Curated privacy tools

Hand-picked software for passwords, messaging, browsing, and one-time secrets. No endless affiliate list—just tools worth knowing and guides from PrivateNote.ai.

Our curation principles

We don't do affiliate links, sponsored slots, or hype. This directory is curated using five strict criteria:

  1. Open-source preference

    We prioritize tools with publicly auditable source code.

  2. Jurisdictional & business model health

    We favor tools operating under strong privacy laws, funded by direct subscriptions rather than data monetization or ad-tech.

  3. Proven track record

    Every tool has survived independent cryptographic audits or extensive community vetting.

  4. Zero affiliate noise

    We make $0 if you click these links.

  5. Practicality over purism

    We balance maximum privacy with real-world usability. Where trade-offs exist, we call them out.

Last thoroughly reviewed: July 2026.

01

Start here

Match the tool to the job. For temporary secrets between people, start with PrivateNote.ai. For everything else, jump to the category below.

Built on PrivateNote.ai

Our privacy toolkit

Free tools on this site for the moments our directory cannot replace.

Featured guide

Uno stack pratico di strumenti per la privacy per il 2026

Our 2026 guide walks through privacy jobs, threat models, a minimal starter kit, and what we refuse to recommend—then sends you back here for the catalog.

Read the 2026 privacy tools guide

02

Tool directory

We link to tools we find useful. PrivateNote.ai is not affiliated with third-party products unless stated. Always review a tool's privacy policy before trusting it with data.

Secrets & one-time sharing

For credentials and instructions that should not live in email threads or cloud folders—ephemeral, single-view handoffs only.

PrivateNote.ai

Free

Browser-encrypted notes with burn-after-reading—ciphertext on the server, key in the link fragment.

Open

Encrypted notes & documents

For longer-lived encrypted writing and files you keep across devices—not one-time secret sharing.

Standard Notes

Freemium / Open source

End-to-end encrypted notes and documents for persistent, cross-device personal writing.

Excellent for long-term encrypted note-taking—not intended for one-time secret handoffs.

Visit site

Cryptomator

Free / Open source

Client-side encryption for files before they sync to mainstream cloud providers.

Best for securing folders on Dropbox, Google Drive, and similar services you do not fully trust.

Visit site

Password managers

Store long-lived passwords in one vault instead of reusing weak ones across sites.

Bitwarden

Freemium

Open-source password manager with free personal vault and cross-device sync.

Visit site

KeePassXC

Open source

Local, open-source password vault—no cloud required if you prefer full control.

Visit site

1Password

Paid / Proprietary

Exceptionally polished UX and strong audit history—often the easiest recommendation for families.

Trade-off: entirely closed-source and cloud-dependent, which draws fair criticism from open-source purists.

Visit site

Encrypted messaging

Day-to-day conversations that should not be readable by the platform operator—with trade-offs called out.

Signal

Free / Open source

The consensus default for secure mainstream chat with open protocols.

Trade-off: requires a phone number for registration, which may not suit high-anonymity threat models.

Visit site

Private email & aliasing

Encrypted inboxes and email aliases for sign-ups, forwarding, and identity separation.

Proton Mail

Freemium

Encrypted email from Proton with zero-access architecture and a free tier.

Visit site

Tuta

Freemium

German encrypted email (formerly Tutanota) with built-in calendar and contacts.

Visit site

Firefox Relay

Freemium

Lightweight email aliasing to mask your real address on sign-ups.

Trade-off: solid for basic masking, but lacks advanced custom-domain routing compared to dedicated alias services.

Visit site

SimpleLogin

Freemium / Open source

Advanced, configurable email aliasing—now part of the Proton ecosystem.

Ideal for complex identity separation and custom domains; deeper than lightweight relay tools.

Visit site

Browsing & search

Reduce tracking, fingerprinting, and passive data collection while you browse.

Firefox

Free

Mainstream browser with strong tracking protection and open development.

Visit site

Tor Browser

Free / Open source

Routes traffic through three independent relays—the standard for strong anonymity and censorship circumvention.

Trade-off: significantly slower browsing; many mainstream sites trigger aggressive CAPTCHAs.

Visit site

uBlock Origin

Open source

Lightweight open-source blocker for ads, trackers, and malware domains.

Visit site

Brave

Free / Open source

Out-of-the-box tracker blocking built on Chromium.

Trade-off: the built-in ad/rewards model and cryptocurrency features split the privacy community. Best for users who require Chromium compatibility.

Visit site

DuckDuckGo

Free

Search engine that does not build advertising profiles from your queries.

Visit site

VPN & network privacy

Encrypt traffic on untrusted networks. A VPN hides your IP—it does not make you anonymous alone.

Mullvad VPN

Paid

Privacy-first VPN with anonymous account numbers and no long-term logs policy.

Visit site

Proton VPN

Freemium

VPN from Proton with free tier and Swiss jurisdiction.

Visit site

IVPN

Paid

Independent VPN with transparent ethics and multi-hop options.

Visit site

Identity & account hygiene

Check breaches, enable two-factor authentication, and protect login with hardware keys.

Have I Been Pwned

Free

Check whether your email or phone appeared in known data breaches.

Visit site

2FA Directory

Free

Find step-by-step guides to enable two-factor authentication on popular services.

Visit site

Yubico

Paid

Hardware security keys for phishing-resistant two-factor login.

Visit site

Encrypted storage

Full-disk and container encryption for files at rest on devices you control.

VeraCrypt

Open source

Open-source disk encryption for full volumes and encrypted containers.

Visit site

03

Guides from PrivateNote.ai

Long-form articles on habits, encryption, and when each tool fits.

What we deliberately exclude (and why)

To keep this list high-trust, we intentionally omit several highly marketed tools:

  • Affiliate-heavy VPNs (e.g., NordVPN, ExpressVPN)

    While functional, their marketing-first posture and history of corporate consolidation conflict with our curation principles. We stick to Mullvad, IVPN, and Proton VPN.

  • Telegram

    Frequently marketed as a secure app, but chats are not end-to-end encrypted by default—and group chats cannot be E2EE at all.

  • WhatsApp

    Uses the Signal protocol for message content, but remains a Meta product that collects extensive account and behavioral metadata.

Need to share something once?

Create a browser-encrypted note that expires after reading. No account required.

Create a note