Resisting control in a digital age

Across the United Kingdom, the European Union, and beyond, public concern around digital ID systems is growing rapidly. Millions of people are pushing back against government and corporate efforts to link personal identity, banking, and movement to centralized databases. In response, a quiet rebellion has begun — the return of the “dumb” phones.

Also known as “feature phones,” dumb phones are simple devices reminiscent of the early 2000s — models like the classic Nokia 3310. They make calls, send texts, and do little else. For many, they represent an escape from constant tracking and algorithmic manipulation — a symbolic rejection of the “smart” surveillance economy.

The problem: GSM networks are already surveillable

While the impulse to disconnect is understandable, switching to a dumb phone offers little real protection. GSM networks — the mobile infrastructure that carries calls and texts on these older devices — are inherently unsecure and surveillable. Governments and intelligence agencies can intercept GSM traffic with off-the-shelf hardware, and many regions still allow lawful interception without meaningful oversight.

Even without internet access, your location, call metadata, and contact patterns are visible to carriers and accessible to authorities. Turning off apps doesn’t turn off tracking — it just moves it lower in the stack. The surveillance shifts from digital profiling to network-level monitoring, where users have even less control or visibility.

The smarter rebellion: privacy phones

Rather than stepping backwards in technology, there’s a growing movement toward taking technology back. Modern privacy phones represent a practical and principled alternative — devices that embrace open-source systems and encrypted communication while rejecting surveillance capitalism.

Unlike dumb phones, a privacy phone can run end-to-end encrypted messengers like Signal and BitChat, keeping your communications private even across monitored networks. With tools such as Mullvad VPN and LNVPN, users can encrypt all data traffic, obfuscate their real IP address, and even use non-KYC eSIMs for anonymous connectivity. Both Mullvad and LNVPN accept private cryptocurrency, like Monero, allowing you to stay fully outside the identity-linked payment system that digital ID frameworks depend on.

For communication beyond messaging, privacy phones also support PGP-encrypted email through open-source clients such as Thunderbird, ensuring your correspondence stays private even across traditional mail servers.

Cutting off your nose to spite your face

The philosophical case against dumb phones is not about mocking simplicity — it’s about recognizing that abandoning modern tools doesn’t stop control systems; it merely removes your ability to resist them effectively. Real resistance happens when you understand the system and fork it toward your own goals: freedom, autonomy, and privacy.

Walking away from the digital world entirely is akin to cutting off your own nose to spite your face. Connectivity, encryption, and computation can serve freedom just as easily as they serve surveillance — if you choose the right hardware and software. The solution isn’t to hide from technology, but to reclaim it.

The practical path forward

Using a dumb phone may feel safer, but it’s largely symbolic. The better path is to use open-source, hardened devices that let you communicate securely while staying off the data-harvesting radar. A deGoogled privacy phone running GrapheneOS or a similar operating system gives you the best of both worlds: digital freedom without digital compromise.

When paired with privacy-respecting tools — Signal, BitChat, Mullvad, LNVPN, Tor — you gain control over your communications, network footprint, and identity exposure. Combined with pgp-encrypted mail and other privacy-first, these devices can completely replace the functionality of mainstream smartphones — without surrendering your autonomy or data to third parties. That’s not a step backward; it’s a step into a parallel, freer digital ecosystem.

Freedom through technology, not from it

Technology itself isn’t the enemy. The danger lies in centralized control and unchecked data collection. By using devices and systems designed for privacy and decentralization, individuals and groups can resist coercive digital policies while remaining effective, connected, and informed. The goal is not isolation — it’s independence.

So before reaching for a dumb phone, consider a smarter rebellion. Choose a device that lets you stay private without disappearing. Choose a privacy phone.

Mozilla Thunderbird is a mature, open source email client that emphasizes privacy, standards, and control. It runs the same on Windows, macOS, and Linux, supports modern authentication, and includes built-in OpenPGP for encrypted email. Many people switch to Thunderbird to escape fragile, monolithic data files in other clients; that benefit matters if you keep a lot of mail, but it’s only one of many reasons to switch. This article explains the value proposition, trade-offs, and a clear path to get started.

What makes Thunderbird different

• Open source and vendor-neutral: No licensing lock-in or ad-driven features. Thunderbird speaks open standards (IMAP/SMTP for mail, CalDAV/CardDAV for calendars and contacts) so you can move providers without changing your tools.
• Privacy and security by design: Native OpenPGP lets you generate or import keys and send signed or encrypted messages without third-party add-ons. S/MIME is supported for certificate-based workflows. Strong TLS and OAuth2 are available with major providers.
• Cross-platform parity: A consistent experience across Windows, macOS, and Linux keeps mixed-OS teams aligned and reduces training overhead.
• Productivity that scales: Tags, powerful filters, saved searches (virtual folders), conversation view, unified inbox, multiple identities, per-folder templates, and quick filtering make high-volume triage faster.
• Customizable and extensible: Add-ons and themes let you tune workflow, UI density, and features instead of adapting to a rigid client.
• Resilient storage options: Thunderbird can use a file-per-message store (Maildir), reducing single-file corruption risk. This is especially helpful if you keep years of mail online.

When switching makes sense

• Privacy-first users and teams: You want transparent, auditable software with minimal telemetry and broad encryption support.
• Multi-account professionals: You manage several domains or identities and need consistent signatures, SMTP identities, and unified search.
• Cross-platform environments: Your team mixes Windows, macOS, and Linux and prefers one tool that behaves the same everywhere.
• Large mail stores: You keep extensive history and want to reduce the operational risk of giant single-file databases found in other clients.
• Open-standards stacks: You already use or plan to use IMAP/SMTP, CalDAV, and CardDAV (or are moving to Linux on the desktop).

What you might need to replace

• Deep Exchange/EWS features: Thunderbird focuses on open protocols. If you rely on Exchange-only features beyond IMAP/SMTP and iMIP invites, plan to keep web access for those functions or use open-standards services.
• Proprietary suite integrations: Teams/SharePoint-style automations do not live inside Thunderbird; pair it with the web or desktop apps you already use.

Implementation options at a glance

There are two clean ways to start. Choose the one that matches your needs and risk tolerance; detailed steps are in our knowledgebase.

• Clean IMAP setup: Install Thunderbird, add your mailbox with IMAP and SSL/TLS, and start fresh. Configure tags, filters, and yearly Archives to keep Inbox and Sent lean.
• Bring history, then continue on IMAP: Import legacy mail (PST, MBOX, or EML) into Thunderbird or upload it to your server via IMAP, then use Thunderbird for day-to-day work.

Recommended setup checklist

1. Add your account with IMAP and SSL/TLS; enable OAuth2 if your provider supports it.
2. Decide on storage: keep the default store or enable Maildir (file-per-message) if you maintain very large archives.
3. Enable OpenPGP, create or import your keypair, and attach your public key to first contact with frequent recipients.
4. Define tags (for example: urgent, waiting, invoices) and create saved searches for cross-folder views of those tags.
5. Create yearly Archive folders and move older mail out of Inbox/Sent on a schedule.
6. Back up your Thunderbird profile regularly, especially before large imports or folder restructures.

Security and privacy defaults to review

• Remote content in messages: keep remote images off by default; allow per-sender.
• Junk and phishing controls: enable training and review the junk folder periodically.
• Certificate handling: leave strict TLS on; avoid disabling validation to “make it work.”
• Encryption defaults: choose sign or encrypt by default for sensitive mailboxes.

Resources and next steps

• Why and how to switch to Thunderbird (KB) — step-by-step migration paths and import options.
• Official guide: switching to Thunderbird (Mozilla Support) — canonical reference from the Thunderbird team.
• Thunderbird — official site and downloads.
• OpenPGP — the standard behind Thunderbird’s built-in encryption.
• Why Noiz supports Thunderbird — our stance on open standards and sustainable software.
• Switch to Linux: why and how — pair a privacy-first desktop with Thunderbird.

Prefer a managed, privacy-first email stack

Thunderbird works best with standards-based servers. If you want a solution designed for privacy, reliability, and support, start here:

• Why you should choose a private email server — service overview and business case.
• Private email server — plans and ordering.

When building a website, two essential services work hand in hand: your domain name and your hosting. Many people confuse the two, but understanding the difference between a domain name and hosting is crucial for managing your online presence effectively. It also explains why billing periods are different and why domain renewals are so important.

What is a domain name?

A domain name is the web address people type into their browser to find your website—such as example.ie or example.com. When you register a domain, you are reserving that unique name through a registrar, following policies set by organizations like ICANN (for international domains) and IEDR (for .ie domains in Ireland).

Your domain acts like the signpost that directs visitors to your website. Without a domain name, users would not be able to locate your hosting server, and your website and emails would be inaccessible.

What is hosting?

Hosting is the service that provides the physical and virtual resources to store and run your website. This includes your website files, databases, email accounts, and control panels. If the domain name is the address, then hosting is the house itself.

Both domain name and hosting are required for a website to function, but they are separate services with different roles.

Domain name and hosting billing cycles

Because domain name and hosting are different services, they are billed separately and on different cycles:

• Domains renew annually. Pricing varies depending on the extension:
  • .ie domains: €33 per year
  • .com domains: €16 per year (approx.)
• Hosting plans are typically billed monthly or annually, depending on the package you choose.

This means you might receive renewal invoices for your hosting and your domain at different times. Hosting will continue to run, but if the domain name is not renewed, nobody will be able to reach your website.

Why renewing your domain name is critical

Keeping your domain name active is vital. If you miss a renewal deadline:

1. Your services stop working – visitors can’t access your website or send emails.
2. The registry suspends the domain – making it inactive.
3. The domain becomes available to others – after a short grace period, anyone, even competitors, can register it.
4. Recovery is difficult or impossible – getting a lost domain back is often costly and rarely successful.

Even if your hosting is fully active, without the domain name, it becomes unreachable. This makes timely renewal essential for protecting your business and brand identity.

How domain name and hosting work together

Your hosting plan is usually tied to a master domain name (technically called a hostname). This ensures traffic and email requests are directed correctly to the server that hosts your services.

If the master domain expires, the hosting technically still exists, but it cannot be accessed until the domain is renewed or replaced with a new one. This highlights how closely domain name and hosting are connected.

Conclusion

Understanding the relationship between domain name and hosting is key to keeping your online presence stable. Domains are your digital address, while hosting is the foundation where your website lives. Both must be maintained to keep your services available.

• Renew your domain name on time to safeguard your website and email services.
• Keep your hosting plan up to date to ensure your website runs smoothly.

At Noiz, we provide both domain registration and hosting services, so you can manage everything in one place. If you have questions about domain renewal, hosting packages, or billing cycles, our team is here to help.

Domain pricing disclaimer

Domain renewal fees vary depending on the domain extension and are subject to change. For the latest pricing, please see our domain pricing page:
https://www.noiz.ie/services/domains/pricing

In short: A private email server provides superior privacy, resilience, scalability, and customization. Once your business outgrows the limits of shared hosting, a private email server becomes the clear next step for reliable, secure, and cost-effective communication at scale.

Shared hosting as a starting point

Most businesses begin their online journey with shared hosting. It’s convenient, affordable, and usually bundles website and email services together. For small teams, this works perfectly well: a few mailboxes, modest storage needs, and fast SSD-backed performance. But as your business grows, email demand grows with it—more users, larger attachments, bigger archives, and higher expectations for uptime and security. That’s when the cracks in shared hosting begin to show.

The reality is that shared hosting environments are designed primarily for websites. Email is a bundled add-on, not the core focus. Shared platforms optimise for speed and responsiveness, which is why they rely heavily on SSD storage. While this delivers fast results, it’s not the most economical way to store terabytes of historical mail data. The cost of keeping large mailboxes on shared SSD space can quickly spiral, leading to overage charges and storage restrictions.

Why consider a private email server?

A private email server changes the equation. Instead of sharing resources with hundreds of other customers, your business runs on dedicated infrastructure—whether that’s a flexible cloud VM or a single-tenant physical server. This shift brings major advantages in terms of privacy, resilience, storage, scalability, and customization.

1. Privacy and data isolation

With shared hosting, your data resides on a platform alongside dozens or even hundreds of other users. While providers take care to secure the environment, you ultimately have little control over how resources are managed. A private email server isolates your mailboxes from everyone else. Your organisation decides the security policies, compliance settings, and encryption standards that apply. This is particularly important for businesses that handle sensitive information or operate under regulations like GDPR.

2. Resilience and independence

Shared platforms work well until something goes wrong. A misconfiguration, overload, or security issue affecting one customer can sometimes ripple out to others. By contrast, a private email server keeps your infrastructure independent. Problems elsewhere don’t impact your mail service. You can schedule maintenance on your terms, configure software versions to your requirements, and keep uptime under your control.

3. Storage designed for email growth

Email storage grows relentlessly: attachments, archives, and compliance records all add up. On shared hosting, expanding storage usually means paying high premiums for SSD space that was never designed for bulk email archives. With a private email server, you can use SSD volumes for active mailboxes on cloud VMs, or scale to HDD-backed arrays on dedicated hardware for massive retention at a lower cost per terabyte. This dual approach makes private servers much more flexible—and more affordable—at scale.

4. Cost-effective scalability

Adding more mailboxes or increasing storage on shared hosting often comes with rigid limits and steep incremental charges. Private servers scale in a modular way. You can attach new SSD volumes to cloud VMs or expand disks on physical hardware without changing your entire setup. Instead of being locked into a single “plan size,” you pay only for the resources you actually need, making growth predictable and manageable.

5. Security beyond passwords

One of the strongest advantages of private email hosting is the ability to apply fine-tuned firewall rules and VPN access controls. For example, you can restrict IMAP, SMTP, or administrative logins to specific IP ranges, or require staff to connect through a secure VPN before accessing mail services. Combined with TLS, DKIM, SPF, DMARC, and brute-force protection via fail2ban, this creates a security posture that shared environments simply can’t match.

6. Control over backups and retention

Shared hosting providers often manage backups at the platform level, with little visibility or control for individual customers. With a private email server, you can define your own backup policies—from daily off-site snapshots to granular mailbox restores. This flexibility is critical for businesses that need guaranteed retention periods for legal or compliance reasons.

7. Customisation and flexibility

A private email server isn’t just about storage and uptime—it’s about tailoring the platform to fit your business. Want custom spam filtering rules? Integration with a specific archiving solution? Extended logging for audits? These are all possible when you control the environment. Private servers also support staging environments, testing policies, or running non-standard configurations that would be impossible on shared hosting.

Who benefits most from a private email server?

Not every organisation needs a private server from day one. But as soon as you begin hitting the limits of shared hosting, the switch becomes worthwhile. Common scenarios include:

• Growing teams: 50–500+ mailboxes, multiple departments, or distributed staff requiring stable performance.
• Data-heavy businesses: design firms, law practices, or agencies with large attachments and long-term archives.
• Compliance-driven sectors: finance, healthcare, or government contractors needing strict retention, GDPR compliance, or single-tenant isolation.
• IT-led organisations: companies with in-house IT staff who want more control and visibility over infrastructure.

VMs vs dedicated hardware

A key decision is whether to run your private email server on a cloud virtual machine or on dedicated hardware. Cloud VMs offer fast SSD-backed performance, instant scalability, and predictable monthly pricing. Dedicated hardware provides multi-terabyte HDD arrays at a lower cost per TB, making it ideal for businesses with huge retention needs or compliance-driven single-tenant requirements. Both options can be fully managed by Noiz, so you get expert support either way.

Migrating to a private email server

Moving from shared hosting to a private server doesn’t need to be disruptive. At Noiz, we use staged IMAP synchronisation to mirror mailboxes in advance. DNS records are updated at the right time, ensuring downtime is minimal—often just a brief propagation period. Users can continue working during the transition, with final cutover happening seamlessly.

In short—when to make the move

If your email storage is growing beyond a few hundred gigabytes, if you manage more than 50 users, or if compliance and security are becoming priorities, a private email server is no longer a luxury—it’s a necessity. It gives you predictable costs, improved performance, and security features that shared hosting cannot match.

Talk to us about private email hosting

Noiz specialises in secure, scalable email hosting. Our private email server plans are designed for businesses at every stage—from small teams upgrading out of shared hosting to enterprises requiring compliance-ready hardware. With firewalls, VPN options, daily backups, and full management included, we provide everything you need for reliable business communication.

Contact us today to discuss your email hosting needs and find the right solution for your business.

In short; for all of it’s benefits, we embrace open-source software in email management, and we encourage all of our clients to do the same.

In the realm of email communication, selecting the right client is essential for efficiency, security, and alignment with core values such as transparency and user autonomy. At Noiz, a leading provider of shared email hosting and private dedicated email hosting services, we advocate for Mozilla Thunderbird as our preferred option. This recommendation arises from its robust features that prioritize open-source principles, privacy, and functionality, making it an ideal complement to our reliable hosting solutions available at noiz.ie. In this article, we explore the top benefits of this client, highlighting its advantages over proprietary alternatives like Microsoft Outlook.

Thunderbird’s open-source foundation

This client’s open-source foundation represents a cornerstone of its appeal, fostering a collaborative development environment where community contributions enhance reliability and innovation. Unlike closed-source applications, the code is publicly accessible, allowing for independent audits that identify and rectify vulnerabilities swiftly. This transparency not only bolsters security but also ensures continuous improvement driven by a global network of developers. For organizations and individuals utilizing Noiz’s hosting services, this means seamless integration with open standards, reducing dependency on vendor-specific ecosystems and promoting long-term sustainability.

In contrast, proprietary clients like Outlook operate within a restricted framework, limiting external scrutiny and potentially introducing undisclosed risks. The open-source model aligns perfectly with Noiz’s commitment to ethical technology practices, enabling users to customize and extend the application without artificial barriers.

Privacy protection

Privacy stands as a paramount concern in today’s digital landscape, and this client excels by design in safeguarding user data. It refrains from collecting personal information, displaying advertisements in inboxes, or employing user communications for artificial intelligence training. This approach ensures that sensitive emails remain confidential, free from third-party surveillance that is often embedded in commercial alternatives.

When paired with Noiz’s secure shared email hosting, it enhances data sovereignty, as users retain full control over their information without mandatory cloud dependencies. Outlook, by comparison, integrates deeply with Microsoft’s ecosystem, which may involve data processing for analytics or targeted services, potentially compromising privacy. This privacy-centric ethos resonates with Noiz’s dedication to protecting client communications, making it a superior choice for privacy-conscious professionals.

Empowering user Freedom with Thunderbird

The client grants users unparalleled freedom to manage their email workflows according to individual needs. Features such as extensive customization options, including themes, add-ons, and layout adjustments, allow for a tailored experience that adapts to diverse usage scenarios. This flexibility extends to multi-platform support, with availability on Windows, macOS, Linux, and mobile devices, ensuring consistent access regardless of the operating system.

Such freedom contrasts sharply with Outlook’s more rigid structure, which often ties users to Microsoft’s proprietary tools and subscription models. At Noiz, we value this autonomy, as it empowers our clients to integrate the application seamlessly with our private dedicated email hosting for customized, unrestricted email management. The open-source nature further liberates users from vendor lock-in, fostering innovation and adaptability in an evolving digital environment.

Significant cost savings

One of its most compelling advantages is the zero-cost model, funded entirely through voluntary donations rather than subscriptions or licensing fees. This eliminates the financial burden associated with proprietary clients like Outlook, which requires ongoing payments for full functionality, particularly in enterprise settings.

For businesses leveraging Noiz’s affordable hosting options, adopting this client translates to substantial savings without sacrificing features. Organizations can allocate resources elsewhere while enjoying a fully featured tool that supports unlimited accounts and advanced organization tools. This cost-effectiveness is especially beneficial for small to medium enterprises, aligning with Noiz’s mission to deliver value-driven solutions through our services at noiz.ie.

Advanced PGP encryption capabilities

It incorporates built-in support for OpenPGP encryption, enabling users to secure emails with end-to-end protection through digital signatures and message encryption. This feature, available since version 78, simplifies the process of generating keys and encrypting communications, ensuring that only intended recipients can access sensitive content.

In comparison, Outlook’s encryption options often require additional configurations or integrations, and they may not offer the same level of open-standard compliance. When combined with Noiz’s secure infrastructure, these PGP capabilities provide a fortified layer of defense against interception, ideal for industries handling confidential data. This robust encryption support underscores Noiz’s endorsement of the client for maintaining the highest standards of communication security.

Thunderbird’s superior advantages over Outlook

Beyond the core benefits, it offers several practical edges over Outlook that enhance usability and performance. The lightweight design results in faster operation and fewer crashes, providing a more stable experience for daily use. Its modular storage system, using separate files for emails, calendars, and contacts, simplifies backups and migrations compared to Outlook’s monolithic file structure.

Additionally, adherence to open standards ensures better interoperability with various email providers, including Noiz’s hosting services, without the compatibility issues sometimes encountered in Outlook. Features like advanced filtering, tagging, and a unified inbox further streamline email management, making this tool a versatile option that outperforms Outlook in cross-platform reliability and user-centric design.

Conclusion: Elevate your email experience with Noiz and Thunderbird

At Noiz, our support for this client is rooted in its alignment with principles of openness, security, and efficiency, which mirror the values underpinning our shared email hosting and private dedicated email hosting offerings. By choosing it, users gain a powerful, privacy-focused tool that maximizes the potential of Noiz’s reliable infrastructure, available at noiz.ie. We encourage professionals and organizations to explore this combination for a superior email ecosystem that prioritizes freedom and protection. For more details on integrating the client with our services, visit our resources or contact our team today.

In an era where cyber threats lurk around every digital corner, protecting your online accounts has never been more crucial. Imagine waking up to find your email hacked, your social media taken over, or worse—your banking details compromised. This isn’t just a nightmare; it’s a reality for millions each year. But there’s a straightforward solution: two-factor authentication (2FA). If you’re not using it yet, now’s the time to start. In this guide, we’ll explore why 2FA is essential, backed by the latest stats, and recommend free, open-source apps to make setup a breeze. By the end, you’ll be inspired to secure your accounts right away—because your peace of mind is worth it.

What Is Two-Factor Authentication (2FA)?

Before diving into the benefits, let’s break it down simply. 2FA is an extra layer of security that requires two forms of verification before granting access to your account. Typically, this includes:

• Something you know: Like your password.
• Something you have: Such as a code generated on your phone or a hardware key.

Unlike single-factor authentication (just a password), 2FA makes it much harder for hackers to break in, even if they steal your credentials. It’s like adding a deadbolt to your front door—simple but incredibly effective.

The Compelling Reasons to Start Using 2FA Now

Cyberattacks are skyrocketing, and passwords alone aren’t cutting it anymore. Here’s why enabling 2FA should be at the top of your to-do list, supported by eye-opening statistics from 2025.

1. Dramatically Reduces the Risk of Hacks and Breaches

Passwords are often weak or reused, making them easy targets for cybercriminals. 2FA blocks most automated attacks by requiring that second step. According to Microsoft, multi-factor authentication (MFA, which includes 2FA) prevents 99.9% of automated assaults on platforms and online services. A 2023 Microsoft report (still relevant in 2025 trends) found that 2FA blocks 99.22% of attacks compared to accounts without it.

In fact, using MFA could prevent 80-90% of all cyber-attacks, as cited by U.S. national figures. With the MFA market projected to hit $17.76 billion by 2025, it’s clear that businesses and individuals are waking up to its power.

2. Shields Against Phishing and Fraud

Phishing scams trick you into handing over login details, but 2FA adds a barrier that phishers can’t easily bypass. Stats show a 32% reduction in phishing attacks with 2FA, potentially delivering a 300% ROI by averting breaches. Microsoft estimates it deters 96% of bulk phishing attempts and 76% of targeted attacks.

For businesses, this means fewer data breaches; for you, it means safeguarding personal info like emails, social profiles, and financial accounts.

3. Enhances Compliance and Builds Trust

If you’re running a small business or handling sensitive data, 2FA helps meet regulatory standards like GDPR, POPIA, or PCI DSS. It reduces fraud risks, boosts customer confidence, and minimizes downtime from security incidents. Plus, in a world where 81% of breaches involve weak or stolen credentials, 2FA is a smart, proactive step.

4. It’s Easy and Cost-Effective

Gone are the days of complex setups. Most services (like Google, Facebook, or your bank) offer 2FA for free, and it takes just minutes to enable. The peace of mind? Priceless.

These benefits aren’t hypothetical—real-world data shows 2FA works. Don’t wait for a breach to hit; enable it today and join the millions fortifying their digital lives.

How to Enable 2FA: A Step-by-Step Guide

Getting started is simpler than you think. Here’s a quick walkthrough:

1. Choose Your Accounts: Start with high-priority ones like email (Gmail, Outlook), social media (X, Facebook), and banking apps.
2. Go to Security Settings: In the app or website, look for “Security” or “Login” options. Enable “Two-Factor Authentication” or “Multi-Factor Authentication.”
3. Select Your Method: Opt for an authenticator app (recommended over SMS for better security). Scan the QR code provided.
4. Verify and Backup: Enter a test code, and note down backup codes in a safe place.
5. Test It: Log out and back in to ensure it works.

Pro Tip: Use a dedicated authenticator app instead of SMS, as texts can be intercepted. Now, let’s look at some top free, fully open-source (FOSS) options to get you set up across devices.

Recommended Free Open-Source 2FA Authenticators

We prioritize FOSS tools because they’re transparent, community-vetted, and free from hidden backdoors. Libre/FOSS software also respects user Freedom. Here are our top picks, including user-favorites like FreeOTP+ for mobile and Authenticator for Linux. These apps generate time-based one-time passwords (TOTP) securely.

For Mobile (Android and iOS)

• FreeOTP+ (Android): A lightweight, privacy-focused fork of FreeOTP. It’s fully FOSS, supports TOTP, and works offline. Download from F-Droid or GitHub—perfect for Android users seeking simplicity without ads.
• Ente Auth (Android and iOS): Cross-platform FOSS app with end-to-end encrypted sync across devices. Easy backups and no tracking make it ideal for multi-device users.
• Aegis Authenticator (Android): Highly rated FOSS option with vault encryption, icon support, and easy exports. Great for power users.
• 2FAS (Android and iOS): Open-source with biometric lock and cloud backup. User-friendly interface for beginners.

For Linux

• Authenticator (GNOME Authenticator): A clean, FOSS desktop app for Linux desktops. Supports QR scanning via webcam and is easy to integrate with your workflow.
• Keysmith (KDE): If you’re on KDE Plasma, this FOSS tool offers seamless 2FA code generation with a modern interface.
• Proton Authenticator (Linux, plus others): Newly launched in 2025, this free FOSS app from Proton supports Linux natively, with secure sync and offline use.

For Windows

• 2fast: Fully FOSS Windows app for TOTP generation. Simple, no-frills design with support for multiple accounts.
• Yubico Authenticator: Open-source and works with YubiKeys if you have hardware, but also standalone for software 2FA. Cross-compatible with Windows.
• AuthPass: Portable FOSS app that runs on Windows, with KeePass integration for added security.

For macOS

• Yubico Authenticator: FOSS and native for macOS, offering hardware and software 2FA options.
• Proton Authenticator: Supports macOS with full FOSS code, encrypted backups, and easy setup.
• AuthPass: Cross-platform FOSS tool that works flawlessly on macOS, with cloud sync if needed.

These apps are all free, open-source, and available on official repositories like GitHub, F-Droid (for Android), or app stores. Start with FreeOTP+ on your phone and Authenticator on Linux for a solid foundation—then expand as needed.

Take Action: Secure Your Digital World Today

Enabling 2FA isn’t just smart—it’s essential in 2025’s threat landscape. With stats showing it blocks up to 99% of attacks, there’s no reason to delay. At Noiz, we believe in empowering you with tools and knowledge to stay safe online. Pick an app from our recommendations, enable 2FA on your key accounts, and breathe easier knowing you’ve added that vital layer of protection.

What are you waiting for? Head to your account settings now and flip the switch. Your future self will thank you. If you have questions or need help, drop us a message—we’re here to guide you.

Stay secure, stay private, stay Free.

During a recent investigation into the infrastructure of some of South Africa’s major ISPs, we discovered that a large portion of South Africa’s email communications are being routed through SpamExperts’ servers. SpamExperts is a third-party email filtering service provided by a company called N-Able (formerly SolarWinds MSP), headquartered in Austin, Texas.

While the initial investigation was prompted by various technical security challenges, it is the national security implications of this arrangement that now demand our attention.

The dangers of unencrypted email

The email protocol was never designed with end-to-end encryption in mind, meaning that every email sent is visible to the ISP that controls the MTA infrastructure. Many major South African ISPs, including Afrihost, Xneelo, and other prominent names in the market, have begun routing all of their clients’ mail through SpamExperts. This decision was presumably made to combat spam. However, it presents a critical vulnerability: a significant volume of unencrypted emails is now passing through foreign third-party infrastructure.

National security implications

The use of non-local infrastructure for filtering email communications poses several serious risks to South Africa’s national security:

• Data exposure: Since most emails are not encrypted by default, sensitive communications—including governmental, corporate, and personal data—are exposed during transit.
• Foreign oversight: Filtering through SpamExperts means that a third party based outside of South Africa handles a large percentage of national email traffic. This raises concerns about potential access, surveillance, and even exploitation by foreign entities.
• Sovereignty concerns: The involvement of a foreign service provider compromises national data sovereignty. In today’s volatile geopolitical climate, sensitive information could be subjected to external political and legal pressures.

Geopolitical tensions and their impact

Current international conflicts further compound these concerns. With heightened tensions between the United States, Israel, and South Africa, the risk that sensitive communications could be intercepted or misused has never been greater. Nation states often have a vested interest in data that flows across borders, and the involvement of a foreign third party in the email filtering process could offer a backdoor for espionage or other forms of interference.

This situation underscores a broader challenge: when critical telecommunications—integral to both national security and economic stability—are handled by non-local infrastructures, they become vulnerable to international power plays and conflicts. Such vulnerabilities are especially dangerous in an era where cyber threats are escalating alongside geopolitical disputes.

Strengthening South Africa’s cybersecurity

To mitigate these risks, South African organizations and policymakers must consider several proactive measures:

• Localize critical infrastructure: Encourage the use of local, decentralized email filtering and cybersecurity services to maintain better control over sensitive communications.
• Enhance encryption standards: Implement robust end-to-end encryption (such as GnuPGP) for email communications, ensuring that even if data passes through third-party systems, it remains secure and inaccessible to unauthorized parties.
• Policy and oversight: Develop and enforce stringent cybersecurity policies on governmental departments that regulate how foreign entities interact with national data, especially during periods of heightened international tensions.

Conclusion

The discovery that large ISPs in South Africa are filtering a significant portion of unencrypted email traffic through a foreign third party like SpamExperts poses a grave national security concern. As international conflicts continue to unfold between key nation states such as the US, Israel, and South Africa, the risks associated with this non-local handling of critical communications cannot be ignored.

Ensuring the security and sovereignty of our digital communications must become a priority. By localizing critical infrastructure, enforcing stronger encryption protocols, and instituting rigorous cybersecurity policies, South Africa can better protect its sensitive data against foreign exploitation and safeguard its national security in an increasingly complex global landscape.

For more insights and updates on cybersecurity challenges and solutions, visit Noiz.

Further reading and external resources

• GnuPG – Information on robust end-to-end encryption for secure email communications.
• EFF: Secure Communication – Resources on maintaining secure digital communications.

As the tax season approaches, scammers are gearing up to target unsuspecting taxpayers in South Africa. Here’s how to identify and prevent tax scams, courtesy of our cybersecurity experts.

Identifying tax scams

Most scams have two key elements: fear and urgency. Scammers will try to scare you into acting quickly, claiming that you owe money or that your refund is at risk. Be cautious of emails, phone calls, and text messages that:

• Demand immediate payment via debit card, EFT,
• Threaten arrest or additional fines,
• Ask for personal or financial information via email, text message, or social media,
• Demand payment without allowing you to question or appeal the amount owed.

The South African Revenue Service (SARS) will never contact you in these ways. If you’re unsure, visit the official SARS website or contact them directly.

Recent example

In a recent example, we saw clients receiving an email claiming to be from SARS, with the subject line: Notification from SARS, and the reply-to address set as noreply@sars.gov.za. The sender address was certainly not from SARS, but the Name was set to sars.gov.za.

Always check the Sender Address, not just the Senders Name. Look for typos such as double letters, or visual tricks such as ‘rn’ instead of ‘m’, which one might miss when reading quickly.

Responding to scams

If you receive a suspicious call, hang up. If you get a suspicious email or text, delete it without clicking on any links. Don’t trust the sender’s identity, as it’s easy to spoof email addresses and caller IDs.

Be cautious of file attachments with strange file extensions, especially .exe or .rar files.

If you’re concerned that a message might be real, contact SARS directly. To check on your refund, visit the official SARS eFiling website.

Preventing tax return fraud

Use a strong, unique password for your SARS eFiling account, and make sure to use a password keeper such as KeePassXC.

Sharing tax data securely

When sharing sensitive tax information with your practitioner, ensure they have a secure online portal, such as https://send.noiz.ie. Avoid emailing sensitive documents without encrypting them first. Read our article on how to send files securely to learn more.

Stay safe this tax season by being vigilant and taking proactive steps to protect yourself from tax scams.

Exciting news! I’ve just launched a new online file sharing tool similar to WeTransfer. You can access the tool here: send.noiz.ie

Why?

Email was never designed for sending large digital files, but In today’s data-centric world, reliance on the ability to send large digital files and documents has increased beyond the limits of email.

Online file sharing systems like WeTransfer are great, but not everyone trusts that the data is private, and we don’t know if they encrypt your data. That is why I am now offering [noiz] – send.

What does [noiz] – send do?

[noiz] – send lets you share files with end-to-end encryption and a link that automatically expires. You can keep what you share private and make sure your data doesn’t stay online forever.

Features:

• Share your files privately and securely.
• Password encrypt your files for maximum security.
• Choose how long you want your download link to be available.
• Choose the number of downloads available for your link.
• It’s free, as in money and in freedom.
• Best of all, it can be directly integrated with Thunderbird email client, for those attachments that are too big.

How do I use it?

1. From a browser, simply navigate to send.noiz.ie
2. Choose “Select files to upload”, or drag and drop files into the browser window
3. Select either your maximum number of downloads, or maximum number of days the download link will be valid for
4. Optionally, set a password by checking the “Protect with password” box and inputting a password. Note that you will need to send this password to the person downloading the files.
5. Click ‘Upload”
6. That’s it! Your file is encrypted and ready to send.
7. Copy the link to share your file.

Watch the video:

Note:

This tool is currently in beta, but can be used safely to send files to your family, friends, customers or enemies. If you experience any issues, please feel free to reach out.

There is currently a 2.5GB limit on the free platform. If you need to send larger files consistently, let me know and we can make arrangements.

Happy sending.