privacyguides/privacyguides.org
1
1
Fork 0
mirror of https://github.com/privacyguides/privacyguides.org.git synced 2026-05-26 13:21:20 +00:00
Code Issues Activity

style!: Remove all mkdocs-material icon references

Browse Source
This commit is contained in:
Jonah Aragon
2026-05-18 17:55:18 -05:00
parent 52d2965b0b
commit 26607bf4dd
68 changed files with 575 additions and 614 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/blog/posts/biometrics-explained.md
+19 -19
View File
@@ -22,7 +22,7 @@ preview:
Biometrics are a convenient and secure way to authenticate our devices. Many of us use and trust the biometrics of our devices without much thought, but are they really secure? With so many [options](https://www.biometricsinstitute.org/what-is-biometrics/types-of-biometrics/), which ones are the best?<!-- more -->
## :material-fingerprint: Fingerprint sensors
## Fingerprint sensors
One of the most recognizable types of biometric authentication has to be the fingerprint reader. The idea is that everyone has a fairly unique fingerprint, so we should be able to distinguish between your fingerprint and someone else's reliably.
@@ -35,7 +35,7 @@ There are three main types of fingerprint: loops, whorls, and arches. Fingerprin
[Finger minutiae](https://sites.rutgers.edu/fingerprinting/no-two-finger-prints-are-alike/) data is used to identify a fingerprint as unique. This data consists of the points on your fingerprint where lines split, abruptly end, individual dots, etc. Two people can have the same number of arches, loops, and whorls, but they won't have the exact same configurations of minutiae. (1)
{ .annotate }
1. :material-fingerprint: It's theorized that the reason humans have fingerprints in the first place is to [enhance our sense of touch](https://www.science.org/doi/10.1126/science.1166467).
1. It's theorized that the reason humans have fingerprints in the first place is to [enhance our sense of touch](https://www.science.org/doi/10.1126/science.1166467).
![Example of finger minutiae including forks (where one line splits into multiple lines), ends (where a line ends), islands (isolated dots), and inclosures (lines that split into two and then reconnect)](../assets/images/biometrics-explained/finger-minutiae.webp)
@@ -45,7 +45,7 @@ Using these details for identification gives several advantages over trying to r
There are [three](https://www.androidauthority.com/how-fingerprint-scanners-work-670934/) main ways we accomplish this in consumer devices: optical sensors, capacitive sensors, and ultrasonic sensors.
### :material-camera: Optical
### Optical
An optical sensor works by taking a picture of your fingerprint and turning it into data. They are the cheapest and least secure option. Since optical sensors capture two-dimensional images, an attacker may gain access by simply taking a picture of your fingerprint.
@@ -57,7 +57,7 @@ Many devices implement one of these sensors under the display.
Optical sensors can struggle in the presence of bright sunlight, which is an issue on a mobile device that you take around with you and use wherever you are.
### :material-lightning-bolt: Capacitive
### Capacitive
Capacitive sensors measure the electrical conductivity of your finger. These are much more secure than optical sensors since they can't be fooled with an image. They're also tough to fool with prosthetics as different materials will have different electrical properties.
@@ -69,7 +69,7 @@ Capacitive sensors won't work if the [tissue is dead](https://www.livescience.co
Conveniently they also don't require a light source under them to work, although they will struggle in the presence of moisture.
### :material-volume-high: Ultrasonic
### Ultrasonic
Ultrasonic fingerprint sensors use sound to create a detailed 3D representation of your fingerprint using ultrasound waves (sound waves with a frequency greater than 20khz). It's a similar concept to what's used to map the ocean floor: sound is emitted from transducers and bounces off your skin. By measuring the time it takes for the sound to reach the microphones, your phone can create a detailed map of the ridges and valleys in your finger.
@@ -91,11 +91,11 @@ They also won't work with gloves and sometimes screen protectors can interfere,
Fingerprint authentication will protect you against someone filming you surreptitiously while typing in your password or shoulder surfing. This is an especially relevant attack if your threat model includes thieves as a common attack is watching you type your passcode in and then stealing your phone.
## :material-face-recognition: Face unlock
## Face unlock
Many devices come with the capability to unlock them using your face. The [implementations](https://www.androidauthority.com/face-unlock-smartphones-3043993/) of this technology can vary wildly between manufacturers since a secure implementation requires a lot of special hardware, so many OEMs choose to cheap out. All forms of face unlock are more likely to allow a twin or sibling into your device since their face is more similar to yours than a random person off the street, so keep that in mind in your threat model.
### :material-camera-front: 2D camera-based
### 2D camera-based
Every phone already has a camera, so why not use it for face unlock?
@@ -103,11 +103,11 @@ If you're relying on a plain 2D image, then there's always the possibility that
This form of face unlock is also less likely to work in low-light conditions than infrared variants.
### :material-heat-wave: 2D infrared-based
### 2D infrared-based
The next step up in security is an infrared sensor. This requires dedicated hardware to be built into the device, which eats up space and adds cost. But what you get in return is a form of face unlock that's more reliable in low-light conditions and more resistant to photographs.
### :material-cube-scan: 3D mapping
### 3D mapping
The potential of this technology truly shines when 2D face unlock is combined with an infrared flood illuminator. These are able to shine thousands of invisible infrared dots on your face and record the distance of each one, creating a 3D map of your face. As you can probably imagine, this tech takes up quite a bit of space and adds yet more cost to the device, as well as likely being the main reason for the "notch" on iPhones. This drawback is well worth it though. According to [Apple](https://support.apple.com/en-us/102381):
@@ -123,7 +123,7 @@ You'll likely want an implementation with some protection against another person
Some devices allow for unlocking with a facemask. This is less secure than without a facemask, so keep that in mind when enabling this setting.
## :material-eye: Iris sensors
## Iris sensors
A spy movie classic but newcomer in the consumer electronics field, iris sensors offer authentication via the unique properties of your eyes. The Apple Vision Pro is the most notable example with its [Optic ID](https://support.apple.com/en-us/118483).
@@ -131,7 +131,7 @@ It uses near-infrared light to reveal highly unique patterns independent of the
The extremely short distance this technology operates at makes it very difficult for someone to unlock your device without you noticing, and you can simply close your eyes to prevent someone from forcing you to unlock it.
## :material-matrix: Algorithm
## Algorithm
Because biometric systems need to translate the physical properties of your body to data, they rely on an algorithm to determine if their reading matches closely enough.
@@ -139,7 +139,7 @@ Because biometric systems need to translate the physical properties of your body
There is also independent research into the security of biometric systems. This combination of external and internal rigor helps ensure the security of these systems, although more well known brands like Apple and Google will receive more scrutiny than lesser-known ones.
## :material-keyboard: Typing biometrics
## Typing biometrics
Companies like [TypingDNA](https://www.typingdna.com) claim to be able to identify users by how they type.
@@ -147,11 +147,11 @@ The stated use case is 2FA and continuous authentication for employee devices. L
It could also be used on websites to uniquely identify you, so type in a text editor program then copy/paste into the browser window to avoid this specific type of fingerprinting.
## :material-walk: Gait biometrics
## Gait biometrics
Possibly the most insidious of the biometric systems in widespread use is gait recognition. Yes, you can be uniquely identified just by how you walk.
### :material-camera: Camera
### Camera
This technology can work using only 2D footage and doesn't even require close proximity or high resolution sensors like other forms of biometrics. Combined with the huge network of cameras deployed in most cities, you can potentially be identified and tracked around even with a fully covered face.
@@ -175,13 +175,13 @@ Model-free approaches don't try to model the human body but instead use the whol
<small aria-hidden="true">Image Credit: <a href="https://doi.org/10.1007/s11227-023-05156-9">Yousef, R.N., Khalil, A.T., Samra, A.S. et al.</a></small>
### :material-axis-arrow: Accelerometer
### Accelerometer
Accelerometers such as those found in your smartphone can also be used for gait recognition. These need to be worn on a person's body, so they can't be used from long distance like camera-based approaches.
Accelerometers work by measuring the accelerations in 3D space in X, Y, and Z coordinates. They tend to also utilize gyroscopes, which measure the orientation of a device.
### :material-foot-print: Floor sensor
### Floor sensor
It's possible to identify individuals using [sensors](https://www.amti.biz/product/bms464508/) in the floor that measure the pressure of your steps as you take them. There are already companies offering software/hardware [installations](https://www.scanalyticsinc.com/how-it-works) for tracking customers within a store using this technology.
@@ -189,7 +189,7 @@ It's possible to identify individuals using [sensors](https://www.amti.biz/produ
Floor sensors are especially concerning since they're completely invisible to you.
### :material-radar: Radar
### Radar
Radar works by transmitting a signal and measuring how long it takes for that signal to return, allowing you to measure how far an object is from you. In addition, if an object is moving relative to the sensor, the reflected waves will be a different frequency than when they were transmitted due to the [Doppler effect](https://www.noaa.gov/jetstream/doppler/how-radar-works). This can be used to determine the speed of an object and whether it's moving toward or away from you.
@@ -203,13 +203,13 @@ They claim it can uniquely identify individuals as well as penetrate walls, a wo
## What makes biometrics private?
### :material-cloud-off: Local Storage
### Local Storage
As with most things, keeping everything on your device is the key to private biometrics. A secure and private biometric authentication system should store any biometric data fully on-device and further, shouldn't make it accessible at all, even to the user. Biometric data is so incredibly sensitive and uniquely identifying that it needs to be treated with the utmost care. For example, apps on your phone don't have direct access to your fingerprint or face data, they must use an [API](https://developer.apple.com/documentation/localauthentication) to use biometric authentication.
On the other end of the spectrum we have companies like [IDEMIA](https://www.idemia.com) which boast about their [Augmented Vision](https://www.idemia.com/wp-content/uploads/2021/01/augmented-vision-platform-idemia-brochure-202102.pdf), designed to take video data from the myriad surveillance cameras littering every US city and track you around everywhere you go. It combines facial recognition, object recognition, plate reading, and much more to create an Orwellian surveillance apparatus that stores all your data in some server somewhere, fully accessible to their customers (or any hackers that want a treasure trove of surveillance data). They also have a product called [Mobile Biometric Check](https://www.idemia.com/wp-content/uploads/2021/02/mobile-biometric-check-idemia-brochure-202007.pdf) that allows cops to use their phone camera to take a picture of your fingerprints and compare them to a database. This is the exact opposite of responsible biometrics.
### :material-chip: Secure Element
### Secure Element
All forms of biometric authentication rely on proper hardware such as a secure element in order to be secure. The secure element provides a secure and tamper-resistant place to store your biometric data separate from the rest of the system, so it can't be easily extracted. Examples include Apple's [Secure Enclave](https://support.apple.com/guide/security/secure-enclave-sec59b0b31ff/web) and Google's [Titan M](https://security.googleblog.com/2021/10/pixel-6-setting-new-standard-for-mobile.html) series of chips. You should avoid devices that lack a secure element; they won't be able to properly implement secure biometrics without one.
content/blog/posts/clearing-browsing-data.md
+1 -1
View File
@@ -138,7 +138,7 @@ In the settings page, navigate to **Privacy, Search, and Services**
Under **Delete Browsing Data**, click on **Choose What to Clear**.
![Screenshot: Edge Settings ](../assets/images/clearing-your-browsing-data/edge4.webp)
![Screenshot: Edge Settings](../assets/images/clearing-your-browsing-data/edge4.webp)
Modify the time range and data to be deleted. Afterwards, click **Clear Now**.
content/blog/posts/cryptpad-review.md
+2 -2
View File
@@ -54,8 +54,8 @@ But you shouldn't trust anyone else either.
It was built from the ground up respecting the principles of [Privacy by Design](https://en.wikipedia.org/wiki/Privacy_by_design). All content kept in CryptPad is secured using solid end-to-end encryption, meaning that only the intended recipients can access the content. CryptPad itself cannot read, scan, or utilize your content in any way.
[:octicons-home-16: Website](https://cryptpad.org/)
[:octicons-eye-16:](https://cryptpad.fr/pad/#/2/pad/view/GcNjAWmK6YDB3EO2IipRZ0fUe89j43Ryqeb4fjkjehE/)
[Website](https://cryptpad.org/)
[Privacy Policy](https://cryptpad.fr/pad/#/2/pad/view/GcNjAWmK6YDB3EO2IipRZ0fUe89j43Ryqeb4fjkjehE/)
{ .pg:buttons }
CryptPad is developed by a team from the French software company [XWiki](https://www.xwiki.com). Because [CryptPad is open-source](https://github.com/cryptpad), anyone can add contributions to it, inspect its code, or submit feature recommendations.
content/blog/posts/differential-privacy.md
+1 -1
View File
@@ -45,7 +45,7 @@ A famous example is the AOL search log release. AOL had been logging its users s
#### Strava Heatmap Incident
In 2018, the fitness app Strava announced a major update to its heatmap, showing the the workout patterns of users of fitness trackers like Fitbit.
In 2018, the fitness app Strava announced a major update to its heatmap, showing the workout patterns of users of fitness trackers like Fitbit.
Analyst [Nathan Ruser](https://x.com/Nrg8000/status/957318498102865920) indicated that these patterns can reveal military bases and troop movement patterns. This is obviously a huge op-sec problem and can endanger the lives of troops.
content/blog/posts/easyoptouts-review.md
+33 -33
View File
@@ -37,8 +37,8 @@ review:
**EasyOptOuts.com** is a $19.99/year [people-search site removal service](https://www.privacyguides.org/en/data-broker-removals/) which will search a number of different data broker sites and automatically submit opt-out requests on your behalf. They will perform the first search and removal process immediately, and then re-run the process every 4 months in case your data shows up on new sites over time.<!-- more -->
[:octicons-home-16: Homepage](https://easyoptouts.com)
[:octicons-eye-16:](https://easyoptouts.com/privacy)
[Homepage](https://easyoptouts.com)
[Privacy Policy](https://easyoptouts.com/privacy)
{ .pg:buttons }
## Background
@@ -87,17 +87,17 @@ Using standard engine search results is one of the most common methods of discov
**Person A (11 Google results):**
- 411.com
- thatsthem.com
- 411.com
- thatsthem.com
- blockshopper.com*
- fastpeoplesearch.com
- usphonebook.com
- spokeo.com
- truepeoplesearch.com
- information.com
- fastpeoplesearch.com
- usphonebook.com
- spokeo.com
- truepeoplesearch.com
- information.com
- peoplesearch.com*
- radaris.com
- peoplefinders.com
- radaris.com
- peoplefinders.com
</div>
@@ -105,14 +105,14 @@ Using standard engine search results is one of the most common methods of discov
**Person B (10 Google results):**
- whitepages.com
- truepeoplesearch.com
- usphonebook.com
- fastpeoplesearch.com
- spokeo.com
- radaris.com
- information.com
- thatsthem.com
- whitepages.com
- truepeoplesearch.com
- usphonebook.com
- fastpeoplesearch.com
- spokeo.com
- radaris.com
- information.com
- thatsthem.com
- idcrawl.com*
- peekyou.com*
@@ -184,14 +184,14 @@ On Google we saw some reduction, but many results with sensitive information rem
**Person A (8 Google results):**
- thatsthem.com
- thatsthem.com
- blockshopper.com*
- fastpeoplesearch.com
- usphonebook.com
- information.com
- fastpeoplesearch.com
- usphonebook.com
- information.com
- peoplesearch.com*
- radaris.com
- fastpeoplesearch.com
- radaris.com
- fastpeoplesearch.com
</div>
@@ -199,11 +199,11 @@ On Google we saw some reduction, but many results with sensitive information rem
**Person B (6 Google results):**
- truepeoplesearch.com
- usphonebook.com
- information.com
- fastpeoplesearch.com
- thatsthem.com
- truepeoplesearch.com
- usphonebook.com
- information.com
- fastpeoplesearch.com
- thatsthem.com
- peekyou.com*
</div>
@@ -239,9 +239,9 @@ Once again, we also searched for their information on Google, and we noticed a r
**Person A (4 Google results):**
- thatsthem.com
- thatsthem.com
- blockshopper.com*
- fastpeoplesearch.com
- fastpeoplesearch.com
- peoplesearch.com*
</div>
@@ -250,7 +250,7 @@ Once again, we also searched for their information on Google, and we noticed a r
**Person B (2 Google results):**
- thatsthem.com
- thatsthem.com
- peekyou.com*
</div>
content/blog/posts/in-praise-of-tor.md
+7 -7
View File
@@ -24,7 +24,7 @@ You might have heard of Tor in the news a few times, yet never dared to try it y
Today, Tor is easy to use for anyone. It helps not only journalists and activists, but anybody who seeks greater privacy online or access to information regardless of location. But what is Tor exactly? How can Tor help you? And why is it such an important tool?<!-- more -->
## :simple-torbrowser: What is Tor
## What is Tor
Tor is an overlay network that was specifically designed to protect the privacy of its users. The Tor Network uses multiple layers of encryption and relays in order to protect a person's location and other potential identifiers, such as an IP address.
@@ -139,7 +139,7 @@ The [Tor Project](https://www.torproject.org/) is the US-based nonprofit organiz
The nonprofit was founded in 2006 and gets its funding from [various sources](https://www.torproject.org/about/supporters/) including government grants, independent contributors, and individual [donations](https://donate.torproject.org/).
## :octicons-lock-16: What Tor can do
## What Tor can do
### Improve Privacy
@@ -176,7 +176,7 @@ You can even directly email **<gettor@torproject.org>** and send the name of you
If you want to help people around the world access the internet freely, you can volunteer to run a [Tor Snowflake](https://snowflake.torproject.org/) proxy. For more tech-savvy volunteers, you can also help by running a [Tor Bridge](https://community.torproject.org/relay/setup/bridge/), or even a [WebTunnel Bridge](https://community.torproject.org/relay/setup/webtunnel/).
## :octicons-heart-16: Why Tor is so important
## Why Tor is so important
### Tor is vital for human rights and democracy
@@ -246,7 +246,7 @@ This would be disastrous for the privacy community, journalists, activists, diss
From a human rights perspective, **we simply cannot afford to lose Tor**.
## :octicons-question-16: Things to consider when using Tor
## Things to consider when using Tor
### Tor compared to VPN protections
@@ -284,7 +284,7 @@ Depending on what kind of files it is, there are a number of problems that could
If you need to share files through Tor with a *trusted* contact, [OnionShare](https://www.privacyguides.org/en/file-sharing/#onionshare) is a good option.
## :octicons-stop-16: Addressing misconceptions
## Addressing misconceptions
There has been misconceptions floating around about Tor. Most of them repeat similar misinformation attributed to many other privacy tools: Why using this if you have nothing to hide? But this argument is incredibly flawed and comes from a naive understanding of privacy rights and needs.
@@ -357,7 +357,7 @@ Furthermore, unjustified bad reputations can severely hurt funding for tools lik
We all have a responsibility to verify which information we share with others, make sure we stop misinformation at its root, and correct harmful misconceptions everywhere we hear them.
## :material-hand-heart-outline: Tor needs our support
## Tor needs our support
**Tor is at risk, and needs our help.** Despite its strength and history, Tor isn't safe from the same attacks oppressive regimes and misinformed legislators direct at encryption and many other privacy-enhancing technologies.
@@ -395,7 +395,7 @@ There are many ways to help Tor survive and thrive! You can help by:
- Sharing this article 💜
## :octicons-bookmark-16: Onion sites you can visit using the Tor Browser
## Onion sites you can visit using the Tor Browser
- [Privacy Guides website](http://www.xoe4vn5uwdztif6goazfbmogh6wh5jc4up35bqdflu6bkdc5cas5vjqd.onion/en/) 💛
- [Privacy Guides forum](http://discuss.6xotdxvg7pexnean3xu6b7ivs7g52zcwsdbnz4mdm4byivc3yfv65aid.onion/)
content/blog/posts/installing-keepassxc-and-yubikey.md
+7 -9
View File
@@ -17,7 +17,7 @@ preview:
If you are looking for a good remote password manager you can use from anywhere, there are plenty of excellent [options](https://www.privacyguides.org/en/passwords/) to choose from. However, if you prefer to only store your passwords locally, [KeePassXC](https://www.privacyguides.org/en/passwords/#keepassxc) is what you need. In this tutorial, we will set up KeePassXC to work with [YubiKey](https://www.privacyguides.org/en/security-keys/#yubikey) as an additional factor to secure your local-only password database.<!-- more -->
## :simple-keepassxc: KeePassXC summary
## KeePassXC summary
KeePassXC is a free, open-source, and desktop-only password manager. The community-driven project was first released in 2012 and is a fork of both the *KeePass Password Safe* application and *KeePassX*, which is no longer actively maintained.
@@ -63,7 +63,7 @@ In addition to the features we will set up here, KeePassXC offers the following:
On March 4th, KeePassXC released its most recent update. This update includes the capacity to import Proton Pass databases, to generate passphrases using *mixed* case (a mix of uppercase and lowercase), and many other [useful features](https://keepassxc.org/blog/2025-03-04-2.7.10-released/).
## :material-toolbox: Requirements and preparation
## Requirements and preparation
<div class="admonition info" markdown>
<p class="admonition-title">Operating systems</p>
@@ -79,7 +79,7 @@ For this tutorial you will need:
- [x] Ability to install software on this computer
- [x] One or two YubiKeys (ideally two)
## :material-download-circle: Setting up KeePassXC
## Setting up KeePassXC
### Step 1: Download and Install KeePassXC
@@ -182,11 +182,9 @@ No matter if you invent or generate your main password/passphrase, **make sure t
<div class="admonition success" markdown>
<p class="admonition-title">This step isn't over yet!</p>
This is where you will be adding your YubiKey to further secure your database. Keep the "Database Credentials" application window open and **continue with the step below** :material-arrow-down-bold:
This is where you will be adding your YubiKey to further secure your database. Keep the "Database Credentials" application window open and **continue with the step below** </div>
</div>
## :material-shield-key: Securing your database with a YubiKey
## Securing your database with a YubiKey
To add a YubiKey to secure your KeePassXC database, you will first need to prepare your YubiKey(s) for it, if it's not already ready to use with a [Challenge-Response](https://docs.yubico.com/yesdk/users-manual/application-otp/challenge-response.html) application.
@@ -245,7 +243,7 @@ If you do not plug in your YubiKey first, an error will be triggered, and you wi
</div>
## :fontawesome-solid-unlock-keyhole: Using KeePassXC
## Using KeePassXC
Using KeePassXC is quite simple and resembles most other password manager applications. The biggest difference is that your passwords will remain stored locally, unless you decide to back up your password database to a cloud service of your choice.
@@ -411,7 +409,7 @@ You are now logged in, thanks to KeePassXC!
</div>
## :material-hand-heart: Consider supporting KeePassXC
## Consider supporting KeePassXC
KeePassXC is a free and open-source project built by the community. If you use and love this application, it's always a great idea to support the project if you can.
content/blog/posts/integrating-metadata-removal.md
+2 -2
View File
@@ -43,7 +43,7 @@ Shortcuts is quite intuitive to work with, so if you don't like the behavior dem
brew install exiftool
```
!!! note
!!! note
You can check if ExifTool is installed by running `exiftool -ver`. You should see a version number.
### Creating the Shortcut
@@ -140,7 +140,7 @@ Windows allows you to place files in a **SendTo** folder which then appear in th
1. ExifTool is a tool for viewing and manipulating image, audio, video, and PDF metadata. We suggest you read the [Installation instructions](https://exiftool.org/install.html#Windows) on the official website.
!!! note
!!! note
You can check if ExifTool is present in your [PATH](https://www.computerhope.com/issues/ch000549.htm) by running `exiftool -ver` in Command Prompt. You should see a version number.
### Creating the shortcut
content/blog/posts/ios-configuration-guide.md
+1 -1
View File
@@ -66,7 +66,7 @@ Enabling **Airplane Mode** stops your phone from contacting cell towers. You wil
## Wi-Fi
You can enable hardware address randomization to protect you from tracking across Wi-Fi networks. On the network you are currently connected to, press the :material-information: button:
You can enable hardware address randomization to protect you from tracking across Wi-Fi networks. On the network you are currently connected to, press the info button:
- [x] Turn on **Private Wi-Fi Address**
content/blog/posts/job-openings.md
+3 -3
View File
@@ -22,7 +22,7 @@ We're seeking a passionate multimedia content creator to spearhead our video pro
This is your chance to enter the tech & educational content creation space, without worrying about sponsors and advertisers diluting your message. We have no commercial interests to interfere with your content, and no agenda beyond simply providing the best privacy information out there. If you're excited about using the power of video to educate and inspire, we want to hear from you!
[Learn more and apply here :material-arrow-right-drop-circle:](https://privacyguides.org/en/about/jobs/content-creator/)
[Learn more and apply here](https://privacyguides.org/en/about/jobs/content-creator/)
## Journalist
@@ -30,13 +30,13 @@ We are also looking for a skilled journalist to join our team. This role will fo
Other tasks will be to research new subjects to cover, perform interviews, and conduct product and service reviews for our recommendations.
[Learn more and apply here :material-arrow-right-drop-circle:](https://privacyguides.org/en/about/jobs/journalist/)
[Learn more and apply here](https://privacyguides.org/en/about/jobs/journalist/)
## News Curation Internship
Finally, we are offering a paid internship position that will focus on staying up-to-date with the latest privacy and security news, interacting with our community, and providing overall support to our volunteers. This role will involve curating relevant articles, reports, and insights to keep our team informed and engaged with current events. This is an excellent opportunity for someone passionate about privacy issues and looking to gain hands-on experience in a non-profit environment. Ideal candidates will have strong research skills and a keen interest in digital rights.
[Learn more and apply here :material-arrow-right-drop-circle:](https://privacyguides.org/en/about/jobs/intern-news/)
[Learn more and apply here](https://privacyguides.org/en/about/jobs/intern-news/)
## Join us in making a difference
content/blog/posts/keepassium-review.md
+8 -8
View File
@@ -58,7 +58,7 @@ For this review, the words "KeePassium" and "application" refer to both the KeeP
</div>
## :material-apple: Platforms and Compatibility
## Platforms and Compatibility
KeePassium is written in Apple's Swift programming language and is available for Apple devices.
@@ -114,7 +114,7 @@ It's also advisable to enable the backup feature and even keep a backup copy of
This is important because there is no remote database management done by KeePassium. **You are fully in control of your own data, but you are also fully responsible to protect it.**
## :material-wallet-bifold-outline: Pricing
## Pricing
KeePassium can be used completely for free!
@@ -130,7 +130,7 @@ For example, if you pay for Premium for only one year then stop, you will keep a
![Screenshot from the KeePassium website's Pricing page with a description of which features are included in each plan.](../assets/images/keepassium-review/keepassium-pricing.webp)
## :octicons-shield-check-16: Security and Trust
## Security and Trust
Security and trust are without a doubt the most important characteristics of a good password manager.
@@ -178,7 +178,7 @@ Interestingly, Cure53 has [audited](https://cure53.de/) many other well-known se
Finally, if you already trust KeePassXC for your desktop password manager, know that KeePassium is one of the apps [suggested](https://keepassxc.org/docs/) by KeePassXC to use on iOS.
## :octicons-lock-16: Privacy and Encryption
## Privacy and Encryption
Data privacy and encryption are fundamental aspects of any password managers. Because pretty much all data stored in a password manager is highly sensitive data, all data should be protected by strong end-to-end encryption.
@@ -244,7 +244,7 @@ Additionally, the LastPass' breach is a great argument in favor of keeping one's
![Screenshot from the iOS app showing the Encryption Settings.](../assets/images/keepassium-review/keepassium-encryptionoptions.webp){width="400"}
## :octicons-apps-16: Usage and Features
## Usage and Features
Once solid security and privacy protections have been confirmed, the second important part of a good password manager is how easy it is to use and the features it offers.
@@ -652,7 +652,7 @@ Interestingly, KeePassium even uses a quite decent PDF viewer on iOS:
![Screenshot from the iOS app showing a preview for a PDF file, in this case the document for Privacy by Design by Ann Cavoukian.](../assets/images/keepassium-review/keepassium-pdfviewer.webp){width="400"}
## :material-thumb-up-outline: Nice to have
## Nice to have
- You can see what was added, changed, or fixed for each KeePassium version from "Settings" in the "What's New" section.
@@ -669,7 +669,7 @@ KeePassium not only credits its direct contributors but also lists credits for e
</div>
## :material-thumb-down-outline: Downsides
## Downsides
Even if KeePassium is a great secure application that is easy and pleasant to use, there are still a few downsides that should be mentioned:
@@ -683,7 +683,7 @@ Even if KeePassium is a great secure application that is easy and pleasant to us
- AutoFill on macOS might not work with your favorite browser (if it isn't Safari).
## :octicons-key-16: Conclusion
## Conclusion
Overall, KeePassium is a privacy-focused, offline-first application, that has clearly prioritized user experience and user interface, while not neglecting security and privacy.
content/blog/posts/mastodon-privacy-and-security.md
+7 -7
View File
@@ -49,7 +49,7 @@ One of the wonderful possibility Mastodon offers is to [self-host your own Masto
For this reason, this article will focus on the experience from the **user side**, not the administrator side.
## :octicons-home-16: Choosing a Mastodon instance
## Choosing a Mastodon instance
The biggest distinction of Mastodon compared to commercial social media is its true decentralization.
@@ -94,7 +94,7 @@ Even if the Mastodon migration process doesn't allow for automatic posts transfe
</div>
## :octicons-shield-check-16: How secure is Mastodon
## How secure is Mastodon
As explained previously, choosing an instance with a competent and trustworthy administration team is fundamental on Mastodon. Due to a plurality of instances, levels of security expertise can greatly vary from one server to another.
@@ -144,7 +144,7 @@ While security and privacy are related concepts that can enhance each other, the
Both privacy and security are important to consider for users, and both must be examined when evaluating software.
## :octicons-lock-16: How private is Mastodon
## How private is Mastodon
When using social media, there are always two sides to data privacy: The data collected by the service, and the data exposed by the user posting content.
@@ -208,7 +208,7 @@ Most important of all, because Mastodon has no interest in monetizing your data,
This is completely antithesis to commercial social media. And this alone makes Mastodon fundamentally **much more private than any other big tech platforms**.
## :material-lock-check-outline: Privacy benefits of Mastodon
## Privacy benefits of Mastodon
Each Mastodon instance will have a different privacy policy that you should consult before creating an account, like for any other platforms. But unless the software was modified, data collection should be similar to what is described here, and remain minimal for the majority of connected instances.
@@ -240,7 +240,7 @@ With Mastodon, you are not stuck with only one app. If you don't like the offici
So many services and websites have adopted a hostile stance towards people using privacy protections such as a VPN server, a privacy-focused browser, or running their phone in [Lockdown Mode](https://support.apple.com/en-us/105120). But with Mastodon, you are free to use all the protections you love. **Mastodon isn't hostile to your privacy.**
## :octicons-alert-16: What to stay careful about
## What to stay careful about
While the privacy benefits of Mastodon are numerous, there are also a few things to keep in mind when using the platform:
@@ -317,7 +317,7 @@ Because yes, this choice does burden you to pick who you trust, but **it also em
Be careful who you trust of course, but don't get paralyzed by this choice. Even if this might feel intimidating at first, this fear of choosing isn't worth staying with possibly even less trustworthy big tech administrators.
## :octicons-star-16: Mastodon keeps getting better
## Mastodon keeps getting better
This article only presents an overview of Mastodon's features, and focuses on the features related to privacy and security. But Mastodon is so much more. It's a social platform that truly respects its community.
@@ -340,7 +340,7 @@ To continue learning about Mastodon's privacy and security features, consult the
</div>
## :material-hand-heart-outline: Consider supporting Mastodon
## Consider supporting Mastodon
Mastodon doesn't sell your data, but it still needs money to survive and thrive. Mastodon is supported by its community!
content/blog/posts/mastodon-tutorial-privacy-and-security.md
+9 -9
View File
@@ -68,7 +68,7 @@ The Mastodon *software* is different from the Mastodon.Social original *instance
</div>
## :octicons-shield-check-16: Improving account security
## Improving account security
Using a [unique email address](https://www.privacyguides.org/en/email-aliasing/) and a unique and [strong password](https://www.privacyguides.org/en/basics/passwords-overview/) are the starting points for good account security, and this is no different for Mastodon accounts.
@@ -160,7 +160,7 @@ If you see a login that isn't legitimate, you should *immediately* revoke access
![Screenshot of the Mastodon web interface showing the Authentication history page from clicking on the "View authentication history of your account" link on the previous Account settings page.](../assets/images/mastodon-tutorial-privacy-and-security/mastodon-accesses-login-history.webp)
## :octicons-lock-16: Adjusting privacy vs discovery
## Adjusting privacy vs discovery
When using social media, there's usually a sliding scale between privacy and discoverability.
@@ -194,7 +194,7 @@ Once you have adjusted the account options to your preferences, click on "Save c
![Screenshot of the Mastodon web interface showing the Public profile page in Preferences, from the "Privacy and reach" tab. The page is scrolled down to the "Save changes" button at the very bottom of the six unchecked options.](../assets/images/mastodon-tutorial-privacy-and-security/mastodon-account-privacy-options.webp)
## :material-message-lock-outline: Selecting post visibility and access
## Selecting post visibility and access
In addition to your account's privacy preferences, you can also adjust visibility for each post. This is very handy to allow you to pick in a more granular way which information you wish to share more or less openly.
@@ -298,7 +298,7 @@ Confirm your choice by clicking on "Save changes" on the upper-right.
![Screenshot of the Mastodon web interface showing the "Preferences" page in Preferences.](../assets/images/mastodon-tutorial-privacy-and-security/mastodon-posts-quote-posts.webp)
## :material-checkbox-marked-circle-outline: Verifying yourself and others
## Verifying yourself and others
The account verification process on Mastodon is excellent. Not only is it free, but it doesn't require you to provide any official ID or other intrusive documentation to proof your identity. It is a privacy-respectful verification feature.
@@ -348,7 +348,7 @@ To add author attributions to your articles, scroll down the same page and simpl
![Screenshot of the Mastodon web interface showing the Public profile page in Preferences, from the "Verification" tab. The page is scrolled down to the very bottom, showing the option and instructions to add Author attribution to articles.](../assets/images/mastodon-tutorial-privacy-and-security/mastodon-verification-author-setup.webp)
## :material-folder-multiple-outline: Deleting and accessing your data
## Deleting and accessing your data
Data deletion is a fundamental part of data privacy, and a protected right under many privacy laws.
@@ -390,7 +390,7 @@ Once you are ready to delete your data (and have downloaded the data you wish to
![Screenshot of the Mastodon web interface showing the Account deletion page, from the "proceed here" link on the previous "Account" page.](../assets/images/mastodon-tutorial-privacy-and-security/mastodon-deletion-account.webp)
## :octicons-blocked-16: Blocking users and instances
## Blocking users and instances
You have a lot of control on which information you show and see on Mastodon. Like for other social media, you can block users individually on Mastodon. But additionally, you can also block a whole instance if you aren't happy interacting with it. This, like an individual block, can benefit your privacy by restricting further who can access your posts.
@@ -490,7 +490,7 @@ Only report content that violates the policies of your instance, or theirs. Do n
</div>
## :fontawesome-solid-hashtag: Opting out with hashtags
## Opting out with hashtags
Data privacy and user consent are principles strongly valued by the Fediverse community. Sometimes, developers trying to create tools for the Fediverse or utilizing its user data without prior explicit consent have come into conflict with these values.
@@ -506,7 +506,7 @@ Ideally, all data collection should be prohibited until users' consent is obtain
Adding these hashtags (and maybe others in the future) to your profile biography *might* help to opt out certain data collection and certain tools built by developers who do respect users' consent. This can effectively *reduce* data scraping, in some situations. If anything, it is at least a public statement against disrespectful (and sometimes illegal) practices.
## :material-arrow-right-bold-box-outline: Moving to another instance
## Moving to another instance
The freedom to move from one instance to another can greatly contribute to keeping Mastodon a place that puts its users first.
@@ -605,7 +605,7 @@ If your old instance isn't shutting down, you can also keep it of course. But re
</div>
## :material-hand-heart-outline: Consider supporting Mastodon
## Consider supporting Mastodon
Mastodon is supported by its community! If you enjoy the platform and can contribute, consider supporting the project by:
content/blog/posts/onion-browser-review.md
+6 -6
View File
@@ -36,18 +36,18 @@ review:
Search the App Store for "Tor Browser" and you'll be flooded with a variety of ways to connect to the Tor network from your iPhone. However, there's only one solution officially [endorsed](https://support.torproject.org/tormobile/tormobile-3/) by the Tor Project themselves: **Onion Browser**.<!-- more -->
[:octicons-home-16: Homepage](https://onionbrowser.com)
[:octicons-eye-16:](https://onionbrowser.com/privacy-policy)
[:octicons-info-16:](https://onionbrowser.com/faqs)
[:octicons-code-16:](https://github.com/OnionBrowser/OnionBrowser)
[:octicons-heart-16:](https://onionbrowser.com/donate)
[Homepage](https://onionbrowser.com)
[Privacy Policy](https://onionbrowser.com/privacy-policy)
[Documentation](https://onionbrowser.com/faqs)
[Source Code](https://github.com/OnionBrowser/OnionBrowser)
[Contribute](https://onionbrowser.com/donate)
{ .pg:buttons }
Onion Browser is an open-source app created by Mike Tigas, who has worked closely with Tor Project in the past and was previously an investigative journalist at ProPublica (he is currently an advisor at the FTC). His company still maintains the app, although lately it is primarily [developed](https://github.com/OnionBrowser/OnionBrowser/graphs/contributors) by other maintainers.
!!! info inline end "Side info"
- [:simple-appstore: App Store download](https://apps.apple.com/app/id519296448)
- [App Store download](https://apps.apple.com/app/id519296448)
We already recommend Onion Browser for any iOS users out there, with the important caveat that it doesn't have all the privacy features that Tor Browser on *other* operating systems would provide.
content/blog/posts/privacy-guides-hires-three-staff-members.md
+5 -5
View File
@@ -25,7 +25,7 @@ We’re excited to welcome Em (she/her), our new journalist, who will play an im
*Em is also a human rights activist who deeply values inclusivity, diversity, accessibility, and software for the public good. In her free time, you can find Em on Mastodon sharing privacy tips or boosting photos of cats and moss.*
[:material-mastodon: Follow Em at @Em0nM4stodon@infosec.exchange](https://infosec.exchange/@Em0nM4stodon)
[Follow Em at @Em0nM4stodon@infosec.exchange](https://infosec.exchange/@Em0nM4stodon)
## Jordan – Content Producer
@@ -37,7 +37,7 @@ We also welcome Jordan Warne (they/them), our new content producer who will mana
*Outside producing high-quality videos, Jordan enjoys exploring the Australian bush, capturing intricate details of its flora and fauna through photography.*
[:material-mastodon: Follow Jordan at @jw@social.lol](https://social.lol/@jw)
[Follow Jordan at @jw@social.lol](https://social.lol/@jw)
## Kevin – Intern
@@ -49,7 +49,7 @@ Last but not least, we are excited to start working with Kevin Pham (he/him), ou
*Besides doom scrolling on social media, he loves cooking new recipes, reading philosophy essays, and perpetuating his caffeine addiction with Vietnamese coffee. Please feel free to reach out to him to discuss anything regarding best operational security practices and threat modeling...or just say hi!*
[:material-mastodon: Follow Kevin at @kevpham@mastodon.social](https://mastodon.social/@kevpham)
[Follow Kevin at @kevpham@mastodon.social](https://mastodon.social/@kevpham)
## What This Means for Privacy Guides
@@ -60,6 +60,6 @@ We’re excited to see how these talented people will help Privacy Guides contin
Thank you for being a part of our community, and stay tuned for the exciting new content and updates that will be coming your way soon!
Welcome aboard, Em, Jordan, and Kevin! Let’s make privacy accessible for everyone. 🚀
[:material-mastodon: Follow Privacy Guides at @privacyguides@neat.computer](https://mastodon.neat.computer/@privacyguides)
[Follow Privacy Guides at @privacyguides@neat.computer](https://mastodon.neat.computer/@privacyguides)
[:material-youtube: Subscribe to Privacy Guides on YouTube](https://www.youtube.com/@privacyguides)
[Subscribe to Privacy Guides on YouTube](https://www.youtube.com/@privacyguides)
content/blog/posts/privacy-means-safety.md
+7 -7
View File
@@ -204,19 +204,19 @@ And finally, as individuals, we share this duty of care and must all work on imp
If you or someone you know is in one of the situations described above, these additional resources may help. Make sure to take [appropriate measures](https://www.privacyguides.org/en/basics/threat-modeling/) to protect your privacy if your situation is sensitive. If you are in a high risk situation, you might want to access these resources using [Tor](https://www.privacyguides.org/en/advanced/tor-overview/) or [Tails](installing-and-using-tails.md).
**Suicide & Crisis Support Line** :material-arrow-right-bold: [988 Lifeline](https://988lifeline.org/) Phone number: 988 (US & Canada)
**Suicide & Crisis Support Line** [988 Lifeline](https://988lifeline.org/) Phone number: 988 (US & Canada)
**Trans Peer Support** :material-arrow-right-bold: [Trans Lifeline Hotline](https://translifeline.org/hotline/) Phone number US: 1-877-565-8860 / Canada: 1-877-330-6366
**Trans Peer Support** [Trans Lifeline Hotline](https://translifeline.org/hotline/) Phone number US: 1-877-565-8860 / Canada: 1-877-330-6366
**Stalking Victim Support** :material-arrow-right-bold: US: [SafeHorizon](https://www.safehorizon.org/get-help/stalking/) / Canada: [The Canadian Resource Centre for Victims of Crime](https://crcvc.ca/wp-content/uploads/2021/09/Cyberstalking-_DISCLAIMER_Revised-Aug-2022_FINAL.pdf)
**Stalking Victim Support** US: [SafeHorizon](https://www.safehorizon.org/get-help/stalking/) / Canada: [The Canadian Resource Centre for Victims of Crime](https://crcvc.ca/wp-content/uploads/2021/09/Cyberstalking-_DISCLAIMER_Revised-Aug-2022_FINAL.pdf)
**Domestic Violence Victim Support** :material-arrow-right-bold: US: [The National Domestic Violence Hotline](https://www.thehotline.org/) Phone number: 1-800-799-7233 / Canada: [Canadian resources by situation and province](https://www.canada.ca/en/public-health/services/health-promotion/stop-family-violence/services.html)
**Domestic Violence Victim Support** US: [The National Domestic Violence Hotline](https://www.thehotline.org/) Phone number: 1-800-799-7233 / Canada: [Canadian resources by situation and province](https://www.canada.ca/en/public-health/services/health-promotion/stop-family-violence/services.html)
**Reproductive Rights & Healthcare** :material-arrow-right-bold: US: [Planned Parenthood](https://www.plannedparenthood.org/) / Canada: [Action Canada for Sexual Health & Rights](https://www.actioncanadashr.org/resources/services)
**Reproductive Rights & Healthcare** US: [Planned Parenthood](https://www.plannedparenthood.org/) / Canada: [Action Canada for Sexual Health & Rights](https://www.actioncanadashr.org/resources/services)
**Journalists and Whistleblowers** :material-arrow-right-bold: US: [Freedom or the Press Foundation Guides & Resources](https://freedom.press/digisec/guides/) / Canada: [Canadian Association of Journalists](https://caj.ca/advocacy/digital-security/)
**Journalists and Whistleblowers** US: [Freedom or the Press Foundation Guides & Resources](https://freedom.press/digisec/guides/) / Canada: [Canadian Association of Journalists](https://caj.ca/advocacy/digital-security/)
**Protesters** :material-arrow-right-bold: [The Protesters' Guide to Smartphone Security](activists-guide-securing-your-smartphone.md)
**Protesters** [The Protesters' Guide to Smartphone Security](activists-guide-securing-your-smartphone.md)
</div>
content/blog/posts/private-european-alternatives.md
+37 -37
View File
@@ -27,7 +27,7 @@ That being said, the United States *certainly* does not have a monopoly on the b
If supporting the European tech industry is something that is important to you, here's a non-exhaustive list of some of our favorites. We have many more recommendations throughout our website if you are interested in learning more about privacy-respecting tech alternatives!
## :material-email: Email Services
## Email Services
Many people and businesses are tied to Google's Gmail or Microsoft's Outlook products, but there are *far* more secure and private [alternative email providers](https://www.privacyguides.org/en/email/) out there!
@@ -42,8 +42,8 @@ Based in Hanover, Germany, **Tuta** is an email service with a focus on security
Free accounts start with 1 GB of storage.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/email/#tuta)
[:octicons-home-16:](https://tuta.com)
[More Info](https://www.privacyguides.org/en/email/#tuta)
[Homepage](https://tuta.com)
{ .pg:buttons }
</div>
@@ -58,13 +58,13 @@ Based in Geneva, Switzerland, **Proton Mail** is an email service with a focus o
The Proton Mail Free plan comes with 500 MB of Mail storage, which you can increase up to 1 GB for free.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/email/#proton-mail)
[:octicons-home-16:](https://proton.me)
[More Info](https://www.privacyguides.org/en/email/#proton-mail)
[Homepage](https://proton.me)
{ .pg:buttons }
</div>
## :material-file-document-edit: Office Suites
## Office Suites
Of course, email isn't the only thing offered by solutions like Google Workspace and Microsoft 365. Many people use their entire suite of [productivity tools](https://www.privacyguides.org/en/document-collaboration/) to manage their businesses and collaborate with others.
@@ -80,13 +80,13 @@ Developed and hosted by *XWiki* in Paris, France, **CryptPad** is a complete onl
**CryptPad** is a private-by-design alternative to popular office tools. All content on this web service is end-to-end encrypted and can be shared with other users easily.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/document-collaboration/#cryptpad)
[:octicons-home-16:](https://cryptpad.org)
[More Info](https://www.privacyguides.org/en/document-collaboration/#cryptpad)
[Homepage](https://cryptpad.org)
{ .pg:buttons }
</div>
:material-star-box: We recently did a [full review of CryptPad](cryptpad-review.md), which you should definitely check out if you might be interested in switching!
We recently did a [full review of CryptPad](cryptpad-review.md), which you should definitely check out if you might be interested in switching!
### Nextcloud :flag_de:
@@ -98,8 +98,8 @@ Developed and hosted by *XWiki* in Paris, France, **CryptPad** is a complete onl
**Nextcloud** is a suite of free and open-source client-server software for creating your own file hosting services on a private server you control.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/document-collaboration/#nextcloud)
[:octicons-home-16:](https://nextcloud.com)
[More Info](https://www.privacyguides.org/en/document-collaboration/#nextcloud)
[Homepage](https://nextcloud.com)
{ .pg:buttons }
</div>
@@ -114,13 +114,13 @@ Developed and hosted by *XWiki* in Paris, France, **CryptPad** is a complete onl
Web-based editors aren't for everyone. If you need a full-fledged office suite that runs locally on your computer, **LibreOffice** is a fantastic alternative to Microsoft Office.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/office-suites/#libreoffice)
[:octicons-home-16:](https://libreoffice.org)
[More Info](https://www.privacyguides.org/en/office-suites/#libreoffice)
[Homepage](https://libreoffice.org)
{ .pg:buttons }
</div>
## :material-search-web: Search Engines
## Search Engines
One of the most frequently used tools on the internet is the venerable search engine. Switching from **Google** to an [alternative](https://www.privacyguides.org/en/search-engines/) is one of the biggest impact approaches to improving your privacy that you can make.
@@ -135,15 +135,15 @@ Headquartered and developed in the Netherlands, Startpage is one great alternati
**Startpage** is a private search engine. One of Startpage's unique features is the [Anonymous View](https://startpage.com/en/anonymous-view), which puts forth efforts to standardize user activity to make it more difficult to be uniquely identified. The feature can be useful for hiding [some](https://support.startpage.com/hc/articles/4455540212116-The-Anonymous-View-Proxy-technical-details) network and browser properties. However, unlike the name suggests, the feature should not be relied upon for *total* anonymity.
[:octicons-info-16: Homepage](https://www.privacyguides.org/en/search-engines/#startpage)
[:octicons-home-16:](https://startpage.com)
[Homepage](https://www.privacyguides.org/en/search-engines/#startpage)
[Homepage](https://startpage.com)
{ .pg:buttons }
</div>
It is worth noting that [since 2020](relisting-startpage.md), Startpage has been a subsidiary of American company System1. Their operations and employees remain in the Netherlands, and you can choose to utilize only European servers if you wish.
## :material-earth: Web Browsers
## Web Browsers
Web browsers are historically very tricky to build, and the three major browser engines, Chromium, Gecko (Firefox), and WebKit (Safari) are all *primarily* developed by American companies. This is a space that could certainly use improvement.
@@ -157,13 +157,13 @@ One of our [recommended browsers](https://www.privacyguides.org/en/desktop-brows
**Mullvad Browser** is a version of Tor Browser with Tor network integrations removed. It aims to provide to VPN users Tor Browser's anti-fingerprinting browser technologies, which are key protections against mass surveillance programs. It is developed by the Tor Project and distributed by Mullvad, although it does *not* require the use of Mullvad's VPN.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/desktop-browsers/#mullvad-browser)
[:octicons-home-16:](https://mullvad.net/en/browser)
[More Info](https://www.privacyguides.org/en/desktop-browsers/#mullvad-browser)
[Homepage](https://mullvad.net/en/browser)
{ .pg:buttons }
</div>
## :material-map: Maps & Navigation
## Maps & Navigation
Mapping and location apps like Google Maps can track your every move, and that data is used by tech companies for a wide variety of purposes, including for military and defense. The best mapping apps for your privacy can be used completely offline:
@@ -175,8 +175,8 @@ Mapping and location apps like Google Maps can track your every move, and that d
Based in Estonia, **Organic Maps** is an open source, community-developed map display and satnav-style navigation app for walkers, drivers, and cyclists. The app offers worldwide offline maps based on OpenStreetMap data, and navigation with privacy — no location tracking, no data collection, and no ads. The app can be used completely offline.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/maps/#organic-maps)
[:octicons-home-16:](https://organicmaps.app)
[More Info](https://www.privacyguides.org/en/maps/#organic-maps)
[Homepage](https://organicmaps.app)
{ .pg:buttons }
</div>
@@ -189,13 +189,13 @@ Based in Estonia, **Organic Maps** is an open source, community-developed map di
Based in the Netherlands, **OsmAnd** is an offline map and navigation application based on OpenStreetMap, offering turn-by-turn navigation for walking, cycling, driving, as well as public transport. It is open-source and does not collect any user data.
[:octicons-home-16: More Info](https://www.privacyguides.org/en/maps/#osmand)
[:octicons-home-16:](https://osmand.net)
[More Info](https://www.privacyguides.org/en/maps/#osmand)
[Homepage](https://osmand.net)
{ .pg:buttons }
</div>
## :material-form-textbox-password: Password Managers
## Password Managers
### KeePassXC :flag_de:
@@ -205,13 +205,13 @@ Based in the Netherlands, **OsmAnd** is an offline map and navigation applicatio
**KeePassXC** is a community fork of KeePassX, a native cross-platform port of KeePass Password Safe, with the goal of extending and improving it with new features and bug fixes to provide a feature-rich, cross-platform, and modern open-source password manager.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/passwords/#keepassxc)
[:octicons-home-16:](https://keepassxc.org)
[More Info](https://www.privacyguides.org/en/passwords/#keepassxc)
[Homepage](https://keepassxc.org)
{ .pg:buttons }
</div>
:material-star-box: We recently published an article on [securely using KeePassXC with a YubiKey](installing-keepassxc-and-yubikey.md)!
We recently published an article on [securely using KeePassXC with a YubiKey](installing-keepassxc-and-yubikey.md)!
### Proton Pass :flag_ch:
@@ -221,13 +221,13 @@ Based in the Netherlands, **OsmAnd** is an offline map and navigation applicatio
**Proton Pass** is an open-source, end-to-end encrypted password manager developed by the Swiss company Proton AG, the team behind Proton Mail. It securely stores your login credentials, generates unique email aliases, and supports and stores passkeys.
[:octicons-home-16: More Info](https://www.privacyguides.org/en/passwords/#proton-pass)
[:octicons-home-16:](https://proton.me/pass)
[More Info](https://www.privacyguides.org/en/passwords/#proton-pass)
[Homepage](https://proton.me/pass)
{ .pg:buttons }
</div>
## :material-chat-processing: Instant Messengers
## Instant Messengers
Switching off of WhatsApp, Facebook Messenger, or iMessage in favor of a more [private instant messenger](https://www.privacyguides.org/en/real-time-communication/) is an excellent way to safeguard your chats.
@@ -243,8 +243,8 @@ Element is based in the United Kingdom, which is of course no longer in the Euro
Messages and files shared in private rooms (those which require an invite) are by default E2EE, as are one-to-one voice and video calls.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/real-time-communication/#element)
[:octicons-home-16:](https://element.io)
[More Info](https://www.privacyguides.org/en/real-time-communication/#element)
[Homepage](https://element.io)
{ .pg:buttons }
</div>
@@ -259,8 +259,8 @@ Another open-source option from the United Kingdom, SimpleX chat has very strong
**SimpleX Chat** is an instant messenger that doesn't depend on any unique identifiers such as phone numbers or usernames. Its decentralized network makes SimpleX Chat an effective tool against censorship.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/real-time-communication/#simplex-chat)
[:octicons-eye-16:](https://simplex.chat)
[More Info](https://www.privacyguides.org/en/real-time-communication/#simplex-chat)
[Privacy Policy](https://simplex.chat)
{ .pg:buttons }
</div>
@@ -275,8 +275,8 @@ Briar is an open source project not legally incorporated in any jurisdiction, al
**Briar** is an encrypted instant messenger that [connects](https://briarproject.org/how-it-works) to other clients using the Tor Network, making it an effective tool at circumventing censorship. Briar can also connect via Wi-Fi or Bluetooth when in local proximity. Briar’s local mesh mode can be useful when internet availability is a problem.
[:octicons-info-16: More Info](https://www.privacyguides.org/en/real-time-communication/#briar)
[:octicons-home-16:](https://briarproject.org)
[More Info](https://www.privacyguides.org/en/real-time-communication/#briar)
[Homepage](https://briarproject.org)
{ .pg:buttons }
</div>
content/blog/posts/signal-configuration-and-hardening.md
+14 -14
View File
@@ -38,14 +38,14 @@ Additionally, your Signal PIN can also double as a registration lock that preven
If you haven't set up a Signal PIN, or have previously opted out of setting one up, follow these steps on Android/iOS:
- Select :material-dots-vertical: → **Settings** → **Account** → **Signal PIN**
- Select → **Settings** → **Account** → **Signal PIN**
- Select **Create new PIN**
Signal will prompt you to enter a PIN. We suggest using a strong, alphanumeric PIN that can be stored in a [password manager](https://www.privacyguides.org/en/passwords/).
Once you have done that, or if you already have set up a PIN, make sure that **Registration Lock** is also enabled.
- Select :material-dots-vertical: → **Settings** → **Account** → **Signal PIN**
- Select → **Settings** → **Account** → **Signal PIN**
- [x] Turn on **Registration Lock**
!!! Important
@@ -70,7 +70,7 @@ It is best practice to always compare safety numbers with your contacts. This ca
To view the safety number for a particular contact, you need to follow these steps within Signal:
- Go to a chat with a contact.
- Select the chat header or :material-dots-vertical: → **View Safety Number**
- Select the chat header or → **View Safety Number**
Once you've compared the safety numbers on both devices, you can mark that contact as **Verified**.
@@ -92,14 +92,14 @@ It is good practice to set up disappearing messages in Signal's settings so that
On Android/iOS:
- Select :material-dots-vertical: → **Settings** → **Privacy**
- Select → **Settings** → **Privacy**
- Under **Disappearing messages**, select **Default timer for new chats**
- Select the desired amount of time and select **Save**
- Select the desired amount of time and select **Save**
!!! tip "Override the global default for specific contacts"
- Go to a chat with a contact
- Select :material-dots-vertical: on the top right
- Select on the top right
- Select **Disappearing messages**
- Select the desired amount of time and select **Save**
@@ -119,12 +119,12 @@ Your recipient doesn't make any requests unless they open the link on their end.
On Android/iOS:
- Select :material-dots-vertical: → **Settings** → **Chats**
- Select → **Settings** → **Chats**
- [ ] Turn off **Generate link previews**
### Screen Security
Signal allows you to prevent a preview of the app being shown (i.e., in the app switcher) unless you explicitly open it. This option can be found in :material-dots-vertical: → **Settings** → **Privacy**.
Signal allows you to prevent a preview of the app being shown (i.e., in the app switcher) unless you explicitly open it. This option can be found in → **Settings** → **Privacy**.
=== "Android"
@@ -142,14 +142,14 @@ To mitigate this, you can leverage the Screen Lock option to require additional
On Android/iOS:
- Select :material-dots-vertical: → **Settings** → **Privacy**
- Select → **Settings** → **Privacy**
- [x] Turn on **Screen Lock**
### Notification Privacy
Even when your phone is locked, anyone who can lay eyes on the device can read messages and sender names from your lock screen.
On Signal, you have the ability to hide message content and sender name, or just the message content itself. This option can be found in :material-dots-vertical: → **Settings** → **Notifications** → **Show**.
On Signal, you have the ability to hide message content and sender name, or just the message content itself. This option can be found in → **Settings** → **Notifications** → **Show**.
=== "Android"
@@ -165,7 +165,7 @@ Signal allows you to relay all calls (including video calls) through the Signal
On Android/iOS:
- Select :material-dots-vertical: → **Settings** → **Privacy** → **Advanced**
- Select → **Settings** → **Privacy** → **Advanced**
- [x] Turn on **Always Relay Calls**
For incoming calls from people who are not in your Contacts app, the call will be relayed through the Signal server regardless of how you've set it up.
@@ -176,7 +176,7 @@ If Signal is blocked in your country, it has a built-in "Censorship Circumventio
On Android/iOS:
- Select :material-dots-vertical: → **Settings** → **Privacy** → **Advanced**
- Select → **Settings** → **Privacy** → **Advanced**
- [x] Turn on **Censorship Circumvention**
Additionally, Signal allows you to set up a proxy to bypass censorship.
@@ -193,7 +193,7 @@ Signal allows you to see your call history from your regular phone app. This all
If you use iCloud and you don’t want to share call history on Signal, confirm it’s turned off:
- Select :material-dots-vertical: → **Settings** → **Privacy**
- Select → **Settings** → **Privacy**
- [ ] Turn off **Show Calls in Recents**
## Signal Hardening
@@ -202,7 +202,7 @@ If you use iCloud and you don’t want to share call history on Signal, confirm
While it may be tempting to link your Signal account to your desktop device for convenience, keep in mind that this extends your trust to an additional and potentially less secure operating system.
Avoid linking your Signal account to a desktop device to reduce your attack surface if your threat model calls for protecting against [:material-bug-outline: Passive Attacks](https://www.privacyguides.org/en/basics/common-threats/#security-and-privacy){ .pg-orange }.
Avoid linking your Signal account to a desktop device to reduce your attack surface if your threat model calls for protecting against [Passive Attacks](https://www.privacyguides.org/en/basics/common-threats/#security-and-privacy){ .pg-orange }.
### Molly (Android)
content/blog/posts/stay-safe-but-stay-connected.md
+7 -7
View File
@@ -223,13 +223,13 @@ Fediverse-connected platforms tend to value users privacy and security much more
You will still need to go through the settings to adjust and harden your privacy preferences, but you'll see already that almost no personal data is required to sign up, and there will be no advertising profile tracking you around (and no ads!).
- [Replacing X and Threads with :material-arrow-right-bold: Mastodon](https://joinmastodon.org/)
- [Replacing Facebook with :material-arrow-right-bold: Friendica](https://friendi.ca/)
- [Replacing Instagram with :material-arrow-right-bold: Pixelfed](https://pixelfed.org/)
- [Replacing YouTube with :material-arrow-right-bold: PeerTube](https://joinpeertube.org/)
- [Replacing TikTok with :material-arrow-right-bold: Loops](https://joinloops.org/)
- [Replacing Reddit with :material-arrow-right-bold: Lemmy](https://join-lemmy.org/)
- [Replacing Meetup or Facebook Groups with :material-arrow-right-bold: Mobilizon](https://mobilizon.org/)
- [Replacing X and Threads with Mastodon](https://joinmastodon.org/)
- [Replacing Facebook with Friendica](https://friendi.ca/)
- [Replacing Instagram with Pixelfed](https://pixelfed.org/)
- [Replacing YouTube with PeerTube](https://joinpeertube.org/)
- [Replacing TikTok with Loops](https://joinloops.org/)
- [Replacing Reddit with Lemmy](https://join-lemmy.org/)
- [Replacing Meetup or Facebook Groups with Mobilizon](https://mobilizon.org/)
### Private messaging: One-on-one and group chats
content/blog/posts/the-privacy-of-others.md
+12 -12
View File
@@ -80,41 +80,41 @@ So, what concrete actions can we take *right now* to improve our culture around
Here are a few practices you can adopt in your daily life to improve the data of the people around you. However, I insist you not just demand others do this for you, but **do this for others too**. Re-shaping our culture needs to start with ourselves:
### :material-camera-off: Ask for consent before sharing/posting photos
### Ask for consent before sharing/posting photos
Do not post photos of people online without their prior consent. Especially if there are children involved! Before sharing photos of others online, *always* ask for their consent first.
### :material-face-recognition: Be mindful when sharing photos of protests
### Be mindful when sharing photos of protests
Be very careful when [taking pictures during a protest](https://www.privacyguides.org/articles/2025/01/23/activists-guide-securing-your-smartphone/). There's a lot of nuance to this because it's also important to show protests and make them known (that's usually the goal!), but in some circumstances people might be put in danger if their faces are shown online associated with certain causes.
Be mindful and make sure no one is singled out without consent in your pictures if you post them online. When possible, try to blur/block the faces of the people you couldn't ask for consent.
### :material-car: Blur license plates
### Blur license plates
When taking photos in the streets and posting them online, be mindful to blur license plates. This might sound extreme but imagine a situation where someone is a victim of domestic violence and their abuser sees their car parked at a shelter, or at someone's place. This information could literally get someone killed. Always keep in mind different people have different [threat models](https://www.privacyguides.org/en/basics/threat-modeling/).
### :material-contacts: Safeguard contact information
### Safeguard contact information
Never share the contact information of someone with someone else (or something else) without their prior explicit consent. This includes email addresses, phone numbers, legal names, locations, photos, and *especially* home addresses. This information in the wrong hands could literally get someone killed. **Always ask first!**
Additionally, be vigilant when importing your contact list in a new application. This could get it shared further than you intended. Ideally, always keep your contact list in an end-to-end encrypted application only.
### :material-file-eye: Be careful when sharing files from and with others
### Be careful when sharing files from and with others
If someone trusted you with a file (photo, music, video, PDF, text file, etc.), always ask for consent before sharing this file with someone else.
Additionally, always keep this file only locally or stored in a secure end-to-end encrypted service. If this person gives you consent to share this file, ensure that metadata has been [removed](https://www.privacyguides.org/en/data-redaction/) from it. This person might not be aware of the metadata on this file.
### :material-heart: Keep confidences secret
### Keep confidences secret
If someone trusts you enough to share something personal with you, do not betray that trust by talking about it with someone else, and *especially* not on unencrypted services such as Gmail or Twitter's DM. In doing so, you would expose this secret to even more unintended recipients. Respect people's trust in you. Do not share confidences.
### :material-message-text: Safeguard and delete private messages on social media
### Safeguard and delete private messages on social media
If you have private conversations on social media, be mindful not to spread this information elsewhere. If you delete your account, be mindful to also [delete](https://docs.cyd.social/docs/x/delete#delete-my-direct-messages) the information of others you have stored in your private messages. If someone wants to share sensitive information with you, always invite them to move to an end-to-end encrypted [messaging service](https://www.privacyguides.org/en/real-time-communication/) instead.
### :material-heart-box: Safeguard and delete intimate pictures you received
### Safeguard and delete intimate pictures you received
If someone trust you enough to send you intimate photos of themselves, take this responsibility *extremely* seriously. If they use an end-to-end encrypted service, do not move the photos out of there. If you do, you could inadvertently upload them to an unencrypted service and compromise the security of these pictures.
@@ -122,19 +122,19 @@ If your relationship with this person ends, you *should* delete all intimate pic
If you are still unconvinced about this one, maybe have a look at Ted Lasso season 3, [episode 8](https://screenrant.com/ted-lasso-season-3-episode-8-keeley-story-response/) which has a great story demonstrating the dangers related to this.
### :material-cellphone-screenshot: Avoid taking screenshot of people's posts
### Avoid taking screenshot of people's posts
Each time you take a screenshot of someone's post to repost it somewhere else, you are effectively removing this person's ability to delete their content later. This is horrible for privacy *and* for consent. Instead, use links to other people's posts. That way, if they decide later to delete their content, the link will simply not work anymore, but their right to deletion will remain intact.
### :material-record-circle: Notify guests if you are using a smart speaker
### Notify guests if you are using a smart speaker
If you are using a smart speaker device in your home such as Amazon's Echo (Alexa), Apple's HomePod (Siri), Google's Nest, inform your guests about it when they enter your home. These devices have the [capacity](https://www.makeuseof.com/tag/alexa-amazon-echo-privacy-risk/) to record all conversations, and there has already been instances of accidental privacy invasion [reported](https://www.cnet.com/home/smart-home/alexa-sent-private-audio-to-a-random-contact-portland-family-says/) about this. Even if you don't mind yourself, offer your guests to *unplug* your smart speaker while they are visiting you. The same is valid for any voice assistant on your phone.
### :material-eye-off: Do not use Windows Recall (or anything similar)
### Do not use Windows Recall (or anything similar)
If you are a Microsoft user, make sure to [*disable*](https://www.ytechb.com/how-to-uninstall-microsoft-recall-in-windows-11/) Windows Recall from your computer. If it's enabled, this application will [continuously](https://www.theverge.com/2024/6/3/24170305/microsoft-windows-recall-ai-screenshots-security-privacy-issues) take screenshots of your computer, including the faces of anyone video-chatting with you on Signal, the email content of anyone contacting your through Tuta Mail, the secrets of anyone chatting with you on Matrix. Windows Recall completely defeats the protections of anyone using end-to-end encryption to contact you. This is a huge breach of trust! If you somehow use this feature, at least be mindful to disable it each time you communicate with others.
### :fontawesome-solid-glasses: Don't use Meta's Ray-Ban "AI" glasses!
### Don't use Meta's Ray-Ban "AI" glasses!
Don't use "smart" glasses recording people.
content/blog/posts/yubikey-reset-and-backup.md
+16 -16
View File
@@ -33,7 +33,7 @@ Once a YubiKey application is reset, this operation is irreversible and previous
</div>
## :material-shield-key: Why would you need to reset your YubiKey?
## Why would you need to reset your YubiKey?
Resetting your YubiKey *isn't* something you should be doing regularly.
@@ -63,7 +63,7 @@ Keeping a backup of your key is especially important for usages such as setting
Some services will allow you to register two or more *different* keys to authenticate your account, but other services might only allow you to register one. This is when you want to make sure your have a backup of this key.
## :material-toolbox: Requirements and preparation
## Requirements and preparation
For this tutorial you will need:
@@ -115,7 +115,7 @@ If you do not see the menu on the left (Home, Accounts, Passkeys, Certificates,
</div>
## :material-key-alert: Resetting your YubiKey to factory defaults
## Resetting your YubiKey to factory defaults
<div class="admonition info" markdown>
<p class="admonition-title">Disabling applications</p>
@@ -212,7 +212,7 @@ You can install **ykman CLI** using a package manager such as **pip** or **brew*
#### 6.1. Install ykman CLI
:material-monitor: From any OS, using the **pip** package manager:
From any OS, using the **pip** package manager:
Open a terminal application and type:
@@ -227,11 +227,11 @@ Yubico makes the **ykman CLI** Python program files available on its [website](h
</div>
:material-linux: From Linux (Ubuntu), using the Yubico developer's website:
From Linux (Ubuntu), using the Yubico developer's website:
On [this page](https://developers.yubico.com/yubikey-manager/Releases/), download the latest **`tar.gz`** file and decompress it. Run the **ykman** Python program using the command line from the directory you have installed it in.
:material-linux: From Linux (Ubuntu), using Yubico's **yubico/stable PPA** type:
From Linux (Ubuntu), using Yubico's **yubico/stable PPA** type:
Open a terminal application and type:
@@ -241,7 +241,7 @@ sudo apt update
sudo apt install yubikey-manager
```
:material-apple: From macOS, using the [Homebrew](https://brew.sh/) package manager:
From macOS, using the [Homebrew](https://brew.sh/) package manager:
Open a terminal application and type:
@@ -249,11 +249,11 @@ Open a terminal application and type:
brew install ykman
```
:material-apple: From macOS, using the Yubico developer's website:
From macOS, using the Yubico developer's website:
On [this page](https://developers.yubico.com/yubikey-manager/Releases/), download the latest **`mac.pkg`** file, then double-click on it to complete the installation.
:material-microsoft-windows: From Windows, using the Yubico developer's website:
From Windows, using the Yubico developer's website:
On [this page](https://developers.yubico.com/yubikey-manager/Releases/), download the latest **`win64.msi`** file, then double-click on it to complete the installation.
@@ -268,13 +268,13 @@ If you have chosen a different installation path from default, you will need to
</div>
:material-apple: From macOS, in the terminal navigate to:
From macOS, in the terminal navigate to:
``` console { .yaml .copy }
cd /Applications/Yubico\ Authenticator.app/Contents/MacOS/
```
:material-microsoft-windows: From Windows, in the command prompt navigate to:
From Windows, in the command prompt navigate to:
64-bit Systems:
@@ -355,7 +355,7 @@ You can use the **ykman CLI** program to do a lot more with your YubiKey. If you
</div>
## :material-key-change: Setting up and backing up of your YubiKeys
## Setting up and backing up of your YubiKeys
Now that you have a set of two freshly reset YubiKeys, we will set up your main key while creating a backup of each application that allows it to your spare key. The goal here is to create a spare key that you can safely keep as a backup, in the unfortunate event that you were to lose your main key.
@@ -385,7 +385,7 @@ Click on the "Change PUK" button and a section will pop up. Enter a new PUK numb
#### 7.4. Change the default Management key
Click on the "Management key" button and a section will pop up. Enter or generate a "New management key" with a maximum of 64 characters. You can also change the encryption algorithm to "TDES", "AES128", "AES192", or "AES256" and add a pin protection by clicking on "Protect with PIN". Then click "Save".
Click on the "Management key" button and a section will pop up. Enter or generate a "New management key" with a maximum of 64 characters. You can also change the encryption algorithm to "TDES", "AES128", "AES192", or "AES256" and add a pin protection by clicking on "Protect with PIN". Then click "Save".
![Screenshot of the Yubico Authenticator application showing a Change management key popup.](../assets/images/yubikey-reset-and-backup/yubikey-17-config-certificateskey.webp)
@@ -775,7 +775,7 @@ Only look at the last "key block" listed, and note its **key ID**. Each "key blo
Your OpenPGP **key ID** will be a string of numbers and uppercase letters on the **`pub`** line, after the "rsa4096" key type, and separated by a **/** character as follows:
``` console
pub rsa4096/[key_id]
pub rsa4096/[key_id]
```
Note this **[key_id]** for the next steps.
@@ -809,7 +809,7 @@ addkey
When prompted with "Please select what kind of key you want" type `8`.
You will be asked to toggle on or off some subkey options. Here, we will generate all 3 subkeys at once, but adjust this step to your required usage. You might also need different encryption algorithms for different subkeys (see options available from the previous **`gpg`** program question).
You will be asked to toggle on or off some subkey options. Here, we will generate all 3 subkeys at once, but adjust this step to your required usage. You might also need different encryption algorithms for different subkeys (see options available from the previous **`gpg`** program question).
<div class="admonition tip" markdown>
<p class="admonition-title">To generate subkeys separately</p>
@@ -1071,7 +1071,7 @@ If you need additional help to troubleshoot, reset, setup, or copy information t
</div>
## :material-key-chain: Review your configuration
## Review your configuration
Once you have fully reset and reconfigured your 2 YubiKeys, make sure that you have: