Checklist for securing communications
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
LICENSE
README.md

README.md

Privacy Checklist

This is a general list of stuff you can use to increase your privacy based on ease of use. You don't have to do everything on this list, but try to do at least the easy stuff. Pull requests welcome!

  • Easy - Easy setup and no maintenance
  • Medium - Requires reading to setup and maintain
  • Hard - Must understand how the underlying system works (lots of gotchas)

Web Browsing

  • Easy
    • Use Firefox or Chrome - Open source browsers and frequent security updates
    • HTTPS extension (HTTPS Everywhere) - use encrypted connections whenever possible
    • Use a password manager (KeePass, KeePassX, LastPass, 1Password, etc.) - Always use generated passwords for websites and save those in a password manager! Also, use diceware to generate a password.
    • Anti-tracking extension (Privacy Badger, uBlock, etc.) - many tracking and malware attacks are distributed by ads and analytics trackers
    • Disable third party cookies (Firefox, Chrome) - prevents embedded content from setting tracking cookies
    • Click to play flash (Firefox, Chrome) - prevent embedded flash from running unless you want it to
    • Enable Two-Factor-Authentication (2FA) (tutorial) - enable 2FA on logins for websites that support it
  • Medium
  • Hard
    • Reduce fingerprints (tool) - really hard to totally eliminate brower fingerprints

Email

  • Easy
    • None (private email is hard)
  • Medium
    • None (private email is hard)
  • Hard

Phone calls

  • Easy
    • Signal - end-to-end encrypted phone calls on iPhone and Android

Texting/Chatting

  • Easy
    • Signal - end-to-end encrypted phone calls on iPhone and Android
  • Easy (but not as safe as Signal)
    • iMessage - end-to-end encrypted texts, but proprietary code (only use if Signal doesn't work)
    • WhatsApp - partial end-to-end encrypted texts, but proprietary code (only use if Signal doesn't work)
  • Medium

File Storage

  • Easy
  • Medium
    • Encrypted cloud backups (SpiderOak) - paid and proprietary, but easier than running your own server
  • Hard
    • Windows and Linux encryption (Windows, Linux)
    • PGP (GnuPG) - for specific file encryption on USB drive, external device, etc.

Further Reading