Passbolt is an open source credential platform for teams, with the vault running on your own server or inside the firewall. A browser extension, mobile apps and a command line tool share one encrypted set of data, sharing uses OpenPGP public keys, and private keys stay on the client.

One encrypted file on your own disk, no cloud sync, no telemetry, no account: a password vault whose trust model is a file and a master password, nothing else.

Every signup form asking for your real address is a small wager on somebody else data handling. SimpleLogin hands out a separate forwarding address per site, passes the mail to your real inbox, and lets you switch off whichever alias starts receiving nonsense.

Cryptomator is an open-source tool that encrypts files in a local vault with AES-256 before they sync, so a cloud provider only ever stores unreadable data.

A two-factor app with no account to create: approve the login on your phone and the code lands in the browser by itself, keys stay local by default, and an encrypted export is there before you need it.

Almost every password manager is a commercial service with the passwords on somebody else's machine, and asking to run the server yourself usually gets nowhere. This one, published under the AGPL, keeps both roads open: the official cloud is free for one person, or the whole thing can be deployed on your own hardware so that the data really stays with you. Client and server code are both public, and every platform behaves the same.

An open-source privacy extension that has been running for more than a decade. It blocks ads and trackers, swaps personal identifiers in requests for random values, and answers cookie consent prompts with a refusal on your behalf. Every page shows how many trackers it carried and which companies they belong to.

A public resolver that answers ad, tracking and phishing domains with a name that does not exist, so nothing on the network can reach them. It speaks every mainstream encrypted protocol, keeps no logs, needs no client, and its core is open enough to host yourself. The base service is free.