KeePass keeps every account inside a single encrypted database and asks you to remember one master key. Version 2.61.1 arrived on 1 May 2026 with a list of fixes, and Auto-Type fills forms by simulating keystrokes.

KeePassXC 2.7.12 is free and open source on Windows, macOS and Linux, storing every account in one local encrypted file with a browser extension for autofill and a generator built in. Data never sits on a vendor server, and no subscription is charged.

Microsoft's own authenticator app for phones, handling second-factor checks and passwordless sign-in, with a built-in one-time passcode generator that also works offline, and room for accounts from Microsoft and from other providers alike.

A mobile password manager that hands encrypted storage to the phone s dedicated security chip and never reaches the network while running. The free edition holds 20 accounts across 17 templates, and forgetting the master password can be resolved with help from friends rather than a server.

A password and passkey manager built on zero knowledge encryption: scrambling and unscrambling happen on the local device and the service stores only ciphertext. Extensions and native desktop and mobile clients all open the same vault, while the free tier caps at ten records and one mobile device.

A free Windows firewall from Check Point that watches traffic in both directions, and bundles program access control, early boot protection and a botnet defence. It asks for Windows 10 or 11.

Bitdefender Antivirus Free is a free antivirus for Windows; the official page says it stays free with no hidden charges and no time limit, learns the machine's normal activity patterns and isolates suspicious changes.

One encrypted file on your own disk, no cloud sync, no telemetry, no account: a password vault whose trust model is a file and a master password, nothing else.

A single file that scans startup items, services, drivers, network settings and suspicious paths into two text logs a helper can read line by line, so diagnosis stops being guesswork.

When the main antivirus reports a clean machine but the browser opens on a page nobody chose, a scanner built for the slow, quiet infections is the tool you actually need.

No rule list to update, no settings to tune: the extension watches which third party domains follow you across sites, and blocks the ones whose behaviour gives them away.

Most blockers slow the browser down as lists grow. This one was built by a single maintainer to use less memory the more it blocks, and it has stayed at the top of the category for ten years.

The idea that made it popular is still the idea worth having: tokens encrypted and synced, so a new phone gets forty accounts back instead of forty support tickets. The desktop app is gone, the mobile one works.

Every signup form asking for your real address is a small wager on somebody else data handling. SimpleLogin hands out a separate forwarding address per site, passes the mail to your real inbox, and lets you switch off whichever alias starts receiving nonsense.

A computer accumulates history, cache, recent documents, run records and thumbnails until the day it is lent or sold. Privacy Eraser gathers hundreds of those targets under one tree, clears them in a single pass, and adds a shredder plus free space wiping for the files that must not come back.