A simple guide to protecting your privacy online (start here)
“Protect your privacy online” is the kind of advice that sounds huge and vague, so most people do nothing. The truth is that privacy comes down to a few areas, and you can make real progress in an afternoon. This guide is the map. Each section links to a deeper how-to when you want one.
First, why bother?
“I’ve got nothing to hide” misses the point. Your data is used to build a profile of you, to target you with ads, to guess your habits, and, in the wrong hands, to scam or impersonate you. Privacy is not about secrecy. It is about not handing strangers more than they need.
1. Lock the front door
The single biggest thing you can do is use a strong, different password for every account, plus two-factor authentication on the important ones. Reused passwords are how one leak becomes ten hacked accounts. A password manager makes this effortless. See our password manager guides.
2. Tidy your phone
Your phone is the device that knows the most about you, mainly through location and app permissions. A few minutes in the settings cuts most of it. We have soft, step-by-step guides for both:
3. Reduce tracking as you browse
As you move around the web, trackers stitch together a picture of you. You can shrink this a lot by turning on your browser’s tracking protection, clearing cookies now and then, and considering a privacy-respecting browser. A VPN can help in specific situations, mainly on public wifi, though it is not the magic privacy cure some adverts suggest. We cover when it is actually worth it in our VPNs and privacy section.
4. Share less than feels normal
Social media quietly encourages oversharing: your location, your routine, your full date of birth, photos of where you live. Lock your profiles down to people you know, and think twice before posting things that answer common security questions.
5. Watch for scams
Privacy and scams are two sides of the same coin. The less of your data is floating around, the fewer hooks a scammer has. If you want to get sharper at spotting them, start with how to spot a phishing email and how to check if a website is legit.
If you only do three things this week: put your main accounts behind unique passwords and two-factor login, spend ten minutes in your phone's privacy settings, and turn on tracking protection in your browser. That alone puts you ahead of most people.
Privacy is not all-or-nothing. Every setting you change is one less thing a company or a scammer knows about you. Browse the full privacy section when you’re ready for more.