Never mix your identities. Your digital life should be separated into distinct "containers" that never interact. If one identity is compromised, the others remain secure.

• Use separate browsers (or browser profiles) for different activities.
• Never reuse usernames or handles across different personas.
• Maintain separate email addresses for banking, social media, and sensitive communications.
• Use Qubes OS or Virtual Machines (VMs) for high-risk research.

Standard email and SMS are not secure. Metadata (who you talk to, when, and where) is just as dangerous as the content of the message.

• Signal: Use for day-to-day encrypted messaging. Verify safety numbers in person.
• PGP: Mandatory for email. If you must email, encrypt it.
• Session: Use for anonymous messaging requiring no phone number.
• Assume all unencrypted calls are recorded.

Every file you create leaves a trace. Cleaning metadata is essential before sharing documents or images publicly.

• Scrub EXIF data from photos before uploading (use tools like ExifCleaner).
• Be aware of background details in photos and screenshots.
• Use a VPN always to mask your IP address, but remember a VPN is a trusted third party.
• For high anonymity, use the Tor Browser.