Smell of Data

1: https://
Always check that the website you are using is secured. You can recognize an unsecured website by the web address: when it starts with HTTP (without an “s” at the end) and it shows no lock or an open lock in front of the web address you have to be careful, as this means it has not been secured. If you are on an unsecured website, make absolutely sure that you are not leaving any information behind that you want to keep private, such as passwords or credit card information. Online banking especially is very risky.

Secured websites, on the other hand, start with HTTPS and/or show a closed lock. These websites are safe because they bought an SSL Certificate which means that all data that is exchanged between the website server and the internet user is encrypted. The data is encoded in such a way that only authorized parties can read it.

2: HTTPS Everywhere
Install the browser add-on HTTPS Everywhere. It is a Firefox, Chrome, and Opera extension that enforces websites which offer both HTTPS and HTTP to always serve you the HTTPS version of their website. It cannot make your connection secure if they do not have an SSL certificate at all, but overall it makes your browsing more secure.

3: Tor
Use the Tor browser instead of the regular internet browser you normally use. Tor is a browser that can be downloaded for free. When you’re browsing with the Tor browser no one will be able to see what you are doing over the network, what computer you are using or where you are located. All your data is secure.

1: 3G/4G
Make use of your own data bundle instead of the available free WiFi when you want to use the internet in public areas.

2: VPN
Still need to log on to an unprotected WiFi network? Use a VPN, that is a virtual private network that works like a tunnel. With a VPN it looks like you are somewhere else. The data you send and receive over a network with a VPN will be very difficult to hijack. iPredator, OpenVPN or AirVPN are services you can use to obtain a VPN. You can also use Tor.

3: Secure websites
When you can’t install a VPN and can’t use your private data bundle, make absolutely sure you watch out for unsecured websites over an unprotected WiFi network (see leak #1). Data you send over a website with an SSL connection is encrypted, so even if you are on a public network hackers won’t be able to steal your information. However, they will still be able to read your IP address and see the (secured) websites you are visiting.

4: WiFi Assistant
Keep the WiFi function off when you don’t need it. Even if you haven’t consciously connected to the network, your device remembers networks you’ve connected to in the past and connects automatically when it finds one. When your device searches for available WiFi networks, it automatically sends out the names of WiFi networks you connected to in the past. Hackers can then read your previous network names and can set up a network with one of those names, so you might accidentally log on to their device even if your phone is in your pocket. By turning off the WiFi function of your phone when you don’t need WiFi, you will never inadvertently leak data over the network. You can also install an app like WiFi Assistant (Android only) that automatically turns off the WiFi function of your phone when you leave your trusted areas like home or your office. Or use a Wifi cleaner that makes your phone forget all open networks you ever made a connection with.

1: Delete browsing history
In the settings of your browser you can automatically delete your browsing history and you can control how your browser handles cookies. You can either block cookies entirely or you can choose only to block third-party cookies. In some web browsers you are also able to activate anonymous surfing. Firefox is recommended as your standard web browser as it gives you the most flexibility to adjust the settings to your standard.

2: Tor
Use the Tor browser so you never leave any traces anywhere on the web. Tor defends against traffic analysis, a form of network surveillance that threatens personal freedom and privacy, confidential business activities and relationships, and state security. Check the “visiting unsecured websites” section for more info.

3: DuckDuckGo
Instead of a using Google, use DuckDuckGo, a search engine that doesn't track you. In the settings of your browser you can set this search engine as a default. Do you still want to use Google sometimes? In DuckDuckGo type in “Peanutbutter !google” or “Peanutbutter !g” to redirect you. You will still leave less of a trace than you would in a direct Google search.

4: Cookie blocker
Install a cookie blocker. Examples of good plugins and apps are uBlock and Privacy Badger.

1: TOS;DR
Check Terms of Service Didn’t Read’s website or install their browser plugin. A team of experts read and classify the Terms of Service of major websites and highlight the most essential parts. It gives you a perfect overview of what you actually sign up for when hitting that “agree” button.

2: Be selective
Be careful about what you post online. Don’t post messages or images that can be or could become sensitive. What’s online stays online forever.

3: Alternatives
Look for alternatives. Use DuckDuckGo instead of Google. Use Diaspora instead of Facebook. Signal instead of WhatsApp. OpenStreetMap instead of Google Maps. Use SpiderOak instead of Google Drive or Dropbox. These alternative services have better privacy features and decentralize your personal data.

1: Turn off location tracking
Turn off location tracking in the settings of your cellphone. If you use an app that needs your current locations (Maps for example) simply don’t forget to turn it off again afterwards.

2: Turn WiFi off
Turn off the WiFi function of your device when you don’t need it. When your device is searching for available networks it automatically sends out its IP address and in this way your exact route can be traced. Retailers often keep track of your location like this.

3: Turn Bluetooth off
Bluetooth is used in the same as WiFi to track you, so make sure it is always off unless you are using it.