Tools & Providers
An index of tools and services evaluated against our 4-tier privacy and security matrix.
Domain Registrars
| Provider | Tier | Anonymous | Open source | Deployment | Platform | Recommended | Notes |
|---|---|---|---|---|---|---|---|
| Porkbun | T3 | — | — | Cloud | Web | Yes | Free WHOIS privacy, at-cost renewals |
| Cloudflare | T3 | — | — | Cloud | Web | Yes | Zero markup wholesale domain pricing |
| Njalla | T4 | Yes | — | Cloud | Web | — | Anonymous privacy-shield proxy |
| Namecheap | T3 | — | — | Cloud | Web | — | Established registrar with free privacy |
| Infomaniak | T3 | — | — | Cloud | Web | — | Swiss jurisdiction & EU privacy |
Email Aliasing & Catch-All Routing
| Provider | Tier | Anonymous | Open source | Deployment | Platform | Recommended | Notes |
|---|---|---|---|---|---|---|---|
| SimpleLogin | T4 | Yes | Yes | Hybrid | Web, iOS, Android, extensions | Yes | Open-source, send & receive aliases, PGP |
| Cloudflare | T3 | — | — | Cloud | Web | Yes | Free custom domain catch-all forwarding |
| Addy.io | T4 | Yes | Yes | Hybrid | Web, extensions | — | Open-source forwarding with GPG support |
| Firefox Relay | T3 | — | Yes | Cloud | Web, Firefox extension | — | Email masks; phone masking in select countries |
| DuckDuckGo Email Protection | T3 | — | — | Cloud | Web, app, extension | — | @duck.com aliases strip trackers |
| IronVest | T3 | — | — | Cloud | Web, iOS, Android, extensions | — | Masked emails, cards and biometrics |
| Blur (Abine) | T3 | — | — | Cloud | Web, iOS, Android, extensions | — | Masked email, phone and cards |
| Apple Hide My Email | T2 | — | — | Cloud | iOS, macOS | — | Built into iOS/macOS, vendor-locked |
Encrypted Mailboxes
| Provider | Tier | Anonymous | Open source | Deployment | Platform | Recommended | Notes |
|---|---|---|---|---|---|---|---|
| Proton Mail | T4 | Yes | — | Cloud | Web, iOS, Android, Bridge | Yes | Swiss zero-access PGP storage, custom domains |
| Tuta | T4 | Yes | — | Cloud | Web, iOS, Android, Desktop | Yes | German jurisdiction, post-quantum encryption |
| Mailbox.org | T4 | Yes | — | Cloud | Web, iOS, Android | — | Independent German privacy provider |
| Posteo | T4 | Yes | — | Cloud | Web | — | Green hosting, anonymous payment options |
| Fastmail | T4 | — | — | Cloud | Web, iOS, Android | — | Not E2E but private, ad-free, great UX |
| StartMail | T3 | — | — | Cloud | Web | — | Easy PGP; unlimited aliases |
| Runbox | T3 | — | — | Cloud | Web | — | Strong privacy laws; renewable-powered |
Passwords & Authentication
| Provider | Tier | Anonymous | Open source | Deployment | Platform | Recommended | Notes |
|---|---|---|---|---|---|---|---|
| Bitwarden | T4 | Yes | Yes | Hybrid | All platforms + Web | Yes | Open-source, audited, zero-knowledge vault |
| KeePassXC | T4 | Yes | Yes | Offline | Win, macOS, Linux | — | 100% offline local encrypted database |
| KeePassDX | T4 | Yes | Yes | Offline | Android | — | KeePass-compatible, offline |
| Dashlane | T4 | Yes | — | Cloud | All platforms | — | Bundles VPN + dark web monitoring |
| 1Password | T3 | — | — | Cloud | All platforms | — | Polished UX; family plans, Travel Mode |
| Proton Pass | T3 | — | Yes | Cloud | All platforms | — | Built-in email aliases; bundles with Proton |
| KeePassium | T3 | — | Yes | Cloud | iOS, macOS | — | KeePass for Apple devices |
| Strongbox | T3 | — | — | Offline | iOS, macOS | — | KeePass/PwSafe formats, local-first |
| NordPass | T3 | — | — | Cloud | All platforms | — | From the Nord family; XChaCha20 |
| Keeper | T3 | — | — | Cloud | All platforms | — | Strong enterprise heritage |
| Enpass | T3 | — | — | Offline | All platforms | — | Local vault; sync via your own cloud |
| RoboForm | T3 | — | — | Cloud | All platforms | — | Veteran form-filler |
| Apple Passwords | T2 | — | — | Cloud | iOS, macOS, visionOS | — | System keychain with passkey support |
Hardware-based Authentication
| Provider | Tier | Anonymous | Open source | Deployment | Platform | Recommended | Notes |
|---|---|---|---|---|---|---|---|
| YubiKey | T4 | — | — | Offline | USB-A/C, NFC | — | FIDO2/WebAuthn hardware security keys |
| Nitrokey 3 | T4 | — | Yes | Offline | USB-C/A, NFC | — | Open hardware and firmware |
| OnlyKey | T4 | — | Yes | Offline | USB-A/C | — | Onboard PIN pad; plausible deniability |
| SoloKeys 2 | T4 | — | Yes | Offline | USB-A/C, NFC | — | Fully open-source FIDO2 key |
| Yubico Security Key | T3 | — | — | Offline | USB-A/C, NFC | — | Budget FIDO2-only option |
| Feitian ePass Keys | T3 | — | — | Offline | USB-A/C, NFC | — | Budget FIDO2 keys |
| Google Titan Security Key | T2 | Yes | — | Offline | USB-C, NFC | — | FIDO2 passkey storage |
Legend & Criteria
- Tier: What level of privacy or security the product or service provides:
- Exposed (T1): Bad - Not recommended.
- Basic (T2): Better than nothing - Not recommended.
- Advanced (T3): Good — Balance between convenience and effectiveness.
- Secure (T4): Best - Maximum privacy and security.
- Anonymous:
- Yes if signup and payment can be completed fully anonymously without KYC (no phone/ID verification; accepts crypto or cash).
- Open source:
- Yes if the full codebase (both client applications and server/backend) is open source.
- Deployment:
- Cloud: Relies exclusively on third-party infrastructure.
- Hybrid: Third-party and self-serve options available.
- Self Hosted: No third-party dependency for usage or deployment.
- Offline: Local software or physical hardware with zero network dependency.
- Platform: Supported operating systems, browser environments, or hardware interfaces.
- Recommended:
- Yes: Personally vetted and recommended by Stop Snooping.
- No: Explicitly not recommended due to privacy flaws, telemetry, or counterproductive trade-offs.
- —: Neutral / standard alternative.
- Tools & Providers 0001-01-01