Open-source privacy software
2306 open-source libraries, tools and applications tagged privacy, ranked by how closely privacy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2306 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Tobi823/ffupdater FFUpdater is an open-source Android app that installs and keeps privacy-friendly browsers (Firefox variants, Brave, Cromite, Tor Browser, a… | 62 | 1096 | active |
| ReturnFI/Blitz Blitz Panel is a self-hosted management panel for the Hysteria2 proxy server, offering user management, traffic monitoring, WARP integratio… | 10 | 1096 | active |
| QQBackup/qq-win-db-key A collection of Python and Frida scripts for extracting database encryption keys from QQ (Tencent's messenger) across Windows, Linux, macOS… | 68 | 1090 | active |
| ab77/netflix-proxy A smart DNS proxy deployed via Docker that uses dnsmasq and sniproxy to let users stream Netflix, Hulu, HBO Now and other region-locked ser… | 23 | 3741 | maintenance |
| builtbybel/privatezilla Privatezilla is a Windows 10 desktop application that performs a privacy and security check against about 60 critical privacy settings, let… | 23 | 3738 | maintenance |
| secureblue/secureblue secureblue is a security-focused desktop and server Linux operating system built as OCI bootable container images on top of Fedora Atomic D… | 93 | 1088 | active |
| semaphore-protocol/semaphore Semaphore is a zero-knowledge protocol and toolkit for proving group membership anonymously, letting users cast signals like votes or endor… | 92 | 1088 | active |
| immortalwrt/homeproxy HomeProxy is the modern proxy platform for ImmortalWrt (an OpenWrt fork), built on top of sing-box. It provides a LuCI web interface for ma… | 77 | 1088 | active |
| 7thSamurai/steganography A C++ command-line tool that encrypts files with password-protected AES-256-CBC and hides them inside images using Least-Significant-Bit pi… | 32 | 1087 | stable |
| Dot Browser Dot Browser is a privacy-focused web browser built on Firefox's Gecko engine, with releases for Windows, macOS, Linux, and Android. This re… | 23 | 1087 | active |
| semihalev/sdns SDNS is a high-performance recursive DNS resolver server written in Go, with DNSSEC validation and a privacy-first design supporting DNS-ov… | 99 | 1086 | active |
| estkme-group/openeuicc OpenEUICC is a fully open-source Local Profile Assistant (LPA) implementation for Android that manages eSIM profiles on internal and remova… | 72 | 1086 | active |
| builtbybel/xd-AntiSpy xd-AntiSpy is a Windows 11 privacy utility that lets users disable telemetry and spy-related settings through a simple interface, continuin… | 15 | 1086 | active |
| jjolano/shadow Shadow is a jailbreak detection bypass tweak for jailbroken iOS devices, hooking detection APIs so apps cannot detect the jailbreak. It sup… | 84 | 1084 | active |
| SpotCompiled/SpotC-Plus-Plus SpotC++ is a repository of pre-compiled Spotify iOS IPA files that bundle tweaks like EeveeSpotify and Sposify to unlock premium features s… | 58 | 1084 | active |
| Yuheng0101/X A collection of JavaScript scripts for proxy clients such as Quantumult X, Surge, Loon, and Shadowrocket, plus Node.js utilities. The scrip… | 65 | 1082 | active |
| hmjz100/123panYouthMember A Tampermonkey/Greasemonkey userscript that simulates 123pan (123 云盘) cloud drive membership features in the browser, including downloads o… | 43 | 1082 | active |
| EternalPain/ZJL ZJL is a shell script for Android that integrates the tiny and clnc engines to enable 'mianliu' (carrier free-data traffic) with anti-leak … | 23 | 1082 | active |
| BruceMacD/chatd Chatd is an Electron desktop application that lets you chat with your local documents using a local large language model (Mistral-7B) via O… | 18 | 1080 | active |
| tophant-ai/ClawVault ClawVault is a security vault plugin for OpenClaw AI agents that provides fine-grained, composable 'atomic' controls over what agents can a… | 71 | 1079 | active |
| rpgp/rpgp rPGP is a pure Rust implementation of OpenPGP (RFC9580, RFC4880, RFC6637) with a flexible low-level API, published as the `pgp` crate. It s… | 87 | 1078 | active |
| fm-sys/pairdrop-android PairDrop for Android is an open-source Android client for the PairDrop/Snapdrop browser-based local file sharing service. It integrates wit… | 70 | 1077 | active |
| borisbabic/browser_cookie3 A Python library (fork of browsercookie) that loads cookies from installed web browsers like Chrome, Firefox, Edge, Safari, and others into… | 23 | 1075 | active |
| christian-fei/my-yt A self-hosted, minimal YouTube frontend built with vanilla JavaScript and yt-dlp that lets you manage channel subscriptions, download video… | 65 | 1074 | active |
| DNSCrypt/doh-server A fast, secure DNS-over-HTTPS (DoH) and Oblivious DoH (ODoH) server proxy written in Rust, formerly known as doh-proxy. It does not resolve… | 90 | 1073 | stable |
| MaxiHuHe04/iTunes-Backup-Explorer A graphical open-source desktop application for viewing, extracting, and replacing files inside iPhone and iPad backups created by iTunes. … | 65 | 1072 | active |
| tombcato/clash-ip-checker A Python automation tool for Clash proxy users that iterates through proxy nodes, checks each node's IP purity, bot ratio, and IP type via … | 38 | 1068 | active |
| translate-tools/linguist Linguist is a privacy-first browser extension for Chrome and Firefox that translates web pages, selected text, subtitles, and messages, wit… | 93 | 1065 | active |
| kui123456789/free-account-tool A Chrome Manifest V3 browser extension that automates email-based account registration with 2FA, Passkey, and Access Token/Session manageme… | 72 | 1064 | active |
| gaubert/gmvault Gmvault is a Python command-line tool for backing up and restoring Gmail accounts, storing emails locally with incremental sync support. It… | 32 | 3640 | maintenance |
| PeterCxy/Shelter Shelter is a free and open-source Android app that uses the Work Profile feature to create an isolated space for installing or cloning apps… | 57 | 3629 | maintenance |
| QingJ01/123pan_unlock A Tampermonkey userscript that unlocks download restrictions on the 123pan (123云盘) cloud storage service, including bypassing the 1GB downl… | 10 | 1060 | active |
| darkk/redsocks redsocks is a transparent TCP-to-proxy redirector written in C that uses firewall rules (iptables, pf, ipfw) to redirect any TCP connection… | 32 | 3622 | maintenance |
| DeedleFake/trayscale Trayscale is an unofficial GTK4/libadwaita GUI for the Tailscale daemon, built primarily for Linux desktops where no official graphical cli… | 99 | 1059 | active |
| YeeZTech/YeeZ-Privacy-Computing Fidelius is a privacy computing middleware built on Intel SGX trusted execution environments, enabling secure data collaboration where orig… | 74 | 1059 | active |
| apple/security-pcc Apple's source code for Private Cloud Compute (PCC), the infrastructure that runs Apple Intelligence requests in a privacy-preserving cloud… | 56 | 1059 | active |
| supabase-community/copycat Copycat is a TypeScript library for generating deterministic fake values, where the same input always maps to the same fake output. It uses… | 23 | 1059 | active |
| AmauriC/tarteaucitron.js tarteaucitron.js is an open-source, accessible GDPR consent management platform (CMP) that displays a cookie banner and per-service consent… | 97 | 1058 | stable |
| hardcore-sushi/DroidFS DroidFS is an Android application for accessing encrypted virtual filesystems based on gocryptfs and CryFS, using its own internal file exp… | 98 | 1057 | active |
| zhbhun/idify Idify is a browser-based application for creating ID, passport, and visa photos with all processing done locally in the browser. It require… | 54 | 1055 | active |
| shadowsocks/ChinaDNS ChinaDNS is a C-based local DNS server that prevents DNS poisoning by routing Chinese domain queries to local DNS servers and foreign domai… | 23 | 3603 | maintenance |
| karasevm/PrivateDNSAndroid An Android app that adds a quick settings tile for switching the active private DNS (DNS-over-TLS) provider with a single tap. It supports … | 69 | 1054 | active |
| orvice/ss-panel ss-panel is a self-hosted web panel for managing Shadowsocks proxy servers, built in PHP with a Vue.js frontend. It provides user registrat… | 23 | 3599 | maintenance |
| εxodus The εxodus Android app shows which trackers are embedded in the apps installed on your smartphone and lists the permissions each app requir… | 43 | 1053 | active |
| GrapheneOS/PdfViewer A minimal, permission-free Android PDF viewer built on pdf.js and content providers, developed by the GrapheneOS project. It renders PDFs i… | 95 | 1046 | active |
| Ttungx/codex_auto_register A Python CLI tool that automates ChatGPT/Codex account registration using the DuckMail temporary email service, performs the Codex OAuth fl… | 58 | 1046 | active |
| Olsro/ipodclickwheelgamespreservationproject A preservation project distributing authenticated iPod Clickwheel games for iPod Nano 3G-5G and iPod Classic 5G-7G via a preconfigured Wind… | 41 | 1045 | active |
| aramperes/onetun onetun is a cross-platform, user-space WireGuard port-forwarder written in Rust that forwards local TCP/UDP ports to peers on a WireGuard n… | 52 | 1042 | active |
| cmj2002/warp-docker A Docker image that runs the official Cloudflare WARP client inside a container, exposing it as a SOCKS5 proxy via GOST. It lets users rout… | 68 | 1041 | active |
| OpenMined/TenSEAL TenSEAL is a Python library (with a C++ core) for performing homomorphic encryption operations on tensors, built on top of Microsoft SEAL. … | 96 | 1039 | active |
| google/fscrypt fscrypt is a Go command-line tool for managing Linux native filesystem encryption (fscrypt API) on filesystems like ext4 and f2fs. It handl… | 82 | 1038 | active |
| UnnoTed/wireguird A GTK-based graphical GUI client for WireGuard on Linux, mimicking the official Windows WireGuard client. It lists tunnels from /etc/wiregu… | 55 | 1036 | active |
| openmls/openmls OpenMLS is a Rust implementation of the Messaging Layer Security (MLS) protocol as specified in RFC 9420. It is a library providing safe, e… | 95 | 1032 | active |
| Pirsch Analytics Pirsch is the open-source core of a privacy-focused, server-side web analytics solution written in Go. It tracks website traffic without co… | 94 | 1030 | active |
| RoboSats/robosats RoboSats is a simple and private peer-to-peer bitcoin exchange that uses Lightning hold invoices as bonds and escrow to minimize custody an… | 96 | 1029 | active |
| UIforFreedom/UIF UIF is an open-source, cross-platform proxy panel UI with proxy management and subscription management features, built in Vue. It serves as… | 76 | 1028 | active |
| Misaka-blog/chromego_merge A curated collection of free proxy subscription links aggregated from public sources, served in Clash Meta, base64, and sing-box formats. I… | 71 | 1028 | active |
| zjyzip/AdClose AdClose is an Xposed framework module for Android that blocks in-app ads by preventing ad SDK initialization and intercepting ad network re… | 80 | 1026 | active |
| G-Ray/pikatorrent PikaTorrent is a cross-platform BitTorrent client built with Flutter that lets users stream and download torrents on desktop and mobile dev… | 75 | 1024 | active |
| Browserpass Browserpass is a browser extension for zx2c4's pass (the UNIX password store) that auto-fills or copies credentials for the current domain,… | 83 | 1021 | active |
| addyosmani/bg-remove A React + Vite web application that removes image backgrounds entirely in the browser using Transformers.js with the RMBG-1.4 model (and op… | 22 | 1021 | active |
| keybase/saltpack Saltpack is a modern crypto messaging format built on the NaCl library, encoding encrypted, signed, and signcrypted messages as MessagePack… | 77 | 1018 | stable |
| ferredoxin/QNotified QNotified is an open-source Xposed module that enhances the QQ/TIM Android messaging apps with dozens of quality-of-life tweaks. It adds fe… | 10 | 3453 | maintenance |
| mokeyish/smartdns-rs SmartDNS-rs is a cross-platform local DNS server written in Rust, inspired by the C SmartDNS project. It queries multiple upstream DNS serv… | 82 | 1017 | active |
| Aizistral-Studios/No-Chat-Reports A Minecraft mod that strips cryptographic signatures from chat messages and disables the Player Chat Reporting system introduced in Minecra… | 66 | 1017 | active |
| Embetty Embetty is a JavaScript library that embeds remote content such as tweets and YouTube videos into web pages without loading third-party tra… | 55 | 1016 | active |
| ghostery/adblocker An efficient, embeddable JavaScript/TypeScript adblocker library that blocks ads, trackers, and annoyances. It is uBlock Origin- and Easyli… | 95 | 1014 | active |
| CityOfZion/neon-wallet Neon Wallet is an Electron-based desktop light wallet for the NEO blockchain, supporting wallet creation, Ledger hardware login, NEP6 accou… | 31 | 1012 | active |
| ihucos/counter.dev Counter is a simple, privacy-friendly web analytics application built as a small Go server with static assets, storing data in Redis with S… | 74 | 1011 | active |
| libreswan/libreswan Libreswan is a free software implementation of the IPsec VPN protocol and its Internet Key Exchange (IKEv1/IKEv2) keying protocol, forked f… | 99 | 1009 | stable |
| aleixrodriala/wa-tunnel A Node.js CLI tool that tunnels TCP internet traffic through WhatsApp messages using the Baileys library, sending packets as text or compre… | 32 | 3347 | maintenance |
| s-rah/onionscan OnionScan is a free and open source Go CLI tool for investigating Tor hidden services (.onion sites) on the Dark Web. It scans sites for op… | 23 | 3306 | maintenance |
| trojan-gfw/igniter Igniter is an Android client for the Trojan proxy protocol, built in Java with components from clash and go-tun2socks. It lets Android user… | 23 | 3280 | maintenance |
| jbtronics/CrookedStyleSheets A proof-of-concept demonstrating website tracking and analytics using only CSS, without any JavaScript. It detects browser type, screen res… | 32 | 3266 | maintenance |
| DhavalKapil/icmptunnel icmptunnel is a C command-line tool that transparently encapsulates IP traffic inside ICMP echo and reply packets, tunneling it through a p… | 23 | 3251 | maintenance |
| XJP-GIT/AntiZhaPian AntiZhaPian is a parody Android app that mimics China's National Anti-Fraud Center app. It is a joke/prank application with fake UI screens… | 10 | 3165 | maintenance |
| ChatSecure ChatSecure is a free and open source encrypted chat client for iOS that supports OTR and OMEMO end-to-end encryption over XMPP, with option… | 23 | 3150 | maintenance |
| 1357310795/MyComputerManager A Windows GUI utility built with WPF that manages stubborn 'shortcuts' injected into 'This PC' (including sidebar entries) by rogue softwar… | 23 | 3109 | maintenance |
| rishikanthc/Scriberr Scriberr is an open-source, fully offline audio transcription application designed for self-hosters who value privacy. It transcribes audio… | 72 | 3070 | maintenance |
| django-sspanel A self-hosted Shadowsocks proxy management panel built with Django, used to manage proxy nodes, users, and subscriptions. It pairs with the… | 10 | 3066 | maintenance |
| linsa-io/linsa.io Linsa is a privacy-focused messaging application that combines chat, tasks, notes, files, and payments into a single product with end-to-en… | 72 | 16854 | experimental |
| KOP-XIAO/QuantumultX A JavaScript resource parser script for the Quantumult X iOS proxy client that converts proxy node subscriptions and configs from formats l… | 77 | 2999 | maintenance |
| x0rz/tweets_analyzer A Python command-line script that scrapes a Twitter profile's tweets and analyzes metadata such as activity patterns, timezone, sources, ge… | 23 | 2982 | maintenance |
| serversideup/financial-freedom Financial Freedom is a self-hosted, open-source personal finance and budgeting application built with Laravel and Vue, designed as a privac… | 66 | 2927 | maintenance |
| lastpass/lastpass-cli lastpass-cli is an official command line interface to the LastPass password manager, written in C. It lets users log in, list, add, edit, c… | 89 | 2909 | maintenance |
| nic-delhi/AarogyaSetu_Android The open-source native Android code of Aarogya Setu, the Government of India's COVID-19 contact-tracing mobile application. It uses Bluetoo… | 32 | 2902 | maintenance |
| V2Ray An official Bash installer script (plus community config examples) that installs and manages V2Ray, a network proxy platform, on systemd-ba… | 10 | 875 | active |
| delba/Permission A Swift library providing a unified API for requesting and checking system permissions on iOS, covering camera, contacts, location, notific… | 32 | 2888 | maintenance |
| Bitmessage/PyBitmessage PyBitmessage is the reference client for Bitmessage, a peer-to-peer protocol for sending encrypted, authenticated messages without central … | 57 | 2885 | maintenance |
| baacloud/url This repository is the official website/landing page for Baacloud, a commercial VPN and proxy service. It contains no source code, only lin… | 32 | 2852 | maintenance |
| xuhaoyang/ClashForAndroid A GUI application for Android that wraps the Clash rule-based tunnel proxy core. It lets users route device traffic through configurable pr… | 32 | 2820 | maintenance |
| martinvigo/email2phonenumber A Python OSINT tool that discovers a target's phone number from just their email address by abusing password reset flows that leak masked p… | 32 | 2808 | maintenance |
| Narasimha1997/fake-sms A Go-based command line tool that lets users skip SMS-based phone verification by obtaining temporary phone numbers from a third-party prov… | 32 | 2796 | maintenance |
| TheMRLL/WinXray WinXray is a Windows universal proxy client supporting Xray/V2Ray (vmess/vless), Shadowsocks, SSR, Trojan, Trojan-go, and NaïveProxy, built… | 23 | 2795 | maintenance |
| sunnisis/ixrail ixrail AgentPay is a VS Code extension that gives local AI agents a wallet, spending policy, authenticated broker, x402 payment flow, and s… | 64 | 848 | active |
| cherish-chat/xxim-server xxim-server is a 100% open-source instant messaging (IM) server written in Go using the go-zero framework, designed so anyone can self-host… | 32 | 2773 | maintenance |
| ShadowsocksR-Live/shadowsocksr-native A lightweight ShadowsocksR (SSRoT) proxy client and server written in pure C, adding TLS-based obfuscation to evade deep packet inspection … | 49 | 2769 | maintenance |
| Aircoin-official/AirCash AirCash is a decentralized OTC (over-the-counter) platform implemented in Solidity that lets users buy and sell cryptocurrency with fiat mo… | 32 | 2725 | maintenance |
| TwidereProject/Twidere-Android Twidere for Android is a free, open-source, Material Design Twitter/Mastodon/Fanfou client for Android 4.1+. It supports multiple accounts,… | 23 | 2719 | maintenance |
| wexond/browser-base Wexond is a modern, feature-rich web browser built on Electron and React, designed to be lighter than full Chromium by stripping Google ser… | 10 | 2718 | maintenance |