OPSEC 101
No offense, but your phone talks too much.
Privacy, encryption & opsec in 30 seconds. How it works, what it protects, and the catch.
Newsletter
a few a month, maxKept at Cloudflare in the EU. The address is checked with BounceZero to see that the mailbox exists. No IP address, no name, no tracking.
Free guides
step by step- Stop calendar invite spam and spot the scam links inside
Block strangers' invites in Google, Apple and Outlook calendars, clear out existing spam, and learn the tells of a scam invite.
CALENDAR - Spot a Fake Job Interview Before It Installs an Info-Stealer
Check recruiters, refuse rogue meeting apps, open test projects safely and lock down VS Code and npm so fake interviews can't steal your data.
DREAMJOB - Reject cookie tracking on every site, browser and phone
Refuse cookie banners properly, undo past 'Accept all' taps, and block the same ad tracking in your browser and phone settings.
REJECT - Turn On iMessage Contact Key Verification and Verify Your Contacts
Turn on iMessage Contact Key Verification, compare codes with friends and remove unknown devices from your Apple Account.
VERIFY - Stop Instagram and TikTok suggesting you to people with your number
Unlink your phone number from Instagram, Facebook and TikTok, delete uploaded contacts and switch off contact syncing everywhere.
PHONEBOOK - Disconnect your old car from your apps, screen and dealer records
Cut every link to a car you sell or trade in: app account, car screen, dealer records, phone and garage buttons.
UNLINK
Data
measured monthlyWhat this page knows about you
Worked out on your phone and sent nowhere. No cookies, no trackers, no analytics. Any website can read the same list, and the combination is often enough to recognise you on the next visit. How fingerprinting works
Latest videos
swipe →
Germany's top WWI field cipher used only six letters.
Some scam invites are sent from Google's and Apple's own servers.
Read it in airplane mode?
The card reader you used this morning could have a fake front.
A printed photo of your face can unlock some Android phones.
That dream job offer could be after your saved passwords.
Scammers mostly don't need your 'yes'.
Your period app may have told Facebook you were pregnant.
Pay a stranger 'friends and family' and PayPal won't refund you.
You can decode this page yourself with the Declaration of Independence.
Strangers in your WhatsApp groups can fill your camera roll.
Scammers can get your travel dates by sending you one email.
The kit
tools from the videos- Signal
Messages and calls end-to-end encrypted by default.
signal.org - Bitwarden
Open-source password manager. A different password for every site.
bitwarden.com - GrapheneOS
Hardened Android for Pixel phones. Duress PIN, scrambled PIN pad.
grapheneos.org - Tor Browser
Bounces your traffic through three relays and makes every user look alike.
torproject.org - Mullvad VPN
Your account is a random number. No email, no name.
mullvad.net - Proton Mail
End-to-end encrypted email between Proton users.
proton.me
Tip jar
optionalOpens buymeacoffee.com, which runs its own cookies and payment tracking. This page still has none.