Little Book of Privacy

Starting over:

It’s time for a Data Detox! Together with the Tactical Tech Collective, Mozilla has put together a nice little package of practical tips, called the Data Detox Kit. It’s a program that will make you feel like a whole new online person. Don’t feel ready yet for the full program? Feel free to begin with one of the following tips instead (or all of them)!

A tidy browser, a tidy mind – well, that may not be directly what “they” say but it’s still true!

1. Delete your browser history. Whether you’re using Firefox, Chrome, Safari, or a different product – all of them offer this functionality. You’ll usually find it in the settings menu under “Security” or in a separate area. This is how to take care of it in Firefox.

2. Delete your Google activities history. Log into your account, open the “My Activity” section, and scroll through it. Surprised by all the information stored here, maybe even shocked? Feel free to delete it: In the menu on the left, click to go to “Delete Activity by“ > change date to “All time“ and products to “All Products“ > click “Delete“ > click “OK“ to delete if a pop-up appears.

Convenience may be tempting – but isn’t always the best solution:

All of us, some more and some less, tend towards convenience. Sometimes that means that we willingly give up a lot of control. In order not to have to start a major digital cleanup every other week, simply make sure that not so much of your data is collected in the first place. It’s easier than you might think! One simple way: avoid all-in-one solutions. They can put together a 360-degrees view on you and also, they’re not necessarily the perfect fit for all users anyway. Time to try some alternatives! Let us give a couple of examples:

While many users choose their favorite browser to use on their desktop computer, most never switch the pre-installed browser apps on their mobile devices.

Give Firefox Focus a try. Our super-fast privacy browser blocks many known cookies and tracking, and lets you browse the web well protected.

Sharing is caring – but there needs to be limits!

Got it: you’re really into sharing and happy to let your friends try your cake, use your car occasionally or don’t even mind lending your favorite pen to a stranger. However, when it comes to your data, you might want to consider being less generous and set clear limits:

1. The art of saying no: Tell your web browser what to store and what not – for example, you might like it to save your passwords but not your browsing history. You can also choose if you want to share usage information with the browser maker and whether or not you allow cookies. BTW: When using Firefox, you don’t need to worry about the latter. We already block a lot of third-party cookies by default and the privacy settings in Firefox make it incredibly easy to choose between standard and rather strict preferences.

   The easiest way to protect your privacy in all browsers is to stay below the radar of data collectors. If you’re using private/incognito mode, your browser won’t save a history of your activity on your device or cookies set during that browsing session.

2. We love social media! However, these websites (and others) might not work properly when you’re browsing privately: They will not only track what you do while being logged in, but also your activities beyond the respective network that takes place in the same browser window. For them, your browsing information is particularly valuable because they’re able to connect it to your account and might ultimately get to know you better than some of your best friends. Worried? No need to, Firefox is here to help: Get the Facebook Container extension, which makes it harder for Facebook to track you on the web outside of Facebook.

3. There’s actually even more to keep in mind when it comes to social networks: as you know, they’re made to share personal stuff with people we know (some better, some less). It’s on you to decide how much private information you want to share though. That applies to your posts as well as your location, things you like, your phone number or who you spend time with. Remember: all of this data is not only visible to the respective social network, but might also be for advertisers and the general public if you keep your profile publicly available. Also, if you share less, there’s less that could fall into the hands of people you don’t know or trust.

4. What feels right for you today might change tomorrow. And that’s totally fine. It doesn’t hurt to reevaluate your view on the analogue world and the web occasionally and adjust them if necessary.

What does the world know about you?

To an extent, we can control what information about ourselves is available on the web. Unfortunately, this can’t protect us entirely against dangers. A particularly bad one is identity theft. Here’s what you might want to consider:

Stay safe online:

There are a bunch of tools that can help improve your level of privacy and security. And that’s great! However, you’ll still require passwords to protect your accounts. Would you expect the newest high-end home security system to protect you from burglars if you had no apartment door? Here’s what to do:

1. Set up strong passwords. It might not come as a surprise: “password”, “12345” or your birthday are most likely not the best choices. A strong password is, in the ideal case, random, contains upper and lower case letters, numbers and special characters. So-called passphrases may also be an option, as they are difficult to unlock by algorithms (and even more so by humans) – similar to randomly compiled passwords. Also, make sure to get a separate password for each of your logins so that, in case one gets leaked during a data breach, you don’t have to update all of your logins.
2. Some online services will ask you to additionally protect your accounts with security questions. They suggest e.g. the name of your pet, your first car or your home address as a kid. However, anyone who knows you well enough (or manages to get that information from a data leak or even just a quick web search) might know the answers to these questions too, which makes them ineffective. The solution is easy: there’s no need to provide correct answers to security questions when setting them up. The respective services will not check on accuracy; just make sure to remember the answers you provide.

3. Wondering how you’re supposed to come up with and remember all your passwords and security answers? Please don’t write them on a piece of paper that you keep next to your computer (yep, people do that). Instead, get a password manager that not only safely store your passwords, security answers and other private information, but also helps you generate random passwords and lets you easily use them across all of your devices.

   There are several great password managers on the market; some are encrypted with a primary password, others with biometric features (fingerprint, face scan). Choose whichever works best for you – and maybe you want to give Firefox Lockwise a try? It will store all of your passwords securely and is available for your mobile devices as well as your desktop browser, so that you have your login information ready whenever you need it.

Not just for IT professionals:

A strong password is important and a first step towards enhanced online security. Want to double the safety? Try multi-factor authentication (MFA) – many services offer it already!

1. MFA gets its name from the fact that it requires multiple factors – like, for example, a password and a biometric scan – to log you into your account. You might know that system already from ATMs, where you need both your bank card and a PIN to withdraw money.
2. There are many different options for MFA, depending on the types of devices you use; you may choose physical keys or entirely software-based solutions. All of them share one major advantage: Nobody will be able to log into your accounts unless they have the required factors. Even if one (a physical key or a password, due to a data breach) gets stolen, you’re going to be safer.

Safer connections:

Public WIFI is unquestionably convenient – especially when you can connect without a login. Unfortunately, that means that these networks may not be very safe because they’re basically unprotected. Here are our recommendations:

1. Ideally, avoid publicly accessible WIFI networks, especially if they are not password protected. Anyone can access them and poorly protected devices in the network can easily be attacked.
2. Perhaps you just need to do something urgently and depend on a public WIFI. That’s fine. If the network asks you to enter an email address in order to connect, please don’t enter the one you normally use. Rather get a new one for less trustworthy sites and services and don’t use it for personal email correspondence, important accounts or online banking. That way, you won’t really mind if you receive a lot of spam afterwards.
3. Avoid naming your phone, tablet or computer after yourself. It might seem convenient and easy to remember but it also helps others to recognize them as yours.
4. Disconnect and remove all used public WIFIs once you don’t need them anymore. Otherwise, your devices may automatically reconnect to them whenever you’re nearby. You may not even notice it but it does create an unnecessary security risk.

How about your Bluetooth?

Bluetooth is a great invention that can save us a lot of cable clutter. However, most people don’t use it permanently. If you don’t own a smartwatch or another device that needs to be connected to your phone all the time, switch Bluetooth off. This can save battery power and, at the same time, removes a weak point that intruders might make use of.

The secure site:

It’s not unusual to see addresses on the internet start with HTTP. This is a protocol that makes it possible to load web pages in the browser. Try, whenever possible, to use the encrypted option HTTPS instead. This is especially true if you are using a public WIFI: even if the connection itself is not encrypted, HTTPS will ensure that the data you transmit is encrypted nevertheless.

Email accounts and online identities:

Your email address doesn’t necessarily reveal a lot about you. However, if you use the same address for a number of services and websites, you leave a trace. Your email address may become the center of your online identity, connected to all types of (browsing or account) data. Maybe you want to think about getting more than one for different purposes?

Resist the urge to click:

Sometimes it’s easier said than done – don’t click on dubious links! Most web users know to be particularly careful when it comes to e-mails that appear to come from their bank or an online retailer. However, when we receive links from friends and family it should be fine, right? Well, there are exceptions:

Look at the bigger picture:

We already talked about how people tend to like convenience – remember? When it comes to information we consume, it might be nice to just see our attitude and expectations confirmed because it’s pleasant and calming. But does that make the information accurate? Do we get the big picture or just a rather small extract?

1. You can, of course, have your favorites but check out different outlets from time to time to learn about different opinions and give other perspectives a chance.
2. Ask yourself: Do the different outlets report on the issues you care about? And is the information shared more or less consistent or does it differ a lot? That’s the best way to battle filter bubbles and misinformation.

Disable (unnecessary) location services:

Today’s mobile devices typically have the ability to determine, store and share their location. That’s convenient for navigation or when you’ve lost your phone. At the same time though, this quite sensitive piece of information may also be used by apps, even if you don’t want it.

Don’t need it? Delete it!

Even if you bought a smartphone with lots of memory so you’d never have to delete anything ever again, cleaning it out from time to time isn’t a bad idea. Why?

1. Limit the weakpoints. The more apps you have on your device, the more entities have access to your data – and it’s impossible to have the full overview all the time.

2. Spring-clean your phone: Check which apps you have installed on your device and if you’re still using them. Delete the ones (and any related accounts) you actually don’t need anymore.

3. Limit the access. Also, reconsider the permissions you once gave to the remaining apps, including social networks, and ask yourself: Does this app really need access to my location? My contacts? My photos? My camera and microphone?