The Best Bubblewrap Alternatives in 2026

Use a YubiKey challenge-response at system startup to open a LUKS-encrypted disk volume.

Follow this evolving guide for steps and configuration examples to secure a Linux server.

Add face-based authentication to Linux using Howdy, which works with built-in infrared emitters and cameras.

Hear when a computer sends requests to Google with Googerteller, which provides audible feedback about browsing activity.

Configure Ubuntu’s Uncomplicated Firewall through Gufw, a graphical firewall interface.

Set USB device authorization rules with USBGuard, a framework for controlling device access.

This community guide collects recommendations for improving security and privacy on macOS.

Block ads in Safari on Apple devices with wBlock, an open-source blocker that includes lists, scripts, and styles.

Process macOS and iOS disk images or live machines with mac_apt to extract forensic data and metadata.

Mistborn provides a self-hosted virtual private cloud with a web interface, firewall, WireGuard VPN, Pi-hole, DNSCrypt, and IP filtering.

This repository contains the source code for the Freenet website, including its main Hugo-generated site.

Export personal data with Surfer Protocol, an open-source framework with a desktop app and Python SDK.

Edit and switch between hosts files on macOS with Gas Mask, a hosts file manager.

Authorize binary execution and file access on macOS with Santa, a system extension and policy tool.

Manage proxy connections on macOS with ClashMac, a native client that includes traffic routing views.

uBlock Origin Lite by Raymond Hill is an App Store content blocker for iPhone, iPad and Mac with declarative filtering.

Free, open-source ad blocker for Safari on iPhone, iPad and Mac.

Stay for Safari lists userscripts and ad blocking among its features, with ratings and reviews available on the App Store.

Follow this Linux hardening guide for steps to improve the security of a Linux system.

Shufflecake is a Linux tool for creating multiple hidden filesystems with plausible deniability.

Use the WhoAmI Project to configure enhanced privacy and anonymity for Debian- or Arch-based Linux distributions.

Collision checks file hashes on Linux, with installation available through Flathub.

Tomb makes strong encryption easier for everyday use by creating locked folders that can be transported and hidden in a filesystem.

This guide collects Linux kernel and userland settings for improving security and usability, targeting Arch Linux and potentially other distributions.