Open-source privacy software
2306 open-source libraries, tools and applications tagged privacy, ranked by how closely privacy is their primary purpose, then by adoption and maintenance health. Each entry links to a page with sources, use cases and when to choose or avoid it.
2306 products, primary matches first, then adoption-weighted; health v2 shown.
| Product | Health v2 | Stars | Maturity |
|---|---|---|---|
| microg/GmsCore microG Services is a free and open-source reimplementation of Google Play Services for Android. It lets apps that depend on proprietary Goo… | 88 | 14640 | active |
| OpenVPN/openvpn OpenVPN is an open-source VPN daemon that creates secure point-to-point or site-to-site TLS-encrypted tunnels over the network. It is a mat… | 97 | 14605 | stable |
| evilsocket/opensnitch OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch, intercepting and filtering outbound connections per a… | 73 | 14149 | active |
| EasyTier EasyTier is a decentralized mesh VPN written in Rust that connects devices into one virtual network with peer-to-peer links, NAT traversal,… | 87 | 14099 | active |
| thunderbird/thunderbird-android Thunderbird for Android is a free, open-source, privacy-focused email client for Android, formerly known as K-9 Mail and now part of the Mo… | 97 | 14050 | active |
| libsodium libsodium is a modern, portable, easy-to-use C library for cryptographic operations, forked from NaCl with a compatible but extended API. I… | 81 | 13997 | stable |
| SponsorBlock SponsorBlock is an open-source crowdsourced browser extension that automatically skips sponsor segments and other annoying parts (intros, o… | 94 | 13890 | active |
| BrowserOS BrowserOS is an open-source, Chromium-based agentic browser that lets AI agents (Claude Code, Codex, Cursor, MCP agents) drive a real brows… | 82 | 13886 | active |
| Portmaster Portmaster is a free and open-source application firewall and privacy suite for Windows and Linux desktops. It intercepts all network traff… | 95 | 13824 | active |
| fancyss fancyss is a transparent proxy plugin for ASUS routers running asuswrt/asuswrt-merlin firmware with a software center. It supports multiple… | 67 | 13792 | active |
| Anarios/return-youtube-dislike Return YouTube Dislike is an open-source browser extension for Chrome and Firefox (plus a userscript) that restores the dislike count on Yo… | 95 | 13788 | active |
| DNSCrypt/dnscrypt-proxy dnscrypt-proxy is a flexible local DNS proxy that encrypts and authenticates DNS traffic using DNSCrypt v2, DNS-over-HTTPS, Anonymized DNS,… | 90 | 13730 | stable |
| 墨鱼去广告 (Cuttlefish AdBlock) A curated collection of ad-blocking rules, rewrite scripts, and ready-made configuration files for proxy tools like QuantumultX, Surge, Sha… | 65 | 13709 | active |
| diaspora/diaspora diaspora* is a privacy-aware, decentralized, federated open-source social network built with Ruby on Rails. It runs on independently operat… | 72 | 13649 | active |
| BPB Panel A self-hosted GUI panel deployed on Cloudflare Workers/Pages that generates VLESS, Trojan, and Warp proxy configurations with a private DoH… | 83 | 13647 | active |
| juewuy/ShellCrash ShellCrash is a Shell script tool for deploying and managing mihomo and sing-box proxy client kernels on Linux-based devices. It supports s… | 76 | 13597 | active |
| SoftEther VPN SoftEther VPN is an open-source, cross-platform, multi-protocol VPN server and client software written in C. It supports SSL-VPN, OpenVPN, … | 66 | 13597 | active |
| sshuttle/sshuttle sshuttle is a transparent proxy server that works as a poor man's VPN, forwarding traffic over SSH without requiring admin access on the re… | 94 | 13595 | stable |
| Element Element is a glossy, feature-rich Matrix client for web and desktop, built on the Matrix JS SDK, offering end-to-end encrypted messaging, v… | 94 | 13561 | active |
| mozilla-firefox/firefox Firefox is Mozilla's free and open-source web browser built on the Gecko engine, available for desktop and mobile platforms. It emphasizes … | 69 | 13515 | active |
| memstechtips/Winhance Winhance is a C#/WinUI3 desktop application for debloating, optimizing, and customizing Windows 10 and 11 systems. It provides a GUI for re… | 82 | 13335 | active |
| libnyanpasu/clash-nyanpasu Clash Nyanpasu is a cross-platform desktop GUI for Clash-based proxy cores (Clash Premium, Mihomo, Clash Rust, Meow), built with Tauri, Rus… | 95 | 13231 | active |
| beemdevelopment/Aegis Aegis Authenticator is a free, open-source Android app for managing two-factor authentication (2FA) tokens. It stores HOTP/TOTP tokens in a… | 90 | 13227 | stable |
| objective-see/LuLu LuLu is a free, open-source macOS firewall that monitors and blocks unknown outgoing network connections. It uses a system extension and ne… | 91 | 13221 | active |
| zoicware/RemoveWindowsAI A PowerShell script that forcibly removes or disables all AI features in Windows 11, including Copilot, Recall, and AI components in built-… | 69 | 13206 | active |
| rybbit-io/rybbit Rybbit is an open-source, privacy-friendly web and product analytics platform that serves as a cookieless alternative to Google Analytics. … | 87 | 13089 | active |
| mozilla-mobile/firefox-ios The official Mozilla monorepo containing Firefox for iOS and Firefox Focus for iOS, full-featured open-source web browsers built in Swift. … | 93 | 13050 | active |
| KeeWeb KeeWeb is a free, cross-platform password manager compatible with KeePass kdbx database files, available as a desktop app (Electron) or a b… | 74 | 13016 | active |
| StarTrail-org/LEANN LEANN is a low-storage vector index that enables retrieval-augmented generation (RAG) on personal devices by recomputing embeddings on the … | 85 | 12966 | active |
| LibreTube LibreTube is a free, open-source Android app that serves as a privacy-focused alternative frontend for YouTube, using Piped proxies to avoi… | 97 | 12850 | active |
| Wei-Shaw/claude-relay-service A self-hosted relay/proxy service for Claude Code (and OpenAI, Gemini, Droid) subscriptions that lets multiple users share accounts via ind… | 83 | 12667 | active |
| LiveSync Self-hosted LiveSync is an Obsidian community plugin that synchronises vaults across devices using self-hosted backends like CouchDB or S3-… | 94 | 12648 | active |
| daijro/camoufox Camoufox is an open-source anti-detect browser built on Firefox for web scraping and AI agents, with browser fingerprint spoofing and Playw… | 91 | 12641 | active |
| nearai/ironclaw IronClaw is an open-source, Rust-based 'Agent OS' and personal AI assistant that runs locally or on NEAR AI Cloud, with a WebUI, terminal, … | 79 | 12629 | active |
| Heroic Games Launcher Heroic is an open-source games launcher for Linux, Windows, and macOS that lets users install and play games from the Epic Games Store, GOG… | 100 | 12416 | active |
| jason5ng32/MyIP MyIP (IPCheck.ing) is an open-source, self-hostable web application that acts as an all-in-one IP toolbox. It shows your IPv4/IPv6 and geol… | 94 | 12156 | active |
| Nostr Nostr (Notes and Other Stuff Transmitted by Relays) is an open, simple protocol for building a censorship-resistant global social network. … | 32 | 12054 | active |
| VeraCrypt VeraCrypt is a free, open-source disk encryption application based on TrueCrypt 7.1a with security enhancements. It creates encrypted volum… | 89 | 11832 | stable |
| qutebrowser/qutebrowser qutebrowser is a keyboard-driven, vim-like web browser with a minimal GUI, built with Python and Qt (QtWebEngine). It is free software lice… | 84 | 11704 | active |
| ZCShou/GoGoGo GoGoGo (影梭) is an Android app that fakes GPS location using Android's mock location debug API combined with Baidu Maps, without requiring r… | 43 | 11410 | active |
| angristan/wireguard-install A bash script that installs and configures a WireGuard VPN server on Linux with NAT and IPv4/IPv6 support. Re-running the script lets you a… | 65 | 11325 | active |
| pymumu/smartdns SmartDNS is a local DNS server written in C that queries multiple upstream DNS servers concurrently and returns the fastest-responding IP t… | 93 | 11316 | active |
| Presidio Presidio is an open-source Python SDK for detecting, redacting, masking, and anonymizing sensitive data (PII) in text, images, and structur… | 91 | 11271 | active |
| yokoffing/Betterfox Betterfox is a curated user.js preference file that hardens Mozilla Firefox for privacy, security, and speed via about:config tweaks. It bu… | 90 | 10895 | active |
| Monero Monero is the reference implementation of the Monero (XMR) privacy-focused cryptocurrency, including the full node daemon (monerod), wallet… | 88 | 10865 | active |
| Mail-0/Zero Zero (Mail0) is an open-source, self-hostable email client that unifies multiple providers like Gmail and Outlook into one privacy-first in… | 46 | 10857 | active |
| screego/server Screego is a self-hosted screen sharing server for developers that streams screens with low latency and high resolution over WebRTC. It sup… | 93 | 10718 | active |
| Sub-Store Sub-Store is an advanced proxy subscription manager that parses, transforms, and manages proxy subscription links for clients like Quantumu… | 96 | 10717 | active |
| rofl0r/proxychains-ng ProxyChains-NG is a UNIX CLI tool that uses LD_PRELOAD to hook socket-related libc functions in dynamically linked programs and redirect th… | 64 | 10683 | active |
| Freika/dawarich Dawarich is a self-hostable web application that replaces Google Timeline (Google Location History), letting users track, visualize, and an… | 88 | 10666 | active |
| NSRingo/iRingo iRingo is a collection of rewrite and script modules for iOS proxy tools (Surge, Loon, Stash, Quantumult X, Shadowrocket, Egern) that unloc… | 62 | 10610 | active |
| Mautic Mautic is the world's largest open source marketing automation platform, offering email marketing, campaign building, lead nurturing, landi… | 95 | 10532 | stable |
| itsfatduck/optimizerDuck optimizerDuck is a free, open-source Windows optimization tool built with C#/WinUI that provides performance tweaks, privacy controls, debl… | 80 | 10464 | active |
| Anankke/SSPanel-UIM SSPanel UIM is a PHP-based multi-purpose proxy service management panel for running and administering proxy/VPN subscription services. It p… | 75 | 10435 | active |
| yonggekkk/sing-box-yg A one-click Shell script for VPS servers that installs and configures five coexisting proxy protocols (Vless-Reality, Vmess-WS/Argo, Hyster… | 62 | 10374 | active |
| Piped Piped is an open-source, privacy-friendly alternative frontend for YouTube that blocks ads and tracking while providing a lightweight viewi… | 75 | 10266 | active |
| kern/filepizza FilePizza is a web application for peer-to-peer file transfers directly between browsers using WebRTC, eliminating the need to upload files… | 77 | 10250 | active |
| OpenMined/PySyft PySyft is a Python library that lets data scientists run computations on private data that stays on the data owner's server, with results s… | 73 | 10034 | active |
| TechnitiumSoftware/DnsServer Technitium DNS Server is an open-source, cross-platform authoritative and recursive DNS server built on .NET, designed for self-hosting wit… | 97 | 10032 | stable |
| S-UI S-UI is an advanced web panel for managing SagerNet/Sing-Box proxy servers, supporting multiple protocols like VLESS, VMess, Trojan, Hyster… | 91 | 10010 | active |
| Yu9191/wloc A set of proxy-tool modules (Surge, Quantumult X, Loon, Stash, Shadowrocket) that MITM Apple's network location service (gs-loc.apple.com) … | 69 | 9966 | active |
| Passwall Passwall is a LuCI application for OpenWrt routers that manages multiple proxy clients (Xray, Sing-box, Shadowsocks, Hysteria, etc.) to rou… | 98 | 9948 | active |
| ltaoo/wx_channels_download A small desktop application that downloads videos from WeChat Channels (视频号) by injecting a download button into the WeChat PC client via a… | 88 | 9927 | active |
| KaringX/clashmi Clash Mi is a cross-platform graphical proxy client built with Flutter that embeds the Mihomo (Clash.Meta) core. It supports subscription-b… | 87 | 9919 | active |
| Miniflux Miniflux is a minimalist, opinionated, self-hosted RSS/Atom/JSON Feed reader written in Go with PostgreSQL as its only dependency. It empha… | 100 | 9810 | stable |
| Hypfer/Valetudo Valetudo is a cloud replacement for vacuum robots that runs directly on the robot itself, enabling fully local-only operation without vendo… | 92 | 9809 | active |
| tonyantony300/dashbeam DashBeam (formerly AltSendme) is an open-source peer-to-peer file transfer application that sends files and folders of any size directly be… | 79 | 9800 | active |
| farag2/Sophia-Script-for-Windows A PowerShell module with 150+ functions for fine-tuning, debloating, and configuring Windows 10 and Windows 11 using Microsoft's officially… | 99 | 9795 | active |
| Sphere Sphere is a Web3 wallet and agent platform for the Unicity network, combining a crypto wallet with direct messages, group chat (Nostr/NIP-2… | 61 | 9719 | active |
| Fluent Reader Fluent Reader is an open-source, cross-platform desktop RSS reader built with Electron, React, and Fluent UI. It supports local reading or … | 89 | 9689 | active |
| francescopace/espectre ESPectre is an open-source motion detection system that analyzes Wi-Fi Channel State Information (CSI) on ESP32 devices to detect movement … | 84 | 9636 | active |
| OpenWhispr/openwhispr OpenWhispr is an open-source, privacy-first voice-to-text dictation desktop app for macOS, Windows, and Linux. It supports fully local tran… | 83 | 9595 | active |
| klzgrad/naiveproxy NaïveProxy is a censorship-resistant proxy that uses Chromium's network stack to make proxy traffic indistinguishable from regular Chrome b… | 98 | 9530 | active |
| fastrepl/anarlog Anarlog is an open-source, local-first AI meeting notepad and Granola alternative that records device audio without a bot joining the call,… | 85 | 9527 | active |
| PDFCraftTool/pdfcraft PDFCraft is a free, privacy-focused PDF toolkit with 90+ tools (merge, split, compress, convert, edit, secure) that runs entirely in the br… | 80 | 9519 | active |
| AdAway AdAway is a free and open source ad blocker for Android that blocks ads system-wide using the hosts file or a local VPN. It supports both r… | 65 | 9474 | active |
| ermaozi/get_subscribe A Python project that automatically aggregates and republishes free proxy subscription links (Clash, V2Ray, Trojan, SSR/SR formats) that re… | 77 | 9370 | active |
| Hiddify Hiddify-Manager is a self-hosted, multi-user proxy/VPN management panel that installs on a dedicated Ubuntu server with a one-line script a… | 98 | 9362 | active |
| Buster Buster is a browser extension that solves reCAPTCHA challenges by completing their audio challenges using speech recognition. It works on C… | 85 | 9335 | active |
| Berty Berty is an open-source, peer-to-peer messaging app with end-to-end encryption that works with or without internet access, using libp2p, IP… | 93 | 9314 | active |
| Universal-Debloater-Alliance/universal-android-debloater-next-generation A cross-platform desktop GUI application written in Rust that uses ADB to remove bloatware from non-rooted Android devices. It aims to impr… | 71 | 9307 | active |
| App Manager App Manager is a full-featured open-source package manager and app inspector for Android. It lets users install, uninstall, back up, and de… | 93 | 9285 | active |
| zizifn/edgetunnel A project that runs V2ray proxy inside edge/serverless runtimes, primarily Cloudflare Workers. It lets users deploy a personal proxy endpoi… | 23 | 9216 | active |
| minbrowser/min Min is a fast, minimal open-source web browser built in JavaScript (Electron) that emphasizes privacy and focus. It blocks ads and trackers… | 89 | 9180 | active |
| everywall/ladder Ladder is a self-hosted Go web proxy that removes CORS and other headers (like CSP) and modifies HTML/CSS/JS in responses, serving as an al… | 84 | 9173 | active |
| henrypp/simplewall Simplewall is a lightweight, open-source Windows application for configuring network activity via the Windows Filtering Platform (WFP). It … | 73 | 9150 | active |
| tdlib/td TDLib (Telegram Database Library) is a cross-platform C++ library for building fully functional Telegram clients. It handles networking, MT… | 75 | 9133 | stable |
| Firezone Firezone is an open-source, enterprise-ready zero-trust access platform built on WireGuard that replaces traditional VPNs with granular, po… | 96 | 9121 | active |
| Ackites/Nrfr Nrfr is a root-free Android tool that changes the SIM card country code by calling native system APIs (CarrierConfigLoader) with Shizuku pe… | 34 | 9088 | active |
| TelegramMessenger/Telegram-iOS The official open-source source code of the Telegram messaging client for iOS, written in Swift. It allows developers to compile, study, an… | 65 | 9007 | active |
| Anytype Anytype Desktop is the official cross-platform client for Anytype, a local-first, peer-to-peer, end-to-end-encrypted personal knowledge bas… | 92 | 8884 | active |
| vvbbnn00/WARP-Clash-API A self-hosted Python/Flask service that exposes Cloudflare WARP+ as a subscription link for clients like Clash, Surge, and Shadowrocket. It… | 10 | 8822 | active |
| freecodexyz/free-code A community fork of Anthropic's Claude Code terminal AI coding agent, rebuilt from an exposed source snapshot with telemetry removed, secur… | 54 | 8757 | active |
| ViRb3/wgcf wgcf is an unofficial cross-platform command-line tool for Cloudflare Warp written in Go. It registers Warp accounts, binds Warp+ license k… | 92 | 8751 | active |
| florisboard/florisboard FlorisBoard is a free and open-source keyboard app for Android 8.0+ built in Kotlin, focused on being modern, customizable, and privacy-res… | 78 | 8704 | active |
| getsurfboard/surfboard Surfboard is a Surge-compatible network debugging and proxy tool for Android that routes device traffic through configurable rule-based pro… | 96 | 8672 | active |
| PrivateBin PrivateBin is a minimalist, self-hosted pastebin where the server stores only encrypted data and never learns the paste contents. Encryptio… | 94 | 8612 | active |
| spesmilo/electrum Electrum is a lightweight Bitcoin wallet client written in Python that uses SPV verification instead of downloading the full blockchain. It… | 76 | 8609 | stable |
| wangyu-/udp2raw A C++ command-line tunnel that converts UDP traffic into encrypted FakeTCP, UDP, or ICMP traffic using raw sockets, helping bypass UDP fire… | 40 | 8571 | active |
| floccusaddon/floccus Floccus is a free and open-source browser extension (with companion Android/iOS apps) that privately syncs native browser bookmarks and tab… | 99 | 8569 | active |