Privacy Tools: Tor, Tails, GrapheneOS and the Rest, Matched to Your Threat Model

Fifteen tools turn up whenever people list privacy software, and each guards one layer. Tor and I2P hide who you are talking to on the network. Tails, Qubes OS, Whonix and GrapheneOS harden the operating system so one compromised app or one mistake leaks less. LUKS and VeraCrypt protect data on a disk that is lost, stolen or seized. Signal, Session, SimpleX, Matrix and GnuPG protect messages. Monero hides who paid whom. coreboot replaces the closed firmware that runs before your operating system.

The right set depends on who is trying to watch you. This guide maps each tool to the threat it answers and to the friction it costs. Versions and dates were checked against the projects' own pages on 10 November 2026.

The threat-model ladder

A threat model is three questions: who wants your data, what can they do, and what happens if they get it. Four rungs cover most people.

Two things follow from the table. Levels are cumulative, so a level 3 user still needs everything at level 2. And the higher rungs fail mostly through behaviour: a level 4 toolset used by someone who logs into a personal account from it gives level 1 protection.

For level 3, check your own devices first. Someone with physical access can install monitoring software, and our stalkerware detection guide covers how to spot it.

All fifteen tools compared

Network: Tor and I2P

Tor routes your traffic through three volunteer relays so that no single relay knows both who you are and where you are going. The routing itself is covered in how Tor works. The practical form is Tor Browser, available for desktop and Android. Use it as a separate browser for things you want separated from your identity, and keep your everyday browser for logged-in accounts. If you want to know where Tor fits next to a VPN, our VPN explainer and best VPN ranking cover the trade.

I2P is a separate anonymity network designed for services that live inside it. Where Tor is mostly used to reach the ordinary web anonymously, I2P is built for hidden services, file sharing and messaging between I2P participants, and both ends of a connection are hidden by design. The current Java router is version 2.14.1. For most people Tor is the better fit, because the sites they want are on the regular web; I2P earns its place when the people you are communicating with are already on it. The broader context of hidden services is in what is the dark web.

Operating system: Tails, Qubes, Whonix, GrapheneOS

A network tool cannot help if the operating system leaks your real address or a malicious file takes over the machine. These four answer that.

For a side-by-side of the three desktop options with hardware needs and worked examples, see Tails vs Qubes vs Whonix.

Tails is a live USB system that routes everything through Tor and forgets the session at shutdown; how it compares with other dark-web tooling is in what is the dark web. The Tor Project and Tails merged operations on 26 September 2024, so Tails is now a Tor Project product. The current release is Tails 7.16 (30 October 2026). It needs a 64-bit x86 processor, an 8 GB USB stick and ideally 3 GB of RAM, and it does not run on Macs with Apple processors. Its own warnings page names its limits: it cannot defend against compromised BIOS or firmware or a hardware keylogger, and using one session for two identities lets an observer link them. The fix for the second is to restart Tails between activities.

Qubes OS isolates activities in separate virtual machines ("qubes") on the Xen hypervisor: one for banking, one for work, a disposable one for opening an untrusted attachment. A compromise in one stays in that one. The current release is 4.3.2 (2 October 2026). Hardware is the barrier. The minimum is a 64-bit CPU with Intel VT-x with EPT or AMD-V with RVI, plus Intel VT-d or AMD-Vi, 6 GB of RAM and 32 GB of disk; the recommendation is 16 GB of RAM, 128 GB on a fast SSD, and an Intel processor.

Whonix splits a system into two virtual machines. The Gateway runs Tor; the Workstation runs your applications on an isolated network that can only reach the Gateway. Because the Workstation never learns your real IP address, even malware with root inside it cannot report it. Whonix runs on KVM and VirtualBox, and Qubes ships it as Qubes-Whonix.

GrapheneOS is a hardened Android build. It runs on Google Pixel phones only: as of November 2026 the supported list runs from the Pixel 6 to the Pixel 10 series, including the 10a, Fold and Tablet. The Pixel 6 and 6 Pro left Google's support window in October 2026, and GrapheneOS updates for a Pixel typically end shortly after that, so buy a Pixel 8 or newer. The project says most other phones have hardware and firmware that cannot be made reasonably secure. Installation, app compatibility and device choice are in our GrapheneOS guide; if you are keeping stock iOS or Android, the settings to change are in phone privacy hardening.

Disk: LUKS and VeraCrypt

Disk encryption protects data on a device that is powered off. Once you unlock it and log in, the data is readable to anything running on the machine, which is why disk encryption sits at level 2 and does nothing against level 3 malware.

LUKS is the standard Linux disk encryption format, managed by the cryptsetup utility (current stable release 2.8.8). Most Linux installers offer it as a checkbox. It stores the setup in the partition header and supports several passphrases per volume, so you can add a recovery passphrase and revoke it later. On macOS, FileVault does the same job. On Windows, BitLocker (Pro, Enterprise and Education) or Device Encryption (also on Home, on devices that meet its prerequisites) does, and signing in with a Microsoft account attaches the recovery key to that account.

VeraCrypt is cross-platform: version 1.26.31 (2 November 2026) runs on Windows, macOS 12 and later, and Linux. It encrypts system drives, whole partitions or file containers, so it suits an external drive you plug into different computers. Its distinctive feature is the hidden volume: a second encrypted volume inside the free space of an outer one, with headers that look like random data. If someone forces you to unlock, you give the outer password. The documentation is candid that the deniability holds only if you follow the wizard exactly, use a substantially different password for the hidden volume, and never write to the outer volume without enabling hidden-volume protection, since outer-volume writes can overwrite hidden data.

Messages and email: Signal, Session, SimpleX, Matrix, GnuPG

All five encrypt message content; they differ in what the servers learn about who talks to whom. How end-to-end encryption works is in end-to-end encryption explained, and the full head-to-head is in the most private messenger. The short version: Signal uses the Signal Protocol with forward secrecy and keeps little server data, with usernames (since February 2024) hiding your phone number from contacts; standard sign-up still uses a number. Since September 2026 an Android beta lets new users register without a number for a one-off $2.99 Google Play payment. Session needs no phone number and routes through an onion network, but its current protocol has no forward secrecy; its Swiss foundation has specified a V2 with forward secrecy and post-quantum encryption that has not yet shipped in the apps. SimpleX has no user identifiers at all. Matrix is federated and self-hostable, at the cost of metadata stored on homeservers.

GnuPG is the odd one out: a general encryption and signing tool rather than a messenger. The current release is 2.5.24 (23 September 2026). Its best use today is signing and verifying files, such as checking that a Tails or VeraCrypt download is genuine. For email it encrypts the body and attachments and leaves the sender, recipients and routing headers readable, and with no forward secrecy a leaked private key exposes every past message encrypted to it. If you want private email, our secure email ranking covers providers that handle the keys for you.

Money: Monero

Monero hides sender, receiver and amount by default (ring signatures, stealth addresses and RingCT; the mechanics and the Bitcoin comparison are in our blockchain privacy guide).

The cost is access. Binance delisted Monero on 20 February 2024. Kraken halted XMR trading and deposits for customers in the European Economic Area on 31 October 2024. Article 79 of the EU's Anti-Money Laundering Regulation (2024/1624), which applies from 10 July 2027, bars crypto-asset service providers from keeping accounts that allow transactions to be obfuscated, including through anonymity-enhancing coins. The rule binds providers, so holding Monero stays legal for individuals in the EU, while getting in and out through regulated venues keeps narrowing.

Firmware: coreboot

Before your operating system loads, firmware initializes the hardware. On most computers that firmware is closed vendor code with full control of the machine. coreboot replaces it with open source firmware that loads a payload (a bootloader or another firmware interface) and gets out of the way.

Support is the limit. coreboot runs on a published list of boards, including Lenovo ThinkPads up to the Skylake and Kaby Lake generations, System76 and Star Labs laptops, Purism Librem machines, community ports for Framework Laptop 12 and 13 models, and a range of desktop and server boards. System76, Purism, Star Labs and Protectli sell machines with coreboot preinstalled, and Chromebooks ship with it, which is the safe route; Framework is not among the vendors that ship it, and flashing a laptop yourself can brick it. On Intel platforms that use it, coreboot integrates Intel's Firmware Support Package, a binary Intel publishes, so "open firmware" there means open coreboot code around some vendor code. coreboot answers a level 4 concern (a firmware implant), and Tails' own documentation notes that no operating system can defend against one.

Failure modes

Most of the failures below come from how a tool is used.

• Identity bleed. Logging into a personal account over Tor, reusing a username or writing style, or using one Tails session for two personas links them. Separate identities need separate sessions, and ideally separate devices.
• Metadata. Encryption hides content. Who you message, when, how often and from which network remain visible to some party in almost every tool here: the Signal sign-up number, the IP addresses Session and SimpleX relays can see without Tor, email headers under GnuPG, the exchange that sold you Monero.
• Browser fingerprinting. A hidden IP address does not help if your browser is unique. Tor Browser makes users look alike; adding extensions or resizing the window to an unusual size undoes that. For your everyday browser, see browser hardening.
• Matrix homeservers. Room names, topics and avatars are stored as plaintext state events, every server with a participant keeps a copy of the room, and the servers know membership because they deliver the messages. Element has an experimental fix (encrypted state events, MSC3414, now MSC4362) behind a labs flag; it leaves membership readable to servers even when enabled.
• GnuPG usability. Key verification, expiry, revocation and email client plugins are where users go wrong: a message sent unencrypted by mistake, or a key nobody verified. Use it for signatures and file encryption, and use a messenger for conversations.
• Session's design trade. Session removed the forward secrecy it inherited from the Signal Protocol because it broke multi-device sync. Until V2 ships, a stolen long-term key exposes past messages. In October 2024 stewardship passed from the Australian OPTF to the Swiss Session Technology Foundation, after Australian Federal Police visited an employee's home. Development paused in early 2026 for lack of funds and resumed by mid 2026 with a team of two or three developers.
• Monero off-ramps. Delistings push users toward smaller, less regulated venues, which carry their own counterparty and legal risk.
• coreboot hardware. A laptop on the support list in one revision may be off it in the next; check the exact board before buying.
• Firmware and hardware. Tails and Qubes cannot defend against a compromised BIOS, an implanted keylogger or an evil maid with physical access. Keep sensitive hardware in your possession.

Verdict

Most people need three things from this list: Signal for messages and calls, full-disk encryption (LUKS on Linux, the built-in option elsewhere, VeraCrypt for external drives), and Tor Browser for the searches and sites you want kept off your network and ad profile. Add a password manager (our guide) and a hardened browser and you have covered levels 1 and 2.

If you face a specific person or organization (level 3), add GrapheneOS on a Pixel and Tails for sensitive sessions, and keep identities separate. If a state is the adversary (level 4), Qubes with Whonix, SimpleX, Tor bridges, coreboot hardware and Monero each close a gap, and the discipline to use them consistently matters more than any one of them. I2P, Session, Matrix and GnuPG are useful in specific situations: I2P when your counterparts are on it, Session when a phone number is unacceptable and you accept the forward-secrecy gap, Matrix when you need self-hosted group chat, GnuPG for verifying downloads.