Skip to content

privacy.whattheflip.lol

Scan
Vectors
Tools
Guides
About

Guides

Step-by-step guides

Each guide is one problem, one fix. Sorted easiest first — start anywhere and the compounding starts immediately.

guide 🟢 easy ~5 min

iPhone Lockdown Mode

Turn on Apple's high-risk user profile. Five minutes, big drop in attack surface, some apps will complain.
guide 🟢 easy ~5 min

Mullvad VPN in five minutes

Sign up anonymously with cash or crypto, install the client, pick WireGuard, and verify no leaks. Done in five minutes.
guide 🟢 easy ~5 min

Privacy.com virtual card in 3 minutes

Create a single-use or per-merchant virtual card backed by your real bank. The subscription cancels itself when you pause the card.
guide 🟢 easy ~10 min

Android 15 Private Space

A second, lockable profile for sensitive apps. Hidden from the launcher, separate data, one tap to open.
guide 🟢 easy ~10 min

Turn on DNS-over-HTTPS (browser + OS)

Stop your ISP from seeing every domain you visit. Flip DoH in Firefox, Chrome, Windows, macOS, and Android in under ten minutes.
guide 🟢 easy ~10 min

Firefox Multi-Account Containers

Corral Google, Meta, work, and personal tabs into separate cookie jars so trackers stop following you across them.
guide 🟢 easy ~10 min

Passkeys: a 10-minute primer

What passkeys are, why they kill phishing, and how to turn them on for the first account you actually care about.
guide 🟢 easy ~10 min

Set up Aegis for TOTP codes

Replace Authy, Google Authenticator, or SMS codes with an offline, encrypted TOTP app on Android. Export anytime.
guide 🟢 easy ~10 min

Signal, first run

Install Signal, turn on the settings that actually matter, and avoid the common mistakes that leak metadata.
guide 🟢 easy ~10 min

Tor Browser, first run

Install Tor Browser, understand what it actually protects against, and avoid the handful of mistakes that de-anonymize new users.
guide 🟢 easy ~10 min

uBlock Origin: sensible defaults

Install uBlock Origin and configure the five settings that go beyond "block ads" into real tracker defense.
guide 🟢 easy ~15 min

Proton Pass from scratch

Set up Proton Pass as your password manager, migrate from Bitwarden or LastPass, and get hide-my-email aliases out of the box.
guide 🟢 easy ~20 min

Migrate to Bitwarden from another password manager

Export from LastPass, 1Password, or Chrome. Import to Bitwarden. Verify nothing dropped. Decommission the old one safely.
guide 🟡 intermediate ~15 min

Harden Firefox in 15 minutes

FPP-first configuration for daily-driver Firefox. Defeats most fingerprinting without breaking the web.
guide 🟡 intermediate ~15 min

SimpleX Chat, first run

Install SimpleX, understand why it has no user identifiers, and send your first message without handing over a phone number.
guide 🟡 intermediate ~25 min

Set up a YubiKey for everything that matters

Buy two YubiKeys, enroll them on email, password manager, and cloud accounts, back up one, and never get phished again.
guide 🟡 intermediate ~30 min

Linux privacy basics (Ubuntu/Mint/Fedora)

Strip telemetry, lock down the firewall, set sensible DNS, and configure AppArmor on a mainstream Linux desktop.
guide 🟡 intermediate ~30 min

You were in a breach — what to do, in order

A calm 30-minute playbook for when HIBP or a leak notice lands in your inbox. Skip the panic, do the right things first.
guide 🟡 intermediate ~40 min

Debloat & harden Windows 11

Strip Microsoft's telemetry, disable Cortana, kill ads in Start, and lock down privacy toggles without breaking the OS.
guide 🟡 intermediate ~45 min

Migrate to Proton Mail

Move your email life off Gmail or iCloud onto Proton without losing messages, contacts, or logins tied to the old address.
guide 🟡 intermediate ~60 min

Pi-hole in an afternoon

Block ads and trackers at the DNS layer for every device on your network. A Raspberry Pi, an SD card, and an hour.
guide 🟡 intermediate ~90 min

Opt out of data brokers (the DIY path)

Remove your name from the big US data brokers yourself. It is tedious, it works, and it saves you $200/year on a removal service.
guide 🔴 advanced ~45 min

Install GrapheneOS on a Pixel

Full guide to flashing GrapheneOS via the web installer, verifying the install, setting up sandboxed Google Play, and daily-driving it.
guide 🔴 advanced ~45 min

VeraCrypt full-disk encryption

Encrypt a Windows system drive or an external drive with VeraCrypt. Handle the rescue disk, set a strong PIM, and test recovery.
guide 🔴 advanced ~60 min

Encrypted backups with Restic

Set up Restic to snapshot your home directory to an offsite target (B2, S3, Storj), with a schedule, pruning, and a documented restore.

This is not legal advice. We don't use cookies, analytics, or third-party scripts.

Privacy · Affiliate disclosure · Accessibility · DMCA · Changelog