A computer designed especially for you.
Downloads
Below you will find free, open-source tools that we use ourselves and recommend. Always download them from their developers only, and verify the digital signature before installing. This is the only way to be sure that nobody has swapped the file along the way - through a compromised server, a fake website or by controlling your connection.
For each tool we give the fingerprint of the key its developers use to sign their releases. Treat it as one of several sources and also compare it with the project’s official website and other independent places.
Tails
An operating system that runs from a USB stick and leaves no trace on the computer. It routes all traffic through the Tor network and, once shut down, forgets everything you have not deliberately saved in its encrypted Persistent Storage. If tails.net is blocked in your country, use our mirror on the Tor network.
- Download
- tails.net/install
- Key fingerprint
- A490 D0F4 D311 A415 3E2B B7CA DBB8 02B2 58AC D84F
- Verification
- developers’ guide
Tor Browser
A browser that hides your IP address by sending traffic through three randomly chosen Tor relays. It protects against tracking and browser fingerprinting, and with bridges it lets you get around censorship where Tor is blocked.
- Download
- torproject.org/download
- Key fingerprint
- EF6E 286D DA85 EA2A 4BA7 DE68 4E2C 6E87 9329 8290
- Verification
- developers’ guide
Qubes OS
An operating system that divides your computer into isolated virtual machines - a separate one for work, for banking, for browsing or for opening suspicious attachments. Breaking into one of them gives no access to the others. Read more in our article about Qubes OS.
- Download
- qubes-os.org/downloads
- Key fingerprint
- 427F 11FD 0FAA 4B08 0123 F01C DDFA 1A3E 3687 9494
- Verification
- developers’ guide
The fingerprint shown belongs to the project’s master key (Qubes Master Signing Key). Installation images are signed with the key of each release, which is certified by the master key.
GrapheneOS
An operating system for Google Pixel phones - with no Google services, exceptionally strong app isolation and fine-grained permission control. You install it straight from your browser, with no extra software.
- Download
- grapheneos.org/install/web
- Verification
- After installation, the phone displays the verified boot key hash every time it starts. Compare it with the value given for your model in the official guide.
KeePassXC
A password manager that works entirely offline - no cloud and no account. All your passwords live in a single encrypted file that only you control. It supports YubiKey hardware keys.
- Download
- keepassxc.org/download
- Key fingerprint
- BF5A 669F 2272 CF43 24C1 FDA8 CFB4 C216 6397 D0D2
- Verification
- developers’ guide
VeraCrypt
Encrypts entire drives, partitions and USB sticks, or creates encrypted file containers. It also lets you hide one volume inside another - in case someone forces you to reveal your password.
- Download
- veracrypt.io/en/Downloads.html
- Key fingerprint
- 5069 A233 D55A 0EEB 174A 5FC3 821A CD02 680D 16DE
- Verification
- developers’ guide
How to verify a signature
Next to the installation file, developers publish a signature (a .sig or .asc file). On Linux, verification takes three commands:
gpg --import key.asc gpg --fingerprint KEY_FINGERPRINT gpg --verify file.sig file
The output must contain “Good signature”, and the key fingerprint must match the one given on this page and on the project’s website. The warning “This key is not certified with a trusted signature” is normal: it only means that you have not signed this key with your own key.
Guides for Windows and macOS are available on the developers’ websites (the “developers’ guide” link next to each tool).
Tails on the Tor network
If tails.net is blocked in your country, download Tails from our mirror on the Tor network. The address opens only in Tor Browser.
Our server checks every day whether a new release is out. It downloads it directly from the official Tails archive and publishes it only after the signature has been verified. You do not have to trust us, though - the developers’ original signature sits next to the image, so you can check it yourself.
- Tails mirror
- nistar365rngpsoivfnwiwe2fkaxspqm6koatutqxiaxnxuql4rl45qd.onion/tails/
The Tails image is about 1.8 GB, and downloading over Tor takes longer than usual. The .img file is for installing on a USB stick, the .iso file for booting from a DVD or in a virtual machine.
From Nistar36
Our own materials. Every text file is signed with the Nistar36 PGP key, so you can check it with gpg --verify file.txt.
- PGP key
- nistar36.asc · C5CC E460 D137 7D15 4A38 FF88 BBDB F8B8 FE03 365E
- Canary
- canary.txt · details
- Checklist
- Travelling with a laptop and phone
More checklists and guides will appear together with new articles.