1. Don't use untrusted hosts to access trusted hosts. 2. If you do, put Tails on a USB drive and use S/Key one-time passwords to access your hosts. Tails shou

1. Don't use untrusted hosts to access trusted hosts. 2. If you do, put Tails on a USB drive and use S/Key one-time passwords to access your hosts. Tails should protect you from most real-time stealing of your passwords, and S/Key should protect you from most hardware keylooggers (by the time the one-time password is exfiltrated, it's useless).