Checklist for securing communications
Switch branches/tags
Nothing to show
Clone or download
Latest commit f2e0394 Feb 20, 2016
Permalink
Failed to load latest commit information.
LICENSE Initial commit Feb 20, 2016
README.md added pgp to file storage Feb 20, 2016

README.md

Privacy Checklist

This is a general list of stuff you can use to increase your privacy based on ease of use. You don't have to do everything on this list, but try to do at least the easy stuff. Pull requests welcome!

  • Easy - Easy setup and no maintenance
  • Medium - Requires reading to setup and maintain
  • Hard - Must understand how the underlying system works (lots of gotchas)

Web Browsing

  • Easy
    • Use Firefox or Chrome - Open source browsers and frequent security updates
    • HTTPS extension (HTTPS Everywhere) - use encrypted connections whenever possible
    • Use a password manager (KeePass, KeePassX, LastPass, 1Password, etc.) - Always use generated passwords for websites and save those in a password manager! Also, use diceware to generate a password.
    • Anti-tracking extension (Privacy Badger, uBlock, etc.) - many tracking and malware attacks are distributed by ads and analytics trackers
    • Disable third party cookies (Firefox, Chrome) - prevents embedded content from setting tracking cookies
    • Click to play flash (Firefox, Chrome) - prevent embedded flash from running unless you want it to
    • Enable Two-Factor-Authentication (2FA) (tutorial) - enable 2FA on logins for websites that support it
  • Medium
  • Hard
    • Reduce fingerprints (tool) - really hard to totally eliminate brower fingerprints

Email

  • Easy
    • None (private email is hard)
  • Medium
    • None (private email is hard)
  • Hard

Phone calls

  • Easy
    • Signal - end-to-end encrypted phone calls on iPhone and Android

Texting/Chatting

  • Easy
    • Signal - end-to-end encrypted phone calls on iPhone and Android
  • Easy (but not as safe as Signal)
    • iMessage - end-to-end encrypted texts, but proprietary code (only use if Signal doesn't work)
    • WhatsApp - partial end-to-end encrypted texts, but proprietary code (only use if Signal doesn't work)
  • Medium

File Storage

  • Easy
  • Medium
    • Encrypted cloud backups (SpiderOak) - paid and proprietary, but easier than running your own server
  • Hard
    • Windows and Linux encryption (Windows, Linux)
    • PGP (GnuPG) - for specific file encryption on USB drive, external device, etc.

Further Reading