Guides & How-To

Safety, Verification & Online Safety

This index links to third-party websites and open-source projects. Always be cautious when downloading software from the internet, especially executable files and APKs. A few good habits and the right tools can protect you from malware, scams, and privacy leaks.

• Stick to official sources: Download from the project's official site, GitHub releases, F-Droid, Flathub, or trusted package managers. Avoid random file-hosting sites and "cracked" software.
• Scan everything: Upload files to VirusTotal before opening them. It runs the file through many antivirus engines and shows hidden payloads.
• Keep real-time protection on: Use Malwarebytes, Avast, Bitdefender, or Windows Security with regular updates enabled.
• Check the URL and certificate: Look for HTTPS, the correct domain, and a padlock icon. Scam sites often mimic real ones with typos or odd TLDs.
• Keep everything updated: Keep your operating system, browser, and apps up to date to avoid known security holes.
• Read before you install: Check user reviews, GitHub issues, Reddit threads, and the project's last update date. Old or unmaintained apps can be risky.
• Run unknown apps in a sandbox: Tools like Sandboxie Plus or a disposable VM can isolate suspicious software from your main system.
• Use a password manager: Bitwarden or KeePassXC keeps unique passwords and avoids phishing by not auto-filling on the wrong site.
• Browser hardening: Use uBlock Origin, Privacy Badger, and disable JavaScript on untrusted sites with an extension like NoScript if needed.
• Use a VPN or private DNS: These add privacy, but remember that no tool is 100% anonymous.
• Back up your data: Use restic, Kopia, or a simple external drive so malware or mistakes can't wipe your files.

Neko's Index does not host or control these apps. We are not responsible for the content, safety, or behavior of third-party sites or software. Use them at your own risk.

PC Apps — Getting Started

• Package managers (Windows): Use Scoop, Chocolatey, or winget to install open-source apps from the command line.
• Video players: Download mpv or VLC. Drag and drop a file or URL to play.
• Torrenting: Use qBittorrent or Transmission. Always make sure your downloads are legal in your region.
• Archives / utilities: 7-Zip and PeaZip handle zip, rar, 7z, and more.
• Privacy / ad blocking: Try Brave, LibreWolf, uBlock Origin, or Privacy Badger.

Android Apps — Getting Started

• Alternative app store: Install F-Droid or Droid-ify for open-source apps outside Google Play.
• Play Store without Google: Aurora Store lets you download APKs anonymously.
• Unknown sources: On Android, go to Settings > Security (or Apps) and allow installs from your file manager or browser for APK files.
• YouTube apps: NewPipe and LibreTube are ad-free alternatives.
• Video / anime / manga readers: Apps like Aniyomi, Mihon, and Aidoku use extensions; install the app first, then add extensions from within it.

iOS Apps — Getting Started

• App Store: Many open-source apps such as VLC, Firefox, Brave, KeePassium, and Strongbox are on the App Store. Install them directly.
• Sideloading with AltStore / SideStore: Apps like Yattee, iSH, and Delta are not in the App Store. Use AltStore or SideStore to sideload them on a non-jailbroken device. You will need to refresh them weekly unless you have a paid developer account.
• Private DNS / VPN: Install a DNS profile for AdGuard DNS or NextDNS under Settings > General > VPN & Device Management > DNS. Or use a native app like Proton VPN or Mullvad VPN.
• Content blockers: Use AdGuard for iOS or Safari extensions to block ads and trackers.
• Passwords and 2FA: Use Bitwarden, KeePassium, or Strongbox for passwords, and keep 2FA enabled on important accounts.
• Media and reading: VLC plays most files, Yattee is an Invidious/Piped client, and Aidoku is a manga reader. BookPlayer handles audiobooks.
• Back up with iCloud or Nextcloud: Nextcloud and Proton Drive can back up files outside Apple's ecosystem.

VPN & DNS — Quick Setup

• VPN clients: Download the official client for WireGuard or OpenVPN. Import a config file from your provider.
• Private DNS (Android): Settings > Network & Internet > Private DNS > enter a hostname such as dns.adguard-dns.com or your NextDNS address.
• DNS on PC / router: Use AdGuard DNS, NextDNS, Quad9, or run your own Pi-hole.
• Mesh / self-hosted VPNs: Tailscale, ZeroTier, and Twingate are easy to set up for private networks.

Streaming & Media

• Multi-platform servers: Jellyfin and Kodi are free media centers that work on PC, Android, iOS, and TV.
• CloudStream: Install the app, then add extensions from the community to get content sources.
• Stremio: Install, then use the built-in add-ons or community add-ons. Pair with Real-Debrid for smoother streaming if allowed in your region.
• Music / audiobooks: VLC, Jellyfin, or BookPlayer on iOS handle most formats.

Browser Hardening & Safe Browsing

• Run uBlock Origin in default or medium mode to block ads, trackers, and malicious scripts.
• Use Privacy Badger or built-in tracker blocking, and enable HTTPS-Only mode if your browser supports it.
• Disable third-party cookies, clear site data regularly, and avoid unnecessary extensions from unknown sources.
• Consider container tabs (Firefox Multi-Account Containers) or separate profiles to isolate work, social, and shopping accounts.
• Use Brave, LibreWolf, or Tor Browser for stronger out-of-the-box protection.
• Let your password manager autofill credentials; it will not fill on the wrong domain, which helps prevent phishing.

Passwords & Two-Factor Authentication

• Use a Bitwarden, KeePassXC, Strongbox, or Proton Pass password manager for every account.
• Generate long, unique, random passwords; never reuse passwords between sites or services.
• Enable 2FA on every important account, preferably with an authenticator app or hardware security key.
• App-based TOTP options include Aegis (Android), Raivo (iOS), and Ente Auth (both platforms).
• Avoid SMS 2FA when possible because phone numbers can be ported or SIM-swapped.
• Store backup codes somewhere safe, such as an encrypted note or offline backup, in case you lose your 2FA device.

Backups & Data Security

• Follow the 3-2-1 rule: keep three copies of important data, on two different media types, with one off-site.
• Use encrypted backup tools such as restic, Kopia, or BorgBackup.
• Cloud backups should be encrypted before upload with Cryptomator or end-to-end encrypted services like Proton Drive.
• Store an external drive or USB off-site or in a fireproof container for irreplaceable files.
• Test your restores occasionally; a backup you cannot restore is not a real backup.
• Keep firmware, OS, and app updates installed to reduce the chance of ransomware and data loss.