Section · 5 guides

Apps & Tools

The apps you use every day hold your conversations, your passwords and your browsing. We compare the popular choices on encryption, data collection and track record, and explain what each tool can and cannot protect.

+----[SHA256]-----+
|.+oooo. .oo+o.   |
|+ =*=+ . o..=    |
|.o+o=.= o =o..   |
| o   + E B +     |
|      . S * .    |
|       o O . o   |
|        + + . .  |
|         o       |
|                 |
+-----[apps]------+

Fingerprint of /apps/

Apps & ToolsComparison

Secure messengers compared: Signal, WhatsApp, Threema, Telegram and iMessage

Five popular messengers, five different answers to the questions that matter: is encryption on by default, what does the operator keep, and are your backups as safe as your chats?

High impact6 min

Apps & ToolsComparison

Password managers compared: Bitwarden, 1Password, KeePassXC, Proton Pass and Apple Passwords

Cloud vault or local file, open source or polished subscription: five password managers compared on audits, passkeys, sharing and recovery, with the lessons of the 2022 LastPass breach.

Critical impact6 min

Apps & ToolsComparison

Browsers compared for security: Chrome, Firefox, Safari, Edge and Brave

Five browsers, one job: run code from strangers safely. We compare update speed, isolation, tracking defaults, Manifest V3, site warnings, vendor data collection and enterprise management.

High impact5 min

Apps & ToolsExplainer

What a VPN protects, and what it does not

A VPN hides your traffic from the local network and your provider, and your IP address from websites. It does not stop phishing, malware or tracking through logins. Here is where it really helps.

Medium impact5 min

Apps & ToolsChecklist

Browser extension audit: fifteen minutes to fewer hidden permissions

Extensions, connected apps and site permissions pile up quietly. This fifteen minute audit removes what you do not use, trims risky permissions and moves your passwords to where they belong.

High impact5 min

Compare

3 comparisons in this section

Interactive comparison

Secure messengers compared

Five messengers scored from 1 to 5 on what protects the content and context of your conversations; higher is always better.

What matters to you?

Encryption by defaultOne-to-one and group chats end-to-end encrypted without changing settings.

Normal

Metadata restraintHow little the operator stores about who talks to whom, when and from where.

Normal

Sign-up privacyHow little identity you must hand over, and how well your number is hidden.

Normal

Backup protectionWhether backups stay end-to-end encrypted with a key only you hold.

Normal

TransparencyOpen-source apps and server code that outsiders can review.

Normal

Contact verificationA practical way to confirm the keys belong to the right person.

Normal

ReachHow easy it is to get contacts on board across platforms.

Normal

Best for private conversations where you want strong defaults and minimal data kept.
- End-to-end encryption everywhere by default
- Keeps very little metadata
- Apps and server are open source
- Phone number required to register
- Some contacts may not use it yet
Best for people and teams who do not want to link a phone number or email address.
- No phone number or email needed
- Open-source apps, Swiss servers
- Clear verification levels
- Paid app
- Threema Safe does not back up chats
- Fewer contacts to talk to
Best when everyone you need to reach already uses it.
- Signal protocol encryption by default
- Optional end-to-end encrypted backups
- Very easy to reach contacts
- Owned by Meta, collects more metadata
- Closed source
- Backup encryption is opt-in
Best for households and teams that use Apple devices only.
- End-to-end encrypted between Apple devices
- Contact Key Verification
- Built in, nothing to install
- Apple devices only, SMS or RCS fallback
- iCloud Backup holds the key without Advanced Data Protection
- Closed source
Best for public channels and large communities, not for confidential chats.
- Feature-rich groups and channels
- Open-source apps
- Secret chats available for one-to-one
- Not end-to-end encrypted by default
- Groups never end-to-end encrypted
- Chats stored on Telegram's servers

All scores in a table

Criterion	Signal	Threema	WhatsApp	iMessage	Telegram
Encryption by default
Metadata restraint
Sign-up privacy
Backup protection
Transparency
Contact verification
Reach

Editorial assessment as of 31 October 2026. Scores from 1 to 5, higher is better. Your weights only change the order. Read the full comparison

Interactive comparison

Password managers compared

Five password managers scored from 1 to 5 on transparency, passkeys, sharing, platforms, recovery and control; higher is always better.

What matters to you?

Open code and auditsPublished source code and independent audit reports.

Normal

Passkey supportStoring and using passkeys across all your devices.

Normal

Sharing for teamsShared vaults, roles and central administration.

Normal

Platform coverageDesktop, mobile and browser support across operating systems.

Normal

Recovery and emergency accessWays back in after a lost password, and access for a trusted person.

Normal

Control over your dataSelf-hosting or local storage instead of a vendor cloud.

Normal

Best for people and teams who want open code, every platform and the option to self-host.
- Open source with published audits
- Self-hosting possible
- Free tier
- Emergency access needs premium
- Self-hosting makes patching and backups your job
Best for families and small teams who value polish and administration.
- Secret Key protects against password guessing on stolen data
- Strong sharing and admin features
- Publishes audit results
- Closed source
- Paid only
- No self-hosting
Best for people who want encrypted metadata and already use Proton services.
- Encrypts usernames and web addresses too
- Open source and audited
- Free tier
- Cloud only, no self-hosting
- Tied to your Proton account
Best for individuals who want no cloud account at all and can manage their own sync.
- Local file, no vendor account
- Open source, independently reviewed
- Free
- No official mobile app
- No recovery if the password is lost
- Sharing only by sharing a file
Best for households that use Apple devices only.
- Built in and free
- End-to-end encrypted iCloud Keychain
- Passkeys and verification codes
- Closed source
- Apple devices and Windows only
- Limited team features

All scores in a table

Criterion	Bitwarden	1Password	Proton Pass	KeePassXC	Apple Passwords
Open code and audits
Passkey support
Sharing for teams
Platform coverage
Recovery and emergency access
Control over your data

Editorial assessment as of 31 October 2026. Scores from 1 to 5, higher is better. Your weights only change the order. Read the full comparison

Interactive comparison

Browsers compared for security

Five desktop browsers scored from 1 to 5 on updates, isolation, privacy defaults, blocking, warnings, vendor data and management; higher is always better.

What matters to you?

Update speedHow quickly security fixes reach users.

Normal

IsolationSandboxing and documented separation of sites into their own processes.

Normal

Tracking protection by defaultWhat is blocked without changing any settings.

Normal

Content blockingHow capable blocking tools are, built in or through extensions.

Normal

Malicious site warningsProtection against known phishing and malware sites.

Normal

Vendor data restraintHow little the vendor collects about your browsing by default.

Normal

Enterprise managementPolicies and central administration for organisations.

Normal

Best for people who want Chromium compatibility with strong privacy defaults.
- Shields block trackers and ads by default
- Hosts four Manifest V2 blockers
- Chromium site isolation
- Extra features such as a wallet add code
- Fewer management tools of its own
Best for people who want strong privacy defaults and the most capable content blockers.
- Total Cookie Protection by default
- Keeps Manifest V2 and blocking requests
- Extended Support Release for businesses
- Usage data collection on by default
- Fewer management tools than Chrome or Edge
Best for organisations that want fast updates and deep central management.
- Fast release and security update cycle
- Strict site isolation
- Extensive enterprise policies
- Weak tracking protection by default
- Manifest V2 fully removed
- Close ties to Google accounts and advertising
Best for Windows organisations that manage devices with Microsoft tools.
- Chromium security engineering
- Balanced tracking prevention by default
- Group Policy and Intune management
- Many online features tied to Microsoft services
- Manifest V2 phase-out still under way
Best for people who use Apple devices only and want good defaults without effort.
- Intelligent Tracking Prevention on by default
- Efficient and built in
- Extensions reviewed through the App Store
- Updates tied to system updates
- Smaller extension choice
- Apple devices only

All scores in a table

Criterion	Brave	Firefox	Chrome	Edge	Safari
Update speed
Isolation
Tracking protection by default
Content blocking
Malicious site warnings
Vendor data restraint
Enterprise management

Editorial assessment as of 31 October 2026. Scores from 1 to 5, higher is better. Your weights only change the order. Read the full comparison

Tools for this section

More sections