How to Protect Your Privacy Online
- Area
- Technology
- Filed
- Length
- 4 min
In this page (10)
- 1. Lock down your accounts first
- 2. Keep everything updated
- 3. Review app and browser permissions
- 4. Share less by default
- 5. Be careful on public networks
- 6. Recognise manipulation
- 7. Tidy up old accounts and data
- A privacy routine at a glance
- What about work devices?
- Perfect privacy is not the goal
Most people do not lose their privacy in one dramatic moment. It leaks away gradually: an app that asks for more access than it needs, an old account nobody remembers, a password reused on a site that later gets breached. Protecting yourself is therefore less about buying a single product and more about closing those small gaps one by one.
The steps below are ordered roughly by how much protection they give for the effort involved. You do not need to finish them all in an afternoon.
1. Lock down your accounts first
Your email account is the master key to almost everything else, because password resets land there. Give it a long, unique password and switch on two-step verification. Then do the same for banking, work tools and any account that stores payment details.
- Use a password manager. It creates and remembers a different strong password for each site, so one leak does not open every door.
- Prefer an authenticator app or security key over text-message codes where the service allows it.
- Save your recovery codes somewhere safe offline, in case you lose your phone.
2. Keep everything updated
Updates for your phone, computer, browser and apps often fix security holes that attackers already know about. Turn on automatic updates wherever you can and restart devices when prompted. An old router can be a weak point too, so check whether its manufacturer still releases firmware.
3. Review app and browser permissions
Open the privacy settings on your phone and look at which apps can use your location, microphone, camera, contacts and photos. Many requests made sense once and no longer do. Set location to "while using" or "never" for apps that do not need it in the background.
In your browser, review which sites can send notifications or access the camera, clear out extensions you no longer use and consider blocking third-party cookies. Each extension can read what you do on the pages it runs on, so keep only the ones you trust and actually need.
4. Share less by default
Social profiles often reveal more than people realise: birthdays, home towns, pet names and employers are exactly the details used in security questions and targeted scams. Set profiles to private where it makes sense, limit who can see old posts and think twice before sharing travel plans in real time.
5. Be careful on public networks
Hotel, airport and café Wi-Fi is convenient but shared with strangers. Most websites now encrypt traffic, which helps, yet it is still sensible to avoid sensitive tasks on open networks or to use your phone's hotspot instead. A reputable VPN adds a layer of encryption between your device and the network; our earlier article on VPNs for streaming explains how they work in a home-entertainment context, and the same principles apply to work travel.
6. Recognise manipulation
Many privacy problems begin with a message rather than a hack. An urgent email asking you to confirm a password, a text about a parcel you never ordered, a caller who already knows a few details about you: all of these try to rush you into handing something over. We cover the warning signs in detail in our guide to spotting a phishing email.
7. Tidy up old accounts and data
Search your inbox for "welcome" or "verify your account" to find services you signed up for and forgot. Delete the ones you no longer use, or at least change their passwords. Many large platforms also let you download or delete the data they hold about you, and in some regions privacy laws give you a formal right to ask.
A privacy routine at a glance
| How often | What to do |
|---|---|
| Once | Set up a password manager and two-step verification on key accounts |
| Automatically | Software and app updates |
| Every few months | Review app permissions and browser extensions |
| Once a year | Close unused accounts, check social profile visibility, review router settings |
What about work devices?
If your employer provides a laptop or phone, it may be monitored or managed under company policy. Keep personal accounts and browsing on your own devices where possible, and follow your organisation's rules for storing client information.
Perfect privacy is not the goal
No one can disappear from the internet entirely, and trying to can make daily life harder than it needs to be. The aim is to make yourself a harder target than average and to limit the damage when a service you use is breached. Strong, unique passwords, two-step verification, regular updates and a sceptical eye on unexpected messages already put you well ahead. Add the rest as habits, a little at a time.