Open Source Security & Privacy Tools Projects

Self-hosted web app to manage your Two-Factor Authentication (2FA) accounts and generate TOTP and HOTP codes from any browser.

Self-hosted, GDPR-compliant CAPTCHA alternative that stops spam with privacy-friendly proof-of-work challenges.

Network-wide DNS-based ad and tracker blocker with parental controls, DNS rewrites, and detailed query logging.

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

Self-hosted reverse proxy that blocks AI scraper bots with a lightweight proof-of-work challenge.

Open source identity provider and SSO solution that replaces Auth0 and Okta with a self-hostable, flexible authentication platform.

Bitwarden infrastructure/backend (API, database, Docker, etc).

Open-source, end-to-end encrypted cloud for photos, videos, and 2FA secrets — a privacy-first Google Photos and iCloud Photos alternative.

Cross-platform desktop app that removes EXIF and hidden metadata from 90+ file formats before sharing.

Headscale is an open-source, self-hosted implementation of the Tailscale control server. Build your own private WireGuard mesh VPN without a vendor lock-in.

KeePassXC is a cross-platform, community-driven port of KeePass Password Safe. Store credentials locally in an encrypted database, with no cloud required and full data control.

Open platform for governing execution authority at decision surfaces across agents, AI systems, and enterprise workflows.

Self-hostable, zero-trust overlay network that combines a WireGuard-based mesh VPN with SSO, MFA, and granular access controls.

Simple OTP app for desktop and mobile.

Open-source two-party VPN that cryptographically prevents both Obscura and its exit hop from seeing your traffic.

Free, open-source cross-platform TOTP authenticator with self-hostable sync backend, built with Flutter.

OpenVPN is an open source VPN daemon

Self-hosted identity-aware reverse proxy that securely exposes private services via encrypted tunnels without opening inbound ports.

Open-source, security-first password manager designed for teams. End-to-end encryption, granular access control, and self-hostable.

Network-wide DNS-based ad blocking that protects all devices on your network, including Smart TVs and IoT devices.

A self-hosted tunneling tool — like ngrok, but on your own domain. Expose local dev servers through subdomains on your VPS.

Local-first, end-to-end encrypted password manager with passkeys, TOTP codes and native autofill. No account required, no telemetry.

Android app that removes EXIF metadata from photos via the share menu before sharing.

Toofer is a local-first, web-based two-factor authentication app that stores your TOTP secrets directly in your browser. Private, simple, fully offline.

Fast, secure, light-weight web-app to generate TOTP and HOTP tokens.