標籤 / 已審計_

A Bitwarden

Open-source cloud password manager. Optional self-host.

A Cryptomator

Client-side encryption for cloud storage — Dropbox / GDrive / iCloud see only ciphertext.

A Ente Auth

Cross-platform TOTP app with E2E-encrypted sync. Free tier, no account required for local-only use.

A GrapheneOS

Hardened Android for Pixel hardware. Verified boot, sandboxed Play Services, no Google account requi

A KeePassXC

Offline, file-based password vault. No cloud, no account.

A Mullvad Browser

Tor-Browser-derived browser without Tor. Use with Mullvad VPN.

A OnionShare

P2P file-share over Tor onion services. No third-party hosting.

A Qubes OS

Security-via-compartmentalisation desktop OS. Every app runs in its own Xen VM.

A SecureDrop

Newsroom-grade anonymous-source submission system. Run by ~70 outlets (NYT, WaPo, ProPublica, Guardi

A Standard Notes

E2E-encrypted notes app. Open-source, audited, accepts crypto on paid tiers.

A Tails OS

Live USB OS that routes all traffic through Tor by default.

A Tor Browser

The reference anonymity browser. Bundled with Tor + NoScript + safe defaults.

A VeraCrypt

Full-disk + container encryption with plausible deniability.

A Whonix

Two-VM compartmentalisation — workstation never sees the public internet.

B Session

Decentralised messenger — no phone number, no email, onion-routed.

B Threema

Swiss paid one-time messenger. Phone-number optional, anonymous IDs, no metadata.

A Coldcard

Bitcoin-only hardware wallet by Coinkite. Air-gapped via PSBT-on-SD. Reference signer for Bitcoin ma

A Foundation Passport

Air-gapped BTC hardware wallet. Camera-only QR signing, US-manufactured, open-source firmware.

A Monero.com

XMR-only fork of Cake — stripped down to just Monero, no chain bloat.

A SeedSigner

DIY air-gapped Bitcoin hardware wallet built on Raspberry Pi Zero. No firmware secrets, no vendor lo

A Zeus

Open-source LN wallet — connect to your own LND/CLN/Eclair node or use embedded LSP.

A IVPN

Anonymous account IDs, accepts cash + XMR + monero. Strong audit history.

A Mullvad VPN

Account number only — no email, name, or any identifier required. Pay in cash, XMR, BTC, or card.

A NymVPN

Decentralised mixnet VPN — 24-word passphrase signup (no email, no phone), accepts Monero / Zcash /

B Obscura VPN

New "technically can't log" two-party-relay VPN by Carl Dong (Bitcoin Core alum). XMR + BTC accepted

B Proton VPN

Free tier exists; paid plans accept BTC. Email required at signup.

A Proton Mail

Swiss-based encrypted email. Free tier; paid plans accept BTC.