This post is a resource, not a guide. I'm not great at paraphrasing so I just quoted everything and linked the sources.

Please do your own due diligence. This is your privacy, your security, and your finances. Determine what the appropriate measures of protection are for you, and then take them.

get your 💩 together

Table of Contents

1. Internet Privacy
2. Secure Your Browser
3. Use a VPN
4. Passwords
   1. Password Managers
5. Two-Factor Authentication
6. Reddit Specific Privacy & Security
7. Shit I stole from u/FordicusMaximus (with permission) because they have more wrinkles than me
8. Additional Tips & Advice
9. Quick Reference List

1. What is Internet Privacy?

​

• 3.3 Billion stolen credentials reported in 2017

Internet privacy, also commonly referred to as online privacy, is a subset of data privacy and a fundamental human right. Basically, it refers to the personal privacy that you’re entitled to when you display, store, or provide information regarding yourself on the Internet.

This can include both personally-identifying information (PII) and non-personally-identifying information, such as your behavior on a website. Without Internet privacy, all your activities are subject to being collected and analyzed by interested parties!

https://www.purevpn.com/blog/what-is-internet-privacy-scty/

2. Secure your browser

​

WARNING: Many browsers today are actually data collection tools for advertising companies. This is the case for Google Chrome, the largest and most popular browser. By collecting data through your browser, these companies can make money through their advertising partners with targeted ads. We see this same privacy-abusing business model with search engines, email services, and even free mobile apps.

Unless properly configured, most browsers contain lots of private information that can be exploited – or simply collected – by various third parties:

• Browsing history: all the websites you visit
• Login credentials: usernames and passwords
• Cookies and trackers: these are placed on your browser by the sites you visit
• Autofill information: names, addresses, phone numbers, etc.

https://restoreprivacy.com/bhttps://restoreprivacy.com/browser/secure/rowser/secure/

Your web browser is not only your main gateway to the World Wide Web but it’s also an entry point to the device you’re using, meaning that you’re constantly vulnerable to a plethora of security attacks every time you open and use it.

These software programs are favorited by unethical hackers simply because they make it easier for them to gain access to your personal information, sneak trackers onto your device, and even intercept and manipulate your Internet traffic.

https://www.purevpn.com/blog/browser-security-scty/

Additional Resources:

https://www.privacytools.io/#browser

https://www.privacytools.io/#browser-addons

HTTPS Everywhere is a Firefox, Chrome, and Opera extension that encrypts your communications with many major websites, making your browsing more secure.

https://www.eff.org/https-everywhere

Do note that it will only be receiving minor bug fixes going forwards.

https://therecord.media/eff-to-deprecate-https-everywhere-extension-as-https-is-becoming-ubiquitous/

3. Use a VPN

​

VPNs are basically a set of servers that you connect to through your internet service provider (ISP). Once you have established a connection with your VPN, a process known as tunneling, the servers act as your virtual home on the internet. It’s as if you moved yourself into a secure office space without actually moving at all.

Because all of your data is encrypted once tunneled, if a hacker were trying to intercept your browsing activity, say, while you were entering your credit card number to make an online purchase, the encryption would stymie their efforts. That’s why it’s a particularly good idea to use VPNs in public settings like coffee shops and airports.

The second major reason to go with a VPN is the closely related issue of privacy. By encrypting your data, what you search for, what you say in forums, and what you watch through streaming is entirely your own business.

It’s important to remember that a VPN will protect the data you transmit from your computer to the VPN hub, but it won’t necessarily prevent you from being tracked with cookies and other web trackers.

A third substantial consideration for using a VPN is the fact that it can give you a virtual location. Worried about the feds coming to knock on your door due to your unnatural fascination with garden gnomes? They won’t actually be able to link your IP address with your physical address. Want to play in an online poker room but it’s not allowed from your country? Then simply tunnel into a country where such activity is sanctioned and you’ll be good to go (all in). Looking to stream that film that was banned by your government? It’s probably not banned everywhere, so find a country where it’s viewable, tunnel in, and break out the popcorn.

https://lifehacker.com/the-beginners-guide-to-vpns-1819912770

https://www.safetydetectives.com/best-vpns/

https://www.privacytools.io/#vpn

Of course, while tunneling into a VPN may let you get around the laws and restrictions of your country, don’t forget that you are still bound by them. VPN usage doesn’t make you invisible, just anonymous. So if you’re doing a lot of suspicious surfing and you catch the eye of a government agency, with enough resources and time, they will likely be able to find you.

If you are considering a VPN, please way the pros and cons of using a free VPN first. If you don't like PFOF or ad tracking, you're probably not going to enjoy a free VPN service selling your data. This isn't to say that all free VPNs are bad, just make sure to do your own DD.

https://www.vpnmentor.com/blog/free-vpn-vs-paid-vpn-which-is-right-for-you/

https://www.vpnmentor.com/blog/top-really-free-vpn-services/

4. Use Strong Passwords

​

• 81% of data breaches from weak/stolen passwords
• Do not use the same password on every site or even multiple sites
  • Roughly 65% of people do this, however, and 13% use the same password for everything. It’s a bad idea, because once hackers get a password from one site, they’ll try it on every site you visit.
• Never use the same password on work accounts and personal accounts. Again, if there’s a breach, it will be easy for the intruders to get into all your accounts.

​

A strong password is your first line of defense against cybercrime.

When it comes to the safety of your passwords, it’s all about odds, which we’ll explore throughout this guide. Attackers who want to access your passwords usually do so by running a program that can guess possible combinations. Given a set of criteria, the machine can figure out your password simply by brute forcing every possible combination of characters.

If you have multiple internet accounts, you should have individual, unique, and tough to break passwords for each of them.

https://www.cloudwards.net/how-to-set-up-a-strong-password/

4.1 Password managers

​

I personally don't think trying to memorize all of your unique passwords is a great idea. You sure as hell shouldn't write them down and stuff them in a drawer that can be easily burglarized. If you think keeping your passwords offline on physical media is appropriate for you, please do yourself a favor by protecting that shit from burglars, water and fire damage.

I like only having to remember two passwords. One for my password manager, and the other for my authenticator app.

Password managers let users create hard-to-break passwords and automatically log in to websites without having to remember those passwords. Many also analyze the strength of passwords, monitor accounts for data breaches, and provide secure private browsing networks.

https://www.investopedia.com/best-password-managers-5080381

"5080381".... 🧐🖍... 5318008

Fixed it 💎👌😅 back to privacy

I recommend using a dedicated password manager, and not the one baked into your browser or even your phone.

https://www.pcworld.com/article/393979/why-your-browsers-password-manager-isnt-good-enough.html

Recently I've been recommending Bitwarden to my friends and family that are interested or struggling to remember their passwords. It's free and syncs across multiple devices and platforms.

All dedicated password managers are fairly good these days. I've enjoyed using LastPass and 1Password in the past, and have heard good things about Keepass and DashLane. They all have iOS/Android, Windows/Mac, and browser extension support.

​

Find the one you think best suites your needs. And change your password every now and again.

Alternate lists

https://www.passwordmanager.com/how-to-choose-the-best-password-manager/

https://www.passwordmanager.com/best/

https://www.privacytools.io/#password

https://www.safetydetectives.com/best-password-managers/

​

5. Two-factor Authentication

​

Two-factor authentication (2FA or MFA, for multifactor authentication) adds another layer of protection. Authenticator apps, such as Authy, Google Authenticator, or Microsoft Authenticator, enable one of the more-secure forms of 2FA. Using one of these apps can even help protect you against stealthy attacks like stalkerware.

Check out https://www.pcmag.com/picks/the-best-authenticator-apps to read more about:

• What Is Two-Factor Authentication?
• What's the Best Kind of Two-Factor Authentication?
• How Authenticator Apps Work
• What to Look for in an Authenticator App

Alternate list of 2FA authenticators - https://www.privacytools.io/#2fa

2FA is available on a huge variety of online services. Check to see if your internet accounts support 2FA, and follow the instructions to enable it (but read the next section before you get started).

https://2fa.directory/

Something that I'm more comfortable with, is having separate dedicated services for password management and authentication. Yes, I know it's more convenient to use one app for both. But then that's not really two factors of authentication if both your password and 2FA can be accesses on the same service (1 barrier of entry vs 2).

https://blog.securityevaluators.com/psa-dont-store-2fa-codes-in-password-managers-77d92608b062

https://blog.james.cridland.net/should-you-store-your-2fa-totp-tokens-in-your-password-manager-9798199b728

https://blog.1password.com/totp-for-1password-users/

Another way to approach 2FA is through the use of a physical authenticator key like a Yubikey

https://www.passwordmanager.com/yubico-yubikey-review/

https://www.yubico.com/solutions/multi-factor-authentication/

​

6. Reddit Specific Privacy & Security

Was just going to link to this LifeHacker article, but it's a slideshow... so fuck that, here's the good stuff

I. Enable 2FA

https://www.reddithelp.com/hc/en-us/articles/360043470031-What-is-two-factor-authentication-and-how-do-I-set-it-up-

II. Reddit Privacy & Security information

https://www.reddithelp.com/hc/en-us/categories/360003246511-Privacy-Security

III. Hide your online status

• log in to Reddit
• click your username in the top-right corner of the page
• under Online Status, click On.

This will change your Reddit online status to Off. You can verify this by clicking your username again. Your Reddit online status will be hidden on all platforms immediately.

IV. Use third-party apps and extensions for Reddit

Switching away from official Reddit apps means you’ll sometimes miss out on certain features, such as polls or chats, or you won’t always get the newest features immediately. However, it also allows you to control your Reddit experience through greater customization and a better interface.

Want to filter out certain flairs and clean up your r/Superstonk experience? Find an app or addon that can do this for you!

If you’re ready to switch, you can try Apollo on iOS, Boost on Android, and Reddit Enhancement Suite on desktop. Alternatively, you can switch to Reddit’s old design that many Redditors prefer even now. You can switch to old Reddit by simply going old.reddit.com, but if you want old Reddit to stick, go to account settings and enable Opt out of the redesign.

https://www.androidauthority.com/best-reddit-apps-android-734043/

https://www.igeeksblog.com/best-reddit-client-iphone-apps/

V. Make your profile "private"

incog-neato

Your profile reveals a lot of information about you on Reddit. You can reduce some of this by making your profile private.

• Go to https://www.reddit.com/settings/profile
• scroll to the Advanced section.

Here you can disable these three options:

1. Allow people to follow you (stops people from following your account),
2. Content visibility (hides posts on your profile from appearing on public Reddit pages),
3. and Active in communities visibility (hides which communities you’re active in).

Next, you should hide your Reddit profile from search engines like Google by going to privacy settings and disabling Show up in search results.

VI. Turn off ad personalization

is this PFOF? 💁🦋

Reddit uses a lot of your data to serve targeted ads and recommendations. If you’re uncomfortable with Reddit’s tracking, disable it in privacy settings. Under the Privacy section, you can disable all of the options to reduce Reddit’s tracking.

VII. Hide home feed recommendations

wait there are other subs?

Your home feed on Reddit is probably cluttered with recommendations you didn’t ask for. If you’d like to clean it up, go to feed settings on Reddit, and under Content Preferences, disable the Enable home feed recommendations option. This will remove Reddit’s recommended posts from your home feed.

VIII. Stop spammy notifications

\"oh my gawd stop, no one likes you\" - that one girl from highschool

If you’re done with these alerts and emails, go to notification settings on Reddit and click Manage email; scroll to the bottom and enable Unsubscribe from all emails to end Reddit email spam.

Then you should also review if you really need so many notifications from Reddit. Go to notification settings once again and disable all the alerts you don’t need. We disabled everything except Mentions of u\username, but your preferences may vary.

IX. Disable chat entirely

peace and quiet

If you don’t want to use Reddit’s instant messaging feature, you can stop people from pinging you on the site. To do so, go to Reddit’s messaging settings, click the drop-down menu next to Who can send you chat requests, and select Nobody. Finally, select the menu next to Who can send you private messages, and click Nobody.

X. Avoid Phishing Scams

• Do not open unknown links
• Be suspicious of chats and messages from unknown users
  • Check user account history - https://camas.github.io/reddit-search/

​

7. Shit I stole from u/FordicusMaximus (with permission) because they have more wrinkles than me

Remember this ape? No? Lol they made a security post ages ago, which has since been removed when the scrubbed their account.

But it turns out they reposted it! Here's some of the shit they were better able to put to words than myself. Sorry for stealing, but not sorry for sharing this excellent information!

​

Let's start with practicing the art of mouse hovering (or copy/pasting if on mobile). On most websites (including Reddit), a person can insert pretty much any link anywhere. So BEFORE you click on those pretty little blue words below, take a second to hover your mouse over the words to verify that the link that is hyperlinked reflects what's being said. You'll see the address it links to in the bottom left corner of your screen. If it looks suspicious, don't click on it. If on mobile, simply long press to copy and then paste into a browser (but don't hit enter right away) to verify URL. You can also use tools like this redirect checker, or this URL scanner.

https://www.passwordmanager.com/what-is-phishing/

Email Forwarding/Aliases

- Huh?

This is where you generate specific email addresses for individual accounts. For instance:

I create an account for Reddit. But instead of using [smoothbrain@gmail.com](mailto:smoothbrain@gmail.com), I create an email through one of the below providers that looks something like [smooth-brain-reddit@pm.com](mailto:smooth-brain-reddit@pm.com)

This way, I know exactly what account it's to and no other account has it. It also protects my actual email address from these websites I create accounts on. It's simply acting as a buffer before it hits my inbox.

Some of the providers I personally use are: Protonmail, Mailbox.org, AnonAddy, and SimpleLogin.

SimpleLogin is $15/yr if you are a student and have access to an .edu email. But these are all fairly inexpensive services to pay for IF you want to upgrade. They ALL have a free tier as well.

Side note: It is also wise to have separate email accounts specifically for finances! Don't use that email for anything else aside from your banking, credit cards, brokerages, and so on.

Cloud Storage

Did you know that Google, Microsoft, Dropbox, and many of the other cloud providers can literally see all of your dirty pictures, read the text of your documents (including finances), and see every file, date created and edited, and files "trashed"? Apple claims they can't, but they also don't have a public code and don't like outside audits...

What's one to do?

First, I would utilize a FOSS program like Cryptomator. What this does is create an encrypted space where you can throw in anything and everything and then lock it. This space can also be stored in a Google Drive account (or any online storage really), while actually remaining encrypted. Create and store the random-gen password in your Bitwarden account. And guess what?! This is also available for all major devices.

If you want a native encrypted cloud storage, one of the better priced ones is Sync. The free tier gives you 5GB to use. Here's a referral link if you want extra free storage a well. It's still E2EE, but not open-sourced. They do, however, have an audit on their encryption and source codes. I use this for backing up photos, business docs, and keeping a backup of one of my Cryptomator vaults here.

Online Tracking Prevention

Since most of you probably couldn't use a rock to break open a coconut, we're going to stay simple for this one as well (KISS style). Download Brave Browser and set that as your main browser.

I've seen wayyyy too many screenshots with ads spammed through on their screens. Brave has native ad blocking and anti-fingerprinting measures built in to it without the need to download extra extensions. This is plug-n-play privacy.

​

This browser can help reduce much of that information collected, as well as help spoof and provide incorrect information about you.

And please, please, please STOP using Google. Use DuckDuckGo as your primary search engine. It's just as good as Google and doesn't censor or track you. To change on pretty much any browser for mobile or desktop, go to Settings > Search Engine > DuckDuckGo. Easy as that.

​

I've hit the character limit so check OP for more nuggest https://www.reddit.com/r/Superstonk/comments/qkq1a8/best_security_practices_for_protecting_self_and/

​

8. Additional Tips and Advice

• Keep software up to date
• Use Anti-Virus protection & firewall
• Delete cookies when exiting your browser
• Adjust account privacy settings to protect your personal identifiable information
  • Consider making your social media accounts private / only viewable to accepted friend/follow requests
• Avoid sharing or clicking unknown links
• Avoid sending personal identifiable information or sensitive information over text or email
• Back up your data regulary
• Don't use public Wi-Fi
• Review online accounts & credit reports regularly for changes - https://haveibeenpwned.com/

​

9. Quick Reference List

Secure Your Browser

https://restoreprivacy.com/browser/secure/

https://www.privacytools.io/#browser

https://www.privacytools.io/#browser-addons

​

Use a VPN

https://www.safetydetectives.com/best-vpns/

https://www.privacytools.io/#vpn

​

Password Managers

passwordmanager.com/how-to-choose-the-best-password-manager/

https://www.passwordmanager.com/best/

https://www.privacytools.io/#password

https://www.safetydetectives.com/best-password-managers/

​

Two-Factor Authentication

https://www.pcmag.com/picks/the-best-authenticator-apps

https://www.privacytools.io/#2fa

https://2fa.directory/

​

Reddit Specific Privacy & Security

https://www.reddithelp.com/hc/en-us/articles/360043470031-What-is-two-factor-authentication-and-how-do-I-set-it-up-

https://www.reddithelp.com/hc/en-us/categories/360003246511-Privacy-Security

https://lifehacker.com/9-ways-to-become-more-anonymous-on-reddit-1848343187

​

https://camas.github.io/reddit-search/

https://redditsearch.io/

https://redditsearchtool.com/

​

Check out the shit I stole from u/FordicusMaximus (with permission) on their profile because they have more wrinkles than me. They repost their OP monthly!

​

Additional Tips & Advice

https://www.passwordmanager.com/what-is-phishing/

https://www.privacytools.io/

https://haveibeenpwned.com/

​

If you have any additional measures or comments please share!!