Here’s the ultimate tip for securing your private information.

1. Keep away from the Internet

For normies it’s easy:

1. Password Manager
2. Firefox
3. Adblocker

Those three will make up for 90% of peoples bad habits.

1. Password manager such as Bitwarden, generate long strong passwords for everything.
   1a. Corpo SSO (By which I mean “log in with Google/Microsoft/Apple/Whatever”) nothing.
2. Hardware keys, MFA on anything that doesn’t support one.
3. Degoogle, de-megacorp.
4. Use Linux, stop the Stockholm syndrome that is Windows.

VPN shouldn’t even be in the top 10. The benefits are dubious at best and the jury is still out on whether it makes you more of a target or if you can trust ANY provider meaningfully.

I think you are confusing privacy with anonymity.

• Don’t use Brave.

i think everyone’s threat model is different so the first step would be to decide what urs is and the lengths in which ur willing to go to protect ur data and privacy. for some people, there’s no need to go so far as to assume complete anonymity on the internet and that’s fine.

I disagree with your #3 point. There is nothing stopping you from disclosing personally identifiable information through Tor or a VPN. They can help you with keeping private, but they don’t do anything if you don’t know how to use them for privacy.

The Tor browser resists fingerprinting, but a VPN doesn’t. A VPN only keeps your IP address private, and your IP address isn’t really that interesting to the big tracker companies.

I would say something more like Firefox’s container tabs is way more useful for privacy.

Got some disagreements here:

I’d say you can reuse names/user names but then you should seperate your internet personality from your reallife personality.

Choose the right social media (fedi verse stuff that doesn’t spy on you)

Also tor is a bit much for most things. for staying private a vpn you can personally trust should be enough

But the tips you listed are great for staying anonymous

1. Password manager
2. Adblocker
3. 2FA

Next steps are a Quick software audit: how do you check your email, what chat apps are you using, what browser are you using, etc.

Always keep things low-friction to stat out

https://bbbhltz.codeberg.page/blog/2022/03/low-friction-introduction-to-digital-privacy/

It all depends on risk rewards. Everybody has a different case. I don’t think generic advice is possible. Only what works for specific individuals. Yours sounds like is good advice for you.

Edit: there is no defense against a threat vector with unlimited resources.

don’t reuse usernames

but sentimental value ._.

Just some off the top of my head.

1. Don’t use Google, Microsoft, or any other major company (or subsidiaries) for email.
2. Use a privacy-focused browser (aka not Chrome).
3. Don’t sign up for every rewards program or app, they all harvest data.

1. Don’t open email attachments from your family.