Open-source privacy software
2306 open-source libraries, tools and applications tagged privacy, ranked by how closely privacy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2306 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| oiov/vmail Vmail is a self-hosted temporary/disposable email service built entirely on Cloudflare Workers and D1, deployable with just a domain. It su… | 73 | 1487 | active |
| securitybunker/databunker Databunker is a self-hosted, Go-based secure vault for tokenizing and storing personal records such as PII, PHI, KYC, and PCI data. It expo… | 71 | 1487 | active |
| Bee (Swarm client) Bee is a Go client for the Swarm network, a decentralized peer-to-peer storage and communication network built on the Gnosis blockchain. Ru… | 93 | 1482 | active |
| asz798838958/aBaiFreeGPT A self-hosted account registration and lifecycle management platform that automates bulk account signup, email verification, TOTP 2FA bindi… | 55 | 1482 | active |
| meganz/sdk The official MEGA C++ SDK providing client access to MEGA's end-to-end encrypted cloud storage, including a low-level API, an intermediate … | 95 | 1478 | active |
| ViewTube/viewtube ViewTube is an open-source, privacy-conscious alternative frontend for YouTube that lets users watch, search, and discover videos without a… | 66 | 1476 | active |
| khast3x/h8mail h8mail is a Python CLI tool for email OSINT and password breach hunting. It queries breach services like HaveIBeenPwned and Hunter.io, or s… | 23 | 5348 | maintenance |
| Surfer-Org/Protocol Surfer Protocol is an open-source framework for exporting personal data from platforms like Gmail, iMessages, Twitter, Notion, and ChatGPT.… | 14 | 1474 | active |
| simonrob/email-oauth2-proxy A local IMAP/POP/SMTP proxy written in Python that transparently adds OAuth 2.0 authentication for email clients that don't support it. It … | 78 | 1473 | active |
| BlendLog/MinerSearch A free Windows utility that scans for and removes hidden cryptocurrency miners by checking processes, files, registry, WMI, services, and s… | 98 | 1470 | active |
| OUI-SPY Flock-You is ESP32-S3 firmware that turns a Seeed XIAO ESP32-S3 into a passive 2.4 GHz promiscuous-mode WiFi sniffer for detecting Flock su… | 61 | 1470 | active |
| zfdang/Android-Touch-Helper Android-Touch-Helper (AdSkip) is an open-source Android app that automatically skips splash/startup ads using the Accessibility Service. It… | 97 | 5317 | maintenance |
| small (OpenWrt proxy plugin feed) A collection of commonly used OpenWrt package feeds (luci apps, themes, and proxy/DNS plugins) maintained for easy inclusion when compiling… | 94 | 1468 | active |
| debugtheworldbot/keyStats KeyStats is a lightweight native menu bar (macOS) and system tray (Windows/Linux) application that tracks daily keyboard keystrokes, mouse … | 82 | 1468 | active |
| Diniboy1123/usque An open-source Go reimplementation of the Cloudflare WARP client's MASQUE mode using the Connect-IP (RFC 9484) protocol. It offers multiple… | 77 | 1468 | active |
| xtclovver/RKNHardering An Android application that detects VPN and proxy configurations on a device, implementing the methodology used by Roskomnadzor (RKN) to id… | 72 | 1466 | active |
| strongbox-password-safe/Strongbox Strongbox is a native password manager client for iOS and macOS that opens KeePass (KDB/KDBX) and Password Safe (v3) vault files. It encryp… | 70 | 1466 | active |
| potatameister/PaperKnife PaperKnife is a privacy-first PDF utility that merges, splits, compresses, encrypts, signs, and sanitizes PDFs entirely on-device with no s… | 69 | 1465 | active |
| bindhosts/bindhosts A systemless hosts manager for rooted Android devices that works with APatch, KernelSU, and Magisk. It provides ad-blocking and hostname re… | 90 | 1464 | active |
| eljojo/rememory ReMemory is a tool that encrypts your files with age and splits the key using Shamir's Secret Sharing among trusted people, who each receiv… | 72 | 1464 | active |
| omni-media/omniclip Omniclip is a free, open-source video editing web application that runs entirely in the browser using modern APIs like WebCodecs. It requir… | 70 | 1463 | active |
| pritunl/pritunl-client Pritunl Client is a free, open-source cross-platform OpenVPN and WireGuard client with both graphical and command-line interfaces. It suppo… | 96 | 1457 | active |
| LorenEteval/Furious Furious is a cross-platform GUI proxy client built with PySide6 that wraps Xray-core and Hysteria as Python bindings. It supports protocols… | 95 | 1457 | active |
| chaogei/Kiro-account-manager A desktop application for managing multiple Kiro IDE accounts with one-click switching, automatic token refresh, and group/tag organization… | 68 | 1455 | active |
| hack-chat/main hack.chat is a minimal, accountless, logless chat service with disappearing messages, built on Node.js and WebSockets. It can be self-hoste… | 76 | 1453 | active |
| zama-ai/concrete-ml Concrete ML is a privacy-preserving machine learning library built on top of Zama's Concrete FHE compiler. It lets data scientists convert … | 65 | 1453 | active |
| tuneinsight/lattigo Lattigo is a pure Go library implementing lattice-based (RLWE) homomorphic encryption schemes such as BFV/BGV and CKKS, along with their mu… | 74 | 1452 | active |
| yuzeguitarist/Deck Deck is a native, privacy-first clipboard manager for macOS built with Swift and SwiftUI. It records clipboard history (text, images, files… | 64 | 1450 | active |
| ccbkkb/MicroWARP MicroWARP is an ultra-lightweight Docker image that provides a Cloudflare WARP SOCKS5 proxy using kernel-level WireGuard and a pure C micro… | 77 | 1448 | active |
| crazy-max/WindowsSpyBlocker WindowsSpyBlocker is a Go application delivered as a single Windows executable that blocks spying and tracking on Windows systems. It captu… | 65 | 5217 | maintenance |
| Apollo-Reborn/Apollo-Reborn Apollo-Reborn is an iOS tweak (written in Logos) that revives the discontinued Apollo Reddit client by letting users supply their own Reddi… | 95 | 1444 | active |
| exteraSquad/exteraGram exteraGram is an experimental third-party Telegram client for Android built from the official Telegram for Android sources, adding extra fe… | 10 | 1444 | active |
| SlipNet SlipNet is an open-source anti-censorship VPN client for Android (Kotlin/Jetpack Compose) with a cross-platform Go CLI companion, supportin… | 71 | 1443 | active |
| tahoe-lafs/tahoe-lafs Tahoe-LAFS is a free and open-source decentralized storage system that distributes encrypted, erasure-coded file shares across multiple unt… | 59 | 1443 | active |
| omegaee/my-fingerprint A lightweight browser extension built on Manifest V3 that protects against browser fingerprinting across Chrome, Edge, and Firefox. It spoo… | 89 | 1441 | active |
| tejaswigowda/ffmpeg-webCLI A browser-based video and audio editor powered by ffmpeg.wasm that performs all media processing locally via WebAssembly and Web Workers. I… | 73 | 1441 | active |
| beakthoven/TrickyStoreOSS A fully open-source Magisk module that spoofs Android hardware keystore attestation, serving as a FOSS rewrite of the proprietary TrickySto… | 83 | 1437 | active |
| twoone-3/AdGuardHomeForRoot A Magisk/KernelSU/APatch module that runs AdGuardHome on rooted Android devices, providing a local DNS server that blocks ads, malware, and… | 88 | 1436 | active |
| Uncensored AI Studio Uncensored-Local-Studio is a portable, fully offline AI assistant stack (Ollama + Llama 3 / other GGUF models + AnythingLLM) that runs enti… | 57 | 1436 | active |
| jawj/IKEv2-setup A Bash script that configures a fresh Ubuntu Server LTS install as an IKEv2 VPN server using strongSwan, with Let's Encrypt certificates an… | 53 | 1435 | active |
| at_client_sdk The Dart implementation of the atSDK for building applications on the Atsign Platform, a protocol for personal data ownership and controlle… | 67 | 1434 | active |
| Sitoi/ClashBar ClashBar is a native macOS menu bar proxy client built with SwiftUI and AppKit, powered by the mihomo (Clash Meta) core. It provides a ligh… | 80 | 1432 | active |
| CFnat A Windows GUI wrapper (written in C#) around the CFnat tool, which automatically finds and tests Cloudflare datacenter IPs and sets up loca… | 24 | 1430 | active |
| Kianmhz/GooseRelayVPN A Go-based SOCKS5 VPN client that tunnels raw TCP traffic through Google Apps Script web apps to a user-controlled VPS exit server. Traffic… | 64 | 1429 | active |
| dockovpn/dockovpn DockOvpn is a stateless, out-of-the-box OpenVPN server packaged as a Docker image that starts in under two seconds and requires no persiste… | 23 | 1429 | active |
| tun2proxy/tun2proxy tun2proxy is a Rust tool that creates a TUN network interface and routes traffic through SOCKS4/5 or HTTP proxies, effectively turning a pr… | 98 | 1423 | active |
| backslashxx/mountify Mountify is a shell-based module for rooted Android that mounts other root modules globally via OverlayFS instead of Magic Mount. It works … | 82 | 1423 | active |
| cinit/TMoe TMoe is an open-source Xposed module that hooks into Telegram Android clients to add extra features and tweaks. It works with official and … | 70 | 1423 | active |
| matrix-org/matrix.to Matrix.to is a stateless, privacy-protecting URL redirection service for the Matrix ecosystem that turns matrix.to links into app-agnostic … | 64 | 1423 | stable |
| v2ray-worker A TypeScript solution for deploying V2Ray proxy configurations (VLESS and Trojan) on Cloudflare Workers. It generates proxy configs and man… | 19 | 1423 | active |
| tess1o/geopulse GeoPulse is a self-hosted, privacy-first web application that turns raw GPS points from trackers like OwnTracks, Overland, Traccar, and GPS… | 79 | 1421 | active |
| openwpm/OpenWPM OpenWPM is a web privacy measurement framework built on Firefox with Selenium automation, designed to collect data from thousands to millio… | 91 | 1420 | active |
| Horcrux A Go CLI tool that splits a file into encrypted fragments using Shamir's Secret Sharing, requiring only a threshold of fragments to reconst… | 23 | 5105 | maintenance |
| rosenpass/rosenpass Rosenpass is a post-quantum-secure key exchange tool written in Rust that establishes symmetric keys and feeds them to WireGuard via its pr… | 82 | 1417 | active |
| BinTianqi/OwnDroid OwnDroid is an Android app that uses the DevicePolicyManager API with Device owner privileges to manage your own device. It provides system… | 86 | 1415 | active |
| danny0838/content-farm-terminator Content Farm Terminator is a cross-platform browser extension that identifies content farms by marking hyperlinks pointing to them and bloc… | 76 | 1415 | active |
| bepaald/signalbackup-tools A C++ command-line tool for working with backup files generated by the Signal Android app. It can decrypt, inspect, export, merge, crop, an… | 93 | 1412 | active |
| nuvious/pam-duress A Linux Pluggable Authentication Module (PAM) that lets users configure alternate 'duress' passwords which, when used under coercion, authe… | 70 | 1412 | active |
| daboynb/Safetycore-placeholder A placeholder Android APK that occupies the com.google.android.safetycore package name so Google cannot install or update the real SafetyCo… | 66 | 1412 | active |
| WireGuard/wireguard-apple The official WireGuard VPN client application for iOS and macOS, written in Swift, including the WireGuardKit Swift package for integrating… | 32 | 1411 | active |
| haveno-dex/haveno Haveno is an open-source, non-custodial, peer-to-peer exchange platform for trading Monero against fiat currencies and other cryptocurrenci… | 100 | 1409 | active |
| PrimiHub PrimiHub is an open-source privacy-preserving computing platform built by a team of cryptography experts, supporting secure multi-party com… | 41 | 1409 | active |
| GrapheneOS/Camera GrapheneOS Camera is a modern Android camera app built on CameraX, focused on privacy and security. It includes QR and barcode scanning and… | 95 | 1408 | active |
| amitbl/blocktube BlockTube is a WebExtension for Chrome and Firefox that filters and blocks unwanted YouTube content such as videos, channels, and comments … | 59 | 1408 | active |
| corna/me_cleaner A Python script that modifies Intel ME/TXE firmware images to reduce the co-processor's ability to interact with the system, disabling it d… | 66 | 5051 | maintenance |
| micahmo/WgServerforWindows Wg Server for Windows (WS4W) is a desktop application that automates setting up and managing a WireGuard VPN server endpoint on Windows. It… | 71 | 1404 | active |
| gioxx/MarvellousSuspender The Marvellous Suspender is a free, open-source Chrome extension that automatically suspends inactive tabs to free memory and CPU, based on… | 98 | 1403 | active |
| Noir Noir is a Rust-inspired domain-specific language for writing privacy-preserving programs that compile to zero-knowledge (SNARK) proofs via … | 96 | 1402 | active |
| OpenTracksApp/OpenTracks OpenTracks is a privacy-respecting, offline sport tracking application for Android that records GPS-based activities like running and cycli… | 10 | 1401 | active |
| ZeusLN/zeus ZEUS is a self-custodial mobile Bitcoin and Lightning Network wallet built with React Native and TypeScript. It doubles as a remote node ma… | 100 | 1400 | active |
| BlueBubbles BlueBubbles is an open-source, cross-platform ecosystem that brings iMessage to Android, Windows, Linux, macOS, and the web via a Flutter c… | 100 | 1400 | active |
| curbox-app/curbox-android Curbox is a free, open-source Android app that blocks distracting apps, websites, and short-video feeds like Instagram Reels and YouTube Sh… | 88 | 1395 | active |
| mrrfv/open-android-backup Open Android Backup is a shell script paired with a Flutter companion app that backs up Android devices over ADB without root, vendor lock-… | 79 | 1395 | active |
| Maasea/sgmodule A collection of Surge modules (sgmodule files) written in JavaScript that enhance or modify mobile apps and network behavior, such as remov… | 70 | 1395 | active |
| romanz/electrs Electrs is an efficient Electrum server re-implementation written in Rust that indexes the entire Bitcoin blockchain using RocksDB. It lets… | 88 | 1394 | active |
| arkohut/pensieve Pensieve is a privacy-focused passive screen recording application that automatically takes screenshots of your screens, indexes them with … | 79 | 1393 | active |
| GtxFury/FlyClash FlyClash is a modern, visually polished proxy client built on the Clash (mihomo) kernel, developed with Tauri, Next.js, and Tailwind CSS. I… | 88 | 1392 | active |
| SparkleShare SparkleShare is an open-source file sharing and collaboration app that syncs a special folder on your computer with any Git repository, wor… | 64 | 4988 | maintenance |
| boxdot/gurk-rs Gurk is a Signal Messenger client that runs in the terminal, built in Rust with a text user interface. It links as a companion device to yo… | 95 | 1389 | active |
| jamesmcm/vopono Vopono is a Rust CLI tool that runs individual applications through VPN tunnels using temporary network namespaces on Linux. It supports mu… | 97 | 1388 | active |
| Yutaka-Sawada/MultiPar MultiPar is a Windows Parchive (PAR2) tool for creating recovery files, verifying file integrity, and repairing damaged or missing files. I… | 75 | 1387 | active |
| DrJonaC/Pensieve Pensieve is a local-first dashboard for visualizing, interpreting, and governing the structured memory that LLMs keep about users. It expos… | 58 | 1386 | active |
| Yubico/yubioath-flutter Yubico Authenticator is a companion desktop and Android app for managing YubiKey hardware security keys and accessing OATH one-time passwor… | 92 | 1385 | stable |
| simeononsecurity/Windows-Optimize-Harden-Debloat A PowerShell script that automates optimization, hardening, and debloating of Windows 10 and Windows 11 systems. It applies security and pr… | 27 | 1385 | active |
| zfl9/chinadns-ng ChinaDNS-NG is a rewritten and enhanced version of ChinaDNS that splits DNS queries between domestic (China) and trusted upstream DNS serve… | 42 | 1383 | active |
| remittor/zapret-openwrt OpenWrt packages (ipk/apk) of Zapret, an anti-DPI utility that bypasses deep packet inspection on routers, with a LuCI web interface. It is… | 73 | 1382 | active |
| Psiphon Psiphon is a relay-based Internet censorship circumvention system consisting of client apps for Windows, Android, and iOS plus a server net… | 32 | 1382 | active |
| JiGuroLGC/BetterVia BetterVia is an Xposed module (for LSPosed/LSPatch) that enhances the Via browser on Android by removing built-in whitelist restrictions on… | 81 | 1381 | active |
| YukiCoco/ToMoon ToMoon is a Decky Loader plugin for SteamOS that provides an out-of-the-box Clash proxy client written in Rust. It automatically configures… | 35 | 1381 | active |
| LSPosed/DisableFlagSecure An LSPosed/Xposed module that enables screenshots in apps that block them via FLAG_SECURE and disables screenshot and screen-record detecti… | 81 | 1379 | active |
| simondankelmann/Bluetooth-LE-Spam An Android app that uses built-in Bluetooth Low Energy to send phantom device advertisements mimicking services like Apple popups, Microsof… | 58 | 4937 | maintenance |
| zelon88/HRConvert2 HRConvert2 is a self-hosted, resource-aware file conversion server written in PHP that supports 488 file formats across documents, images, … | 96 | 1377 | active |
| qr243vbi/nekobox NyameBox (a rebrand of NekoBox) is a cross-platform Qt-based desktop GUI proxy utility powered by the sing-box core. It supports a wide ran… | 76 | 1374 | active |
| Demizo/Daily_You Daily You is an open-source daily diary and journaling app built with Dart/Flutter. It lets users write daily logs with Markdown, track moo… | 92 | 1373 | active |
| mullvad/gotatun GotaTun is a userspace WireGuard implementation in Rust, forked from Cloudflare's BoringTun, providing both a library and a standalone tunn… | 90 | 1371 | active |
| HazyResearch/minions Minions is a communication protocol and Python framework that lets small on-device LLMs collaborate with frontier cloud LLMs to cut cloud i… | 49 | 1370 | active |
| Passepartout Passepartout is an OpenVPN and WireGuard VPN client app for iPhone, iPad, Mac, and Apple TV, built on the Partout tunnel framework. It offe… | 93 | 1368 | active |
| chili-chips-ba/wireguard-fpga An open-source, wire-speed hardware implementation of the WireGuard VPN protocol on a low-cost Artix-7 FPGA, written in Verilog with an ope… | 66 | 1366 | active |
| FossifyOrg/Phone Fossify Phone is an open-source Android dialer and call manager with a phonebook, number blocking, and multi-SIM support. It is ad-free, tr… | 86 | 1364 | stable |
| MhmRdd/NoHello NoHello is a Zygisk module written in C++ that hides root and Zygisk from Android apps. It supports Magisk, KernelSU, KernelSU Next, and AP… | 30 | 1364 | active |