DIGITAL LIFE · PRACTICAL SECURITY
Personal OPSEC for a mobile life: protect the ordinary points of failure
Operational security starts with understanding what can go wrong. The most useful precautions are often ordinary and repeatable.
By Ties Jezuit · Reviewed 14 October 2026 · General orientation
Name the risks before buying tools
List the things you need to protect: accounts, documents, money, client confidentiality and personal location. Then name realistic threats such as a stolen phone, phishing, lost recovery access or an exposed backup. The plan for opportunistic theft differs from a plan for a targeted attacker. No collection of apps guarantees invisibility. Start with the threats you can actually reduce without making your life so complicated that you abandon the precautions.
Strengthen the account recovery chain
Use unique passwords through a reputable manager and strong multi-factor authentication where available. Keep recovery codes offline and understand what happens if your main phone or email is lost. Secure the email account that resets everything else. Consider hardware security keys for important accounts when supported, with a separate backup. Avoid storing every recovery method on the same device or sending secret phrases to yourself in ordinary messages.
Separate daily convenience from reserves
Carry the access needed for a normal day, not every key to long-term assets. Separate work and personal accounts where that helps avoid accidental sharing. Encrypt devices, keep software updated and use automatic screen locks. Back up important records and practise restoring them. A backup that exists only on the laptop you might lose is not an independent copy. Keep sensitive client material within authorised systems instead of scattering it through extra apps.
Share less without misrepresenting facts
Do not broadcast live travel, exact accommodation or your asset holdings. Check app permissions and what appears in photographs or public profiles. A pseudonym can separate contexts but cannot guarantee anonymity. Use lawful privacy settings and accurate statements to banks and authorities. OPSEC is not a reason to evade tax, falsify identity or promise that a VPN prevents investigation. The objective is lower unnecessary exposure and dependable access.
Create a small incident plan
Write down what to do after a lost phone, compromised email or suspected wallet scam. Include official recovery routes, device revocation, financial-provider contacts and the location of backup records. Keep the plan private and accessible without the affected device. Review it after changing numbers, moving country or replacing hardware. Independence means being able to recover calmly, not merely avoiding every service.
Sources and further checks
- Proton: security and threat modelling
- Proton VPN: threat model
Requirements and provider terms can change. Confirm the current conditions for your own case before acting. Provider details and external contacts are gathered on our partnership page.
Put your question into a practical next step.
Describe what you are trying to decide. We agree the appropriate scope and price before you commit. A question does not create a booking or payment obligation.