Become an online ninja: The ultimate guide to data privacy protection

Protecting your internet privacy can seem daunting if you don’t know how, but this post will teach anyone how to do it. Let’s start with the basics:

• Understand how your data is collected. Almost every step information takes from your device to the web and back again can be used to trace you. The tips in this article will teach you how your personal information and identity are collected – and how to stop it.
• Know your threat model. Everyone has different privacy needs, and that’s OK. A threat model is an analysis of how vulnerable you are and who might want to take advantage of that. Are you a high-level employee who has access to sensitive trade secrets? Do you have a social media following that might include stalkers? Are you an anonymous whistleblower? Do you have an above-average income? Are you an ordinary person? Each of these cases makes for a different threat model, but all of them can benefit from online privacy protection.
• Use the right tools. Privacy is important to a lot of people, so there are plenty of tools out there to help keep you anonymous. Once you know your threat model, you can choose your tools based on how you browse the internet and what you need to protect.
• Learn good internet habits. On the internet, nobody can save you from yourself. The best security or anonymity tools won’t help you if you fall for a scam or decide to share private information on social media. Make sure you understand the tools you use online and where your data might end up when you share it.

How to remain anonymous on the internet

Staying anonymous on the internet requires a lot of changes to your online habits. For those who want true online anonymity and immunity from trackers, many aspects need to be considered. A combination of different types of software, like a virtual private network, may need to be considered. Here’s a list of some of those aspects that could need to be changed to stay anonymous online.

• Operating system
• Messaging apps
• Browsers
• Email service providers
• Secure internet connections
• App permissions

Anonymity vs Privacy

Before we jump into the multiple facets you need to address for online anonymity, it’s best to understand the difference between online anonymity and online privacy. Achieving online privacy is fairly straightforward. Achieving full online anonymity, however, is virtually impossible.

A simple way to look at it is that being anonymous online isn’t just about hiding your IP address, it’s about hiding your identity, not your online actions. Online privacy, however, is about keeping your actions to yourself and those you wish to share with. Complete anonymity is a far more complex issue

Is incognito mode anonymous?

Incognito mode, or private browsing for those who don’t use Google Chrome, does not make you anonymous online, or hide your IP address. By entering incognito mode, it guarantees that any data exchanged online won’t be saved on your computer once the window has been closed. If you’re sharing a device or computer, it’s good for keeping your online activity private from those who might want to snoop around your search history. It doesn’t provide complete anonymity online.

Can there really be anonymity online?

Ultimately, true online anonymity is nigh impossible to achieve. You can protect your online traffic from being spied, and hide your IP address. However, due to the protocols that are necessary for online communication, details of your device can still be seen by your internet service provider and the website or online service you could be using.

The consequences of no online privacy

If you have nothing to hide, why would you care if someone is spying on your online activity? It’s an argument used by many who advocate for fewer online freedoms, or those who don’t fully grasp the importance of online privacy.

Information is power, and it can be used to manipulate large swathes of people. By using complex algorithms and pattern-spotting software, nefarious entities can influence your decisions. Large scale manipulation of social media has been leveraged to influence the results of elections and referendums. Anonymous whistleblowing can be key to free speech.

Ads can be annoying or even disruptive, but they can be more than just an inconvenience. The sites you visit and the things you do online can all be tracked to form an online profile of who you are. That’s where ad blockers come in. In addition to blocking the visual part of the ad, most ad blockers also prevent ads from tracking you. However, they don’t block every tracking capability – things like supercookies, pixels, and browser fingerprinting can still track you.

Think about how much sensitive information you have on your email account. Would you be comfortable if strangers could access that information at will? What could they do with it? That’s why you need a secure email address to protect your online privacy. The leading encrypted email services offer end-to-end encryption, encrypted contact lists and email storage to make your emails unassailable. Remember, however, that security isn’t worth much if you have a weak password!

Once you have an encrypted account, make another. Using multiple email addresses is a great way to protect online privacy, even if you use an email account that collects your data the way Google does. Use one for personal communication, another for professional matters, and a third for online shopping or creating accounts on various websites. Even if your email provider does collect your data, this may help “fracture” your data profile and make it harder for advertisers to draw an accurate picture of who you are. If your provider respects your privacy, this will keep you anonymous from websites that might share your data with one another or third-party marketers.

“Password123” doesn’t cut it anymore (hint: it never has). When a website suffers a breach (7.9 billion records were exposed in data breaches in 2019), hackers use special software to test the exposed accounts with common passwords. If they find a match, they gain total access to the victim’s account. This is one of the many reasons you need a strong password. Create a long one that’s hard to guess but easy to remember. Get familiar with some great tips on creating strong passwords or use this random password generator web tool.

Did you know that you can protect your online privacy and surf anonymously by using a powerful browser extension? There are plenty of extensions to choose from, and each has a different functionality. What’s suitable for you depends on what you need and how you browse. If you use Firefox or Chrome, we suggest the NordVPN browser extension. When it comes to other browsers, there are more browser extensions for your privacy you can install.

JavaScript powers some websites’ plugins, but it can also be used to exploit browser weaknesses, harvest your data, or even trick you into downloading malware. Fortunately, you can block it for sites you’re not sure about while letting it run on sites you trust. Numerous browser extensions of the sort mentioned above block JavaScript and other types of scripts online while allowing you to make exceptions for trusted sites.

When downloading an extension or plugin, make sure it takes your internet privacy protection seriously. You can trust most privacy-oriented plugins, but others may want to collect your data to turn a profit. Do your research – for any given popular plugin there will most likely be a privacy expert who’s already put it to the test and found out whether it respects your rights.

Depending on your browser and system, saving your passwords can be a bad idea. Having all your passwords saved can be convenient, but if they aren’t secure, then it’s convenient for hackers as well. They won’t have to look far to find your login information!

Password managers help solve two problems. First, they’ll work just like your browser’s default password manager, helping you to navigate the net with ease and log in to your favorite websites with just one click. Second, they’ll keep all of your passwords encrypted and locked behind a single password so only you can get to them. These encrypted passwords will be more secure than they are when stored in your browser. Investing in a password manager is key if you want to stay anonymous online.

There are plenty of excellent privacy-oriented messaging apps that keep all of your conversations secure. The three leading apps — WhatsApp, Signal, and Telegram — offer end-to-end encryption. They’re nowhere near as popular as Facebook Messenger, so you may have to convince your friends to use them as well. Facebook messages are not private by default but you can activate encryption by going into secret conversation mode.

Google is the undisputed king of search engines, but it’s also one of the world’s biggest data collectors. If you want to protect your internet privacy, it just won’t do.

You can limit the amount of data search engines collect on you by using tools like NordVPN, but you can also avoid that completely if you use a private search engine. Some of the leading options include:

• DuckDuckGo
• StartPage
• Qwant

There are plenty of others out there depending on your needs.

A browser is your most direct and personal connection to the internet, so if you want to improve your online privacy protection, getting a private browser is key. If all you’ve ever known is Chrome, Safari, and Firefox, we have some news for you – there’s a whole world of awesome browsers that keep you private. Some of them, like Vivaldi or Opera, might even have features that you’ll prefer over the ones your current browser has. Read our blog post to find your new private browser.

Speaking of browser privacy, there’s something else we need to talk about – incognito/private browser modes. They’re great tools, but it’s important to understand their advantages and limitations.

Incognito mode DOES:

• Prevent your device from collecting a local record of your browser activity that other users on your device can see (like search or browser history);
• (Usually) prevent the creation of new cookies or deletes them when it closes so that they can’t track you.

Incognito mode DOES NOT:

• Protect you from most malware attacks;
• Hide your browsing data from ISPs, governments, hackers, or advertisers;
• Secure your data on public Wi-Fi (one of the most vulnerable but convenient places to browse).

Find out more about incognito mode so you can use it correctly.

Cookies aren’t all bad, but they’re also one of the primary tools advertisers use to collect data on you and track what you do online. There are plenty of tools that can block cookies completely for you, including popular browsers, but there is a drawback to this technique. Cookies are used to save your log-in sessions for various sites and services, meaning that blocking them may disrupt their functionality.

Many of the other tools mentioned in this article, like tracker blockers or private browsers, will help block cookies.

Public Wi-Fi is great – it’s (usually) free, it saves us from using our precious data, and it’s there when and where you need it. Unfortunately, it’s also one of the riskiest ways to go online – both from a privacy and security standpoint. Public Wi-Fi is a great place for hackers and snoopers to collect personal data because it’s such an easy access point for getting at your traffic.

There are several ways to secure public Wi-Fi. However, hands-down, the best way to stay private and secure on public Wi-Fi is a VPN. It will encrypt your traffic so that nobody on the public Wi-Fi channel will be able to see who you are, where you’re headed, or what you’re doing.

One powerful but simple step you can take when browsing online to stay private and secure is to choose HTTPS URLs over HTTP URLs whenever possible.

If you see HTTPS at the beginning of the URL or a lock icon at the head of your browser URL bar, that means your connection to that site is encrypted. SSL/TLS encryption isn’t the strongest type of encryption available, and HTTPS only covers your browser, but it’s still a great tool for staying private. There are even certain browser extensions that will do the work for you, favoring HTTPS connections wherever possible.

Updates might seem like a chore, but they’re more important than you think. It’s about more than just new features!

Every time a new cyber attack happens or a new vulnerability is discovered, numerous sites spread the news. This lets developers patch the vulnerability and admins check to see whether their users have been affected. However, it also immediately notifies hackers about the vulnerability and puts unpatched devices, apps or OSes at risk.

Those vulnerabilities are fixed by deploying those updates that you keep ignoring because they’re “annoying.” Trust us – getting hacked and waking up to find an emptied bank account will be much more “annoying” than making sure you keep up with your updates!

Though IoT devices employ some of the latest and most exciting technologies, they also bring additional security risks. IoT devices are designed to gather all types of data and store it on servers. Imagine a database that has GPS data from your vehicle, your movement around the house, electricity usage habits, and other information. If leaked, this data could be used by burglars to break into your property while you’re away.

Companies tend to monitor thousands of devices using cloud-based platforms, meaning your security is in somebody else’s hands. It’s worth learning about the dangers behind IoT devices and what makes them so insecure.

If you still want to use IoT devices, we recommend that you install a VPN, enable two-factor authentication, and delete your logs every once in a while.

This is a general rule that applies to everything – from apps and OSes to services and devices. For every piece of personal data anyone or anything asks you for (this includes app permissions), see if you can answer these questions:

• Does it need this data to function?
• If not, can you refuse to provide the data?
• If not, is there a competing product or service that will fulfill your needs without demanding this data?
• If not, is this product or service worth the potential risk caused by providing the data it has requested?

VPNs (Virtual Private Networks) are powerful tools for staying both private and secure. By encrypting all of your online traffic (not just your browser), they keep hackers, snoopers, advertisers, and even governments from seeing your online traffic.

A free VPN may be tempting, but remember: if it’s free, you’re not the customer — you’re the product. Free VPNs might throttle your bandwidth, provide limited services with other features behind a paywall, or even harvest and sell your data. Only investing in a premium VPN will guarantee the infrastructure, support, and technical specifications you need to protect online privacy. Premium VPNs like NordVPN will also offer tons of additional features such as DNS leak protection, obfuscated servers, and Threat Protection.

It may seem like privacy and social media are incompatible – how can you stay private while sharing your selfie with the world? However, it doesn’t have to be that way. A thoughtful approach to social media can help you enjoy its benefits without giving away more of your life than you’d like.

• Every social media platform has settings regulating who can see which posts. Different platforms offer different levels of customizability, and you should learn these settings for any platforms you use.
• Social media platforms have security settings for how they collect and use your data as well. Learn these settings and adjust them to a level you are comfortable with. Always keep in mind, however, that they may not actually follow those settings to the letter (or at all).
• Not everything has to be made public. Before sharing a photo, video, or status update, ask yourself: does the public need to see this? Can it be misunderstood or used in a way that I wouldn’t like?

For more tips, check out our blog post on social media privacy.

Whether it’s an app or a device, consider either turning off your location data forever or only turning it on when you need it. Your device isn’t the only one tracking you.

Your location data is collected by service providers and advertisers, and that can make it vulnerable to misuse or abuse. The Securus scandal is an excellent example of how location data can be abused by an entity that many of us trust – the government.

Data brokers are companies that gather data from many different sources and use it for their clients or sell it to others. Fortunately, there are services like Incogni designed specifically to target these data brokers. Incogni automatically contacts data brokers and requests that data be removed from their records, making this a much easier process. Just sign up, specify what data you want removed, and let the system do its work.