So recently I’ve gotten a bit more serious about my internet security, and made some changes. Here’s a short list of what I’ve done, but I’m wondering if I’m missing anything important:
- Moved from Brave to Firefox
- Bought my own domain for my email (so I can switch email providers at any time)
- Switched to Duck Duck Go from google (It’s gotten worse anyways)
- Bought the Proton package (VPN, Encrypted email, etc…)
- Installed Thunderbird (instead of microsoft mail app)
- Installed uBlock Origin
- Installed Bitwarden for password managing (My passwords are also no longer all the same)
Is there anything that I have missed that should be a priority for internet security?
Not an expert, but you need to define your “threat model” first. Whom against want you to harden your security?
That’s a good point. Mostly protecting my data from sites, hiding info from my (shared) internet owner and ISP, keeping accounts secure, and steering clear of viruses. Among other stuff.
If you share internet you definitely need a vpn. Anyone who can log into the router can see your exact internet history. Depending on the exact situation you can also set up vlans, but only if the other person cant just simply disable them at the end point (router). Maybe you can setup your own router behind the current one with a build-in always-on vpn.
Custom email aliases and password managers are great just in case one account gets hacked they cant just use that account to log into other sites.
Viruses, just don’t click on suspect links, check for phising etc in emails, harden your browser by blocking JavaScript as much is possible without it breaking the websites. And don’t use windows, since most viruses target that. Linux and Mac are less targeted and have better build in security.
And update all your stuff regularly, even things like router firmware.
Oh and don’t attach iot products to the internet, those usually have terrible security and can be used to break into your network. Block them in the router (again, having your own router helps) and preferably put then on their own vlan.