An opinionated, honest list. Different tools fix different leaks — a VPN doesn't hide your browser fingerprint, and a privacy browser doesn't hide your IP. We tell you which is which. Heads-up: some links below are affiliate links; the disclosure at the bottom of this page explains exactly how that works.
VPN — hides your IP, location, ISPFixes the items in the “High” section of the Privacy Check.
Privacy-first VPN
Proton VPN
Run by the same team behind Proton Mail. Swiss-based, audited no-logs, open-source clients, generous free tier (slower servers, limited countries). Our default pick for the privacy-aware user.
The most recognized VPN brand. Solid speeds, large country list, RAM-only servers, audited no-logs. Pricier than Surfshark, but the standard if you want “the VPN your friends have heard of.”
Unlimited devices on one subscription, decent speeds, audited. Most affordable of the mainstream options on multi-year plans. Owned by the same parent as NordVPN (Nord Security) since 2022.
Flat €5/month, no email required, accepts cash. WireGuard-native, audited, no affiliate program (they refuse on principle). The privacy community's quiet favorite. We get nothing if you sign up — listed because it's honest.
Privacy browsers — hide your fingerprintFixes canvas/WebGL/audio/font fingerprinting. A VPN can't do this.
Maximum privacy
Tor Browser
The gold standard for browser-level privacy. Routes traffic through the Tor network and aggressively normalizes the browser fingerprint so users look identical to each other. Slower; not for everyday browsing of every site.
Chromium-based, ad and tracker blocking on by default, fingerprint randomization. Closer to Chrome's speed and compatibility than Tor. The pragmatic everyday choice for most people who want fewer trackers without losing the modern web.
A fork of Firefox preconfigured for privacy: telemetry off, resist-fingerprinting on, uBlock Origin bundled. Looks and acts like Firefox; no manual hardening required. Great for people who want Firefox without spending an evening editing about:config.
Encrypted DNS — hides which sites you visit from your ISPNot a leak on this page, but worth solving anyway.
DNS with profiles
NextDNS
Hosted DNS-over-HTTPS / DNS-over-TLS resolver with per-device profiles, tracker blocking, malware filtering. Free up to 300k queries/month. Excellent middle-ground between rolling your own DNS and just trusting Cloudflare's 1.1.1.1.
Free public resolver from Cloudflare. Supports DNS-over-HTTPS, DNS-over-TLS, and DNSSEC validation. No filtering by default; the 1.1.1.2 variant adds malware blocking. Simplest option if you just want encrypted DNS without thinking.
Two more things that matterA password manager and an ad-blocker.
Password manager
Bitwarden
Open-source, self-hostable if you want, generous free tier covering unlimited passwords across unlimited devices. Audited. End-to-end encrypted. The honest default for anyone not already using a password manager.
The only ad-blocker we recommend. Open-source, audited, no monetization, no "acceptable ads" program, lightweight. Use it on Firefox (best support) or Chrome/Edge (Manifest V3 caveats). Skip "uBlock" (no Origin) — different project, different motives.
Affiliate disclosure (FTC §16 CFR Part 255 & EU equivalents): Some links on this page are affiliate links. If you click through and purchase, we may receive a commission at no extra cost to you. This does not affect the order of recommendations, the wording of the reviews, or whether a product gets listed at all. The reverse-test of this: Mullvad VPN and Tor Browser are listed prominently even though they pay us zero — they're on this page because they're the right answer in their category.
How we decide what to list: we list tools that we'd recommend to a friend. We do not accept paid placements, sponsored reviews, or "ranking adjustments" of any kind. If a tool is removed in the future, the commit will say why.
Affiliate program status (May 2026): applications pending with Proton, NordVPN, and Surfshark. Until they're approved, the "Visit X" buttons for those three are placeholders. Mullvad, Tor, Brave, LibreWolf, Bitwarden, uBlock Origin, NextDNS, and 1.1.1.1 all link directly (no commission either way).