Kit & Key
About Kit & Key
Disclosure: Kit & Key is an independent privacy-stack site. This page has no affiliate links. We are not owned by any vendor we write about. Bitwarden, Mullvad, and Tuta are unpaid controls. We do not earn anything when we point you there. How we choose tools is the longer version of this note.
Kit & Key is for people who want one practical privacy kit. About ten minutes. Tools in a fixed order. Non-technical readers. Solo freelancers. Households that share a few logins.
It is not for journalists under targeted attack. It is not for high-risk threat models. If you need a security team, you need a security team. This site will not pretend otherwise.
Kits, not listicles
A listicle ranks dozens of VPNs and calls that research. A kit is one situation, one stack, and a setup order you can follow at the kitchen table.
We publish three kits:
Each kit names a default pick, a fork if your situation is different, and an unpaid control. We do not shuffle the install order to make a product look better.
Who this is for
You work from cafes sometimes. You share a household. You invoice clients from a laptop and a phone. You want fewer tools, not more tabs.
You do not need a new identity. You need a password manager, antivirus, and a VPN, installed once, in that order. Freelancers add encrypted email before antivirus.
Who this is not for
This is consumer and small-freelancer scope. It is not a hostile-environment guide.
- Not for journalists under targeted attack.
- Not for activists facing state-level surveillance.
- Not for people who want anonymity theater, leak tests we did not run, or a ranked VPN mill.
If that is your situation, look at specialist resources. Do not treat a cafe kit as cover.
Independence
Kit & Key is independent. No VPN company owns this site. No password-manager company owns this site.
Some links on kit pages are affiliate links. If you buy through them, we may earn a commission. That does not change the price you pay. It does change which paid tools we can recommend with a straight face.
Unpaid controls stay on the page anyway:
- Bitwarden, password manager
- Mullvad, VPN
- Tuta, encrypted email on the freelancer kit
We do not earn anything when we point you there.
How recommendations are formed
We read public docs and vendor specs. Device limits, plan names, what the free tier actually includes. Where we have limited hands-on access, we say so. Where we do not, we do not invent a lab.
We do not fabricate credentials. We do not publish fake speed tests. We do not rank a field of products we did not compare.
How we choose tools is the rulebook: install order, what we optimize for, and how affiliate programs affect which paid tools appear.
The kits
- Cafe Wi-Fi Privacy Kit for coffee-shop and hotel Wi-Fi.
- Family Privacy Kit for a household that shares logins and devices.
- Freelancer Privacy Stack for a solo operator with invoices.
If you only do one thing after this page, pick the kit that matches the situation. Then follow the order.