Four moves that cover 80% of risk
- Unique passwords + manager: no reuse, ever.
- 2FA everywhere: authenticator app > SMS.
- Update cadence: OS, browser, router, apps — monthly.
- Zero‑trust on public Wi‑Fi: VPN on, no logins that matter.
Your threat model, simplified
Most people don’t need spy‑grade opsec; they need consistent basics. Your likely threats are account takeovers, phishing, data broker leakage, and device theft. Map those to habits: a password manager stops reuse‑driven takeovers; 2FA blocks most credential stuffing; phishing awareness plus passkeys eliminates bad links as an attack vector; device encryption makes theft an inconvenience, not a disaster.
Peter Romero: Privacy is compound interest — small habits pay big over time.
Data minimization is a superpower
Leak less by storing less. Audit browser extensions, revoke old app permissions, and keep a separate “travel email.” Use masked emails and virtual cards for trials. Turn off location history you don’t use. Delete cloud backups you don’t need. The best defense is absence.
Red flags and fast fixes
- Unexpected login prompts: stop, verify on another device.
- Account “security” emails: never click; go direct to settings.
- Breaches in the news: change passwords and rotate keys.
- Weird pop‑ups or lag: run a malware scan; check extensions.
- Lost device: remote‑wipe and change your major keys.
Home network hygiene
Update your router firmware twice a year, change default admin passwords, and put IoT devices on a guest network. Use DNS filtering to block known bad domains. Turn off UPnP unless you know why you need it. Boring? Yes. Effective? Absolutely.
Privacy playbook: 10‑step setup
- Install a password manager and rotate top 20 reused passwords.
- Enable 2FA on email, bank, cloud storage, socials.
- Set OS auto‑updates and monthly reminders for routers/browsers.
- Use different browsers for banking and casual browsing.
- Harden phone: limit background app refresh and precise location.
- Review app permissions; remove anything you don’t understand.
- Freeze your credit if you’re in the US; unfreeze when needed.
- Use a privacy‑respecting search engine and disable third‑party cookies.
- Back up important files with encryption; test restores quarterly.
- Teach your family the “don’t tap links” rule — go direct.
Also read “Internet Privacy 2025″ — Visit the timeline
You can see these and other events in the history of the Internet in the “helicopter view” mode on my timeline.
Go right now — it’s free.