Privacy Guides is the independent, nonprofit-maintained reference for privacy tools and threat modeling, with rigorous criteria for every recommendation and no affiliate links. When the privacy community argues, it argues using this site. Its standards are strict, so some perfectly usable tools are excluded, and the depth can overwhelm newcomers. The best directory of vetted […]
Trayvax makes metal card wallets in the United States. Some models add an RFID-blocking layer so a casual scanner does not read the chip in a contactless card. The frame holds a few cards and a bill. Warranties are part of the pitch. The steel is stiff until it loosens. RFID blocking is not a […]
Silent Pocket sells wallets with RFID blocking and separate Faraday sleeves for phones, key fobs, and laptops. A closed sleeve is meant to attenuate radio so the device inside is not on the cellular, Wi-Fi, or Bluetooth network. That is a real use: a phone you want silent in a meeting, a fob you do […]
Ekster makes thin wallets, often leather, with an RFID-blocking layer and an optional tracker card. The tracker is a Bluetooth tag so the wallet can ping a phone when you leave it behind. Solar charging on that card is a product feature, not a privacy feature. A tracker is a radio you chose to add. […]
Diceware builds a passphrase from dice and a word list, so the randomness is the physical throw, not a program you have to trust. Arnold Reinhold published the method. The EFF long wordlist is the variant most people should use now, because the words are clearer. Five or six words from a 7,776-word list is […]
Bitwarden’s generator is a web page that builds a random password or passphrase in your browser. You set the length and the character set, then you copy the result. You do not need an account. The useful version of this is local: the page should be doing the work on your machine, not sending the […]
LessPass does not store passwords. It derives each one from the site name, your login, and a master passphrase, using a published method. There is no database to sync or steal. Browser and phone apps exist, and the code is open. Change the counter when a site forces a new password. The master passphrase is […]
Have I Been Pwned, run by Troy Hunt, tells you if an email address shows up in breaches that have been shared with the site, and it can email you when a new one does. Pwned Passwords is the list managers query when you pick a password. The check uses k-anonymity: the site sees only […]
GlobaLeaks is open-source software an organization runs to receive anonymous tips. It is associated with the Hermes Center in Italy. Sources can use Tor Browser. The setup supports more than one language, deletion deadlines, and a two-way conversation inside the system. You do not “join GlobaLeaks” the way you join Signal. You use someone else’s […]
OnionShare turns the computer in front of you into a temporary Tor service. You can send files, publish a small site, or chat, and the address dies when you close the program. Micah Lee started it. The app bundles Tor, so the sender does not separately install Tor Browser. The other person can open the […]
BellCrier breach check
Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.
