Week by week, I'm working through the Privacy Toolkit published by
@bitcoinpolicyuk. With the incoming head of
@Ofcom on record describing VPNs as a "problem", and having deliberately avoided speaking to any tech companies before forming policy, the direction of travel is obvious. It's up to each of us to opt out.
Last week we covered browsers and search engines. This week: email and password hygiene, which are two areas where most people are most exposed, and where a few simple changes make an enormous difference.
(Last week's post in the thread below)
Email
Gmail reads your emails. This is far from a conspiracy theory, and actually part of their business model. You can take steps to reduce the impact of this practice, by toggling āOFFā the āSmart Features and Personalisation', but there are many other options available to you.
The simplest fix is to switch to
@ProtonMail (
proton.me/mail). It's Swiss-based, end-to-end encrypted, and the free plan is genuinely generous, with email, calendar, and cloud storage. Setting up an account takes two minutes, no real name required, no KYC.
If you want a fully open-source alternative,
@TutaPrivacy (
tuta.com) offers a very similar service and publishes all its code publicly for anyone to audit.
Look for the beginner guide: "How to set up a free Proton Mail account" ā link in thread.
One habit that makes a huge difference: use a different email address for every service.
This isn't as painful as it sounds.
@DuckDuckGo Email Protection (
duck.com addresses, which are free) strips trackers from incoming emails and forwards them to your real inbox. You can spin up unique addresses for every website you sign up to. When one leaks, you know exactly where the breach came from and you can just delete or mothball that address.
@SimpleLogin does the same thing with more control. Excellent for throwaway or alias addresses.
Passwords
If you reuse passwords, a single breach exposes everything. A password manager should help you fix this vulnerability.
@ProtonMail also makes Proton Pass (
proton.me/pass), a free password manager with identity protection built in. Set it up once and you never have to remember a password again.
Going further
For those who want even more control: run your own home server using
@umbrel or
@start9labs. For example, with
@stalwartlabs you can get private email, calendar, storage, and, as I'll cover in a later post, your own Nostr relay, so no third party can ever delete your posts or censor what you say.
Next week: VPNs and device security.
Privacy, and our basic freedoms, are under attack from all sides.
Incredibly, the so-called 'liberal democracies' are now leading these attacks; arresting their own citizens for posting online, rolling out facial recognition cameras, and moving to ban VPNs.
"What can men do against such reckless hate?" And are we losing this battle?
Absolutely not. There's still time to fight back, and we have much in our arsenal. We at
@bitcoinpolicyuk have put together a 'Privacy Toolkit', that should let anyone, whatever their skill level, take a few small steps towards improving their privacy and their freedom, and making themselves just a little bit harder for governments to track and to oppress.
This isn't comprehensive, and we'll continue to update it as time goes by. We hope it's useful to everyone and serves as a handy guide to help us all push back against government overreach, wherever we find it.
Link in the thread and comments welcome! š