Digital Hygiene – A Guide to Protecting Your Online Presence

The Digital Age and the Importance of Privacy

In today’s digital age, our lives are increasingly intertwined with technology. From social media and online shopping to cloud storage and smart devices, our digital footprints are vast and varied. While technology offers incredible convenience, it also poses significant risks to our privacy and security. Understanding digital hygiene is essential for anyone who wants to protect their personal information in this connected world.

How Your Data is Collected and Used

Large technology companies like Google, Apple, Facebook, and Microsoft have built their business models around collecting and analysing user data. These companies use sophisticated algorithms to track your online behaviour, gathering data from various sources to create detailed profiles. Here’s how it works:

• Data Collection: Every time you use a service, browse the web, or engage with social media, data is collected. This includes search queries, location data, browsing history, purchase habits, and even your interactions with digital assistants.
• Data Integration: The collected data from various sources is integrated to form a comprehensive picture of your identity. Companies use cross-device tracking and third-party cookies to link data from your computer, smartphone, and other devices.
• Profiling and Personalisation: The integrated data is used to create detailed profiles, which allow companies to personalise advertisements, suggest products, and tailor content to your interests. This personalisation is based on patterns in your behaviour, preferences, and demographic information.
• Identity Reconstruction: By connecting fragments of information, companies can effectively reconstruct your digital identity, often knowing more about you than you realise. This can include your interests, habits, relationships, and even potential future behaviours.
• AI Pattern Prediction: Artificial Intelligence (AI) is now used extensively by all of these companies to make the whole process more accurate. So much so, that you can have the impression that you are being watched, even though your PC camera and microphone have not been accessed.

The Threat of Cybercriminals

Cybercriminals use similar techniques to build full identity credentials from information obtained through cyber attacks. They exploit data breaches, phishing attacks, and malware to access personal information such as:

• Stolen Data: Information like names, addresses, phone numbers, and credit card details are often stolen from databases and sold on the dark web.
• Social Engineering: Cybercriminals use social engineering tactics to manipulate individuals into revealing sensitive information. This might involve posing as a trusted contact or using information from social media profiles to appear credible.
• Credential Stuffing: By using stolen usernames and passwords, criminals attempt to gain access to various accounts, banking on the fact that many people reuse credentials across different sites.

Once they gather enough information, they can impersonate individuals, commit fraud, or sell identities for financial gain. This makes practising good digital hygiene more important than ever. With the widespread availability of AI software and services, the result of this fraudulent activity is indistinguishable from you actually undertaking these activities.

Why Digital Hygiene Matters

Given the sophisticated methods used by both companies and cybercriminals to gather and use your data, understanding digital hygiene is crucial. By taking proactive steps to protect your digital identity, you can safeguard your privacy and reduce the risk of falling victim to cybercrime.

This article will guide you through essential digital hygiene practices, helping you understand how to protect your personal information and maintain control over your digital life.

Key Practices for Digital Hygiene

Now that we’ve covered the importance of digital hygiene, let’s explore specific steps you can take to enhance your online security and privacy.

While I would recommend attempting to utilise all of the practices below, I feel that you can go a long way by starting from the top of the list and implementing the strategies one at a time, by working down the list. Before you know it, you will have implemented things that most people are completely unaware of and you will have taken full ownership of your online safety.

Use Unique Passwords on All Sites

Why It Matters: Using the same password across multiple sites can make you vulnerable. If one site is hacked, your other accounts could be at risk too.

What to Do: Create a unique password for each website or service you use. Consider using a password manager like LastPass or Bitwarden to generate and store complex passwords for you. This way, you don’t have to remember each password—you only need to remember one master password. There are plenty of password managers available today and many of them a free, or have free versions. It is recommended that you choose one based on your specific usage requirements (phone, laptop, PC, etc.)

Use Unique Email Addresses for Different Sites

Why It Matters: Using a single email for all your online activities can lead to spam or worse if that email is compromised.

What to Do: Consider creating different email addresses for various purposes, such as one for personal communication, one for work, and others for online shopping or subscriptions. Services like:

• SimpleLogin: This service allows you to create multiple aliases that forward emails to a single email account. It’s a cloaking service that can be used in conjunction with a secure email provider of your choice.
• Migadu: This provider allows you to create as many email addresses or aliases as you want under one account, as long as your total email traffic falls within the quota of your email plan. You can also send emails from your alias if you create an email account with the same address as the alias.
• Google Domains: Offers email forwarding services where you can create up to 100 alias email addresses for your domain and forward them to a single email address.
• Namecheap, ImprovMX, ForwardEmail: These are claimed as some of the best free email forwarding services, allowing you to forward emails from multiple addresses to a single inbox.

Use Hardware Tokens for Two-Factor Authentication

Why It Matters: Two-factor authentication (2FA) adds an extra layer of security beyond just a password.

What to Do: Use hardware tokens like YubiKey or Google Titan for 2FA. These devices generate a unique code that you must enter along with your password. This makes it significantly harder for hackers to gain access to your accounts, even if they have your password.

Use Random Password Recovery Questions

Why It Matters: Security questions are often used to recover accounts. Predictable answers can be guessed by hackers.

What to Do: Use random answers for password recovery questions. Instead of using easily discoverable information (like your mother’s maiden name), use random strings of characters and store them in your password manager.

Manage Privacy Settings in Browsers and Online Accounts

Why It Matters: Default privacy settings often prioritise convenience over privacy, which can expose more of your data.

What to Do: Regularly review and adjust privacy settings on your web browsers and online accounts. Disable third-party cookies, limit tracking, and control who can see your personal information on social media platforms.

Reduce Social Media Posts That Identify Personal Details

Why It Matters: Oversharing on social media can expose you to risks like identity theft or unwanted attention.

What to Do: Be mindful of what you post online. Avoid sharing sensitive information like your full name, address, phone number, or vacation plans. Adjust your privacy settings to limit who can view your posts.

Avoid Clicking on Suspicious Links in Emails and Websites

Why It Matters: Malicious links can lead to phishing attacks or malware infections.

What to Do: Be cautious about clicking links, especially from unknown sources. Hover over links to see where they lead before clicking, and verify the sender’s identity in emails.

Use a Mail Forwarding Address

Why It Matters: Sharing your physical address online can lead to privacy invasions and safety risks.

What to Do: Use a mail forwarding service to receive mail without revealing your physical address. Services like:

• SOS Mail Solutions: Offers personal and business mail forwarding services in Australia. They provide options to hold, scan, or post mail regularly, and offer free storage and shredding of mail. SOS Mail also provides a virtual PO Box address and detailed itemised lists of received mail and transactions.
• HotSnail: Provides an online PO box and street address in Australia for receiving mail and deliveries. They offer services such as scanning envelopes and forwarding mail worldwide. HotSnail allows customers to access their mail online and manage it electronically.
• B2B HQ: Offers a monthly mail forwarding service to Australian addresses. They provide options to compress and send mail monthly, with secure mailing services. However, this service is limited to documents, letters, and cards, and does not include large parcels or boxes.

Restrict Devices Access in Router/Modem

Why It Matters: Controlling device connections to specific devices, such as your PC, mobile phone, etc. can prevent unauthorised devices from using your local network and potentially sending your data to an online data harvester.

What to Do: Access your “configuration settings” on your broadband modem/router. Find where your actual connected devices are listed and enable/disable them as permanent/static connections. On most modern domestic modem/routers, this is a simple point and click operation. If your modem/router has a “guest” network capability, consider enabling this for the guests in your house.

Use a VPN – But Choose Provider Carefully

Why It Matters: A Virtual Private Network (VPN) encrypts your internet traffic, adding a layer of privacy.

What to Do: Choose a reputable VPN provider that prioritises privacy and has transparent business practices. Research their relationships with governments and other companies. Understanding these relationships can help you assess the level of privacy you can expect.

Look for providers with a strict no-logs policy, meaning they don’t keep records of your online activities. Avoid VPN providers which have a business relationship with other VPN providers. When information is collated between VPN providers, your identity and usage habits become visible again, defeating some of the reasons you chose to use the VPN in the first place.

Backup Your Data

Why It Matters: One of the most common cyber threats is ransomware. When a criminal is able to encrypt your entire PC and only offers to provide a key to decrypt it after you pay them a ransom. This type of crime assumes that you do not have a backup of your data.

What to Do: Keep a backup of all of your data on an external data storage device such as a portable HDD or SSD USB drive. Consider keeping a copy of the external backup drive at a friend or relative’s place (once a month). If you use your computer every day, then back it up every day.

Use Virtual Machines and Multiple Phones

Why It Matters: Separating your digital activities can protect sensitive information from exposure.

What to Do: Consider using virtual machines (VMs) to run multiple operating systems on a host machine and isolate activities like browsing from sensitive business tasks. Similarly, use separate phones for work and personal use to keep data separate and reduce risk.

Professional Assistance: Setting up virtual machines can be complex. If you’re unfamiliar with the process, consider seeking help from a professional to ensure proper configuration and security.

Use Immutable Operating Systems

Why It Matters: MS Windows is extremely easy to be tampered with by malware. Once the breach has occurred, recovery is difficult, if not impossible.

What to Do: Use immutable operating systems. Many common Linux distributions have immutable versions available. You have a lot to choose from. Here are just a few:

• carbonOS: An independent Linux distribution focusing on a seamless user experience with a Flatpak-first and container-first approach.
• Fedora Silverblue: A variant of Fedora Workstation that offers immutability, providing a stable experience useful for testing and container-based software development.
• Flatcar Container Linux: Tailored for container workloads, this community-built distribution provides a minimal OS image.
• NixOS: Known for its reproducibility, NixOS allows you to use a configuration file to build and replicate systems consistently.
• GUIX System: Based on the Guix package manager, this distribution offers immutability with a focus on reproducibility.
• Endless OS: A Debian-based distribution with a read-only root filesystem managed by OSTree, ensuring system stability during updates.
• Nitrux: A Debian-based distribution that supports atomic upgrades, featuring KDE Plasma as its desktop environment.
• Vanilla OS: A Debian Sid-based distribution that allows running multiple Linux distros on a single system.
• blendOS: Aims to combine features from various distributions while maintaining immutability and update reliability.
• Talos Linux: Designed for Kubernetes, Talos Linux is secure, immutable, and supports cloud and virtualisation platforms.
• ChromeOS Flex: A cloud-first, secure operating system for PCs and Macs, offering immutability similar to ChromeOS.
• SteamOS: Used in the Steam Deck, this Arch Linux-based distribution is immutable, providing a stable gaming environment.

Professional Assistance: As with virtual machines, using immutable operating systems may require professional assistance to set up correctly.

Conclusion

By understanding how your data can be collected and used, and by following these digital hygiene practices, you can significantly enhance your online security and privacy. Remember, it’s not about being completely anonymous online but rather about being smart and aware of the potential risks and taking proactive steps to protect yourself.