mirror of
https://git.hackliberty.org/Awesome-Mirrors/personal-security-checklist.git
synced 2024-08-20 13:48:46 -06:00
245 lines
18 KiB
Markdown
245 lines
18 KiB
Markdown
# Personal Cyber Security | TLDR [![Awesome](https://awesome.re/badge-flat2.svg)](https://awesome.re) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat-square)](http://makeapullrequest.com) [![License](https://img.shields.io/badge/LICENSE-CC_BY_4.0-00a2ff?&style=flat-square)](https://creativecommons.org/licenses/by/4.0/)
|
|
|
|
#### Contents
|
|
- [Personal Security Checklist](#personal-security-checklist)
|
|
- [Privacy-focused Software](#open-source-privacy-focused-software)
|
|
- [Security Hardware](#security-hardware)
|
|
|
|
## PERSONAL SECURITY CHECKLIST
|
|
|
|
> This is the shortened version of [The Complete Personal Security Checklist](https://github.com/Lissy93/personal-security-checklist/blob/master/README.md).
|
|
It lays out the 20 most essential security + privacy tips, that you should complete to protect your digital life.
|
|
|
|
|
|
### Authentication
|
|
- Use strong, unique passphrases for each of your accounts (12+ alpha-numeric upper and lower-case letters + symbols). Avoid predicitable patterns, dictionary words and names.
|
|
- Use a password manager: It is going to be almost impossible to remember hundreds of unique passwords. A password manager will generate strong passwords, securly store and auto-fill them, with a browser extension and mobile app. All you will need to do, is remember 1 master password. [BitWarden](https://bitwarden.com) is a great option, as is [1Password](https://1password.com) (not open source). [KeePass XC](https://keepassxc.org) is more secure, but without any cloud-sync functionality.
|
|
- Use 2-factor authentication for all secure accounts (email, cloud storage, financial accounts and social media). You can do this with [Authy](https://authy.com) (proprietary) which will also let you back up and sync your tokens across multiple devices. Or you can use [Aegis](https://getaegis.app) or [AndOTP](https://github.com/andOTP/andOTP) which are both open source.
|
|
- Be cautious when logging into your accounts on someone elses device, as you cannot be sure that it is free of malware. If you do need to access one of your accounts, use incognito mode (Ctrl+Shift+N) so your credentials don't get cached.
|
|
|
|
|
|
### Browsing
|
|
- Don't enter any personal details on websites that are not HTTPS
|
|
- Switch to [Firefox](https://www.mozilla.org/en-GB/firefox/new/) or [Brave Browser](https://brave.com/?ref=ali721), both of which have strong privacy and security configurations by default, and will also make loading websites faster. Consider using [Tor](https://www.torproject.org/) for the greatest privacy.
|
|
- Consider using search engine that doesn't track you, such as [DuckDuckGo](https://duckduckgo.com/) or [StartPage](https://www.startpage.com/), which show unbiased results and don't keep logs.
|
|
- Install [PrivacyBadger](https://www.eff.org/privacybadger) extension to block invisible trackers, and [HTTPS Everywhere](https://www.eff.org/https-everywhere) to force sites to load via HTTPS. You can use [Panopticlick](https://panopticlick.eff.org/) to quickly check if your browser is safe against tracking.
|
|
|
|
|
|
### Phone
|
|
- Have a strong pin/ password on your mobile device.
|
|
- Turn of WiFi when your not using it, and delete saved networks that you no longer need (Settings --> WiFi --> Saved Networks).
|
|
- Don't grant apps permissions that they don't need. For Android, you can use [Exodus](https://exodus-privacy.eu.org/en/) to quickly see the permissions and trackers for each of your installed apps.
|
|
|
|
|
|
### Email
|
|
- It's important to protect your email account, as if a hacker gains access to it they will be able to reset the passwords for all your other accounts. Ensure you have a strong and unique password, and enablle 2FA.
|
|
- Emails are not encrypted by default, meaning they are able to be read by anyone who intercepts them as well as your email provider (Google, Microsoft, Apple, Yahoo etc all monitor emails). Consider switching to a secure mail provider, such as [ProtonMail](https://protonmail.com/).
|
|
|
|
|
|
### Networking
|
|
- Use a reputible VPN, to keep your IP protected, and reduce the amount of browsing data your ISP can log. (Note, VPN's do not provide ultimate protection as advertisers commonly state). See [thatoneprivacysite.net](https://thatoneprivacysite.net/) for a detailed comparison chart. [ProtonVPN](https://protonvpn.com/) has a free starter plan, [Mullvad](https://mullvad.net/) is great for anonimity. Other good all-rounders include [IVPN](https://www.ivpn.net/), NordVPN, TorGaurd and AirVPN.
|
|
- Change your routers default password. Anyone connected to your WiFi is able to listen to network traffic, so in order to prevent people you don't know from connecting, use WPA2 and set a strong password.
|
|
- Update your router settings to use a secure DNS, such as [Cloudflare's 1.1.1.1](https://1.1.1.1/dns/), this should also speed up your internet. If you cannot modify your roters settings, you can set the DNS on your phone (with the [1.1.1.1. app](https://1.1.1.1/)), or [Windows](https://developers.cloudflare.com/1.1.1.1/setting-up-1.1.1.1/windows/), [Mac](https://developers.cloudflare.com/1.1.1.1/setting-up-1.1.1.1/mac/) or [Linux](https://developers.cloudflare.com/1.1.1.1/setting-up-1.1.1.1/linux/). DNS is the system used to resolve URL's to their server addresses, many DNS providers collect data on your browsing habbits and use it to target you with ads or sell it on.
|
|
|
|
|
|
### Devices
|
|
- Keep software up-to-date. Security fixes and patches are released as updates, so it is important to install updates when prompted, for your phone, PC, router, IoT devices and all software/ apps.
|
|
|
|
📜 **See More**: [The Complete Personal Security Checklist](https://github.com/Lissy93/personal-security-checklist/blob/master/README.md)
|
|
|
|
----
|
|
|
|
|
|
## OPEN-SOURCE, PRIVACY-FOCUSED SOFTWARE
|
|
|
|
Switch to alternative open-source, privacy-respecting apps and services, which won't collect your data, track you or show targetted ads
|
|
|
|
#### Security
|
|
- Password Managers: [BitWarden] | [1Password] *(proprietary)* | [KeePassXC] *(offline)* | [LessPass] *(stateless)*
|
|
- 2-Factor Authentication: [Aegis] *(Android)* | [Authenticator] *(iOS)* | [AndOTP] *(Android)*
|
|
- File Encryption: [VeraCrypt] | [Cryptomator] *(for cloud)*
|
|
- Encrypted Messaging: [Signal] | [KeyBase] *(for groups/ communities)*
|
|
- Encrypted Email: [ProtonMail] | [MailFence] | [Tutanota] | (+ also [33Mail] | [anonaddy] for aliasing)
|
|
- Private Browsers: [Brave Browser] | [Firefox] *with [some tweaks](https://restoreprivacy.com/firefox-privacy/)* | [Tor]
|
|
- Non-Tracking Search Engines: [DuckDuckGo] | [StartPage] | [SearX] *(self-hosted)* | [Quant]
|
|
- VPN: [Mullvad] | [ProtonVPN] | [Windscribe] | [IVPN] *(better still, use [Tor])*
|
|
- App Firewall: [NetGuard] (Android) | [Lockdown] (iOS) | [OpenSnitch] (Linux) | [LuLu] (MacOS)
|
|
|
|
#### Browser Extensions
|
|
[Privacy Badger] - Blocks trackers. [HTTPS Everywhere] - Upgrates requests to HTTPS. [uBlock] - Blocks ads. [ScriptSafe] - Block execution of certain scripts. [WebRTC Leak Prevent] - Prevents IP leaks. [Vanilla Cookie Manager] - Auto-removes unwanted cookies. [Privacy Essentials] - Shows which sites are insecure
|
|
|
|
#### Mobile Apps
|
|
[Exodus] - Shows which trackers are on your device. [Orbot]- System-wide Tor Proxy. [Island] - Sand-box environment for apps. [NetGaurd] - Controll which apps have network access. [Bouncer] - Grant temporary permissions. [Greenify] - Controll which apps can run in the background. [1.1.1.1] - Use CloudFlares DNS over HTTPS. [Fing App] - Monitor your home WiFi network for intruders
|
|
|
|
#### Online Tools
|
|
[εxodus] - Shows which trackers an app has. [';--have i been pwned?] - Check if your details have been exposed in a breach. [EXIF Remover] - Removes meta data from image or file. [Redirect Detective] - Shows where link redirects to. [Virus Total] - Scans file or URL for malware. [Panopticlick], [Browser Leak Test] and [IP Leak Test] - Check for system and browser leaks
|
|
|
|
#### Productivity Tools
|
|
File Storage: [NextCloud]. File Sync: [Syncthing]. File Drop: [Firefox Send]. Notes: [Standard Notes], [Cryptee], [Joplin]. Blogging: [Write Freely]. Calendar/ Contacts Sync: [ETE Sync]
|
|
|
|
📜 **See More**: [Complete List of Privacy-Respecing Sofware](https://github.com/Lissy93/personal-security-checklist/blob/master/6_Privacy_Respecting_Software.md)
|
|
|
|
----
|
|
|
|
## SECURITY HARDWARE
|
|
|
|
There are also some gadgets can help improve your physical and digital security. Although often, it is not actually necissary to spend money, as most of these products can be [built at home](https://github.com/Lissy93/personal-security-checklist/blob/master/5_Privacy_and-Security_Gadgets.md#diy-security-products)
|
|
|
|
- **Blockers and Protectors**: [USB Data Blocker], [Mic-Lock], [Faraday Pouch], [RFID Card Protector], [ArmourCard], [Web Cam Covers], [Port Blockers], [Privacy Screen]
|
|
- **Encrypted Storage**: [Hardware-Encrypted USB Drive], [Hardware-Encrypted HDD], [Encrypted Kingston]
|
|
- **Authentication**: [YubiKey], [SoloKey], [NitroKey]
|
|
- **Networking**: [Anonabox] (Tor travel router), [Fing Box] (Network monitoring)
|
|
- **Crypto**: [Leger Nano], [Trezor], [Physical Metal Wallet]
|
|
- **Misc**: [Bootable Drive Eraser], [Anti-Surveillance Clothing], [Passphrase Dice], [Voice Changer], [Deauth Detector], [Bug Detector], [Card Skimmer Detector], [Ultra-Sonic Microphone Jammer]
|
|
|
|
📜 **See More**: [Privacy and Security Gadgets](https://github.com/Lissy93/personal-security-checklist/blob/master/5_Privacy_and-Security_Gadgets.md)
|
|
|
|
----
|
|
|
|
*Thanks for visiting, hope you found something useful here :) Contributions are welcome, and much appreciated - to propose an edit [raise an issue](https://github.com/Lissy93/personal-security-checklist/issues/new/choose), or [open a PR](https://github.com/Lissy93/personal-security-checklist/pull/new/master). See: [`CONTRIBUTING.md`](/.github/CONTRIBUTING.md).*
|
|
|
|
*Found this helpful? Consider sharing it with others, to help them also improvde their digital security* 😇
|
|
|
|
[![Share on Twitter](https://i.ibb.co/pypyYMJ/share-twitter.png)](http://twitter.com/share?text=Check%20out%20the%20Personal%20Cyber%20Security%20Checklist-%20an%20ultimate%20list%20of%20tips%20for%20protecting%20your%20digital%20security%20and%20privacy%20in%202020%2C%20with%20%40Lissy_Sykes%20%F0%9F%94%90%20%20%F0%9F%9A%80&url=https://github.com/Lissy93/personal-security-checklist)
|
|
[![Share on LinkedIn](https://i.ibb.co/2ScNMJY/share-linkedin.png)](
|
|
http://www.linkedin.com/shareArticle?mini=true&url=https://github.com/Lissy93/personal-security-checklist&title=The%20Ultimate%20Personal%20Cyber%20Security%20Checklist&summary=%F0%9F%94%92%20A%20curated%20list%20of%20100%2B%20tips%20for%20protecting%20digital%20security%20and%20privacy%20in%202020&source=https://github.com/Lissy93)
|
|
[![Share on Facebook](https://i.ibb.co/J2DXDNf/share-facebook.png)](https://www.linkedin.com/shareArticle?mini=true&url=https%3A//github.com/Lissy93/personal-security-checklist&title=The%20Ultimate%20Personal%20Cyber%20Security%20Checklist&summary=%F0%9F%94%92%20A%20curated%20list%20of%20100%2B%20tips%20for%20protecting%20digital%20security%20and%20privacy%20in%202020&source=)
|
|
[![Share on Pinterest](https://i.ibb.co/ZVgcTC9/share-pinterest.png)](https://pinterest.com/pin/create/button/?url=https%3A//repository-images.githubusercontent.com/123631418/79c58980-3a13-11ea-97e8-e45591ef2d97&media=The%20Ultimate%20Personal%20Cyber%20Security%20Checklist&description=%F0%9F%94%92%20A%20curated%20list%20of%20100%2B%20tips%20for%20protecting%20digital%20security%20and%20privacy%20in%202020)
|
|
|
|
|
|
*Licensed under [Creative Commons, CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), © [Alicia Sykes](https://aliciasykes.com) 2020*
|
|
|
|
<a href="https://twitter.com/intent/follow?screen_name=Lissy_Sykes">
|
|
<img src="https://img.shields.io/twitter/follow/Lissy_Sykes?style=social&logo=twitter" alt="Follow Alicia Sykes on Twitter">
|
|
</a>
|
|
|
|
|
|
[//]: # (SECURITY SOFTWARE LINKS)
|
|
[BitWarden]: https://bitwarden.com
|
|
[1Password]: https://1password.com
|
|
[KeePassXC]: https://keepassxc.org
|
|
[LessPass]: https://lesspass.com
|
|
[Aegis]: https://getaegis.app
|
|
[AndOTP]: https://github.com/andOTP/andOTP
|
|
[Authenticator]: https://mattrubin.me/authenticator
|
|
[VeraCrypt]: https://www.veracrypt.fr
|
|
[Cryptomator]: https://cryptomator.org
|
|
[Tor]: https://www.torproject.org
|
|
[Pi-Hole]: https://pi-hole.net
|
|
[Mullvad]: https://mullvad.net
|
|
[ProtonVPN]: https://protonvpn.com
|
|
[Windscribe]: https://windscribe.com/?affid=6nh59z1r
|
|
[IVPN]: https://www.ivpn.net
|
|
[NetGuard]: https://www.netguard.me
|
|
[Lockdown]: https://lockdownhq.com
|
|
[OpenSnitch]: https://github.com/evilsocket/opensnitch
|
|
[LuLu]: https://objective-see.com/products/lulu.html
|
|
[SimpleWall]: https://github.com/henrypp/simplewall
|
|
[33Mail]: http://33mail.com/Dg0gkEA
|
|
[anonaddy]: https://anonaddy.com
|
|
[Signal]: https://signal.org
|
|
[KeyBase]: https://keybase.io
|
|
[ProtonMail]: https://protonmail.com
|
|
[MailFence]: https://mailfence.com?src=digitald
|
|
[Tutanota]: https://tutanota.com
|
|
[Brave Browser]: https://brave.com/?ref=ali721
|
|
[Firefox]: https://www.mozilla.org/en-GB/firefox/browsers
|
|
[DuckDuckGo]: https://duckduckgo.com
|
|
[StartPage]: https://www.startpage.com
|
|
[Quant]: https://www.qwant.com
|
|
[SearX]: https://asciimoo.github.io/searx
|
|
|
|
[//]: # (PRODUCTIVITY SOFTWARE LINKS)
|
|
[NextCloud]: https://nextcloud.com
|
|
[Standard Notes]: https://standardnotes.org/?s=chelvq36
|
|
[Cryptee]: https://crypt.ee
|
|
[Joplin]: https://joplinapp.org
|
|
[ETE Sync]: https://www.etesync.com/accounts/signup/?referrer=QK6g
|
|
[Firefox Send]: https://send.firefox.com
|
|
[Syncthing]: https://syncthing.net
|
|
[Write Freely]: https://writefreely.org
|
|
|
|
[//]: # (BROWSER EXTENSION LINKS)
|
|
[Privacy Badger]: https://www.eff.org/privacybadger
|
|
[HTTPS Everywhere]: https://eff.org/https-everywhere
|
|
[uBlock]: https://github.com/gorhill/uBlock
|
|
[ScriptSafe]: https://github.com/andryou/scriptsafe
|
|
[WebRTC Leak Prevent]: https://github.com/aghorler/WebRTC-Leak-Prevent
|
|
[Vanilla Cookie Manager]: https://github.com/laktak/vanilla-chrome
|
|
[Privacy Essentials]: https://duckduckgo.com/app
|
|
|
|
[//]: # (ONLINE SECURITY TOOLS)
|
|
[';--have i been pwned?]: https://haveibeenpwned.com
|
|
[εxodus]: https://reports.exodus-privacy.eu.org
|
|
[Panopticlick]: https://panopticlick.eff.org
|
|
[Browser Leak Test]: https://browserleaks.com
|
|
[IP Leak Test]: https://ipleak.net
|
|
[EXIF Remover]: https://www.exifremove.com
|
|
[Redirect Detective]: https://redirectdetective.com
|
|
[Virus Total]: https://www.virustotal.com
|
|
|
|
[//]: # (ANDROID APP LINKS)
|
|
[Island]: https://play.google.com/store/apps/details?id=com.oasisfeng.island
|
|
[Orbot]: https://play.google.com/store/apps/details?id=org.torproject.android
|
|
[Orbot]: https://play.google.com/store/apps/details?id=org.torproject.android
|
|
[Bouncer]: https://play.google.com/store/apps/details?id=com.samruston.permission
|
|
[Crypto]: https://play.google.com/store/apps/details?id=com.kokoschka.michael.crypto
|
|
[Cryptomator]: https://play.google.com/store/apps/details?id=org.cryptomator
|
|
[Daedalus]: https://play.google.com/store/apps/details?id=org.itxtech.daedalus
|
|
[Brevent]: https://play.google.com/store/apps/details?id=me.piebridge.brevent
|
|
[Greenify]: https://play.google.com/store/apps/details?id=com.oasisfeng.greenify
|
|
[Secure Task]: https://play.google.com/store/apps/details?id=com.balda.securetask
|
|
[Tor Browser]: https://play.google.com/store/apps/details?id=org.torproject.torbrowser
|
|
[PortDroid]: https://play.google.com/store/apps/details?id=com.stealthcopter.portdroid
|
|
[Packet Capture]: https://play.google.com/store/apps/details?id=app.greyshirts.sslcapture
|
|
[SysLog]: https://play.google.com/store/apps/details?id=com.tortel.syslog
|
|
[Dexplorer]: https://play.google.com/store/apps/details?id=com.dexplorer
|
|
[Check and Test]: https://play.google.com/store/apps/details?id=com.inpocketsoftware.andTest
|
|
[Tasker]: https://play.google.com/store/apps/details?id=net.dinglisch.android.taskerm
|
|
[Haven]: https://play.google.com/store/apps/details?id=org.havenapp.main
|
|
[NetGaurd]: https://www.netguard.me/
|
|
[Exodus]: https://exodus-privacy.eu.org/en/page/what/#android-app
|
|
[XUMI Security]: https://xumi.ca/xumi-security/
|
|
[Fing App]: https://www.fing.com/products/fing-app
|
|
[FlutterHole]: https://github.com/sterrenburg/flutterhole
|
|
[1.1.1.1]: https://1.1.1.1/
|
|
[The Guardian Project]: https://play.google.com/store/apps/dev?id=6502754515281796553
|
|
[The Tor Project]: https://play.google.com/store/apps/developer?id=The+Tor+Project
|
|
[Oasis Feng]: https://play.google.com/store/apps/dev?id=7664242523989527886
|
|
[Marcel Bokhorst]: https://play.google.com/store/apps/dev?id=8420080860664580239
|
|
|
|
[//]: # (SECURITY HARDWARE LINKS)
|
|
[USB Data Blocker]: https://amzn.to/2HDArRP
|
|
[Mic-Lock]: https://amzn.to/2uQ3r5L
|
|
[Faraday Pouch]: https://amzn.to/3bIkfw4
|
|
[RFID Card Protector]: https://amzn.to/38ycMxN
|
|
[Web Cam Covers]: https://amzn.to/2uEz16H
|
|
[Port Blockers]: https://amzn.to/327Yn9n
|
|
[Privacy Screen]: https://amzn.to/3bAa9xv
|
|
[YubiKey]: https://amzn.to/38wcG9R
|
|
[SoloKey]: https://amzn.to/32i6QGQ
|
|
[NitroKey]: https://www.nitrokey.com
|
|
[Encrypted Kingston]: https://amzn.to/38xsnO5
|
|
[Hardware-Encrypted USB Drive]: https://amzn.to/2vD32Ug
|
|
[Hardware-Encrypted HDD]: https://amzn.to/37pTmK8
|
|
[Fingbox]: https://amzn.to/2V5gATx
|
|
[Drive Eraser]: https://amzn.to/2SsL67Y
|
|
[Phone privacy screen]: https://amzn.to/2OZO3Lc
|
|
[Anonabox]: https://amzn.to/2T5KnJ5
|
|
[Fing Box]: https://amzn.to/2SPeRQn
|
|
[BitDefender Box]: https://amzn.to/39WSBd4
|
|
[Travel VPN]: https://amzn.to/37T1V0a
|
|
[OnlyKey]: https://amzn.to/2Pem62a
|
|
[Physical Metal Wallet]: https://amzn.to/32gO2bb
|
|
[Leger Nano]: https://amzn.to/37Mu4pH
|
|
[Trezor]: https://amzn.to/32mEJqe
|
|
[ArmourCard]: https://armourcard.com
|
|
[Bootable Drive Eraser]: https://amzn.to/38SClcW
|
|
[Anti-Surveillance Clothing]: https://adversarialfashion.com
|
|
[Voice Changer]: https://amzn.to/3bXqpsn
|
|
[Passphrase Dice]: https://amzn.to/2OTE4Hw
|
|
[Ultra-Sonic Microphone Jammer]: https://amzn.to/37LsSCV
|
|
[Bug Detector]: https://amzn.to/2ulRFQp
|
|
[Deauth Detector]: https://amzn.to/2T1sH16
|
|
[Card Skimmer Detector]: https://lab401.com/products/hunter-cat-card-skimmer-detector
|