Protect your accounts.
Reduce your exposure.
Useful personal security starts with a realistic threat model. Learn what you need to protect, who might target it, and which habits reduce the risk, without promises of invisibility.
Personal security and OPSEC basics
Your practical starting point
- Name what matters
Accounts, devices, identity, conversations, and recovery access.
- Strengthen the basics
Unique passwords, strong MFA, updates, backups, and careful sharing.
- Review what changes
New devices, public exposure, suspicious sessions, and recovery settings.
“I use a VPN. Isn’t that enough?”
A VPN changes part of the network path. It does not stop a stolen session, an exposed recovery email, or information you publish under your own identity. Match the control to the risk.
Choose a layer to see what to protect first. This is an illustrative scenario, not a client case study.
Start with the accounts that unlock others.
- Accounts
- Devices
- Exposure
- Protect first
- Primary email and password manager
- Strengthen
- MFA and account recovery
Why this matters
Protect your primary email and password manager. Use unique passwords and phishing-resistant MFA where supported; keep recovery methods protected.
A protected account still needs a protected device.
- Accounts
- Devices
- Exposure
- Protect first
- The devices holding your sessions
- Strengthen
- Updates, encryption, and backups
Why this matters
Install updates, use a strong screen lock and disk encryption, and keep tested backups. Review installed applications and browser extensions.
Share deliberately, not automatically.
- Accounts
- Devices
- Exposure
- Review first
- What others can learn about you
- Reduce
- Unnecessary public sharing
Why this matters
Review public profiles, location sharing, and document metadata. Reduce unnecessary disclosure, but do not assume deletion removes every copy.
Build an informed baseline.
These are educational starting points, not tailored protection for a high-risk situation or a promise of anonymity. We do not offer covert investigations into individuals.
- Know the limits of a VPNSeparate network privacy from account, browser, and device security.
- Understand data tracesThink about backups, synced copies, recipients, and retention before sharing sensitive information.
- Respond to account concernsReview sessions and recovery settings using the provider’s official guidance. Seek qualified help for a suspected compromise.
Build your understanding, one guide at a time.
Explore security Docs →