The tools we use ourselves and point customers to. Pick one from each category and you have covered the network, the browser, your messages, your passwords, and your money.
Looking specifically for services that never ask for ID? That is a separate, larger list: Awesome No-KYC.
A VPN hides your traffic from the network you are on (hotel Wi-Fi, a foreign carrier) and your location from the sites you visit. Pick one you can pay for without handing over your identity.
Built on the Nym mixnet. Anonymous mode routes traffic through five hops with cover traffic so even the network cannot pair sender and destination; Fast mode is a two-hop WireGuard tunnel for everyday speed. No email to sign up.
Your account is a random number, nothing else. Flat monthly price, WireGuard, and cash by post if you want zero digital trail. The reference point most other VPNs get compared to.
No email required, audited apps, and an honest marketing stance (they publish what a VPN cannot do). Multi-hop and WireGuard on every platform.
The only serious free tier without data caps or ads, from the Proton Mail team in Switzerland. Paid plans add faster servers and Tor over VPN.
The browser is where most tracking happens. These block it by default instead of leaving it to extensions.
Chromium with tracker and ad blocking built in, fingerprint randomisation, and private Tor windows on desktop. The easy switch if you are coming from Chrome.
Tor Browser's anti-fingerprinting work, minus the Tor network, so you can use it over any VPN. Made with the Tor Project. Desktop only.
The strongest non-Chromium engine. Turn Enhanced Tracking Protection to Strict and it is a solid daily driver; power users apply the arkenfox user.js.
For when you need anonymity, not just privacy. PikaSim runs an onion service (address in the footer) so you can buy an eSIM without ever leaving Tor.
Search queries are a diary of what you are thinking about. These do not keep one.
No search history, no profile. Results come mainly from Bing with DuckDuckGo's own tracker blocking in front. Works as a default on every phone.
Runs on its own independent index rather than reselling Google or Bing, so results are genuinely different. No tracking, no profiling.
Google results fetched on your behalf so Google never sees you. The Anonymous View proxy opens results without touching the site directly.
Every site you visit starts with a DNS lookup. Encrypted DNS stops the network from reading them; a filtering resolver drops ads and malware before they load. Set it once in your phone's Private DNS setting.
Encrypted resolver run by a Swiss nonprofit with malware-domain blocking. No logging of your IP. The simplest safe default.
Free encrypted DNS from Mullvad, with hostnames that also block ads, trackers, malware, or adult content depending on which one you pick. No account.
Your own resolver with custom blocklists, allowlists, and per-device rules. Free up to 300k queries a month, which covers most single phones.
End-to-end encryption is table stakes now. The difference between these is how much they know about who you talk to.
The encryption everyone else copied, run by a nonprofit that stores almost nothing. Needs a phone number to register; usernames hide it from contacts.
No user identifiers at all, not even a random ID. Each conversation uses its own one-way queues, so there is no address book on any server to leak.
No phone number or email; your account is a key pair. Messages are onion-routed through a decentralised network so no single server sees both ends.
Encrypted mailboxes for the inbox itself, and alias services so every site gets its own throwaway address that forwards to you.
Zero-access encrypted mailbox in Switzerland with a usable free tier. Sign up over Tor without a recovery address if you want it unlinked to anything.
Encrypts subject lines and calendars as well as bodies, and has moved to post-quantum encryption. Free tier, no phone number required. Germany.
Unlimited alias addresses that forward to any inbox; replies go out from the alias. Owned by Proton and bundled into Proton Pass.
Independent alias service with a generous free tier, custom domains, and PGP encryption of forwarded mail. Formerly AnonAddy.
A unique password per site and a second factor that is not SMS. Both are free.
Open source, audited, zero-knowledge vault that syncs everywhere. The free tier has no device limit. Self-hostable if you want the vault on your own box.
Local-only vault file, no cloud, no account. Pair it with your own sync if you need it on several devices. Desktop; KeePassDX and Strongbox cover mobile.
Password manager with SimpleLogin aliases built in, so each signup gets a fresh email and password in one tap.
Encrypted, exportable TOTP app for Android. No cloud, so back up the vault file yourself. Available on F-Droid.
Cross-platform TOTP app with optional end-to-end encrypted sync between phone and desktop. The easy choice if you switch between iOS and Android.
We are paid in Bitcoin, Lightning, and Monero, so these are the wallets we see working at checkout every day. All are self-custodial: you hold the keys.
Self-custodial Lightning wallet for iOS and Android that handles channels for you. Pays a Lightning invoice in seconds, which is the fastest way to buy an eSIM here.
Monero-first mobile wallet that also holds Bitcoin and Lightning. No account, no KYC, built-in exchange. Covers every payment method we accept from one app.
Desktop Bitcoin wallet with coin control, labels, and hardware wallet support. Connect it to your own node and no third party sees your addresses.
Lightweight desktop Monero wallet, Tor built in, syncs fast against a remote node. What the official GUI should feel like.
Simple on-chain Bitcoin wallet for iOS and Android with watch-only and multisig support. Good first wallet.
The phone itself and the line it runs on. A private OS with a tracked SIM, or a private SIM on a stock OS, each leaks half the picture.
Hardened Android for Pixel phones with no Google services by default and sandboxed Play if you need an app. eSIMs work once you enable the eSIM management toggle in network settings.
Our own. Anonymous data eSIMs in 190+ countries and real phone-number eSIMs with calls and SMS. No account, no email, no ID; pay in Bitcoin, Lightning, or Monero.
App store for open-source Android apps, no Google account needed. Most tools on this page ship there; so does the PikaSim app via our own repo.
Encrypt before you upload and the cloud provider becomes irrelevant.
Creates an encrypted vault inside any cloud folder (Dropbox, Google Drive, iCloud). Free on desktop, one-time purchase on mobile.
End-to-end encrypted storage bundled with a Proton account. The easy answer if you already use Proton Mail.
Full-disk and container encryption for laptops and USB drives, with hidden volumes for plausible deniability at a border.
This page is the short version. For full comparisons, threat-model guides, and the reasoning behind each pick, these are the people we read:
A hardened phone on a SIM registered to your passport still reports your location to a carrier that knows your name. An anonymous eSIM closes that.
Tools change hands and change policies. We review this list, but check the vendor's current terms before you rely on one. Nothing here is paid placement. Last reviewed September 2026.