Aegis is an open-source Android app for TOTP codes, the six-digit login codes that change every 30 seconds. The vault is encrypted on the phone. Backups can be encrypted and written to a file you store yourself. There is no Aegis cloud. Android only. If you lose the phone and the backup, you lose the […]
Tresorit is end-to-end encrypted storage aimed at offices. It started in Hungary and is based in Switzerland. Swiss Post has owned it since 2021. Sharing, remote wipe, and admin controls are the product. The company publishes security writeups and has a history of outside tests. The design claim is that Tresorit cannot read the files. […]
Nextcloud is a self-hosted cloud: files, calendar, contacts, and a pile of apps, under the AGPL. You run it on a server you control, or you rent one. There is no Google in the middle unless you put one there. The files are not end-to-end encrypted by default. Whoever runs the server can read them. […]
Proton Drive is end-to-end encrypted file storage from Proton in Switzerland. Files are encrypted before upload. Sharing is by link, with an optional password. The phone apps can back up photos. The same account can sit next to Proton Mail and VPN if you want one login. Free space is small. The desktop sync client […]
Bitwarden is an open-source password manager with apps on every platform and a company whose product is the vault. The database is encrypted on your devices before it syncs. Independent audits are published. The free tier covers unlimited passwords across devices. Paid adds a few sharing and emergency features. TOTP codes and passkeys live in […]
KeePassXC stores passwords in one encrypted file, a .kdbx database, on a disk you control. There is no account and no cloud. It runs on Windows, macOS, and Linux. Browser integration and TOTP codes are built in. The project is open source and is the maintained community client for the KeePass format. The KeePassXC team […]
Proton Pass is the password manager from Proton. Clients are open source. The vault is end-to-end encrypted. Hide-my-email aliases are built in, so a signup form gets a forwarding address instead of your real one. The free tier is enough to try it. Extra aliases and some comfort features sit on paid plans or the […]
Vaultwarden is a community rewrite of the Bitwarden server, in Rust, small enough for a tiny computer at home. The official Bitwarden phone and browser apps talk to it. Your vault stays on hardware you can unplug. It is not Bitwarden’s server and it is not covered by Bitwarden’s audits. Features land when the volunteer […]
AdGuard DNS is a hosted encrypted resolver that drops a lot of ad and tracker domains before the page even loads. There is a family mode and a mode that only does security. Any device that can take a DNS hostname can use it. No app is required, though AdGuard also sells apps. It is […]
Pi-hole is a DNS sinkhole you run yourself, usually on a small computer on the home network. Devices use it as their resolver. Domains on your block lists get a dummy answer, so the ad or tracker never loads. The admin page shows which device tried to call which name. Pi-hole does not encrypt anything […]
BellCrier breach check
Most people are, and never hear about it. BellCrier checks your email against known data breaches for free, then alerts you when it turns up in a new one, with exactly what leaked and how to fix it.
