This piece is the annual look at the broader privacy tools landscape in mid-2026, intended as a snapshot for users orienting themselves to the current state of the market.
The categories that matter in 2026
Consumer privacy tools have continued to mature. The categories that matter for most users:
VPN services: well-developed market, multiple credible providers, consolidation continuing. Covered separately in the annual VPN report.
Password managers: well-developed, three credible incumbents (1Password, Bitwarden, Proton Pass) plus various alternatives. Apple Passwords now sufficient for Apple-ecosystem users.
Encrypted email: handful of credible providers (ProtonMail, Tutanota/Tuta, Mailbox.org, Posteo, StartMail) plus various smaller options. Skiff’s 2024 shutdown was a reminder of the structural risks.
Encrypted cloud storage: ProtonDrive, Sync.com, Tresorit dominate; Internxt, Cryptee, and others fill specific niches.
Email aliasing: SimpleLogin (Proton-owned), addy.io (independent), Firefox Relay, Apple Hide My Email, DuckDuckGo Email Protection.
Privacy hardware: YubiKey and Nitrokey for security keys; Pixel + GrapheneOS for phones; small NAS for self-hosting.
DNS services: NextDNS, ControlD, AdGuard DNS for hosted; Pi-hole and AdGuard Home for self-hosted; Cloudflare 1.1.1.1 and Quad9 for free public.
Privacy-focused browsers: Mullvad Browser, LibreWolf, Firefox-with-Arkenfox, DuckDuckGo Browser, Brave (with reservations).
Mesh networking: Tailscale dominates; Headscale, ZeroTier, Netbird as alternatives.
Data removal services: DeleteMe, Incogni, Optery, PrivacyDuck, Kanary.
Trends across categories
Consolidation has continued. The VPN market is the most concentrated; password managers and encrypted email are next. Smaller categories (DNS, mesh networking, browsers) remain more fragmented.
Subscription bundle pricing is pervasive. Proton Unlimited, Nord Security’s various bundles, and similar packages encourage users to commit to broader product ecosystems.
Open source remains a significant differentiator. Products with open-source clients (Bitwarden, Mullvad clients, Firefox-based browsers) have continued to gain market share among privacy-aware users.
Audit history matters more. Users have become more sophisticated about asking for independent verification; companies that audit regularly have a real competitive advantage.
The corporate independence story has become more important. After the Skiff shutdown and the various Kape/Nord consolidations, users are paying more attention to corporate ownership structure.
What is healthy
Multiple credible providers exist in each major category. Users have actual choice, not just brand variation within a single corporate parent.
Audit cadence has increased across the industry. Privacy-focused companies that take audits seriously now have a genuine advantage.
The free tier of legitimate privacy tools is genuinely useful. ProtonMail Free, Bitwarden Free, Cloudflare 1.1.1.1, ProtonVPN Free, and others provide meaningful baseline privacy without payment.
Education resources have improved. PrivacyGuides, RestorePrivacy, and the broader privacy-tools community produce better, more nuanced guidance than was available years ago.
What is concerning
Consolidation reduces competitive pressure. The Kape and Nord consolidations have not produced obvious user-facing harm yet, but the structural concern remains.
Some venture-funded privacy startups are not aligned with long-term privacy commitments. The Skiff acquisition-and-shutdown pattern is likely to recur with other startups.
The “free” VPN and “free” privacy tool ecosystem remains substantially populated by data-collection operations masquerading as privacy products. Casual users have difficulty distinguishing legitimate from sketchy options.
Privacy regulation has not kept pace with technology. The major privacy laws (GDPR, CCPA, etc.) are years behind the actual practices of major data collectors.
The barrier between “privacy tools” and “consumer convenience” remains high. For the typical non-technical user, adopting a comprehensive privacy stack still requires significant time investment and willingness to accept some friction.
Where to focus attention
Users new to privacy tools who want to start somewhere meaningful should focus on:
Email: leave Gmail. ProtonMail or Tutanota are the credible options.
Password manager: get one. Bitwarden Premium at $10/year or 1Password Individual at $36/year.
VPN: use one when on untrusted networks. Mullvad, ProtonVPN, or NordVPN are all credible.
DNS: configure encrypted DNS at the OS level. Cloudflare 1.1.1.1 if you want free; NextDNS if you want configuration.
Browser: use Firefox or a privacy-focused alternative. Configure aggressive default privacy settings.
Two-factor authentication: enable it on every account that supports it. Use a hardware key for your most-critical accounts.
These five steps, completed over a few weekends, materially improve your privacy posture without requiring a research project.
For users wanting to go further: data removal services for ongoing maintenance, encrypted cloud storage for sensitive files, mesh networking for private remote access, self-hosting for the things you want to fully control.
Predictions for 2026-2027
More acquisitions in the privacy services space. Expect another notable provider acquisition or shutdown by mid-2027.
AI integration in privacy tools will continue. Whether the integration is genuinely useful or surface-level marketing remains to be seen.
Continued growth of self-hosting in technical communities. The combination of cheap hardware, mature open-source tools, and growing privacy concerns will continue to drive interest.
Regulatory developments may force more transparency from data brokers and aggregators. The data removal services market will evolve in response.
The browser-engine consolidation around Chromium remains a structural concern. Whether Firefox-based alternatives can maintain meaningful market share will affect the broader web’s openness.
A final observation
Privacy tools have matured into a genuine market with credible options across every major category. Users who want privacy can have it; the tools exist and work.
The remaining barriers are primarily about user adoption, not product availability. The privacy gap in 2026 is mostly about people who could improve their privacy meaningfully but have not yet decided to invest the time.
For those willing to invest the time, the tools are better than they have ever been.
For users orienting to this market for the first time: start with the five basic steps above. Build from there.
For users already deep in the privacy-tools landscape: continue evaluating new options, watch for consolidation moves, support the principled smaller providers when their products meet your needs.
The industry continues to evolve. The principles do not.
ProtonMail | Bitwarden | Mullvad | Cloudflare 1.1.1.1
Related: The annual VPN landscape report 2026, The day I left Gmail, How to evaluate any privacy tool, 13 things I wish someone had told me before self-hosting