You do not need to be a hacker to protect your online privacy. Every day, your browsing, your apps, and your social media accounts quietly share details about your life with advertisers, data brokers, and sometimes criminals. The good news is that fixing it takes far less effort than most people think.
This guide gives you 10 simple steps that actually work. None cost money, and none require special skills. Each takes five to thirty minutes, and together they make you dramatically harder to track, hack, or scam.
1. Switch to a Browser That Blocks Trackers
Your browser is the front door to your online life, and most people leave it wide open. Chrome is convenient, but it is built by an advertising company, and its default settings allow a great deal of tracking. Firefox and Brave look and feel familiar, yet they block third-party cookies and trackers by default.
- Install Firefox or Brave on your computer and phone.
- Set tracking protection to its strictest level in the browser settings.
- Install the free uBlock Origin extension to block ads and hidden trackers.
This one change quietly stops hundreds of trackers per day, and pages often load faster too.
2. Give Every Account Its Own Password
If you reuse one password everywhere, a single data breach hands attackers the keys to your email, your bank, and your social media. Breaches happen constantly, and stolen login lists get traded for years. The fix is simple: use a different, random password for every account.
Nobody can remember dozens of random passwords, and you should not try. That is what password managers are for. Bitwarden is free, open source, and stores all your logins behind one master password, filling them in for you automatically. Create long, random passwords with our free password generator instead of inventing weak ones yourself. Start with your most important accounts: email, banking, and social media.
3. Turn On Two-Factor Authentication
A strong password is good, but two-factor authentication is what stops a stolen password from becoming a stolen account. Logging in then requires a second code from your phone, so a hacker cannot get in even if they know your password.
Turn it on for your email, bank, and social accounts today. Use an authenticator app like Google Authenticator, Authy, or 2FAS instead of SMS codes, which can be intercepted through SIM swapping. Save the backup codes each service gives you, and store them somewhere safe, like printed in a drawer.
4. Audit the Apps on Your Phone
Your phone apps collect more than you realize. That flashlight app does not need your location, and that game does not need your contacts. Open your phone settings and review which apps can access your camera, microphone, location, and contacts. Set location access to “only while using the app” wherever possible, and revoke permissions that make no sense.
While you are there, delete every app you have not opened in three months. Fewer apps means fewer companies holding your data. For small everyday tasks, using free tools that run right in your browser is often smarter than installing yet another app, because there is no account to create and no data to hand over.
5. Run a Privacy Checkup on Your Google Account
If you use Gmail, YouTube, or Google Maps, Google holds a detailed record of your searches, locations, and video history. Visit myaccount.google.com and run the built-in Privacy Checkup, which walks you through the key settings in a few minutes.
The key changes: turn off ad personalization, pause Location History and Web and App Activity (or set them to auto-delete after 3 months), and review which third-party apps can access your Google account. Revoke anything you do not recognize. Apple users should do the same at appleid.apple.com.
6. Use a VPN on Public Wi-Fi
Coffee shop and airport Wi-Fi is convenient and risky. On an open network, others can potentially snoop on unencrypted traffic, and the network owner can log the sites you visit. A VPN encrypts your connection so none of that is visible.
You do not need a paid subscription. Proton VPN offers a genuinely free plan with no data limits, enough for occasional public Wi-Fi use. Turn it on before connecting to any network you do not own. A VPN does not make you anonymous, but it makes public Wi-Fi dramatically safer.
7. Tighten Your Social Media Privacy Settings
Most social profiles leak far more than their owners realize. Old posts, tagged photos, check-ins, and public friend lists give strangers and scammers a detailed map of your life. Make your profile private or friends-only. On Facebook, use “Limit Past Posts” to make old public posts private in one click. On Instagram, turn off location tagging and review who can tag you.
Also check which apps are connected to your social accounts. Old quiz apps and games often keep profile access long after you stop using them. Remove every connected app you do not actively need.
8. Stop Giving Away Personal Details
Scammers piece together identities from small bits of information: your full birthday, phone number, address, and mother’s maiden name, posted publicly across different sites. Remove personal details from your social media bios. Your phone number should never be public.
Be equally careful with random websites. Before creating an account, ask whether you really need the service. Many sites that demand your email or phone number have no-signup alternatives. For example, instead of registering on a sketchy site to make a code, use our QR code generator, which runs entirely in your browser. Less signing up means less of your data floating around.
9. Move Sensitive Chats to an Encrypted Messenger
Regular text messages are not encrypted. Your carrier can read them, and they can be intercepted. For conversations that matter, use a messenger with end-to-end encryption, so only you and the other person can read the messages.
Signal is the gold standard. It is free, open source, run by a nonprofit, and collects almost no data about you. WhatsApp also encrypts message content, though its parent company collects more metadata. You do not need to move every conversation, but switch your most sensitive chats, like anything involving finances, health, or identity documents, to Signal.
10. Delete Old Accounts and Use Email Aliases
Every account you ever created is a potential breach waiting to happen. That forum you joined in 2015 still holds your email and password hash. Search your inbox for old welcome emails, then close accounts you no longer use. The site JustDeleteMe has direct deletion links for hundreds of services.
Going forward, protect your real email with aliases. Apple and Firefox offer relay services that create random addresses forwarding to your real inbox. Use a different alias for each site. If one gets spam or is breached, disable it without affecting anything else. Also check haveibeenpwned.com to see if your email appeared in known breaches, and change those passwords immediately.
Key Takeaways
- Privacy is a set of small habits, not a single product. Work through the 10 steps one at a time, starting with passwords and two-factor authentication.
- Use a different, random password for every account, stored in a free password manager like Bitwarden.
- Switch to Firefox or Brave, install uBlock Origin, and audit your phone app permissions to cut off most tracking at the source.
- Turn on two-factor authentication with an authenticator app on your email, bank, and social accounts.
- Reduce your exposure going forward: delete old accounts, use email aliases, and think twice before signing up for things you do not need.
