Your email address is the universal digital fingerprint that connects your various online identities. Safeguarding this entry point is the most critical step in protecting your digital footprint.
Email Aliasing
An email alias acts as a “proxy” that masks your real identity. It maps an alternative address to your primary inbox, forwarding all incoming messages while keeping your true email address hidden from the sender.
info@domain.com→niang@gmail.com
If an alias is compromised or starts receiving spam, you can simply delete it without having to change your primary email address.
Recommended Providers: Firefox Relay, SimpleLogin.
Sub-addressing
Many major providers (like Gmail and Outlook) support sub-addressing via the + operator. This allows you to create infinite variations of your address on the fly to track how your data is being used. Everything after the + is ignored by the mail server and delivered to your main inbox. however, the full address remains visible in the “To:” header. If you start receiving spam sent to the “nykaa” variation, you know exactly which service sold your data or suffered a breach.
niang+nykaa@gmail.com→niang@gmail.com
Encrypted email
Standard email is often stored in “plain text” on servers, meaning the provider can scan your messages. To safeguard your actual conversations, use providers that support End-to-End Encryption (E2EE). E2EE ensures that only you and the recipient can read the content; not even the service provider has the keys to unlock your messages.
Recommended Provider: Proton Mail.
Temporary Email
For websites that force a signup just to view a single page or download a file, avoid using any permanent address even an alias. Use Temporary/Disposable email services to receive a verification code or link. These inboxes self-destruct after a short period, ensuring you leave no long-term trail for marketing trackers to follow.
Recommended Provider: Temp-Mail
Password Management
Passwords are the first line of defense for your digital life. Relying on your memory often leads to weak, predictable choices; instead, use tools designed for high-level security.
The Power of Passphrases
Move away from complex, hard to remember strings. Use a passphrase: a sequence of random words that are easy for you to visualize but nearly impossible for a computer to guess.
HowTheTurnTables@08
Longer character counts provide exponentially more security than short passwords with special characters.
Zero-Reuse Policy
The golden rule of security is: Never reuse a password. If one website is breached and you use that same password elsewhere, your entire digital presence from your bank to your social media is at risk. Every account deserves its own unique secret.
Use a Password Manager
A password manager acts as a secure digital vault. It remembers all your unique credentials so you only have to remember one “Master Password.”
Random Usernames: Many people forget that you can also use password managers to generate random usernames. This prevents trackers from linking your different accounts together based on a common handle.
Use Multi Factor Authentication: Enable two factor authentication wherever possible, either time based OTP or SMS.
Recommendations:
- Bitwarden: Excellent for syncing across all your devices (Open Source).
- KeePassXC: Best for those who want total control with an offline, local-only database.
Web Browsing & Search
Your web browser is your primary interface with the digital world, but it is also the most common tool used to track your behavior and harvest your data.
Browser
Not all browsers are created equal. To maintain privacy, you need a browser that actively resists fingerprinting and blocks invasive trackers.
- Tor Browser: The gold standard for anonymity. It routes your traffic through three layers of encryption, making it nearly impossible for websites to know your true IP or identity.
- Mullvad Browser: Designed in partnership with the Tor Project, it provides the same “anti-fingerprinting” protections as Tor but uses a standard network for faster browsing.
- Firefox: A highly customizable, open-source choice. It can be “hardened” through its settings to reach high levels of privacy.
- Brave: A solid, user-friendly option that blocks ads and trackers right out of the box.
Private Search Engines
Standard search engines build a profile of your interests based on your queries. Use privacy-respecting alternatives that do not track your search history.
- Startpage: Provides Google’s high-quality search results but strips away all tracking and personal identifiers.
- DuckDuckGo: A popular alternative that does not store your search history or follow you with ads.
Useful Extensions
Enhance your browser’s defenses with these specific tools:
- uBlock Origin: The most effective, lightweight ad and content blocker. It stops trackers and malicious scripts from loading.
- Lightbeam (firefox only): A visual tool that reveals the hidden “third-party” sites that are tracking you as you move from one website to another.
Cloud Storage
“The Cloud” is simply someone else’s computer. Without encryption, the provider has the ability to scan and access your files.
- Privacy-First Providers: Proton Drive and PeerGOS offer zero-knowledge, end-to-end encryption, meaning only you hold the keys to your data.
- Cryptomator: Use Cryptomator to encrypt your files locally before you upload them to any cloud service (like Google Drive or Dropbox). This ensures that even if the cloud provider is breached, your data remains an unreadable scrambled mess.
Networking & Connection
Protect your traffic from being intercepted by your Internet Service Provider (ISP) or malicious actors on public Wi-Fi.
- VPN (Virtual Private Network): A VPN creates an encrypted tunnel for your internet traffic.
- Recommendations: ProtonVPN, Mullvad VPN, and IVPN are trusted for their strict “no-logs” policies and transparency.
- The Tor Network: For maximum anonymity, use Tor. It is more than just a browser; it is a decentralized network that hides your location and usage from anyone conducting network surveillance.
Private DNS
Every time you visit a website, your computer asks a DNS server for the IP address. By default, your ISP handles this and logs every site you visit.
Switch to a private DNS provider like AdGuard DNS or NextDNS.
These services encrypt your DNS queries (so your ISP can’t see them) and can block ads, trackers, and malicious websites at the network level before they even reach your device.
Activate Do Not Disturb (DND) in India and block unwanted commercial calls/SMS, send an SMS ‘START 0’ to 1909 or dial 1909
