Raivo is “source available” actually. No real way to verify if it actually running the code available either. There is also no legal way to fork it from my understanding.
For the moment I’ve settled on 2FAS as the best iOS replacement. I’ve used Tofu, but its inability to export is a dealbreaker, and the lack of updates is troubling.
So I tend to agree with the PrivacyGuides.org Team on this one. I’ll break it down slightly differently though. Brave isn’t BAD per se, but I strongly prefer not using a Chromium based browser unless it’s 100% necessary.
Most private and secure but frustrating to use: Tor Browser
Private and secure, still frustrating for daily use: Mullvad Browser
Able to be private and secure, defaults aren’t perfect. Firefox + uBlock Origin
Private and secure by default, potentially slowly updates and a smaller team might impact security. LibreWolf
Chromium Based Browser with good Security and Privacy, defaults aren’t perfect: Brave
Chromium based browser with good privacy, but potentially slow updates and a smaller team. Ungoogled Chromium + uBlock Origin
I don’t feel like leaving the PG community at the moment, but here are a few suggestions that come to mind after reading your list.
Search: SearXNG
MacOS Firewall: Lulu
DNS: NextDNS
Email Alias: AnonAddy
2FA: Remove Ravio (sold to sketchy app maker MobiMe). I consider this compromised until proven otherwise.
YT Proxies: Yattee (iOS App)
File Encryption: Cryptomator (File encryption app, optimized for the cloud)
Notes: Joplin
Podcast: Podverse
Any reason for not just using PrivacyGuides.org instead? I like seeing a lot of variety, but PrivacyGuides seems like the cream of the crop in my opinion.
I find Brave’s dependence on Chromium (and therefore Google) to be troubling. They don’t have the engineering team to keep up with Google as they continue backtracking on the “Don’t Be Evil” motto.
For the same reason, I prefer Brave Search over DuckDuckGo. DDG relies almost entirely on Bing for its results. In comparison, Brave Search has a completely independent search index and does its own web crawling.
I realize there are exceptions to this, and you might fall into that category, but…
Most of the time when websites say they require a particular app, they actually don’t. Like if a website says to use Google Authenticator, you can actually use any TOTP app. There is even a workaround for using Steam’s TOTP without their app.
Don’t be scared to just try importing the QR or text based code into another app when you are signing up for a service. A functioning website won’t let you progress to the next screen without having the proper code in your app.
Edit: After digging into 2FAS, I think it is now my top choice. Seems like more of a drop in replacement for Raivo. https://2fas.com/
My second choice is (as of this edit) Owky. I’ve not seen anyone talking about it, but it’s FOSS and has the ability to export your TOTP codes.
Im a little worried about it not being maintained though, since it’s a single developer.
https://apps.apple.com/us/app/owky-two-factor-authenticator/id1602245257
Other options I’ve considered:
Tofu Authenticator. Unfortunately it’s basic though and lacks the ability to export.
ente Authenticator. Account required, and I’m a little undecided on the company. Might be a serious option though.
For iOS:
Fully FOSS:
FOSS, but with a paid tier:
Paid Only, but Open Source:
Privacy Friendly, but not FOSS apps:
Edit: Added ente Photos, Mullvad, IVPN, Tutanota, Standard Notes, Notesnook, and Berty
Look what fell off a truck in Base64.
spoiler
bWFnbmV0Oj94dD11cm46YnRpaDozYzIxZjVmM2E4ZTRmZTIzMTk2MTdjOWRmNjU0OGIwMmVjYWIy MGFjJmRuPVRoZStQcml2YWN5LCtTZWN1cml0eSthbmQrT1NJTlQrU2hvdystK0VwKzAwMS0zMDUm dHI9dWRwOi8vdHJhY2tlci5vcGVuYml0dG9ycmVudC5jb206ODAmdHI9dWRwOi8vdHJhY2tlci5v cGVudHJhY2tyLm9yZzoxMzM3L2Fubm91bmNl