps.
  • Review your installed apps.
  • Disable your Phone data or internet when not used or turn it off.
  • Always disable your phone location when taking a picture or using your phone(Can leave exif data & your phone can be tracked).
Computers
  • Keep your system up-to-date.
  • Encrypt your device.
  • Backup important things/data.
  • Be careful plugging USB devices into your computer.
  • Activate screen-lock when idle.
  • Disable Cortana or Siri.
  • Review your installed apps.
  • Manage permissions.
  • Disallow usage data from being sent into the cloud.
  • Avoid quick unblock.
  • Power off computer, instead of standby.
  • Don't link your computer with your microsoft or apple account.
  • Check while sharing services enabled.
  • Don't use root/admin account for non-admin tasks.
  • Use a privacy filter.
  • Physically secure your device.
  • Don't charge devices from your PC.
  • Randomize your hardware adress on WiFi.
  • Protect againsts malware.
  • Check keyboard connection.
  • Prevent keystroke injection attacks.
  • Periodically check for rootkits.
  • BIOS root password.
  • Use a security-focused OS.
  • Make use of VMs.
  • Compartmentalize.
  • Disable undesired features.
  • Secure boot.
  • Secure SSH access.
  • Implement mandatory access control.
  • Use canary tokens.
Smart Home
  • Rename devices to not specify brand/model.
  • Don't link your smart home devices to your real identity.
  • Be wary of wearables.
  • Don't connect your home's critical infastructure to the internet.
  • Mitigate Alexa/Google Home risks.
  • Assess risks.
Personal Finances
  • Sign up for fraud alerts & credit monitoring.
  • Apply a credit freeze.
  • Use virtual cards.
  • Use cash for local transactions.
  • Use cryptocurrency for online transactions.
  • Store crypto securely.
  • Buy crypto anonymously.
  • Tumble/Mix coins.
  • Use an alias details for online shopping.
  • Use alternate delivery address.
Sensible Computing
  • Don't trust your popup notifications.
  • Never leave device unattended.
  • Prevent camfecting.
  • Stay protected from shoulder surfers.
  • Educate yourself about phishing attacks.
  • Install reputable software from trusted sources.
  • Store personal data securely.
  • Obscure personal details from documents.
  • Do not assume a site is secure, just because it is HTTPs.
  • Use virtual cards when paying online.
  • Review application permissions.
  • Opt-out public lists.
  • Never provide additional PII when opt-out.
  • Opt-out of data sharing.
  • Review & update social media privacy.
  • Compartmentalize.
  • WhoIs privacy guard.
  • Use a forwarding address.
Physical Security
  • Destroy sensitive documents.
  • Opt-out of public records.
  • Don't reveal information on inbound calls.
  • Stay alert.
  • Secure perimeter.
  • Physically secure devices.
  • Keep devices out of direct sight.
  • Protect your pin.
  • Check for skimmers.
  • Protect your home address.
  • Use a PIN, not biometrics.
  • Reduce exposure to CCTV.
  • Anti facial recognition clothing.
  • Reduce night vision exposure.
  • Protect your DNA.
Global
  • Use platforms that is honest, trusted & does not backstab their users.
  • Using an application/website that has an option to delete your data when you don't use it anymore is much better.
  • Consider blocking your devices webcam when not used.
  • Implement a firewall.
  • Keep firmware up-to-date.
  • Monitor your home network closely.
  • Watch out for stalkerware/spyware.
  • Deny internet access where possible.
  • Verify your recipient.
  • Use an antivirus(Don't use multiple anti virus(3+) It's useless and It will lag your PC).
  • Be careful of what you send or do in the internet.
  • Protect your network.
  • Understand what data is collected, stored & transmitted.
  • Don't just leave things in default.
  • Always disable personalization or telemetric gathering of applications even If It sends the data anonymously.
  • Use anonymous payment methods.
  • Know how to control your data, don't just expand and expand(Sign up to useless websites or applications) because It will overload and eventually explode. Only control things that you can control and remove the others If necesarry.
  • Before using an application, first configure their privacy first and disable things that should be disabled.
  • Regularly backup all your data, buying a harddrive is recommended(Physical).
  • Use privacy enhancing applications.

Addition

  • Always use your "Be careful" instinct.
  • Do not trust anything in the internet.
  • Can't find something that you needed to protect your privacy? Why not make it, find a developer to make it for you or let us know by making an Issue in this repository.
  • Some of these mass surveillance projects are used to catch terrorist and bad guys. What is wrong with that? Yes but the thing is innocent people are getting Included as well, lying, being dishonest & secretly gathers peoples data without their concern or at least informing them might be more than just targetting bad guys.
  • So companies should not gather data? No they should If It's necesary or required but If not, then they should not log anything or they should at least inform you about stuff like they sell your data to third parties.
  • Share things that should be shared to others. Sharing is caring.
  • Join communities that enhance & protect users privacy.
  • Before using or doing something, be sure to know the consequences first.
  • Open Source is one of the key to privacy.
  • Contributing to this project will be a really big help!

References

Some of the things here are from this sources and some are from my research.

ultimate-privacy-guide's People

Contributors

i2rys avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.