Sign in with Google

Passwords, 2FA and privacy for everyone

Open-source password managers, 2FA apps and privacy tools that one person can set up in an afternoon.

For everyone, not only tech people: a password manager, a 2FA app and tools that cut tracking. Most picks run on your phone or in your browser, and some you can host for your family.

9 picks in 3 sections · checked by an editor on Oct 30, 2026 · How we pick

01Passwords4 picks

  1. KeePassXCkeepassxreboot/keepassxc

    Pick this for a password file on your own computer, with no server.

    Desktop · Custom (read before use) · active 4 days ago · ★ 30k

    78worth
  2. KeePassDXKunzisoft/KeePassDX

    The KeePassXC companion for Android.

    Mobile · GPL-3.0 · active 2 weeks ago · ★ 7.6k

    75worth
  3. Bitwardenbitwarden/clients

    Pick this for sync across every device and browser.

    Web · Desktop · CLI · Custom (read before use) · active yesterday · ★ 14k

    75worth
  4. Vaultwardendani-garcia/vaultwarden

    Pick this to run your own Bitwarden server on a small machine.

    Docker / self-host · AGPL-3.0 · active 2 days ago · ★ 70k

    88worth

022FA2 picks

  1. Enteente/ente

    Pick this for an encrypted 2FA app with cloud backup.

    Web · Desktop · Mobile · AGPL-3.0 · active yesterday · ★ 30k

    82worth
  2. 2FAuthBubka/2FAuth

    Pick this to keep your 2FA codes on your own server.

    Web · Docker / self-host · AGPL-3.0 · active 5 days ago · ★ 4.2k

    76worth

03Privacy3 picks

  1. AdGuard HomeAdguardTeam/AdGuardHome

    Pick this to block ads and trackers for every device at home.

    Docker / self-host · GPL-3.0 · active yesterday · ★ 38k

    84worth
  2. SimpleX Chatsimplex-chat/simplex-chat

    Pick this for a messenger that needs no phone number or user ID.

    Desktop · Mobile · AGPL-3.0 · active last week · ★ 20k

    77worth
  3. yopassjhaals/yopass

    Pick this to share a password once, then it is gone.

    Web · Docker / self-host · CLI · Apache-2.0 · active yesterday · ★ 3.2k

    78worth

More in Security

Learn ethical hacking: practice apps and tools

Practice on apps made to be hacked, then learn the tools security testers use every day. Only test what you own or have permission to test.Inside: OWASP Juice Shop, SecLists, RustScan + 8 more11 picks · 6 sections

Protect your server and your code

Scan for weak spots, block attacks and keep secrets out of Git, on a home server or a small company stack.Inside: Trivy, Gitleaks, gosec + 5 more8 picks · 4 sections

Test the security of AI apps and agents

Red-team your chatbot, scan an LLM for weak spots, or let an AI agent pentest your own app.Inside: promptfoo, garak, iFixAi + 5 more8 picks · 3 sections

Other groups

See every project in this category on Explore →Missing a project? Suggest it →

How we pick

An editor picks 6 to 12 projects for one job and writes when to choose each one. Every pick had a commit in the last 6 months. It is not archived. Its worth score is 60 or more. An editor breaks a rule only for a reason, and writes that reason in the pick's note. We check every list again each quarter. A pick goes when it breaks a rule or a clearly better project appears.