The Complete Privacy Toolkit for 2026: Every App I Use

This is the full stack. Start anywhere, but don't skip your antivirus.

I get asked this a lot. "What do you actually use?" Not what I recommend in articles. What's on my devices right now.

So here's everything. The full stack. What it costs, why I chose it, and what I gave up.

Total monthly cost: about $11.

Antivirus — XorShield AV ($14.99/year)

This section starts here because antivirus is often the most overlooked privacy component.

Everyone locks down their VPN and email, then runs Norton — software that literally shipped a crypto miner and tracks every file on your computer. Avast sold browsing data from 100 million users. Kaspersky got banned by the federal government.

XorShield AV runs its own detection engine — built in Rust, with several layers working together: known-threat signatures, pattern matching for malware families, and on-device AI for fresh threats. All scanning happens locally. No cloud uploads. No telemetry. No account.

XorShield AV was built to match the privacy standards of the rest of this stack. You don't have to take our word for it — run a network monitor and the only outbound connection you'll see is the occasional signature update. Your files never leave your device.

$14.99/year. macOS, Linux, Windows.

VPN — Mullvad (€5/month)

No email to sign up. No name. A random account number and a flat rate. You can mail cash in an envelope to Sweden if you want.

Mullvad doesn't do affiliate marketing, doesn't pay influencers, doesn't offer annual discounts. Their pricing has never changed since the company started in 2009 — still €5/month, no exceptions. Their philosophy is that if you need to discount your product to get customers, your product isn't good enough.

WireGuard protocol. RAM-based servers. Independently audited. When I need to be invisible, Mullvad is what I trust.

Email — Proton Mail ($3.99/month)

End-to-end encrypted. Zero-access architecture. Swiss jurisdiction. Even if Proton were served with a warrant, they can't read my emails because they don't have the decryption keys.

I migrated from Gmail two years ago. The import tool pulled in my archive. I set up forwarding for three months while I updated my address everywhere. The transition was less painful than expected.

The calendar, drive, and VPN integration are bonuses. I mainly use it because it's the only email provider where I genuinely trust that my messages are private.

Password Manager — Bitwarden ($19.80/year)

Open source. Independently audited. The best password manager that lets you actually see the code.

Bitwarden raised prices in early 2025 — from $10/year to $19.80/year for Premium. It annoyed a lot of people, but the product is still the best in its class for the price. The free tier still offers unlimited passwords on unlimited devices, which is more than most competitors give you at any price.

I switched from 1Password two years ago. 1Password is excellent, but it's closed source. After LastPass proved that "trust us" isn't enough — with $35 million in crypto stolen from breached vaults — I wanted to see the code.

For the truly dedicated: you can self-host using Vaultwarden (a lightweight Bitwarden-compatible server). Your passwords never touch anyone else's infrastructure.

Browser — Brave (free)

Built-in ad and tracker blocking. Chrome extensions work. Fast. The 2020 affiliate-link incident was bad, but they fixed it and haven't had a repeat.

I use Firefox as a backup for the rare site that breaks in Brave. Tor Browser for anything that requires genuine anonymity.

Search Engine — Brave Search / DuckDuckGo (free)

Brave Search has its own independent index — not reskinned Google results. I use it as my default. When results aren't great (happens occasionally), I fall back to DuckDuckGo.

Neither tracks search history. Neither builds an advertising profile from my queries.

Messaging — Signal (free)

Signal Protocol is the gold standard for encrypted messaging. When Signal was served with a grand jury subpoena in 2021, they could only produce two pieces of data: the date the account was created and the date it last connected. That's it. That's all they had.

No ads. No trackers. No kidding.

For truly sensitive conversations: SimpleX Chat. No phone number required. No account identifier at all. The servers can't even determine who is talking to whom.

Cloud Storage — Proton Drive (included with Proton Mail)

Zero-knowledge encryption. Files are encrypted before they leave my device. Proton can't see the contents.

I don't store anything critical in the cloud. Local backups on an encrypted external drive for important files. Proton Drive is for convenience — sharing documents, accessing things from my phone.

For maximum control: a self-hosted NAS with Syncthing for sync. No company involved. But most people don't want to maintain a NAS.

Phone — Pixel with GrapheneOS (free, after hardware)

Google's hardware, stripped of Google's software. GrapheneOS is a hardened Android fork. No Google services by default. Sandboxed Google Play compatibility if you need specific apps.

Big news: at MWC 2026, Motorola announced a long-term partnership with the GrapheneOS Foundation — making it the first non-Pixel manufacturer to officially support the privacy-focused OS. The first compatible Motorola devices (Signature, razr fold, razr ultra) are expected in 2027. This is a major step toward making privacy-first phones accessible beyond the Pixel lineup.

For people who don't want to install a custom OS: iPhone with Advanced Data Protection enabled. Apple isn't perfect, but their business model doesn't depend on advertising, which changes the incentive structure.

Operating System — macOS / Linux

On my laptop: macOS with telemetry minimized through settings.

On my home server: Debian Linux. No Microsoft, no Apple, no corporate telemetry.

For the truly dedicated: Tails OS on a USB stick for sensitive work. QubesOS for compartmentalized workflows. But these are for specific threat models, not daily use.

The cost breakdown

What I gave up

Honesty time. Privacy has costs beyond money.

Convenience. Gmail's AI features are genuinely useful. Smart compose, automatic categorization, seamless integration with everything. Proton Mail is good. It's not Gmail-good at convenience.

Compatibility. Some apps require Google Play Services. Most work in GrapheneOS's sandbox, but a few don't. Banking apps are hit or miss.

Speed. Privacy tools are sometimes slower. Tor is obviously slow. Proton Mail's web client isn't as snappy as Gmail. Brave Search results aren't always as good as Google's.

Social friction. Asking friends to install Signal instead of texting. Sharing a Proton address that makes people ask "what's proton?" Explaining why you don't have a Gmail address.

Worth it? For me, yes. The alternative is handing a detailed log of my life to advertising companies, data brokers, and whoever breaches them next.

Your call.

Start somewhere

You don't need to switch everything at once. Pick one:

• Most impact: Switch your password manager. If you're on LastPass, this is urgent.
• Easiest switch: Install Brave Browser. Takes 5 minutes.
• Most overlooked: Replace your antivirus. Your current one probably collects more data than you think.

Every tool you switch is one less company with access to your life.

Last updated: May 2026