Linux & macOS Privacy

Stay

apps.apple.com

Stay is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

uBO Lite Safari

apps.apple.com

uBO Lite Safari is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

wBlock

apps.apple.com

wBlock is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

macOS Privacy Guide

github.com

macOS Privacy Guide is a Linux or Unix documentation project with guides, references, or manuals.

Lockdown Privacy

lockdownprivacy.com

Lockdown Privacy offers a firewall and a Secure Tunnel VPN for blocking trackers, ads and badware in apps. The firewall is described as open source and on-device. The site states the products are Openly Operated and provide transparency into data handling. The listing covers iPhone, iPad and Mac.

1Blocker

1blocker.com

1Blocker is a Safari ad blocker for iPhone, iPad, Mac and Apple Vision Pro. It blocks ads, trackers and other unwanted web content, with over 120,000 built-in blocker rules. Filtering is done locally on the device, and settings sync over iCloud. Multiple filters cover ads, privacy, annoyances and adult content.

Tunnelblick

tunnelblick.net

Tunnelblick is free, open-source software for controlling OpenVPN VPNs on macOS. It is distributed as a ready-to-use application bundling the necessary binaries and drivers, including OpenVPN, easy-rsa, and tun/tap drivers; users add their own OpenVPN configuration and need access to a VPN server. It is licensed under the GNU General Public License, version 2.

DNS Party is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

GPG Suite

gpgtools.org

GPG Suite is a macOS package that includes GPG Mail, GPG Keychain, GPG Services and MacGPG for OpenPGP key management. GPG Mail 8 for macOS Golden Gate is in beta and requires an active GPG Mail 7 Support Plan; from GPG Mail 8 the Support Plan becomes a yearly subscription. Some features are still missing.

Passepartout

passepartoutvpn.app

Passepartout is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

ShuffleStacks

shufflecake.net

Shufflecake is a Free/Libre and open-source Linux tool for creating multiple hidden encrypted volumes on a storage device, scrambled across existing storage space and indistinguishable from random noise when not decrypted. It aims to provide plausible deniability for hidden filesystems. The software is experimental and the project advises against relying on its security for important use.

Malwarebytes

malwarebytes.com

Malwarebytes is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

Adguard

justpaste.it

AdGuard is an ad and popup blocking app for Safari on iOS, iPadOS and macOS. The listing describes enabling filters for ad blocking, privacy, social widgets, annoyances, security and language, and notes the free version is enough. Users can report incorrect blocking through the app's support option.

gocryptfs

nuetzlich.net

gocryptfs is a free file-based encryption tool implemented as a mountable FUSE filesystem, storing each file as one corresponding encrypted file on disk. Encrypted files can be kept in any folder, a USB stick or Dropbox, and file-based encryption allows efficient synchronisation with tools like rsync. Linux is fully supported and macOS support is beta quality.

LinkLiar is an open-source status menu application written in Swift that helps users spoof the MAC addresses of Wi-Fi and Ethernet interfaces. A MAC address is sent out by a MacBook's Wi-Fi and can be collected by others nearby to track movement. The developer notes the address can be modified despite being hardwired into the network card, and that building from scratch with Xcode is an option for those concerned about administrator privileges.

Linux Hardening

vez.mrsk.me

Linux Hardening is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

AdGuard Mini

adguard.com

AdGuard Mini is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

Arch Security Wiki

wiki.archlinux.org

Arch Security Wiki provides Linux, macOS, BSD, or Unix documentation, tutorials, manuals, and learning guides.

Firejail

firejail.wordpress.com

Firejail is a SUID program for Linux that restricts the running environment of untrusted applications using Linux namespaces and seccomp-bpf. Written in C with almost no dependencies, it runs on Linux computers with a 3.x kernel or newer. It includes security profiles for many Linux programs, and commands can be prefixed with "firejail" to start a sandbox.

BlockBlock

objective-see.org

BlockBlock is a macOS security tool that monitors common persistence locations and alerts whenever a new persistent component is added. It uses Apple's Endpoint Security Framework, requires system privileges and Full Disk Access, and runs automatically after restart to provide continual protection. Alerts identify the responsible process and the persisted item, and users can allow or block it.

Collision

flathub.org

Collision is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

CryptSetup

gitlab.com

CryptSetup is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

SuspiciousPackage

mothersruin.com

SuspiciousPackage is a Linux, macOS, BSD, or Unix resource for tools, documentation, communities, or system workflows.

Tomb

dyne.org

Tomb is a free and open source tool for folder encryption on GNU/Linux, creating encrypted storage folders opened and closed with associated key files protected by a user-chosen password. It uses dm-crypt and LUKS via cryptsetup and is a shell script. Tomb works only on GNU/Linux systems and WSL2 starting with Windows11.