Could This Be The End of Privacy Frontends?
Our top stories this week:
- X sends cease-and-desist to open source project Nitter over alleged scraping
- Android 17 adds ECH support to make web browsing harder to track
- Meta agrees to pay $18 billion to settle US lawsuits over children's social media addiction
- Microsoft tests new privacy controls for Windows 11 desktop apps
- Introducing Obscura VPN for Windows
TWIP Live 🔴
Updates from the Team
2026 Password Manager Tier List: Does Yours Stack Up?
We compared the top password managers (and the ones not quite there yet) to find out how they stack up. This video has sparked a lot of discussion and debate, so if you haven't watched it yet, definitely check it out and let us know your thoughts!

Site Updates
This week we made a few small changes to the website that will be published on the next release. We noted that SimpleLogin is owned by and integrated with Proton, and we added instructions on how to disable Windows Recall.
News Briefs
This week saw some interesting news stories about hiding Windows malware in plain English wordlists, cars with Android infotainment centers getting hacked, and WhatsApp security improvements (among others).

Sources
X sends cease-and-desist to open source project Nitter over alleged scraping
Nitter is a free, open source front end which can be optionally self-hosted and allows people without X/Twitter accounts to still read tweets. In 2024, X/Twitter updated their API to make third-party access significantly harder, but Nitter was able to adapt and keep working. Now, X/Twitter is attempting to use legal means to stop the project, forcing users to sign up for a Twitter account

Android 17 adds ECH support to make web browsing harder to track
Android 17 will feature system-level support for Encrypted Client Hello (ECH). ECH is sort of like encrypted DNS in that it helps hide the hostname from passive observers like your ISP or router. For apps and websites that doesn't support ECH, Android will send a "fake ECH-looking field" so that traffic doesn't stand out.

Meta agrees to pay $18 billion to settle US lawsuits over children's social media addiction
This week Meta agreed to pay $18 billion over the next decade to 47 states and several US territories over their recent lawsuit that Instagram is knowingly addictive and harmful to minors. They're also implementing a wide range of changes for minor accounts, like restrictions on when they can access it, the option to disable the algorithmic feed and autoplay, and better age verification technology. Other companies and countries are expected to use this as a model.
Microsoft tests new privacy controls for Windows 11 desktop apps
In February, Microsoft announced that it would be adding "smartphone-style app permissions" for apps in Windows, giving users more granular control over what permission each app has access to. Right now the current setting is a single, device-wide setting. The new setting should offer much more granular control.

Introducing Obscura VPN for Windows
Obscura VPN is a new VPN that only operates on a multi-hop, multi-infrastructure architecture. They collaborate with Mullvad (and hope to add others in the future) for a Tor-like system: Obscura - the first hop - sees your VPN and knows your information, but not where your traffic or where you go online. Mullvad - as the second hop - sees your traffic but doesn't know who you are. We find this interesting and innovative and are excited to see them expand. Originally they were only available on Mac, iOS, and Android. Linux is in development.

Forum Updates






