Privacy Pack

PRIVACY PACK

OUR PRIVACY PACK

Act out against surveillance.

Mass surveillance is illegitimate. Take the steps needed to take your freedoms back and expect that governments and corporations follow in those footsteps. Take all the steps needed to stop all mass government surveillance.

ChatSecure

ChatSecure gives you secure chat with Google and XMPP users.

TextSecure

TextSecure is strong, easy-to-use protection for your text messages.

 

RedPhone

Strong privacy for your phone calls, whenever you need it.

 

Cryptocat

Cryptocat makes chatting in secure groups easy and fun.

 

Securing your passwords is key to protecting yourself online. It takes minutes; do it now!

Unique Passwords

Are you using the same password everywhere? If so, change it, starting with your email account. Use a tool like MasterPassword or write it down.

Double protection

Add a second layer of protection to your accounts on Google, Facebook, Twitter, Yahoo, Dropbox, and other services with 2-factor authentication.

Your Mac

Securing your chats is easy. So is private, anonymous browsing. Try both.

Encrypted chats for Facebook, Google, Duck Duck Go, and more.

Download Adium

Learn more!

Tor

 Tor prevents people from learning your location or browsing habits.

Download Tor

Learn more!

Cryptocat is a fun app for having encrypted chats with your friends.

Download Cryptocat

Learn more!

 More for Mac

  1. Filevault is built-in, and protects you if your Mac is lost, stolen, or seized. Turn on Filevault.
  2. GPG tools lets you encrypt emails using Apple’s Mail.app

Windows

Secure chats is pretty easy on Windows. Private, anonymous browsing is easier. Try both

Encrypted chats for Facebook, Google, Duck Duck Go, and more.

Download Pidgin

Learn more!

Tor

Tor prevents people from learning your location or browsing habits.

 

Download Tor

Cryptocat

Cryptocat is a fun app for having encrypted chats with your friends.

Download Cryptocat

Learn more!

More for Windows

  1. Firefox syncs your passwords securely, and lets you install privacy-protecting extensions like Adblock Plus, Noscript, and HTTPS Everywhere.
  2. For savvy users, Thunderbird and Enigmail let you encrypt your emails.

GNU/Linux

GNU/Linux users probably have these tools already. If not, install them with your package manager!

Encrypted chats for Facebook, Google, Duck Duck Go, and more.

Download Pidgin

Learn more!

Cryptocat

Cryptocat is a fun app for having encrypted chats with your friends.

Download Cryptocat

Learn more!

Tor

Tor prevents people from learning your location or browsing habits.

Download Tor

Learn more!

More for GNU/Linux

  1. Firefox syncs your passwords securely, and lets you install privacy-protecting extensions like Adblock Plus, Noscript, and HTTPS Everywhere.
  2. For savvy users, Thunderbird and Enigmail let you encrypt your emails.
  3. Tails is a USB-bootable operating system for privacy and anonymity. Try it!
  4. Many GNU/Linux distributions provide support for Full Disk Encryption. Instructions for Ubuntu.
  5. GNU/Linux users, install all these tools from your favorite package manager.

Other Privacy Resources:

EFF’s Introduction to Threat Modeling: https://ssd.eff.org/en/module/introduction-threat-modeling

 

FIREFOX:

Firefox: https://www.mozilla.org/en-US/firefox/new/

Firefox privacy settings: https://support.mozilla.org/en-US/products/firefox/privacy-and-security

 

BEHAVIORAL ANALYTICS:

uBlock Origin: https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/

NoScript: http://noscript.net/ OR
Privacy Badger: https://www.eff.org/privacybadger

 

HTTPS:

HTTPS Everywhere: https://www.eff.org/https-everywhere

Test the TLS/SSL security of a website or browser and learn more about implementing TLS/SSL: https://www.ssllabs.com/

EFF’s Let’s Encrypt: https://letsencrypt.org/

What Every Librarian Needs to Know About HTTPS:https://www.eff.org/deeplinks/2015/05/what-every-librarian-needs-know-about-https

Tor and HTTPS: https://www.eff.org/pages/tor-and-https

 

SAFE SEARCHING:

DuckDuckGo: https://duckduckgo.com/

DuckDuckGo extension for Firefox: https://addons.mozilla.org/en-US/firefox/addon/duckduckgo-for-firefox/

Disconnect Search: https://disconnect.me/search

 

PASSWORDS:

KeePassX: https://www.keepassx.org/

Diceware word list: http://world.std.com/~reinhold/diceware.wordlist.asc

Yubikey: https://www.yubico.com/

Setting up Yubikey in static password mode: https://www.yubico.com/products/services-software/personalization-tools/

 

VIRUSES & MALWARE:

ClamAV: http://www.clamav.net/index.html

Malwarebytes: http://www.malwarebytes.org/

Detekt: https://resistsurveillance.org/

OS X native malware protection: http://support.apple.com/en-us/HT202491 and http://support.apple.com/en-us/HT201940

 

MOBILE:

Replicant: http://www.replicant.us/

Cyanogenmod:

The Guardian Project: https://guardianproject.info/

Encrypt your phone: http://www.makeuseof.com/tag/how-to-encrypt-data-on-your-smartphone/

Signal/RedPhone/TextSecure: https://whispersystems.org/

Snoopsnitch: https://opensource.srlabs.de/projects/snoopsnitch

 

EMAIL:

Email Self-Defense from FSF: https://emailselfdefense.fsf.org/en/

Check the security of your email server: http://starttls.info/

 

VPNs:

Riseup’s VPN: https://help.riseup.net/en/vpn

OpenVPN: http://openvpn.net/

A list of possibly good VPNs: http://torrentfreak.com/anonymous-vpn-service-provider-review-2015-150228/

 

TERMS OF SERVICE:

Terms of Service; Didn’t Read: http://tosdr.org/downloads.html

 

CANARIES AND TRANSPARENCY REPORTS:

Canary Watch: https://canarywatch.org/

EFF’s “Who’s Got Your Back”: https://www.eff.org/who-has-your-back-government-data-requests-2015

 

EXTRA CREDIT:

PRISM BREAK: http://prism-break.org/en/

Surveillance Self-Defense: https://ssd.eff.org/

Cryptoparty: http://www.cryptoparty.in/

 

Important Notes

Re: Pidgin and Adium, if you believe you may be the specific target of surveillance, these aren’t the tools for you. Pidgin has had a large number of remotely exploitable vulnerabilites recently, and auditors looking at the code believe there are likely to be many more. Still, these tools are effective against passive mass surveillance, and they’re unusually easy to use.

Cryptocat is not a magic bullet. Even though Cryptocat provides useful encryption, you should never trust any piece of software with your life, and Cryptocat is no exception. Cryptocat does not mask your IP address or hide your identity, and, like all software, cannot fully protect against a targeted attack on your person or electronics.

This page was made in consultation with technologists and activists at the Electronic Frontier Foundation, and their contribution was invaluable.