Awesome-Mirrors/personal-security-checklist
1
0
Fork 0
mirror of https://github.com/Lissy93/personal-security-checklist.git synced 2024-10-01 01:35:37 -04:00
Code Issues Packages Projects Releases Wiki Activity
d033b088f4
personal-security-checklist/2_TLDR_Short_List.md
Kazuki Koide 631e44d79a
Fix typo
2020-06-03 11:48:17 +09:00

21 KiB
Raw Blame History

Personal Cyber Security | TLDR Awesome PRs Welcome LicenseContributors

Contents

PERSONAL SECURITY CHECKLIST

This is the shortened version of The Complete Personal Security Checklist. It lays out the 20 most essential security + privacy tips, that you should complete to protect your digital life.

Authentication

Browsing

  • Use a Privacy-Respecting Browser, Brave and Firefox are gtrat options. Set your default search to a non-tracking search engine, such as DuckDuckGo
  • Do not enter any information on a non-HTTPS website (look for the lock icon), consider using HTTPS-Everywhere to make this easier
  • Block invasive 3rd-party trackers and ads using an extension like Privacy Badger or uBlock
  • Don't allow your browser to save your passwords or auto-fill personal details (instead use a password manager, and disable your browsers own auto-fill)
  • Clear your cookies, session data and cache regularly. An extension such as Cookie-Auto-Delete to automate this
  • Don't sign into your browser, as it can link further data to your identity. If you need to, you can use an open source bookmark sync app
  • Consider using Decentraleyes to decrease the number of trackable CDN requests your device makes
  • Consider using compartmentalization to separate different areas of your browsing (such as work, social, shopping etc), in order to reduce tracking. This can be done with Firefox Containers, or by using separate browsers or browser profiles
  • Test your browser using a tool like Panopticlick to ensure there are no major issues. BrowserLeaks and Am I Unique are also useful for exploring what device info your exposing to websites
  • Keep your browser up-to-date, explore the privacy settings and remove unnecessary add-ons/ extensions (as they may make you more trackable)
  • For anonymous browsing use The Tor Browser, and avoid logging into any of your personal accounts

Phone

  • Set a device PIN, ideally use a long passcode
  • Encrypt your device, in order to keep your data safe from physical access. To enable, for Android: Settings --> Security --> Encryption, or for iOS: Settings --> TouchID & Passcode --> Data Protection
  • Keep device up-to-date. System updates often contain patches for recently-discovered security vulnrabilities. You should install updates when prompted
  • Review application permissions. Don't grant access permissions to apps that do not need it. (For Android, see also Bouncer - an app that allows you to grant temporary permissions)
  • Disable connectivity features that aren't being used, and 'forget' WiFi networks that you no longer need
  • Disable location tracking. By default, both Android and iOS logs your GPS location history. You can disable this, for Android: Maps --> Settings --> Location History, and iOS: Settings --> Privacy --> Location Services --> System Services --> Places. Be aware that third-party apps may still log your position, and there are other methods of determining your location other than GPS (Cell tower, WiFi, Bluetooth etc)
  • Use an application firewall to block internet connectivity for apps that shouldn't need it. Such as NetGuard (Android) or Lockdown (iOS)
  • Understand that apps contain trackers, that collect, store and sometimes share your data. For Android, you could use Exodus to reveal which trackers your installed apps are using.

Email

It's important to protect your email account, as if a hacker gains access to it they will be able to pose as you, and reset the passwords for your other online accounts. One of the biggest threats to digital security is still phishing, and it can sometimes be incredibly convincing, so remain vigilant, and understand how to spot malicious emails, and avoid publicly sharing your email address

  • Use a long, strong and unique password and enable 2FA
  • Consider switching to a secure and encrypted mail provider using, such as ProtonMail or Tutanota
  • Use email aliasing to protect your real mail address, with a provider such as Anonaddy or SimpleLogin. This allows you to keep your real address private, yet still have all messages land in your primary inbox
  • Disable automatic loading of remote content, as it is often used for detailed tracking but can also be malicious
  • Using a custom domain, will mean you will not loose access to your email address if your current provider disappears. If you need to back up messages, use a secure IMAP client Thuderbird

Networking

  • Use a reputable VPN to keep your IP protected and reduce the amount of browsing data your ISP can log, but understand their limitations. Good options include ProtonVPN and Mullvad, see thatoneprivacysite.net for detailed comparisons
  • Change your routers default password. Anyone connected to your WiFi is able to listen to network traffic, so in order to prevent people you don't know from connecting, use WPA2 and set a strong password.
  • Update your router settings to use a secure DNS, such as Cloudflare's 1.1.1.1, this should also speed up your internet. If you cannot modify your roters settings, you can set the DNS on your phone (with the 1.1.1.1. app), or Windows, Mac or Linux. DNS is the system used to resolve URL's to their server addresses, many DNS providers collect data on your browsing habbits and use it to target you with ads or sell it on.

Devices

  • Keep software up-to-date. Security fixes and patches are released as updates, so it is important to install updates when prompted, for your phone, PC, router, IoT devices and all software/apps.

📜 See More: The Complete Personal Security Checklist

OPEN-SOURCE, PRIVACY-FOCUSED SOFTWARE

Switch to alternative open-source, privacy-respecting apps and services, which won't collect your data, track you or show targetted ads.

Security

Browser Extensions

Privacy Badger - Blocks trackers. HTTPS Everywhere - Upgrates requests to HTTPS. [uBlock Origin] - Blocks ads, trackers and malwares. ScriptSafe - Block execution of certain scripts. WebRTC Leak Prevent - Prevents IP leaks. Vanilla Cookie Manager - Auto-removes unwanted cookies. Privacy Essentials - Shows which sites are insecure

Mobile Apps

Exodus - Shows which trackers are on your device. Orbot- System-wide Tor Proxy. Island - Sand-box environment for apps. NetGuard - Controll which apps have network access. Bouncer - Grant temporary permissions. Greenify - Controll which apps can run in the background. 1.1.1.1 - Use CloudFlares DNS over HTTPS. Fing App - Monitor your home WiFi network for intruders

Online Tools

εxodus - Shows which trackers an app has. ';--have i been pwned? - Check if your details have been exposed in a breach. EXIF Remover - Removes meta data from image or file. Redirect Detective - Shows where link redirects to. Virus Total - Scans file or URL for malware. Panopticlick, Browser Leak Test and IP Leak Test - Check for system and browser leaks

Productivity Tools

File Storage: NextCloud. File Sync: Syncthing. File Drop: Firefox Send. Notes: Standard Notes, Cryptee, Joplin. Blogging: Write Freely. Calendar/ Contacts Sync: ETE Sync

📜 See More: Complete List of Privacy-Respecing Sofware

SECURITY HARDWARE

There are also some gadgets that can help improve your physical and digital security.

There's no need to spend money- Most of these products can be made at home with open source software. Here's a list of DIY Security Gadgets.

📜 See More: Privacy and Security Gadgets

Thanks for visiting, hope you found something useful here :) Contributions are welcome, and much appreciated - to propose an edit raise an issue, or open a PR. See: CONTRIBUTING.md.

Found this helpful? Consider sharing, to help others improve their digital security 😇

Share on Twitter Share on LinkedIn Share on Facebook Share on Mastodon

Licensed under Creative Commons, CC BY 4.0, © Alicia Sykes 2020

Follow Alicia Sykes on Twitter