Hello,

What are essential apps (and where to get them if not on Aurora or Playstore)? For a moderately tech savvy person who wants better privacy and security?

Is there a link to a list someone already created? (I don't see any in archives).

Signal, Bromite, a VPN, Proton, etc...

    Shelter to separate and better manage work profile apps.

    Main profile: Aegis, Bitwarden, Brave, Ente, Etar, FairEmail, Gboard, Magic Earth, NewPipe, OsmAnd~ (on F-Droid), Orbot (enable Kindness Mode to help censored users!), GMaps WV, Proton Drive, Proton VPN, Signal, SimpleLogin, Standard Notes, Tuta, Obtainium, Yubico Authenticator (if you have Yubikeys, recommended).

    Closed source apps are in work profile and copies of sensitive apps (e.g. Proton apps to update via Play Store since it's most secure). There has been much talk of F-Droid being insecure, make of that what you will. Note that you'll need to activate a VPN app in your main profile, work profile, and Private Space. Privacy Guides, Techlore, and The New Oil have excellent further recommendations.

    Proton VPN, Play Store, Banking and financial apps in Private Space.

    • K8y likes this.
    • Edited

    I'd follow the privacyguides recommendations where you need them. Otherwise just system apps and features (like Vanadium, user profiles, contact/storage scopes, duress pin etc.).

    In the end you have to create and update your threat model and use this to make informed decisions for your individual situations. Nobody can tell you what's good and right (except maybe what's definitely bad, like abandonware such as Bromite).

    For me personally, my most important apps are Mullvad, Bitwarden, Aegis, Molly and Tuta. I can give you lots of reasons why that's true for me. As long as you can do the same for your choice, you're on the right track.

      I just use Brave.

      • K8y likes this.

      freezet Its still russian based software, which they try to hide most of the time

      I was under the impression that was in the past :)

      In 2009, a group of software developers from Ascensio System SIA (Latvian-based) and New Communication Technologies (Russian-based) launched a project called TeamLab, a platform for internal team collaboration. [Source]

      freezet ah, so we automatically assume it's malicious because eViL RuZzia. Are you avoiding US based software too? You know, because the NSA is trying to backdoor everything and their grandma?
      If you can find any evidence or even hints of a backdoor, I'm all ears. Having selfhosted my own OnlyOffice instance, I somehow couldn't find any suspicious connections. Android version also seems to talk to my instance and Firebase only.

        DeletedUser87 for me ( as in this is my opinion ) its just enough of a backdoor as soon as an malicious update rolls out and my files get encrypted , same for 7zip , such world wide spread software is just one update away from total destruction :p

          N1b Vanadium is more secure than Brave but Brave is more private than Vanadium. GrapheneOS recommends using Brave instead of Vanadium for most users. You can also get a rough idea of how their privacy protection compares here (albeit GrapheneOS has criticized their metrics): https://privacytests.org/android

            Probably9857 probably (pun intended) a typo. I guess he meant to say Firefox (and as such every Gecko-based Android browser). So the sentence goes: GrapheneOS recommends using Brave instead of Firefox for most users.

            K8y Is there a link to a list someone already created?

            Yes, https://alternativeto.net/lists/35462/grapheneos-appverse/ . I find it very great.

            I recommend the use of Vanadium, DuckDuckGo, Bitwarden, ente, Notesnook, ProtonMail and Proton Calendar. These are the steps that can make some of the biggest impacts for your privacy in my opinion (also privacy.com if you are in the US but idk how easy it is to use).
            Also Organic Maps when you can, or Google Maps logged out if needed.
            And change your DNS resolver.
            Also addy.io.
            And use Libretube or Grayjay.

            And it is important to try to diminish the quantity of infos Google has over you (get your contacts put of Google)

            • TGOS replied to this.
            • K8y likes this.
              • Edited

              Necessary? There is very little that is absolutely necessary. I like to think in terms of what can I do without and I only have a handful of additions. Some are related to usability of the packaged app (Fossify SMS, FM, VR, Music), Proton Apps, package managers to pull them in and keep them updated. The biggest app is navigation. The rest can be done at home on my laptop.

              Seriously... for me less is more.