3 ms·
I'd suggest a full online reboot: * reinstall the OS on whatever desktop/laptop you use, don't install any browser plugins, get a pihole to help with ads. * B
by sliken 5y ago
I'd suggest a full online reboot:
* reinstall the OS on whatever desktop/laptop you use, don't install any browser plugins, get a pihole to help with ads.
* Buy some Yubi key or similar U2F token. Install authy or similar on your phone that supports TOTP and HOTP and allows for backups. Enable U2F or HOTP/TOTP on any site that supports it.
* Use bitwarden or something of similar capabilities (keepassx, bitwarden or similar functionality self hosted if you want). Keep notes on recovery codes, security questions, old passwords, data of account creation, which email to use for verification, etc. etc. etc. The more info the better when it comes to recovering the account. Always use a random answer to any security question, not anything easy to guess or discover about you.
* buy a new phone with a new phone number (keep the old if needed), ideally an IOS or Google Pixel, both of which have really good security and don't install random crapware from the cell provider or manufacturer. In particular avoid Samsung androids and the crapware they install from "partners" and cell providers.
* get a new online email address, use a strong password not shared with any other service. Enable 2FA, never use SMS for 2FA.
* Open a new credit card, set the notification threshold to $1.00 and have it email or SMS you any transactions. Use your new email account. Use said credit card online and offline.
* Create an account on an credit reporting/watching service like experian, watch for any fraudulent activity.
* for any new account use the new credit card, new email, turn on 2FA (not SMS), use a unique strong password, and keep notes in your password DB. The only connections to your previous existence should be your home address and name.
* Do not use your email address/account for posting apps to the Google or Apple stores, various automated scanning can trigger a violation that will impact your Apple or Google account associated with it.