How to Protect Yourself
You don't need to be a tech expert to meaningfully reduce your digital footprint. These eight steps are practical, free or cheap, and ordered by impact. Start at the top.
Use a password manager
Reusing passwords is the single biggest preventable risk to your online security. A password manager (Bitwarden is free and open-source; 1Password is excellent if you want to pay) generates and stores unique, strong passwords for every site. You only need to remember one master password.
Enable two-factor authentication (2FA)
2FA means even if someone steals your password, they still can’t get in without a second factor (usually a code from your phone). Enable it on your email account first — that’s the key to resetting everything else. Then your banking, social media, and any other important accounts.
Review your app permissions
On iPhone: Settings → Privacy & Security. On Android: Settings → Privacy → Permission Manager. Look at which apps have access to your location, microphone, camera, and contacts. Revoke anything that doesn’t need it. Location is the most sensitive — set most apps to ‘While Using’ rather than ‘Always’.
Use a browser that respects your privacy
Firefox with the uBlock Origin extension is a strong, free choice. It blocks most trackers and ads by default, without requiring any configuration. Brave is another option if you want something closer to Chrome’s interface. Both are free.
Check if your data has been breached
Visit haveibeenpwned.com and enter your email address. It’s free, safe, and run by a respected security researcher. If your email appears in a breach, change the password for that service immediately — and any other site where you used the same password.
Tighten your social media privacy settings
Most social platforms default to sharing more than you realise. On Facebook: Settings → Privacy → check who can see your posts, search for you, and send you friend requests. On Instagram: switch to a private account if you don’t need a public presence. On LinkedIn: Settings → Visibility → review what recruiters and the public can see.
Be cautious with “Sign in with Google/Facebook”
Using social login is convenient, but it links your activity on third-party sites back to your main account. If you do use social login, periodically review which apps have access: Google: myaccount.google.com/permissions — Facebook: Settings → Apps and Websites. Remove anything you no longer use.
Use a VPN on public Wi-Fi
Public Wi-Fi (cafes, airports, hotels) can expose your browsing to others on the same network. A VPN encrypts your connection. Proton VPN has a genuinely free tier with no data cap. Only use a VPN you trust — a bad VPN is worse than no VPN.
The most important thing
Don't try to do everything at once. Pick the top two items on this list and do them this week. Small, consistent steps compound over time. You don't need to disappear from the internet — you just need to be intentional about it.