KeePass keeps every account inside a single encrypted database and asks you to remember one master key. Version 2.61.1 arrived on 1 May 2026 with a list of fixes, and Auto-Type fills forms by simulating keystrokes.

KeePassXC 2.7.12 is free and open source on Windows, macOS and Linux, storing every account in one local encrypted file with a browser extension for autofill and a generator built in. Data never sits on a vendor server, and no subscription is charged.

Microsoft's own authenticator app for phones, handling second-factor checks and passwordless sign-in, with a built-in one-time passcode generator that also works offline, and room for accounts from Microsoft and from other providers alike.

A password and passkey manager built on zero knowledge encryption: scrambling and unscrambling happen on the local device and the service stores only ciphertext. Extensions and native desktop and mobile clients all open the same vault, while the free tier caps at ten records and one mobile device.

A free Windows firewall from Check Point that watches traffic in both directions, and bundles program access control, early boot protection and a botnet defence. It asks for Windows 10 or 11.

Bitdefender Antivirus Free is a free antivirus for Windows; the official page says it stays free with no hidden charges and no time limit, learns the machine's normal activity patterns and isolates suspicious changes.

One encrypted file on your own disk, no cloud sync, no telemetry, no account: a password vault whose trust model is a file and a master password, nothing else.

A single file that scans startup items, services, drivers, network settings and suspicious paths into two text logs a helper can read line by line, so diagnosis stops being guesswork.

When the main antivirus reports a clean machine but the browser opens on a page nobody chose, a scanner built for the slow, quiet infections is the tool you actually need.

A computer accumulates history, cache, recent documents, run records and thumbnails until the day it is lent or sold. Privacy Eraser gathers hundreds of those targets under one tree, clears them in a single pass, and adds a shredder plus free space wiping for the files that must not come back.

WARP encrypts everything from the device to the nearest edge node over WireGuard, sends lookups through an encrypted resolver, needs no account and has no traffic limit. Free on every platform, with post quantum crypto added in 2026.

Portmaster is an open source application firewall from Safing that shows every outbound connection in real time and lets you allow or block it in one click, with encrypted DNS and built in filter lists under the GPLv3.

CryFS is an open source encrypted filesystem for cloud folders: it splits files into encrypted blocks, scrambles names and directory structure, and gives you a normal mounted folder on the desktop while the cloud only ever stores unreadable chunks.

Enpass has no server holding your vault: the encrypted file stays on your devices, syncs through a cloud account you already own, and unlocks with a key that never leaves your head.

Cryptomator is an open-source tool that encrypts files in a local vault with AES-256 before they sync, so a cloud provider only ever stores unreadable data.