KeePassXC
Replaces 1Password · LastPass
An offline password manager using an encrypted portable database you fully own.
Why switchThe clearest password-manager ownership model for users comfortable managing their own sync.
See the evidenceOpen Source Privacy & Security Alternatives
Protect passwords, files, networks, and devices with software that can be independently audited. Each option below includes a clear privacy signal, license, platform fit, and an honest reason to switch.
10 reviewed toolsHuman-written verdictsNo sponsored ranking
Reviewed privacy & security alternatives
Vaultwarden
Replaces 1Password · LastPass
A lightweight self-hosted server compatible with Bitwarden clients and browser extensions.
Why switchA powerful self-hosted password service for users willing to own uptime, backups, and updates.
See the evidenceAdGuard Home
Replaces Commercial DNS filters · Router ad blocking
A network-wide DNS filter with a friendly dashboard, rules, clients, and encrypted DNS.
Why switchA polished first network-level privacy tool for households that want visible, configurable DNS control.
See the evidencePi-hole
Replaces Commercial DNS filters · Per-device ad blockers
The classic network-wide blocker for ads and tracking domains on home and small-office networks.
Why switchA proven way to see and reduce the tracking traffic leaving an entire network.
See the evidenceWireGuard
Replaces OpenVPN clients · Proprietary VPN protocols
A small, modern VPN protocol and implementation designed for simplicity and strong cryptography.
Why switchThe modern foundation for fast private tunnels when you control the endpoints.
See the evidenceVeraCrypt
Replaces BitLocker · FileVault containers
Cross-platform encryption for drives, partitions, and portable encrypted containers.
Why switchA practical cross-platform choice for encrypted archives and removable drives.
See the evidenceCryptomator
Replaces Boxcryptor · Cloud-provider encryption
Client-side encryption that turns any cloud folder into a readable-on-your-devices vault.
Why switchThe easiest way to keep using convenient cloud sync without trusting the provider with plaintext.
See the evidenceOpenSnitch
Replaces Little Snitch · GlassWire
An interactive application firewall that shows and controls outbound connections on Linux.
Why switchThe missing outbound-connection control for Linux users who want to know what apps are doing.
See the evidencePortmaster
Replaces GlassWire · Commercial firewalls
A visual application firewall with DNS filtering, connection history, and privacy defaults.
Why switchA friendlier firewall for users who want visibility without manually reading packet logs.
See the evidenceCrowdSec
Replaces Fail2ban · Commercial threat intelligence
Collaborative intrusion detection that analyzes logs and shares anonymized attack intelligence.
Why switchA modern Fail2ban evolution for internet-facing servers that benefit from community intelligence.
See the evidenceHow to choose a privacy & security alternative
Start with the job you already do and identify which commercial feature is truly essential. Then compare data location, account requirements, export formats, platform support, and maintenance activity. The best open-source replacement is not always the project with the longest feature list—it is the one that removes unwanted complexity without breaking your real workflow.
For non-technical users, we favor tools with clear installers, understandable defaults, current documentation, and an active path for security updates. Self-hosting can improve control, but it also transfers responsibility for backups, upgrades, and availability to you.