Qubes OS splits the desktop into virtual machines. Work, personal, and a disposable browser each run apart, so one bad site does not automatically see the other windows. Edward Snowden has pointed people at it for years. The project assumes the base system can be attacked and tries to make that attack small. It wants […]
Fedora is a general-purpose Linux desktop from the Fedora Project, sponsored by Red Hat. Releases land about every six months. The installer gives you a current GNOME session on Wayland. Codecs and some drivers sit outside the default repos because of licenses. You enable RPM Fusion or you live without them. Upgrades are part of […]
SimpleX has no user account at all. No phone number, no username, no address book on a server. You connect by a one-time link or a QR code. Relays pass messages and are not supposed to learn who is talking. The apps are open source. The network is small. Delivery can be slower than Signal. […]
Session gives you a random Session ID instead of a phone number. Messages go through an onion-routed network of community nodes, so there is no central account database of who messaged whom. Clients are open source. There are phone and desktop apps. Onion routing costs time. Big files are limited. Calls exist and they are […]
Threema sells a messenger for a one-time fee. A random Threema ID replaces your phone number. Chats are end-to-end encrypted. The company is in Switzerland and has published outside audits. You can use it without handing over a number or an email. The apps are open source. The server is not. You are trusting Threema […]
Element is the main app for Matrix, a federated chat protocol. You can use Element’s server or run your own and still talk to people on other servers. Private rooms can be end-to-end encrypted. Bridges can mirror Slack, Telegram, and other networks into a room. The homeserver sees metadata. Public rooms are often unencrypted. Encryption […]
Signal encrypts messages, voice, and video by default. The protocol is open. WhatsApp uses a cousin of it. Sealed sender hides your identity from Signal’s servers on ordinary messages. Since 2023 the handshake also includes a post-quantum layer, PQXDH, so a recording of today’s traffic is harder to crack later with a future quantum machine. […]
Mailbox.org is Heinlein’s hosted office in Berlin: mail, calendar, contacts, cloud storage, and an office suite, under German privacy law. The webmail speaks OpenPGP. Anonymous payment works. Cheap plans still allow your own domain, which is rare. The interface is a tool, not a consumer app. Some of the better privacy switches sit in expert […]
Tuta, the service formerly called Tutanota, encrypts more than the body of the mail. Subject lines, the address book, and the calendar are encrypted with the product’s own open-source scheme. The company is in Germany. You can pay without handing over a name. Newer accounts get a post-quantum layer on Tuta-to-Tuta mail. That custom cryptography […]
Proton Mail is encrypted email that normal people finish setting up. Swiss company, apps on every platform, end-to-end encryption when both sides are on Proton, and OpenPGP if you want to write to someone who is not. You can open an account without a phone number. Mail that leaves Proton for Gmail is ordinary mail […]
BellCrier breach check
Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.
