Privacy tools we recommend

1. Forward Email Grade A Our pick

Open-source email service with encrypted mailboxes, custom domains, and IMAP, POP3, SMTP, CalDAV and CardDAV on every paid plan.

Why it is our pick: The whole service is published on GitHub, server code included. Each mailbox is a separately encrypted SQLite file, IMAP, POP3, SMTP, CalDAV and CardDAV work with any app, and custom domains are included on low-cost plans.

Email providers. Based in the United States (Five Eyes). Score 93/100.

Also rated in Email clients.

2. Betterbird Grade B Our pick

Fork of Mozilla Thunderbird that follows its Extended Support Releases and adds extra fixes and features. Available for Windows, macOS and Linux.

Why it is our pick: Open-source (MPL-2.0) fork of Thunderbird with telemetry reporting turned off and built-in OpenPGP and S/MIME. It connects directly to any IMAP, POP3 and SMTP provider and blocks remote content by default.

Email clients. Based in Germany (Fourteen Eyes). Score 89/100.

3. Forward Email Webmail Grade C Our pick

Hosted webmail for Forward Email accounts, with mail, calendar and contacts, built-in OpenPGP and optional encryption of locally cached data. It shares one source-available codebase with the Forward Email desktop and mobile apps.

Why it is our pick: Source-available webmail with built-in OpenPGP and no third-party analytics, covered by Cure53's audit. It works only with Forward Email accounts, not other IMAP and SMTP providers.

Webmail. Based in the United States (Five Eyes). Score 74/100.

4. SpamScanner Grade B Our pick

Spam, phishing and malware scanner for email written in Node.js by the Forward Email team, used as a library or a command-line tool on your own server.

Why it is our pick: Self-hosted spam, phishing and malware scanning for Node.js with no telemetry, built by the Forward Email team and used to filter Forward Email's mail.

Spam and virus filtering. Score 80/100.

5. Mullvad Browser Grade A Our pick

Firefox-based browser developed by the Tor Project and Mullvad for use without the Tor network. Uses Tor Browser's anti-fingerprinting defenses, has no telemetry and includes uBlock Origin.

Why it is our pick: Tor Browser's protections without the Tor network: fingerprinting resistance that makes users look alike, uBlock Origin built in, no telemetry, and fast security updates. Built by the Tor Project and Mullvad, free, and works with any VPN.

Browsers. Based in Sweden (Fourteen Eyes). Score 90/100.

6. Ungoogled Chromium Grade C Our pick

Chromium with all Google web services, background requests and Google-specific code removed, while keeping the familiar Chromium experience.

Why it is our pick: The speed and site compatibility of Chromium without the constant connections to Google. Pair it with uBlock Origin for tracker blocking.

Browsers. Score 63/100.

7. uBlock Origin Grade B Our pick

Free, open-source content blocker for ads, trackers and malware sites. Efficient, with no "acceptable ads" program.

Why it is our pick: The most effective blocker available, with no data collection, no home server, no acceptable-ads deals and not even a donation page. Install it through the links on its GitHub page to avoid look-alike extensions.

Ad and tracker blockers. Score 88/100.

8. uBlock Origin Lite Grade B Our pick

Manifest V3 content blocker from the uBlock Origin developer that filters ads and trackers through declarative browser rules, with no background process.

Why it is our pick: For browsers that only allow Manifest V3 extensions, such as Chrome and Edge: uBlock Origin's filter lists with no data collection and no background process.

Ad and tracker blockers. Score 88/100.

9. DuckDuckGo Grade C Our pick

Search engine that does not save search history or tie searches to IP addresses. Ads are based on the search terms instead of a profile.

Why it is our pick: Results good enough to replace Google for most searches, no search history, no profile-based ads, and no account needed. Apps and browser extensions are open source.

Search engines. Based in the United States (Five Eyes). Score 73/100.

10. Browserpass Grade B Our pick

Browser extension for pass, the standard Unix password manager. Passwords stay in GPG-encrypted files on your own computer.

Why it is our pick: For people who want no password company at all. Every password is a GPG-encrypted file in a folder you control, synced with Git if you like, and Browserpass fills it into the browser.

Password managers. Score 88/100.

11. Bitwarden Grade C Our pick

Open-source, end-to-end encrypted password manager with apps for Windows, macOS, Linux, Android, iOS, the web and browsers, and an option to self-host.

Why it is our pick: Syncs across desktop, mobile and browser apps and supports sharing with family or a team. End-to-end encrypted, audited every year, and it can be self-hosted.

Password managers. Based in the United States (Five Eyes). Score 73/100.

12. Cure53 Grade A Our pick

Berlin security firm that performs penetration tests and source code audits of web, mobile, browser, VPN and cryptographic software, and publishes many client reports.

Why it is our pick: Publishes a large public library of full audit reports, many for open-source and privacy projects, and maintains the DOMPurify sanitizer. Its website uses no cookies or analytics.

Security audit firms. Based in Germany (Fourteen Eyes). Score 100/100.

13. Comp AI Grade F Our pick

Open-source compliance automation platform that helps companies prepare for SOC 2, ISO 27001, HIPAA and GDPR audits by collecting evidence, managing policies and tracking controls. It is offered as a hosted service or can be self-hosted.

Why it is our pick: Open-source compliance automation for SOC 2, ISO 27001, HIPAA and GDPR, with evidence collection, policies and control tracking. Most of the code is AGPL-3.0, and it can be self-hosted, so compliance data does not have to live with a closed vendor.

Compliance automation. Based in the United States (Five Eyes). Score 38/100.

14. Mullvad VPN Grade B Our pick

Flat-priced VPN from Sweden. Accounts are a random number with no email, and payment in cash or Monero is accepted.

Why it is our pick: No email, no name and no card needed. A stable, flat price, WireGuard on every platform, fully open-source apps, and repeated public audits of both the apps and the server infrastructure.

VPN providers. Based in Sweden (Fourteen Eyes). Score 79/100.

15. Cloudflare DNS Grade C Our pick

Authoritative DNS hosting on Cloudflare's anycast network with a free plan, DNSSEC, an API and security-key login.

Why it is our pick: Free on every plan, one of the fastest DNS networks, a complete API, and hardware security key login. DNSSEC is automatic when the domain is also registered with Cloudflare Registrar.

DNS hosting. Based in the United States (Five Eyes). Score 66/100.

16. Cloudflare Registrar Grade C Our pick

Domain registrar that charges registry cost with no markup, with free WHOIS redaction, transfer lock and one-click DNSSEC.

Why it is our pick: Registry cost with no markup on registration or renewal, free WHOIS redaction, security-key login, and automatic DNSSEC with Cloudflare DNS.

Domain registrars. Based in the United States (Five Eyes). Score 66/100.

17. DataPacket Grade D Our pick

Dedicated servers, IP transit and bandwidth on its own global network, from DataCamp Limited in London.

Why it is our pick: Dedicated hardware on its own network, open port 25, configurable reverse DNS and native IPv6. Suited to running mail servers without sharing hardware with other customers.

Server hosting. Based in the United Kingdom (Five Eyes). Score 43/100.

18. Upptime Grade B Our pick

Uptime monitor and status page that runs entirely in your own GitHub repository, using GitHub Actions, Issues and Pages.

Why it is our pick: No server to run, no vendor account and no tracking scripts. Checks run in GitHub Actions, incidents are GitHub issues, and the status page and response-time history are published with GitHub Pages.

Status pages and uptime monitoring. Score 78/100.

19. Tailscale Grade D Our pick

Mesh VPN built on WireGuard that connects devices into a private network using a hosted coordination server for key exchange and access control, with open-source clients.

Why it is our pick: A WireGuard mesh for Windows, macOS, Linux, Android and iOS, with NAT traversal and DERP relays when a direct connection fails. Keys are created on each device, so the coordination server and relays never see traffic. The clients are open source under BSD-3-Clause, ACLs and SSO come built in, and the open-source Headscale server can replace the hosted coordination server for full self-hosting.

Mesh VPNs and private networks. Based in Canada (Five Eyes). Score 50/100.

20. Headscale Grade B Our pick

Self-hosted, open-source implementation of the Tailscale coordination server, letting official Tailscale clients join a private network without using Tailscale's hosted service.

Why it is our pick: The open-source, self-hosted replacement for Tailscale's coordination server. The official Tailscale clients connect to it unchanged, so the whole network runs on your own server with no account at Tailscale.

Mesh VPNs and private networks. Score 82/100.

21. GrapheneOS Grade B Our pick

A privacy and security focused mobile operating system with Android app compatibility, developed as a non-profit open source project for Google Pixel devices.

Why it is our pick: Hardened Android for Pixel phones with no Google services by default, sandboxed Google Play only if you choose it, and no analytics or telemetry. Open source and funded by donations.

Mobile operating systems. Score 80/100.

22. LineageOS Grade C Our pick

A free and open source operating system based on Android that supports many phones and tablets, including ones no longer updated by their manufacturers.

Why it is our pick: Keeps many phones beyond Pixels updated with open-source, Google-free Android. Anonymous device statistics are on by default and can be turned off.

Mobile operating systems. Based in the United States (Five Eyes). Score 65/100.

23. Cal.com Grade F Our pick

Hosted scheduling platform for booking pages, team round-robin, routing forms and workflows, with calendar and video conferencing integrations.

Why it is our pick: Booking pages, team round-robin, routing forms and workflows with calendar and video integrations, in a hosted service. The MIT-licensed Cal.diy edition covers self-hosting on your own server.

Scheduling. Based in the United States (Five Eyes). Score 38/100.

24. Plane Grade D Our pick

Open source project management tool with issues, cycles, modules, pages and Kanban, list and Gantt views. Available as a hosted cloud service or a self-hosted Community Edition.

Why it is our pick: Open-source project management with issues, cycles, modules, pages and Kanban, list and Gantt views, as a replacement for Jira and Linear. The AGPL-3.0 Community Edition can be self-hosted, and its telemetry is opt-in.

Task management. Based in the United States (Five Eyes). Score 45/100.

25. Documenso Grade D Our pick

Open-source electronic signature platform for sending and signing documents, available as a hosted service or for self-hosting.

Why it is our pick: Open-source document signing, hosted or self-hosted, as a replacement for DocuSign. The core is AGPL-3.0, and self-hosted instances keep signed documents on your own server.

Electronic signatures. Based in the United States (Five Eyes). Score 56/100.

26. Formbricks Grade D Our pick

Open-source survey and form platform for link, website and in-app surveys, from Formbricks GmbH in Germany. Available as a hosted cloud service or self-hosted with Docker.

Why it is our pick: Open-source surveys and forms for links, websites and apps, as a replacement for Typeform, SurveyMonkey and Google Forms. Made by a company in Germany, with a hosted service or self-hosting with Docker.

Forms and surveys. Based in Germany (Fourteen Eyes). Score 53/100.

27. Koa Grade D Our pick

Minimal web framework for Node.js from the team behind Express, built around async middleware functions.

Why it is our pick: A small core built on async middleware, from the team behind Express. MIT licensed, with no telemetry.

Node.js frameworks. Score 50/100.

28. Svelte Grade B Our pick

Component framework for JavaScript and TypeScript that compiles components into JavaScript at build time instead of using a virtual DOM.

Why it is our pick: Compiles components to small, fast JavaScript with no virtual DOM and no telemetry, and works well with TypeScript. The Forward Email webmail and apps use Svelte and TypeScript on Tauri (github.com/forwardemail/mail.forwardemail.net).

Front-end and full-stack frameworks. Score 80/100.

29. Tauri Grade B Our pick

Framework for building desktop and mobile applications with a web frontend and a Rust backend, using the operating system's webview.

Why it is our pick: Small, fast apps for desktop and mobile from one web codebase, using the system web view instead of a bundled browser. A Rust core with a permission system, no telemetry, and a public independent audit. Pairs well with Svelte and TypeScript, as in the Forward Email apps (github.com/forwardemail/mail.forwardemail.net), which ship to Windows, macOS, Linux, Android and iOS from one Tauri, Svelte and TypeScript codebase.

Cross-platform app frameworks. Based in the Netherlands (Nine Eyes). Score 85/100.