Good privacy is mostly a set of small habits. None of the tips below require technical skills, and together they make a real difference.
Use separate addresses for separate purposes
Keep one address for important accounts (bank, government, work), another for shopping and subscriptions, and use temporary addresses for one-off sign-ups. If one of them starts receiving spam, you will know where it leaked from.
Use a password manager
Reusing passwords is the most common reason accounts get taken over. A password manager creates and remembers a unique, long password for every site, so a breach on one service does not unlock the others.
Turn on two-factor authentication
Enable an authenticator app or a hardware key on your email, banking and social accounts. Even if your password is stolen, the attacker still cannot sign in without the second factor.
Be suspicious of urgent emails
Phishing messages often claim that an account is locked or a payment failed. Instead of clicking the link, open the website yourself by typing its address. Look carefully at the sender domain, and never enter a password on a page you reached from an unexpected email.
Block remote images in email
Many marketing emails contain invisible images that tell the sender when and where you opened the message. Most mail apps let you block remote images by default; our inbox does this automatically.
Review browser and app permissions
Periodically check which apps can access your location, contacts, camera and microphone, and remove permissions you do not need. Clearing cookies for sites you no longer use also limits cross-site tracking.
Keep software updated
Security updates fix holes that attackers actively use. Turn on automatic updates for your operating system, browser and apps.