Your online privacy erodes every time you accept cookies without reading them, use "Sign in with Google," or install a free app without reading its terms. Here are 10 concrete measures, ranked by ease of implementation, to take back control.

1. Install an Ad and Tracker Blocker

Effort: low (5 minutes)

uBlock Origin is the most effective browser extension against ads and trackers. Available on Chrome, Firefox, Edge, and Safari.

By blocking trackers, you prevent hundreds of companies from tracking your browsing habits and building a profile of you.

To do: install uBlock Origin on all your browsers and enable additional filter lists (EasyPrivacy, Fanboy's Annoyance List).

2. Change Your Default Search Engine

Effort: very low (2 minutes)

Google analyzes your searches to profile you. Privacy-respecting alternatives exist:

  • DuckDuckGo: the most popular, quality results, no tracking
  • Brave Search: proprietary independent index, no tracking
  • Startpage: displays Google results without tracking you

To do: change the default search engine in your browser settings.

3. Use a Privacy-Focused Browser

Effort: medium (30 minutes)

Firefox with the right settings is an excellent open source option. Configure:

  • Settings > Privacy & Security > Enhanced Tracking Protection: Strict
  • Disable "Suggestions from Firefox"

Brave is based on Chromium with a built-in ad blocker and fingerprinting protections.

Tor Browser for maximum anonymity, but less practical for daily use.

4. Choose a Privacy-Respecting Email Provider

Effort: medium (1-2 hours for migration)

Gmail analyzes your emails to profile you. Alternatives:

  • ProtonMail: end-to-end encryption, hosted in Switzerland, free plan
  • Tutanota: open source, E2E encryption, based in Germany
  • Fastmail: no E2E encryption but without email analysis

5. Enable Two-Factor Authentication

Effort: medium (1 hour for all important accounts)

Two-factor authentication protects your accounts even if your password is stolen. Enable it on your email, banking, social media, and password manager.

6. Use a Password Manager

Effort: high (a few hours for initial migration)

A password manager lets you have strong, unique passwords for every site without memorizing them. Recommendations:

  • Bitwarden: open source, free, independently audited
  • 1Password: excellent on iOS and Mac, paid but comprehensive

7. Audit Your App Permissions

Effort: medium (30 minutes)

On iPhone: Settings > Privacy & Security. On Android: Settings > Apps > App Permissions.

Questions to ask for each permission:

  • Does this app really need access to my location? (always or only while using it?)
  • Why does a flashlight app need my contacts?

Revoke unnecessary permissions.

8. Limit Data Sharing with Your Devices

Effort: medium (30 minutes)

iPhone: Settings > Privacy > Apple Advertising > Disable Personalized Ads. Disable Analytics & Improvements.

Android: Settings > Privacy > Ads > Reset your advertising ID and disable personalization.

Windows: Settings > Privacy > Disable telemetry and advertising identifiers.

9. Check for Data Breaches Affecting You

Effort: very low (5 minutes)

Visit haveibeenpwned.com and enter your email address. This free service tells you if your email was exposed in a known data breach.

If your email appears in a breach, immediately change the password for the affected service.

10. Protect Your Most Sensitive Data with End-to-End Encryption

Effort: variable depending on your needs

For your most important information (posthumous messages, access to your digital legacy, medical data), end-to-end encryption is essential.

EchoPass offers this protection for your digital succession information. Your messages are encrypted with XChaCha20-Poly1305 in your browser. No one, not even EchoPass, can read them before delivery.

Where to Start?

If doing everything at once seems overwhelming, start with these 3 high-impact, low-effort measures:

  1. Install uBlock Origin (5 minutes, immediate impact)
  2. Change your search engine (2 minutes)
  3. Enable 2FA on your primary email (15 minutes)

Do the others gradually, over several weeks.

Discover how EchoPass protects your most sensitive data.