F-Droid
The app store for free, open-source apps, with no adverts or hidden trackers. Get most of the apps on this page here.
The apps we recommend and use ourselves. Most are free and open source. Download each one only from the place shown, in this order of preference: the developer's own website, then F-Droid, then Aurora Store. Read how to download apps safely to see why.
The app store for free, open-source apps, with no adverts or hidden trackers. Get most of the apps on this page here.
Download everyday apps without signing in to a Google account. Use it only when an app is not on F-Droid or the developer's own website.
Choose Anonymous when it asks how to sign in.
A free replacement for Google Play Services, for apps that need Google.
For phones running other Android systems. On GrapheneOS, use GrapheneOS's own sandboxed Google Play instead.
A privacy-friendly app store with signed, verified apps. A smaller choice of apps than F-Droid.
Keeps apps you downloaded from developers' websites and GitHub up to date, straight from the source.
Checks that an app file is genuine by comparing its fingerprint with the developer's.
Also available in Accrescent.
Makes your two-factor login codes on your own phone, with an encrypted backup. Safer than codes by SMS.
Lock or wipe your phone from far away if it is lost or taken.
Enforces security rules: a limit on wrong PIN attempts, alerts when someone tries to unlock your phone, and a warning when an app gains internet access after an update.
Advanced: blocking USB data and safe mode needs extra set-up.
Encrypt files and messages with PGP so only the right person can read them.
A password manager that keeps your passwords in an encrypted file on your phone, with no account.
Hides your internet address and traffic from your network. No email needed to sign up; pay with crypto or a voucher.
Shows apps a location you choose instead of your real one.
Sends your apps' internet traffic through the Tor network.
Browse the web anonymously through the Tor network.
A privacy-focused VPN you can pay for without an account email.
Removes hidden details such as location from photos before you share them.
Private messages with no phone number, email or user ID at all.
A hardened version of Signal, with an encrypted database and extra lock options.
Uses your Signal account, which needs a phone number.
Encrypted messages and calls with no phone number or email needed. A one-off purchase.
Text and call from a real phone number over the internet, with no SIM card. Get the number from jmp.chat and pay in Bitcoin.
Do not use it as your only way to call emergency services.
A trusted email app for all your email accounts in one place.
Encrypted email. You can sign up without a phone number.
Encrypted email with an open-source app. You can sign up without a phone number.
Encrypts your files before they go to the cloud, so the cloud company cannot read them.
End-to-end encrypted notes that sync between your phone and computer.
A simple notes app that keeps everything on your phone, with no account.
An open-source calendar that keeps your events on your phone.
Needs Android 12 or newer.
Cloud storage for your files. Use it with Cryptomator so your files are encrypted first.
Hold, send, receive and swap Bitcoin, Monero and other coins in one wallet.
A wallet for Monero, Bitcoin and other coins.
GrapheneOS's own hardened web browser. Use it for everyday browsing.
Already on your phone if it runs GrapheneOS.
Checks with a second phone that your GrapheneOS phone has not been tampered with.
Get it from the GrapheneOS app store (Apps).
Offline maps and directions with no tracking or adverts.
Detailed offline maps and navigation, with many extra features.
The computer version of KeePass. Opens the same password file as KeePassDX.
Windows, Mac and Linux.
Encrypt and decrypt files with PGP on your computer.
Windows. On Linux, install Kleopatra from your system's software centre.
Drag in photos and documents to remove their hidden details.
Windows, Mac and Linux.
Removes hidden details from documents, PDFs and photos.
Linux.
Shreds files so they cannot be recovered, and cleans up traces apps leave behind.
Windows and Linux.
A lightweight Monero wallet for your computer.
Windows, Mac and Linux.
Changes the IMEI of a GL.iNet Mudi travel router and wipes identifying data.
Advanced. Check the law where you live first.
Warns when the Mudi connects to a mobile tower that looks fake.
Advanced.
Before you install anything, check you are on the real website: the address must match exactly. Only install apps you really need, and check what permissions each one asks for.