4 ms·
1. LastPass / 1Password 2. AdBlocker Extension 3. Modify your /etc/hosts to block a lot of malicious sites. 4. Signup for https://haveibeenpwned.com/ https:/
by jeffshek 9y ago
1. LastPass / 1Password
2. AdBlocker Extension
3. Modify your /etc/hosts to block a lot of malicious sites.
4. Signup for https://haveibeenpwned.com/ https://haveibeenpwned.com/
5. VPNs on all wifis not your own.
6. 2-factor wherever you can. But also a place where you can print out your backup 2-factor keys, since losing your phone happens.
7. Have a email for newsletters/spam/signup, another that you use for friends.
8. Use credit cards that can generate on-demand numbers. IE. Both Bank of America and Citi let you generate one time use credit card numbers with set limits.
9. Signup (one time) with your credit cards to warn you for sudden changes in your credit score (ie. to prevent someone opening a loan in your name).
There's probably a lot more that I forgot I do ... it's amazing how little people do here.
- hello_asdf 9y agoRegarding #3, I'd recommend https://github.com/StevenBlack/hosts/ https://github.com/StevenBlack/hosts/
- doomrobo 9y agoFor on-demand credit card generation, there's also privacy.com if you're in the U.S
- alltakendamned 9y agoGood list, 1,5 and 6 will have the most impact. Additionally, keep all your devices up to date with patches. Run windows update, update iOS/Android etc.
- kenbaylor 9y agoRegarding #6, use Authy. Does everything Google authenticator does, but you can upgrade your phone and use other devices as backups (in case of device loss)
- dewey 9y ago1Password can also do that and then you don’t need a second app if you decide to use it as a password manager
- srinivasan 9y agoThis would make your wallet a single point of vulnerability. If someone gains access to your wallet, they would know your passwords and your 2FA tokens. While it's certainly better than no 2FA, it's not as good as having the token and password in different places.
- BjoernKW 9y agoPlease note though: The backup feature makes Authy vulnerable to phone porting attacks.
- kenbaylor 9y agoTrue, but it's optional. Their 'by default' options are pretty reasonable.
- chewz 9y ago1) use Keepass [1] and sync (via Dropbox or Google Drive) from your PC to your smartphone. It is free and remebere that LastPass had been compromised already. 2) Do not bother with adblocker - instead use properly configured Chrome with javascript OFF by default, and ON only on trusted sites, use incognito mode, set your own DNS and 204 and some other settings, also use Decentraleyes extension and switch off remote fonts etc. 3) Use DNSCrypt whenever possible - on your home router if you can, and on RaspberryPI acting as a router when traveling. 4) Block malicious hosts, trackers, advertising etc via /etc/hosts/ Block all Facebook server entirely. Block Gravatar and other trackers. Keep your own blacklist and whitelist. This is better then adblock extensions in browser because it can block tracking and advertising also on your tablets and iPhones. Try using dnsmasq for caching and splitting DNS so queries for Apple and Google and AmazonAWS servers are geo-smart and the rest of queries goes to DNSCrypt server in Iceland. 5) set up your own VPN (you can get VPS for that starting at 10$ per year) possibly with Strongswan IKE and use it on your mobile phone always ON. Your server should also use DNSCrypt and perhaps also act as your private DNS server. 6) Use Fastmail[2] and make use of email aliases. Fastmail have tons of various domains so I have set up alias me@nospammail.net and can use disposable addresses like first@me.nospammail.net, second@me.nospammail.net etc. You will know who leaked your email address. You can block certain addresses easily. 7) Set text alerts for your card transactions over certain limit. 8) On Google, Microsoft and other important accounts set Pushover[3] email address for security alerts. You will be receiving immediate alerts via push on your phone [1]: https://en.wikipedia.org/wiki/KeePass https://en.wikipedia.org/wiki/KeePass [2]: https://www.fastmail.com/ https://www.fastmail.com/ [3]: https://pushover.net/ https://pushover.net/
- tazard 9y agoWhile I don't think your wrong that these are better solutions, I feel you missed the "Extremely easy" part. Keepass is significantly less user friendly than LastPass/1password. VPSs can be very inaccessible for non-computer savvy people also.
- frabbit 9y agoFor simple, secure use (which is what we are talking about) there is little functional difference between Keepass and Lastpass.
- ecesena 9y ago1.5. Use a separate browser for sensitive sites, e.g. banks. (possibly, avoid storing these passwords if you can) I feel this is pretty simple, way simpler than many other recommendations here, and has its benefits especially for people that tend to browse without paying too much attention.