How do I protect my privacy online?
The privacy settings and habits that make a real difference, and an honest account of what each one does and doesn't achieve.
- Difficulty
- beginner
- Time
- 1 hr
- Read
- 3 min
Short answer
Review app permissions and revoke anything unnecessary, use a browser with tracking protection, check the privacy settings on your main accounts, and limit what you share publicly. Most tracking happens through app permissions and browser cookies, and both are directly controllable.
Online privacy advice ranges from useful to theatrical. The measures below are the ones with real effect for an ordinary person: controlling app permissions, limiting cross-site tracking, and reducing what's publicly visible. A VPN is included with an honest description of what it actually does, because it's widely oversold.
Step by step
- Review app permissions on your phone and revoke anything unnecessary.Location, microphone, camera, contacts, photos. Many apps request far more than they need. Set location to 'while using' or off.
- Use a browser with tracking protection, or add a reputable content blocker.Cross-site tracking is how most advertising profiling works, and blocking it is straightforward.
- Review the privacy settings on your main accounts.Google, Apple, Meta and Microsoft all have privacy dashboards. Turn off ad personalisation and review what's stored.
- Check what's publicly visible on your social accounts.Look at your profile logged out. It's often more than expected, including old posts and tagged photos.
- Limit what you share that could answer security questions.Birthdays, pet names, schools, mother's maiden name. These are standard account recovery questions.
- Use a search engine that doesn't build a profile, if you care about search history.Several exist. The trade-off is sometimes less personalised results, which some people prefer anyway.
- Understand what a VPN does before buying one.It hides your traffic from your network and your ISP and masks your IP address. It does not make you anonymous, and you're trusting the VPN provider instead of your ISP.
- Delete accounts you no longer use.Dormant accounts hold your data and are a breach risk. Many services have a deletion route in settings.
Tips
- Check what data your main accounts hold on you — most large services have a download-your-data function, and the result is often illuminating.
- Privacy and security overlap but aren't the same. Two-factor authentication is security; limiting tracking is privacy. Both matter for different reasons.
- Free VPNs generally monetise your traffic in some way. If privacy is the goal, a free VPN is often counterproductive.
- Reviewing permissions once a year is enough for most people — app updates occasionally add new requests.
Common mistakes
- Granting all app permissions by default — It's the main route by which apps collect location and contact data. Most apps work fine with far less.
- Assuming a VPN makes you anonymous — It shifts trust from your ISP to the VPN provider and masks your IP. Accounts you log into still identify you.
- Leaving old accounts active — They hold data and get breached. Deleting unused accounts reduces exposure.
- Answering security questions truthfully — The real answers are often publicly discoverable. Store random answers in a password manager instead.
Questions people ask
Do I need a VPN?
For most home use, not particularly — HTTPS already encrypts your traffic content. A VPN is useful on untrusted public WiFi, for hiding browsing from your ISP or network operator, and for changing apparent location. It doesn't make you anonymous.
What's the single most effective privacy step?
Reviewing app permissions, particularly location. It's the largest source of continuous personal data collection and it's entirely under your control.