# Privacy Toolkit - Tool Candidates

This is our working list of privacy tools to include in the toolkit.

## 🎯 Priority 1 (Core Privacy Tools)
- [x] **Dangerzone** - Document sanitization ✅
- [ ] **mat2** - Metadata removal
- [ ] **Signal Desktop** - Secure messaging
- [ ] **Tor Browser** - Anonymous browsing
- [ ] **BleachBit** - Secure deletion
- [ ] **firejail** - App sandboxing

## 🛡️ Document Sanitization
- [x] **Dangerzone** - PDF/Office document sanitizer using container isolation ✅
- [ ] **ExifCleaner** - Metadata removal from images/PDFs/videos
- [ ] **mat2** - Metadata Anonymization Toolkit

## 🔐 Encryption & Secure Storage
- [x] **VeraCrypt** - Full disk encryption and encrypted containers ✅
- [x] **age** - Modern file encryption ✅
- [x] **Cryptomator** - Client-side cloud storage encryption ✅

## 📂 Secure File Transfer
- [x] **croc** - Secure, fast P2P file transfer ✅

## 📡 Secure Communication
- [ ] **Signal Desktop** - E2E encrypted messaging
- [ ] **SimpleX** - E2E encrypted messaging without identifiers (documented in PAI)
- [ ] **Jami** - P2P encrypted video/audio calls

## 🌐 Anonymity & Network Privacy
- [ ] **Tor Browser** - Anonymous web browsing
- [ ] **ProtonVPN** - Privacy-focused VPN (already installed)
- [ ] **OnionShare** - Anonymous file sharing over Tor

## 🔍 Metadata & Privacy Analysis
- [ ] **ExifTool** - View/edit metadata in files
- [ ] **Sherlock** - Username enumeration across platforms

## 🗑️ Secure Deletion
- [ ] **BleachBit** - Secure file deletion and system cleaning
- [ ] **shred** - Overwrite files securely (already installed)

## 🔒 Password & Secret Management
- [ ] **KeePassXC** - Offline password manager (already in use)
- [ ] **Bitwarden** - Open source password manager (self-hostable)

## 📧 Email Privacy
- [ ] **Thunderbird + Enigmail** - PGP email encryption
- [ ] **ProtonMail Bridge** - Use ProtonMail with desktop clients

## 🛡️ System Hardening
- [ ] **firejail** - Application sandboxing
- [ ] **AppArmor** - Mandatory Access Control (built into Debian)

## 🌐 DNS Privacy
- [ ] **dnscrypt-proxy** - Encrypted DNS queries
- [ ] **Unbound** - Validating DNS resolver

## 📱 Mobile Companion Tools
- [ ] **scrcpy** - Control Android via ADB

---

**Last Updated:** 2025-11-12
**Tools Completed:** 5/30+ (Dangerzone, croc, age, VeraCrypt, Cryptomator)
**Priority Tools:** 1/6

---

## 📦 APT-Based Tools (Quick Install)

Many privacy tools are available directly via apt! Run:
```bash
./install-apt-tools.sh
```

**APT Tools Included:**
- [x] **keepassxc** - Password manager ✅
- [x] **age** - File encryption ✅  
- [x] **mat2** - Metadata removal ✅
- [x] **exiftool** - EXIF metadata viewer/editor ✅
- [x] **bleachbit** - Secure deletion ✅
- [x] **firejail** - App sandboxing ✅
- [x] **tor** - Anonymity network ✅
- [x] **torsocks** - Torify applications ✅
- [x] **onionshare** - Anonymous file sharing ✅
- [x] **sherlock** - Username enumeration ✅

**Note**: OnionShare 2.6.3 in Debian is **up to date** with latest release! 🎉

See [APT-TOOLS-VERSIONS.md](APT-TOOLS-VERSIONS.md) for version details.