SecureDrop is the whistleblowing system the Freedom of the Press Foundation maintains for newsrooms. A source opens an onion address in Tor Browser, leaves documents without an account, and can continue the conversation in that channel. Major newsrooms publish their SecureDrop addresses on their own sites. Fake onion addresses exist. Copy the address from the […]
Ente Auth stores TOTP codes with end-to-end encryption and syncs them across Android, iPhone, desktop, and the web. It comes from the same people as Ente Photos. You can keep codes on one device without an account. Sync means an account, and the codes are still encrypted with keys you hold. They have published audits. […]
KeePassXC can store TOTP secrets in the same encrypted database as your passwords. The browser extension can type the code. There is no second cloud and no second app from this team. The threat model matches the password vault: whoever can open the file can mint codes. That is also the downside. Password and second […]
Aegis is an open-source Android app for TOTP codes, the six-digit login codes that change every 30 seconds. The vault is encrypted on the phone. Backups can be encrypted and written to a file you store yourself. There is no Aegis cloud. Android only. If you lose the phone and the backup, you lose the […]
BellCrier breach check
Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.
