I’ll add another: firmware password. Even though it is easy to bypass on many generic PC laptops, some are fairly secure and prevent unauthorized parties from m

I’ll add another: firmware password. Even though it is easy to bypass on many generic PC laptops, some are fairly secure and prevent unauthorized parties from messing with your EFI or booting from flash drives. Without a BIOS or firmware password, a malicious person could theoretically replace your boot loader or the software that asks for your disk encryption password with a version that logs the password in plaintext and/or sends it back home. Although much less important than disk encryption, firmware passwords can be a good additional safety measure.