Open-source privacy software
2306 open-source libraries, tools and applications tagged privacy, ranked by how closely privacy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2306 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| Sia Sia is a decentralized, blockchain-based peer-to-peer cloud storage marketplace where users rent storage from hosts, with files encrypted a… | 10 | 2693 | maintenance |
| ohmplatform/FreedomGPT FreedomGPT is a React and Electron desktop application that runs LLM models locally on Mac, Windows, and Linux using llama.cpp, providing a… | 21 | 2674 | maintenance |
| weskerfoot/DeleteFB A Python CLI tool that uses Selenium to automate deleting your Facebook posts, page likes, and conversations through your real browser. It … | 10 | 2662 | maintenance |
| dfd-tud/deda DEDA is a Python toolkit for extracting, decoding, and anonymising the yellow tracking dots that colour laser printers embed in printouts. … | 32 | 2655 | maintenance |
| pointbiz/bitaddress.org A single-file, client-side Bitcoin wallet generator that creates addresses and private keys entirely in the browser with no network request… | 23 | 2640 | maintenance |
| OpenKeychain OpenKeychain is an open-source OpenPGP implementation for Android that manages encryption keys and encrypts, decrypts, and signs messages a… | 32 | 2619 | maintenance |
| wangyu-/tinyfecVPN A lightweight Linux VPN tool that uses Reed-Solomon forward error correction to reduce packet loss and improve TCP latency on high-latency,… | 23 | 2587 | maintenance |
| seemoo-lab/openhaystack OpenHaystack is a framework and macOS application for creating custom Bluetooth tracking tags that leverage Apple's Find My (offline findin… | 63 | 13695 | experimental |
| yeriomin/YalpStore Yalp Store is a lightweight open-source Android app that downloads APKs directly from the Google Play Store without requiring Google Servic… | 23 | 2548 | maintenance |
| ndroi/easy163 An Android app that runs a local VPN service to intercept and redirect NetEase Cloud Music HTTP requests, sourcing VIP and delisted songs f… | 23 | 2495 | maintenance |
| vuvuzela/vuvuzela Vuvuzela is a metadata-private messaging system written in Go that hides who is talking to whom, even against nation-state adversaries, usi… | 32 | 2487 | maintenance |
| charmbracelet/charm Charm is a Go library and CLI tool that provided client access to Charm Cloud, a hosted service offering encrypted key-value storage, linke… | 10 | 2487 | maintenance |
| yichahucha/surge A collection of JavaScript rewrite scripts for the Surge and Quantumult X proxy apps. They modify HTTP responses on iOS to inject Netflix I… | 66 | 2467 | maintenance |
| notAI-tech/NudeNet NudeNet is a lightweight Python library for nudity detection in images, built on YOLOv8 models running via ONNX Runtime. It detects exposed… | 58 | 2456 | maintenance |
| zmirror zmirror is a Python-based HTTP reverse proxy designed to automatically and completely mirror entire websites, such as Google, Wikipedia, Yo… | 10 | 2396 | maintenance |
| Ibit-to/google-unlocked Google Unlocked is an open-source browser extension that reveals Google search results hidden due to takedown complaints. It scans Google's… | 23 | 2393 | maintenance |
| solokeys/solo1 Solo 1 is the open-source C firmware for the Solo security key, implementing FIDO2 (CTAP2) and U2F (CTAP) over USB and NFC on an STM32L432 … | 23 | 2384 | maintenance |
| Terminus2049/Terminus2049.github.io Terminus (端点星) is a GitHub Pages-hosted site built with Jekyll that archives articles deleted from Chinese platforms like WeChat and Weibo … | 32 | 2372 | maintenance |
| flyzy2005/ss-fly A set of one-click shell scripts to install and configure Shadowsocks (SS/SSR) proxy servers on Ubuntu, CentOS, and Debian, with optional B… | 32 | 2341 | maintenance |
| Userbase Userbase is an open-source backend-as-a-service that adds user accounts and end-to-end encrypted data persistence to static web apps via a … | 57 | 2340 | maintenance |
| ggerganov/wave-share A proof-of-concept browser application that shares files between nearby devices by performing WebRTC signaling through audio tones instead … | 32 | 2313 | maintenance |
| WireGuard WireGuard is a fast, modern, and secure VPN tunnel that uses state-of-the-art cryptography (Noise framework, Curve25519, ChaCha20) to creat… | 65 | 722 | stable |
| abba23/spotify-adblock A Spotify adblocker for Linux implemented as a shared library that wraps cef_urlrequest_create and blocks requests to denylisted URLs via L… | 87 | 2241 | maintenance |
| buckket/twtxt twtxt is a decentralised, minimalist microblogging tool and format specification where your identity is a publicly accessible text file of … | 23 | 2235 | maintenance |
| jackspirou/clientjs ClientJS is a pure JavaScript library for browser device fingerprinting and device information gathering. It generates a 32-bit integer fin… | 23 | 2228 | maintenance |
| zendesk/cross-storage A JavaScript library enabling cross-domain local storage sharing with per-origin permissions. It uses a hub-and-client architecture with em… | 44 | 2218 | maintenance |
| diafygi/gethttpsforfree A browser-based web application (source for gethttpsforfree.com) that walks users through obtaining free TLS certificates from Let's Encryp… | 41 | 2213 | maintenance |
| wulabing/V2Ray_ws-tls_bash_onekey A one-click bash installation script that deploys a V2Ray proxy server with VMess/VLESS over WebSocket + TLS, fronted by Nginx with automat… | 32 | 2208 | maintenance |
| SimonBrazell/privacy-redirect A browser extension that redirects requests to Twitter, YouTube, Instagram, Google Maps, Reddit, Google Search, and Google Translate to pri… | 10 | 2190 | maintenance |
| j0be/PowerDeleteSuite A browser bookmarklet for Reddit that lets users mass-edit and mass-delete their own comments and submissions using Reddit's API endpoints.… | 23 | 2187 | maintenance |
| fossabot/clash Clash is a rule-based network proxy written in Go that supports HTTP/HTTPS and SOCKS proxies with Surge-like configuration and GeoIP rule r… | 32 | 2178 | maintenance |
| emersion/hydroxide Hydroxide is a third-party, open-source ProtonMail bridge written in Go that translates standard protocols (IMAP, SMTP, CardDAV) into Proto… | 10 | 2169 | maintenance |
| armon/go-socks5 A Go library that implements a SOCKS5 proxy server, supporting No-Auth and User/Password authentication and the CONNECT command. It offers … | 32 | 2121 | maintenance |
| quericy/one-key-ikev2-vpn A one-click bash script that installs and configures an IKEv2/L2TP VPN server using strongSwan on Ubuntu, CentOS, or Debian. It handles cer… | 32 | 2104 | maintenance |
| einaregilsson/Redirector Redirector is a browser extension for Firefox, Chrome, Edge, Vivaldi and Opera that redirects URLs based on regex or wildcard patterns, lik… | 44 | 2094 | maintenance |
| Cenmrev/V2RayW V2RayW is a Windows GUI client for v2ray-core that generates config files and manages proxy servers from the system tray. It also handles W… | 10 | 2024 | maintenance |
| Shpigford/knockoff A browser extension that filters pseudo-brand junk out of Amazon search results by detecting trademark-squat brand names and hiding, dimmin… | 69 | 2023 | maintenance |
| minimaxir/person-blocker A Python command-line script that automatically censors ('blocks') people and up to 80 other object types in images using a pretrained Mask… | 32 | 2009 | maintenance |
| JasonQS/Anti-recall An Android app that prevents message recall in WeChat, QQ, and TIM by recording incoming messages via accessibility services and notificati… | 23 | 1973 | maintenance |
| duckduckgo/iOS The DuckDuckGo Privacy Browser for iOS, an open-source mobile web browser with built-in private search, third-party tracker blocking, ad bl… | 10 | 1951 | maintenance |
| psal/anonymouth Anonymouth is a Java-based desktop application that helps users anonymize documents by detecting and suggesting edits to stylometric patter… | 32 | 1950 | maintenance |
| KANIKIG/Multi-EasyGost A beginner-friendly interactive shell script that wraps the gost tunnel program to manage encrypted port forwarding and relay tunnels on Li… | 32 | 1948 | maintenance |
| thegreatjavascript/FakeScreenshot A Chrome browser extension that lets users edit the text and images of any website and take screenshots of the modified page. Its purpose i… | 32 | 1940 | maintenance |
| Und3rf10w/kali-anonsurf A port of ParrotSec's anonsurf and pandora modules to Kali Linux, packaged as a deb installer. It routes all system traffic through TOR via… | 84 | 1934 | maintenance |
| scipr-lab/libsnark libsnark is a C++ library implementing zkSNARK schemes, cryptographic constructions for proving and verifying computations in zero knowledg… | 40 | 1931 | maintenance |
| Codeux-Software/Textual Textual is a highly customizable IRC client for macOS, supporting IRCv3, OTR encryption, and styling via CSS/HTML/JavaScript. It can be ext… | 77 | 1918 | maintenance |
| builtbybel/bloatbox Bloatbox is a small standalone Windows Forms application for uninstalling pre-installed Windows 10 UWP apps (bloatware). It also supports a… | 23 | 1889 | maintenance |
| positive-security/send-my Send My is a research tool that transmits arbitrary data through Apple's Find My network by encoding it in BLE public-key broadcasts from a… | 23 | 1887 | maintenance |
| atmos/camo Camo is an HTTP image proxy that routes insecure HTTP images through SSL to prevent mixed-content warnings on HTTPS pages. It authenticates… | 10 | 1883 | maintenance |
| ptrpaws/Oculess Oculess is a sideloaded Android app for Oculus Quest headsets that removes account requirements, disables telemetry apps, and enables backg… | 39 | 1873 | maintenance |
| winauth/winauth WinAuth is a portable, open-source Windows desktop application that acts as a software two-factor authenticator, supporting RFC 6238 TOTP a… | 10 | 1853 | maintenance |
| Lingva Translate Lingva Translate is a free and open-source alternative front-end for Google Translate that supports over a hundred languages. It scrapes Go… | 32 | 1848 | maintenance |
| Firefox for Android Fenix is the open-source Firefox for Android browser, built on GeckoView and Mozilla Android Components in Kotlin. The project has migrated… | 10 | 1839 | maintenance |
| Firefox Sync Server A self-hosted replacement for Mozilla's Firefox Sync server, letting users sync browser data across devices via their own infrastructure. T… | 93 | 1819 | maintenance |
| nodeSolidServer/node-solid-server NodeSolidServer is an implementation of the Solid protocol that runs a Solid personal data server (pod server) on top of the local file sys… | 75 | 1795 | maintenance |
| intika/Librefox Librefox is a privacy- and security-hardened packaging of Firefox that applies 500+ settings, patches, and optional addons without forking … | 23 | 1782 | maintenance |
| 1tayH/noisy A Python script that generates random HTTP and DNS traffic noise in the background to obscure your real browsing patterns. It crawls config… | 32 | 1780 | maintenance |
| queer/boxxy boxxy is a Rust-based Linux CLI tool that uses namespaces to sandbox misbehaving applications and redirect their file reads/writes to speci… | 46 | 1748 | maintenance |
| mprimi/portable-secret Portable Secret is a tool that packs an encrypted payload and decryption JavaScript into a single self-contained HTML file, using the brows… | 32 | 1735 | maintenance |
| fossasia/susper-legacy Susper is a decentralized web search engine front-end that retrieves results from a peer-to-peer YaCy search server with embedded Apache So… | 10 | 1734 | maintenance |
| glucyzz/IDM A repackaged distribution of Internet Download Manager (IDM) 6.41.2 with license activation bypassed, distributed as a pre-cracked installe… | 40 | 1714 | maintenance |
| rufengsuixing/luci-app-adguardhome A LuCI web interface plugin for OpenWrt that manages AdGuardHome, a network-wide DNS-based ad blocker. It provides core download/update, DN… | 23 | 1708 | maintenance |
| Peng-YM/QuanX A collection of JavaScript scripts and a cross-platform OpenAPI for proxy apps like Quantumult X, Loon, Surge, ShadowRocket, and JSBox. It … | 32 | 1705 | maintenance |
| Ekultek/WhatBreach WhatBreach is a Python CLI OSINT tool that searches email addresses against known data breaches via services like HIBP, dehashed, hunter.io… | 45 | 1699 | maintenance |
| bjoernkarmann/project_alias Project Alias is an open-source Raspberry Pi-based device that acts as a 'parasite' on smart home assistants, letting users train custom wa… | 32 | 1698 | maintenance |
| Ghr07h/Heimdallr Heimdallr is a fully passive Chrome extension for security professionals that identifies high-risk vulnerability framework fingerprints in … | 23 | 1684 | maintenance |
| zhengjim/camille Camille is a Frida-based auxiliary tool for detecting Android app privacy compliance. It hooks sensitive Android APIs to reveal whether the… | 32 | 1683 | maintenance |
| TryCatchHCF/Cloakify CloakifyFactory is a Python-based text-based steganography toolset that converts any file type into lists of innocuous everyday strings (e.… | 23 | 1683 | maintenance |
| Tornado Cash Tornado Cash is a non-custodial privacy protocol for Ethereum and ERC20 tokens built on zkSNARKs, implemented as smart contracts with JavaS… | 10 | 1675 | maintenance |
| Google Authenticator The open-source implementations of Google Authenticator, generating one-time passcodes using the OATH HOTP (RFC 4226) and TOTP (RFC 6238) s… | 10 | 1674 | maintenance |
| securesocketfunneling/ssf Secure Socket Funneling (SSF) is a cross-platform network tool and toolkit that multiplexes TCP and UDP traffic through a single TLS-encryp… | 23 | 1669 | maintenance |
| facebookresearch/CrypTen CrypTen is a PyTorch-based library for privacy-preserving machine learning built on secure multiparty computation. It exposes a CrypTensor … | 10 | 1650 | maintenance |
| kevinschaich/mintable Mintable is a free, open-source CLI tool that automates personal finance tracking by aggregating account balances and transactions from ban… | 23 | 1632 | maintenance |
| frainzy1477/luci-app-clash A LuCI web interface plugin for OpenWrt routers that manages the Clash rule-based proxy client. It provides subscription handling, config e… | 23 | 1623 | maintenance |
| muleyo/VideoAdBlockForTwitch A browser extension that blocks ads on Twitch.tv by temporarily switching to an ad-free 480p stream during ad breaks and restoring original… | 23 | 1602 | maintenance |
| tenta-browser/tenta-dns Tenta DNS is a Go-based DNS server suite combining an authoritative DNS server, a recursive resolver with DNSSEC and DNS-over-TLS support, … | 32 | 1601 | maintenance |
| MyEtherWallet MyEtherWallet (MEW) is a free, open-source, client-side interface for creating and managing Ethereum wallets and interacting with the Ether… | 96 | 1585 | maintenance |
| Dr-Incognito/V2Ray-Desktop V2Ray Desktop is a cross-platform GUI proxy client built with Qt5 and QML2 that supports Shadowsocks(R), V2Ray, and Trojan protocols, using… | 23 | 1563 | maintenance |
| Chrome Power Chrome Power is an open-source multi-Chrome manager built with Electron, React, and Puppeteer that lets users create and manage multiple is… | 56 | 1560 | maintenance |
| mrishab/google-photos-delete-tool A JavaScript script run in the browser developer console that bulk-deletes all photos from a Google Photos account. It automates the deleti… | 32 | 1557 | maintenance |
| Picocrypt Picocrypt is a small, simple, and secure file encryption tool built in Go, using XChaCha20 and Argon2id. It offers a portable GUI applicati… | 10 | 1554 | maintenance |
| csujedihy/proximac Proximac is an open-source command-line alternative to Proxifier that forces any application's traffic through a SOCKS5 proxy on macOS. It … | 23 | 1553 | maintenance |
| denghongcai/forsaken-mail Forsaken Mail is a self-hosted disposable email service that lets you receive emails at temporary addresses via a built-in SMTP server and … | 32 | 1552 | maintenance |
| zboxfs/zbox ZboxFS is a zero-details, privacy-focused embedded file system written in Rust that encrypts everything, including metadata and directory s… | 10 | 1542 | maintenance |
| lukeaschenbrenner/TxtNet-Browser TxtNet Browser is an Android app that lets users browse the web over SMS without any WiFi or mobile data connection. It sends HTTP GET requ… | 75 | 1541 | maintenance |
| doy/rbw rbw is an unofficial command line client for Bitwarden written in Rust. It runs a background agent that holds decryption keys in memory (li… | 63 | 1531 | maintenance |
| CovenantSQL/CovenantSQL CovenantSQL is a decentralized, Byzantine fault tolerant SQL database built on SQLite with blockchain features like immutable query history… | 23 | 1531 | maintenance |
| EmbarkStudios/wg-ui A self-contained WireGuard management service with a self-serve web UI for generating client configurations, including QR codes for mobile … | 10 | 1519 | maintenance |
| ultrasev/cursor-reset A small Python script that regenerates the device identifiers (telemetry.machineId, macMachineId, etc.) stored in the Cursor editor's confi… | 22 | 1517 | maintenance |
| shaoxiongji/federated-learning A PyTorch implementation of the FedAvg federated learning algorithm reproducing the McMahan et al. AISTATS 2017 paper. It includes experime… | 32 | 1516 | maintenance |
| jordwest/news-feed-eradicator A browser extension that removes news feeds from social media sites and replaces them with an inspirational quote. It is built as a standar… | 83 | 1507 | maintenance |
| anttiviljami/browser-autofill-phishing A simple JavaScript demo showing how hidden form fields can be silently filled by browser autofill to phish user data. It demonstrates the … | 32 | 1488 | maintenance |
| ageitgey/show-facebook-computer-vision-tags A simple Chrome extension that overlays the automated computer vision tags Facebook generates for images directly on your Facebook timeline… | 32 | 1485 | maintenance |
| FlashDetector Daedalus is an Android app that modifies DNS resolution without root access by creating a local VPN tunnel to intercept DNS requests. It su… | 66 | 1467 | maintenance |
| Synzvato/decentraleyes Decentraleyes is a browser extension that emulates content delivery networks by serving popular CDN-hosted libraries (like JavaScript frame… | 10 | 1464 | maintenance |
| jonjomckay/fritter Fritter is an open-source, privacy-friendly Twitter frontend for mobile devices built with Dart/Flutter. It lets users browse tweets, profi… | 64 | 1449 | maintenance |
| PowerTunnel PowerTunnel is an extensible local proxy server built on LittleProxy that bypasses government censorship by evading Deep Packet Inspection,… | 23 | 1442 | maintenance |
| syvaidya/openstego OpenStego is a Java-based steganography application that hides data inside image files and embeds invisible watermarks to detect unauthoriz… | 23 | 1441 | maintenance |
| andreas-mausch/whatsapp-viewer A small Windows application (with command-line support) that decrypts and displays WhatsApp chat history from the Android msgstore.db datab… | 23 | 1440 | maintenance |
| kmackay/micro-ecc A small, fast C library implementing ECDH key exchange and ECDSA signatures for 8-bit, 32-bit, and 64-bit processors, with optional inline … | 87 | 1439 | maintenance |