Security tools are the category where free is most often a trap. A free password manager has to monetise somehow, and the usual answers are advertising, data sales, or a paid tier so restricted that it exists only to upsell you. The tools worth using here are either open source with a clear business model, or paid products from companies whose only revenue is the subscription. Two habits matter more than any product choice: use a unique password everywhere via a manager, and enable two-factor authentication with an app rather than SMS. Beyond that, the right tools depend on your threat model. If you are protecting a small business, backups and access control matter more than a VPN. If you are protecting yourself from a specific adversary, the tool matters less than your behaviour.
1Password
The password manager people actually enjoy using.
Bitwarden
Open-source password manager with a genuinely free tier.
Cloudflare Zero Trust
Put your internal tools behind identity checks for free.
Ente Auth
Two-factor codes with an end-to-end encrypted backup.
Have I Been Pwned
Check whether your address is already in a breach dump.
KeePassXC
A password database that is just a file.
Mullvad VPN
Privacy-focused VPN with no accounts and no logs.
Proton Mail
Encrypted email from a company that cannot read your inbox.
Proton VPN
The free VPN that does not sell your traffic.
Tailscale
WireGuard mesh networking with zero configuration.
KnowBe4
Phishing simulations and security awareness training for staff.
Kandji
Apple device management with compliance checks built in.
Backblaze
Unlimited cloud backup for laptops, desktops, and external drives.
Vanta
Compliance automation for SOC 2, ISO 27001, and HIPAA.
YubiKey
Hardware security keys for phishing-resistant two-factor login.
No tools in this category match that filter.
Guides in Security & Privacy
All guides →Your SaaS Vendor Is Not Your Backup, and 3-2-1 Does Not Mean What You Think
Vendors protect against disk failure, not against you. What is actually backed up when you assume the vendor handles it, and the minimum a small team should run instead.
Read →Single Sign-On for a Small Team Is Mostly Theater
SSO is sold as a security upgrade. Below a certain size it adds an outage risk and a break-glass procedure without removing the thing that actually leaks access, which is a shared password nobody rotated.
Read →Two-Factor Apps Compared: The Real Risk Is Losing the Phone
Most comparisons of authenticator apps rank them by interface. The thing that actually costs people accounts is the recovery story, and almost nobody checks it before they need it.
Read →