Recommendations Checklist
The recommended practices cover one-time Preparations and habit-forming Conduct
Overview
Preparation
- Securing Logins
- Securing Smartphones
- Securing Computers
- Securing Files
- Securing Communication
- Securing Web Access on Smartphones
- Securing Web Access on Computers
- Securing Web Services
- Securing Organisations
Conduct
Unsure how to use this checklist? Please see the help section.
Preparation Checklist
Securing Logins
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 🔒 Strengthen your Password Habits | ⭐⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑🧑 | 🆓 | |
| ✅ 1. Create Secure Passphrases | - | - | - | - | |
| ✅ 2. Install a Password Manager (Bitwarden) | - | - | - | - | |
| ✅ 3. Install the Bitwarden Extension for your Browser | - | - | - | - | |
| ✅ 4. Install Bitwarden on your Smartphone | - | - | - | - | |
| ✅ 5. Replace All Your Weak Passwords | - | - | - | - | |
| 🔒 Setup an Authenticator for Multi Factor Authentication | ⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Install an Authenticator App on your Smartphone | - | - | - | - | |
| ✅ 2. Setup Authenticator on a Secondary Device | - | - | - | - | |
| ✅ 3. Secure the Authenticator App | - | - | - | - | |
| ✅ 4. Back-up your Security Tokens | - | - | - | - | |
| ✅ 5. Add 2FA to all your sensitive accounts | - | - | - | - |
Securing Smartphones
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 📱 Configure your Lock Screen | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| ✅ 1. Use a PIN code to lock your Smartphone | - | - | - | - | |
| ✅ 2. Turn off Biometrics | - | - | - | - | |
| ✅ 3. Turn on Lockdown | - | - | - | - | |
| ✅ 4. Set Autolock with a Short Delay | - | - | - | - | |
| ✅ 5. Disable Notifications on the Lock Screen | - | - | - | - | |
| ✅ 6. Add Emergency Contacts | - | - | - | - | |
| 📱 Automatically Download App Updates | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 📱 Review and Revoke App Permissions | ⭐⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| 📱 Uninstall Unused Apps | ⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 📱 Decide how to Hide Your Apps | ⭐⭐⭐⭐ | ⭐⭐(⭐) | 🧑🧑🧑 | 🆓 | |
| 🔘 Remove Apps from the Drawer and Homescreens | - | - | - | - | |
| 🔘 Change the Icon and Name of your App | - | - | - | - | |
| 🔘 Put Apps into a Vault | - | - | - | - | |
| 🔘 Create Parallel or Decoy Apps | - | - | - | - | |
| 📱 Create a PIN for your SIM | ⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️-📱 Remove Identifying Markers | ⭐⭐⭐ | ⭐ | 🧑 | 🆓 |
Securing Computers
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 💻-🖥️ Install Antivirus Software | ⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️ Windows 10 - Turn on Full Disk Encryption | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️ Windows 10 - Upgrade from Windows 7 or 8 | ⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️ Windows 10 - Uninstall Unused Apps | ⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️ Windows 10 - Prevent Startup Apps | ⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️ Windows 10 - Block USB Ports | ⭐⭐ | ⭐⭐ | 🧑 | 🆓 | |
| 💻-🖥️ Windows 10 - Split Admin and User accounts | ⭐ | ⭐⭐⭐ | 🏗️ | 🆓 | |
| 💻-🖥️-📱 Remove Identifying Markers | ⭐⭐⭐ | ⭐ | 🧑 | 🆓 |
Securing Files
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 📱 Hide Your Documents and Photos | ⭐⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Ensure your storage is encrypted | - | - | - | - | |
| ✅ 2. Setup an Encrypted Vault | - | - | - | - | |
| ✅ 3. Selective Cloud Sync | - | - | - | - | |
| ✅ 4. Reduce the Amount of Data on Your Phone | - | - | - | - | |
| 💻-🖥️ Setup an Encrypted Vault | ⭐⭐⭐⭐ | ⭐⭐⭐ | 🧑🧑 | 🆓 | |
| 🔘 Install VeraCrypt | - | - | - | - | |
| 🔘 Encrypt Files with VeraCrypt | - | - | - | - | |
| 🔘 Encrypt Internal Drives with VeraCrypt | - | - | - | - | |
| 🔘 Encrypt External Drives with VeraCrypt | - | - | - | - | |
| 🔘 Install Cryptomator | - | - | - | - | |
| 🔘 Encrypt Cloud Drives with Cryptomator | - | - | - | - | |
| 💻-🖥️-📱 Archive or Destroy Your Data | ⭐⭐⭐⭐⭐ | ⭐⭐(⭐) | 🧑🧑🧑/🏗️🏗️ | 🆓-💵💵 | |
| 🔘 Archive Files in Cloud Storage | - | - | - | - | |
| 🔘 Archive Files in Local Storage | - | - | - | - | |
| 🔘 Remove Archived Files | - | - | - | - | |
| 🔘 Archive Emails in Cloud Storage | - | - | - | - | |
| 🔘 Archive Emails in Local Storage | - | - | - | - | |
| 🔘 Remove Archived Emails | - | - | - | - | |
| 🔘 Archive Chat History | - | - | - | - | |
| 🔘 Remove Archived Chats | - | - | - | - |
Securing Communication
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 📱 Setup Signal | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| ✅ 1. Install Signal | - | - | - | - | |
| ✅ 2. Setup Privacy Settings | - | - | - | - |
Securing Web Access on Smartphones
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 📱 Setup a Secure Browser | ⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Install Brave or Firefox | - | - | - | - | |
| ✅ 2. Set Private and Secure DNS | - | - | - | - | |
| ✅ 3. Prevent Local Recording of Browsing History | - | - | - | - | |
| ✅ 4. Prevent Remote Recording of Browsing History | - | - | - | - | |
| ✅ 5. Add Security Extensions | - | - | - | - | |
| ✅ 6. Replace Google Search with DuckDuckGo | - | - | - | - | |
| ✅ 7. Set Advanced Privacy Settings | - | - | - | - | |
| ✅ 8. Remove or Disable Alternative Browsers | - | - | - | - | |
| ✅ 9. Set your Default Browser | - | - | - | - | |
| 💻-🖥️-📱 Setup Cloudflare WARP | ⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. 📱 Install & Connect to WARP | - | - | - | - | |
| ✅ 2. 💻/🖥️ Install & Connect to WARP | - | - | - | - | |
| 💻-🖥️-📱 Setup a Tor Browser | ⭐⭐⭐ | ⭐ | 🧑 | 🆓 |
Securing Web Access on Computers
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 💻-🖥️ Setup a Secure Browser | ⭐⭐⭐⭐ | ⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Install Brave or Firefox | - | - | - | - | |
| ✅ 2. Set Private and Secure DNS | - | - | - | - | |
| ✅ 3. Prevent Local Recording of Browsing History | - | - | - | - | |
| ✅ 4. Prevent Remote Recording of Browsing History | - | - | - | - | |
| ✅ 5. Add Security Extensions | - | - | - | - | |
| ✅ 6. Replace Google Search with DuckDuckGo | - | - | - | - | |
| ✅ 7. Set Advanced Privacy Settings | - | - | - | - | |
| ✅ 8. Remove or Disable Alternative Browsers | - | - | - | - | |
| ✅ 9. Set your Default Browser | - | - | - | - | |
| 💻-🖥️-📱 Setup Cloudflare WARP | ⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. 📱 Install & Connect to WARP | - | - | - | - | |
| ✅ 2. 💻/🖥️ Install & Connect to WARP | - | - | - | - | |
| 💻-🖥️-📱 Setup a Tor Browser | ⭐⭐⭐ | ⭐ | 🧑 | 🆓 |
Securing Web Services
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 🌐 Destroy Google Activity History | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| ✅ 1. Disable Tracking & Clear History : Web & App | - | - | - | - | |
| ✅ 2. Disable Tracking & Clear History : Location | - | - | - | - | |
| ✅ 3. Disable Tracking & Clear History : YouTube | - | - | - | - | |
| 🌐 Secure a Facebook Page | ⭐⭐⭐⭐ | ⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Review the Page Roles | - | - | - | - | |
| ✅ 2. Secure the linked Facebook Accounts | - | - | - | - | |
| ✅ 3. Clean Identifying Information | - | - | - | - | |
| 🌐 Secure a Facebook Account | ⭐⭐⭐⭐⭐ | ⭐⭐ | 🧑 | 🆓 | |
| ✅ 1. Generate a Strong Password | - | - | - | - | |
| ✅ 2. Activate Multi-Factor Authentication | - | - | - | - | |
| ✅ 3. Complete Facebook's Privacy Checkups | - | - | - | - | |
| ✅ 4. Review Additional Privacy Settings | - | - | - | - | |
| ✅ 5. Turn Off Location | - | - | - | - | |
| ✅ 6. Limit Tagging | - | - | - | - | |
| ✅ 7. Review apps authorized to access your Facebook Profile | - | - | - | - |
Securing Organisations
| COMPLETED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 🌐 Setup Dedicated Work Email for Staff | ⭐⭐⭐⭐⭐ | ⭐⭐⭐⭐ | 🏗️ | 🔁💵💵💵 | |
| 📱 Register SIM cards for Staff | ⭐⭐⭐ | ⭐ | 🏗️ | 🔁💵💵 | |
| 🔒 Setup BitWarden for the Organisation | ⭐⭐⭐ | ⭐⭐ | 🏗️ | 🔁💵💵 | |
| 💻-🖥️ Install Microsoft Windows from a Trusted Source | ⭐⭐⭐ | ⭐⭐⭐ | 🏗️🏗️ | 💰 | |
| 💻-🖥️ Install Microsoft Office from a Trusted Source | ⭐⭐ | ⭐⭐ | 🏗️ | 💵💵💵 | |
| 🌐 Setup Google Workspaces for Staff | ⭐⭐ | ⭐⭐ | 🏗️🏗️ | 🔁💵 | |
| 💻-🖥️-📱 Issue Yubikeys to Staff | ⭐⭐ | ⭐ | 🏗️ | 💵💵 |
Conduct Checklist
Digital Hygiene : Authentication
| COMMITTED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 🔒 Practice Good Password Habits | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| ✅ 1. Exclusively use a Password Manager | - | - | - | - | |
| ✅ 2. Add New Accounts to Bitwarden | - | - | - | - | |
| ✅ 3. Be Mindful of Cameras and Watchful Eyes | - | - | - | - | |
| ✅ 4. Store Your Passphrase Offline | - | - | - | - | |
| ✅ 5. Only Securely Share Passwords | - | - | - | - | |
| ✅ 6. Perform Password Security Audits | - | - | - | - | |
| ✅ 7. Respond to Compromised PIN / Passphrases | - | - | - | - | |
| 🔒 Use Multi-Factor Authentication | ⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 |
Digital Hygiene : Privacy
| COMMITTED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 💻-🖥️-📱 Browse with Brave or Firefox | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️-📱 Anonymously Use Web Services | ⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Conceal your activity from Hackers | - | - | - | - | |
| ✅ 2. Conceal your activity from your ISP | - | - | - | - | |
| ✅ 3. Conceal your identity from Web Service Operators | - | - | - | - | |
| ✅ 4. Conceal your identity from Web Service Users | - | - | - | - | |
| 💻-🖥️-📱 Connect to Cloudflare WARP | ⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| ✅ 1. Switch between 1.1.1.1 and WARP | - | - | - | - | |
| ✅ 2. Exclude Specific Apps | - | - | - | - | |
| ✅ 3. Block Malware | - | - | - | - |
Digital Hygiene : Communication
| COMMITTED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 📱 Safely use Signal | ⭐⭐⭐⭐⭐ | ⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Secure Individual Chats | - | - | - | - | |
| ✅ 2. Secure Group Chats | - | - | - | - | |
| ✅ 3. Delete Everything in case of Emergency | - | - | - | - | |
| ✅ 4. Blur Faces and View Once Media | - | - | - | - | |
| ✅ 5. Review Linked Devices | - | - | - | - | |
| ✅ 6. Use Safety Number Feature | - | - | - | - | |
| ✅ 7. Verify Contact Safety Numbers | - | - | - | - | |
| ✅ 8. Taking Care Not to Send SMS | - | - | - | - | |
| 📱 Avoid Calling over Mobile or Landlines | ⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 📱 Voice Calls over E2EE Apps | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 📱 Avoid Text Messages over SMS | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 📱 Text Message over E2EE Apps | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 |
Digital Habits
| COMMITTED | ITEM | PRIORITY | COMPLEXITY | EFFORT | COST |
|---|---|---|---|---|---|
| 💻-🖥️-📱 Regularly Confirm Your Preparation Setup | ⭐⭐⭐⭐ | ⭐⭐ | 🧑🧑 | 🆓 | |
| ✅ 1. Set Digital Security Checkup Reminder | - | - | - | - | |
| ✅ 2. Confirm Your Lock Screen Settings | - | - | - | - | |
| ✅ 3. Confirm Your Apps Automatically Update | - | - | - | - | |
| ✅ 4. Uninstall Unused Apps | - | - | - | - | |
| ✅ 5. Revoke Unnecessary App Permissions | - | - | - | - | |
| ✅ 6. Maintain Decoy Apps | - | - | - | - | |
| ✅ 7. Archive Your Data | - | - | - | - | |
| 💻-🖥️ Manage sensitive files in VeraCrypt | ⭐⭐⭐⭐⭐ | ⭐⭐ | 🧑 | 🆓 | |
| 💻-🖥️ Safely Delete Files (Unrecovereable) | ⭐⭐⭐⭐ | ⭐⭐ | 🧑 | 🆓 | |
| 📱 Install Apps From Trusted Sources | ⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 💻-🖥️-📱 Do not use Dingtalk | ⭐⭐⭐⭐⭐ | ⭐ | 🧑 | 🆓 | |
| 📱 Safely take Photos | ⭐⭐⭐ | ⭐ | 🧑 | 🆓 |