Being privacy-aware in 2016
Distilling tips down for regular users who don&#x27;t use SSH or are intimidated by compiling KeePassX for Linux themselves, my tips would be:<p>1. Use a user-friendly password manager like Dashlane or 1password with a long unique password and a second factor (that isn&#x27;t SMS based). Password re-use is the #1 way accounts are being compromised at the moment and there are now good password managers that are easy to use with a low barrier to entry<p>2. Use an extensive ad blocker like uBlock Origin and use <i>multiple profiles in your browser to separate your serious accounts like webmail and banking from general web browsing</i>. The other common way of being exploited is drive-by malware and web-based exploits. A combination of blocking third-party content and separating your browsing profiles will prevent a lot of it. Don&#x27;t feel guilty about blocking ads - most publishers are extremely negligent with what they allow on their sites via ad networks. Bonus: switch to Chromium[0] (firefox isn&#x27;t sandboxed and exploits are too common) (but alert yourself to Chromium updates with an IFTTT of the release blog to &lt;pick your notification method&gt;) or alternatively remove Google, Flash, Java etc.<p>3. Get a VPN subscription and set it up on your laptop &amp; mobile devices. Seriously, don&#x27;t use open WiFi networks or shared networks without wrapping your connections in encryption. sslstrip is extremely effective and many apps either don&#x27;t verify&#x2F;authenticate SSL connections or don&#x27;t pin certificates. IVPN, PIA, the Sophos VPN product - take a pick.<p>4. Most home routers are super shit and full of holes. Upgrade to a router that supports open firmware and pick one of openwrt, dd-wrt, monowall, pfsense etc. bonus: run an UTM like Untangled (commercial) or Sophos (free up to 50 CALs iirc)<p>5. Encrypt your stuff - VeraCrypt is a decent TrueCrypt fork but most operating systems now have support for volume encryption - your local disk, USB sticks[1], or a file-based volume. Backups should be to encrypted media<p>6. Be anonymous - create a disposable email with a fake name to signup to services with. even better sinkhole a random domain name you register. No service outside of banking, insurance, health, etc. <i>really</i> need to know your actual identity details.<p>[0] <a href="https:&#x2F;&#x2F;download-chromium.appspot.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;download-chromium.appspot.com&#x2F;</a><p>[1] <a href="http:&#x2F;&#x2F;www.theinstructional.com&#x2F;guides&#x2F;encrypt-an-external-disk-or-usb-stick-with-a-password" rel="nofollow">http:&#x2F;&#x2F;www.theinstructional.com&#x2F;guides&#x2F;encrypt-an-external-d...</a>