content: Here's my guide: Hosted/Web Services   Email: If you must use a hosted email service - use Proton Mail or Tutanota.    They have web mail and mobile apps.  It's just mail.    These services encrypt your mail on disk and give you options to encrypt email to senders -  even senders who don't understand GPG or know how to open such things.      If you must use a calendar, use a local calendar.  Sunbird is a decent enough application on the desktop.   For search, use DuckDuckGo, Startpage or Searx.   Use Bleep or Tox for internet messaging.   Both are end-to-end encrypted and decentralized.   Tox is open source, Bleep is not.  These have desktop and mobile clients.   Browsers   Firefox on Android and on Linux (or Windows if you must) should be the only browser you use.    The only time I'm not using Firefox, I'm using the TorBrowser, with the same extensions:   NoScript - whitelist javascript domains you trust CookieMonster - whitelist cookie domains you trust Random Agest Spoofer - Randomized your User Agent Smart Referrer - change what "referrer" is sent to websites you visit HTTPSEverywhere     Mobile   On Android use Orbot for Tor, and OrFox for browsing.       On Firefox mobile and OrFox, you can use NoScript.  There's a version for mobile called "NoScript Anywhere".  You can also use HTTPSEverywhere.  And Random Agent Spoofer and Smart Referrer.   Use Signal for SMS, it's end to end encrypted.    Leave wifi and bluetooth off on your phone unless you need it and connecting to things you trust.      Local (Desktop) Security   Store your files locally on a USB key.  Encrypt the key with Truecrypt/Veracrypt rather than Dropbox or Evernote   Do whole disk encryption on laptops with LUKS (linux) or Truecrypt/Veracrypt (windows).  Do full disk encryption on your phone.  Password protect your phone, don't use your fingerprint.    Passwords   Use Keepass.   Create unique passwords for EVERYTHING.  Have Keepass auto-generate complex, alpha-numeric-symbolic passwords with caps and lower case, 15-25 characters.   If you want to be SUPER secure,  append a word (or have 2-3 on hand) that are ONLY in your memory.  Every password you use starts with this word.  For instance. If the word is GOAT.  Use Keepass to generate password.   Keepass will generate GG)#$goiu345i1oog!.4   So your password will be GOATGG)#$goiu345i1oog!.4     This way your password for everything is something you know PLUS something you have, and that something you have is unique to every site.    You can also use Keepass to save insane answers to security questions.  "Who is my 1st Grade Teacher?"  Answer: "BrownStickyNaziPants"  Things like that.     Use a keyfile+password to open the keepass database.   The keyfile should have it's extension renamed to something obscure.  Instead of pwsafe.key you name the files big-tits.jpg    The database shouldn't be a .kdb file either.  Make it something obscure too.   Back up the database periodically on a usb key, or something that's not connected to the internet.    Use two-factor auth for services when you can.  Prefer QR codes over SMS messages.  If you use SMS, only use this on services that you don't mind can identify you.   Call your Wireless ISP - create security questions that MUST be answered to change anything on your account.   Misc Tips   Try to do most of your browsing over Tor or a VPN.  Or both.    Do not post sensitive information, or financial info, when browsing over either - if possible.      Minimize mobile usage and minimize how often you have your phone on you.   Prefer search maps directions through Tor rather than GPS turn by turn navigation.      Avoid cloud services when you can use something local.   Shop local when applicable, use cash.   Use Guerilla Mail, or 10 Minute Mail or AirMail when you need to use an email on a temporary basis for services that won't identify you.  For instance, ProtonMail requires you to have another email address to sign up.  I used Air Mail (as they block Guerilla and 10 Minute Mail) to sign up.    Create these accounts using Tor so the email hosters don't know your IP either.   Have a burner/track phone.   Use this phone for things that require a phone number that you don't want to give out your number to.  Try to pay off the pre-pay  phone with Gift Cards or prepay credit cards you buy with cash.   Some places ask you for your name and home address to verify the card somehow, but NOT everywhere checks this info.  Always test if you can put fake data in those fields.  Save that data to your keepass so you remember where you lied and how.