That discount code, quiz result or new photo-editing app can ask for far more than it needs. Most people do not lose control of their information through one dramatic hack. It happens through dozens of small permissions, rushed log-ins and old accounts left running in the background. Learning how to protect online privacy is less about disappearing from the internet and more about deciding who gets access to your data, and why.
The good news is that a few routine changes can make a meaningful difference. You do not need to be a tech expert, abandon social media or stop shopping online. Start by reducing the easy routes into your digital life.
How to protect online privacy starts with your accounts
Your email inbox is the master key to much of your online life. Password resets, order confirmations, banking alerts and travel bookings all land there, so protecting it deserves priority. Use a long, unique password that you do not reuse anywhere else, then switch on two-factor authentication.
A password manager is useful because it creates and stores strong, different passwords for every account. Reusing one familiar password can feel convenient, but it turns a breach at a retailer, streaming platform or old forum into a potential route to your email, social profiles and financial accounts. The trade-off is getting used to a new tool, but that brief adjustment is far easier than recovering a compromised account.
Where possible, choose an authenticator app or a security key for two-factor authentication rather than relying only on text messages. SMS codes are still better than no protection, but phone numbers can be targeted through scams and SIM-swapping attacks.
Audit the apps already on your phone
Apps can collect location data, contacts, photos, microphone access and browsing activity. Some permissions are legitimate: a maps app needs location information to give directions, and a camera app needs camera access. The question is whether that access makes sense for the app’s main job.
Open your phone’s privacy settings and review which apps can access your location, camera, microphone, contacts and photo library. Remove permissions you no longer need, especially for apps you rarely use. For location, select options such as “while using the app” rather than permanent access where available, and turn off precise location for apps that do not need it.
It is also worth deleting apps you have not opened in months. An unused app may still receive updates, track usage or hold account data. Before deleting, check whether you need to close the associated account separately. Removing an app from your home screen does not always erase the information held by its company.
Treat social media like a public noticeboard
A private profile gives more control, but it does not make every post truly private. Screenshots travel, platforms can change settings, and public details can be pieced together over time. A birthday post, school name, pet’s name and holiday countdown may look harmless separately. Together, they can help a stranger guess security questions or build a convincing scam.
Review who can see your posts, tag you, find you by phone number or email address, and view your friends or followers list. Consider approving tags before they appear on your profile. It is also sensible to avoid posting live location details when you are away from home. Share the beach photo after you have left, not while your house is empty.
Be wary of personality quizzes and viral “share your first concert” posts. They are entertaining, but many mirror the kind of answers used in account recovery questions. You do not have to avoid every trend – just avoid handing out a ready-made profile of your personal life.
Make your browser work harder for you
Websites use cookies and similar tools to remember preferences, measure traffic and serve advertising. Some of this makes browsing easier, such as keeping items in a basket. Other tracking follows your activity across sites to build an advertising profile.
Use your browser’s privacy controls to block third-party cookies where possible, clear browsing data periodically and review saved payment details. Private or incognito mode can stop a browser from saving local history on your device, but it does not make you invisible to websites, your internet provider or an employer-managed network. It is useful for shared devices, not a complete privacy solution.
A reputable privacy-focused browser or tracker-blocking extension can reduce routine tracking. However, do not install random extensions simply because they promise anonymity. Extensions can themselves request access to everything you see online. Fewer, well-known tools are generally safer than a browser packed with add-ons.
Be selective with public Wi-Fi and smart devices
Free Wi-Fi at a café, airport or hotel is handy, but treat it as a convenience rather than a trusted connection. Avoid banking, changing passwords or entering sensitive details on an unfamiliar public network. If you must use one, make sure you are connecting to the genuine network name and stick to websites that use secure connections.
A virtual private network, or VPN, can add protection when using public Wi-Fi by encrypting traffic between your device and the VPN service. It is not magic, though. A VPN provider may still handle information about your connection, so choose carefully and read its privacy terms. For many people, using mobile data for sensitive tasks is the simpler option.
Smart speakers, TVs, doorbells and watches also create a privacy footprint. Check their settings for voice recordings, personalised adverts and data sharing. Disable features you do not use and change default passwords on home devices. If a device no longer receives security updates, think twice before keeping it connected to your network.
Spot privacy risks before they become scams
The most sophisticated privacy setting cannot protect you if you are persuaded to hand over the information yourself. Scammers often use urgency: a parcel is waiting, a bank account is frozen, a tax refund expires tonight. Their aim is to make you act before you check.
Pause before opening unexpected attachments, scanning QR codes in public places or logging in through a link sent by text or email. Instead, open the official app or type the known website address yourself. Never share one-time security codes with anyone who contacts you unexpectedly, even if they claim to be from your bank, a delivery firm or customer support.
Watch for data breaches too. If a company tells you your details may have been exposed, change that account password immediately and change it anywhere it was reused. Keep an eye on bank and card statements for unfamiliar payments. Fast action matters more than panic.
A 15-minute privacy check worth doing
Privacy can feel like an endless project, so make it manageable. Set a reminder every few months and run through these basics:
- Update your phone, computer, browser and key apps.
- Check your email password and two-factor authentication.
- Remove unused apps and review sensitive permissions.
- Look over social media visibility, tags and location settings.
- Delete old online accounts or remove saved card details from services you no longer use.
Not every setting needs to be at its strictest level. A public creator, small business owner or community organiser may choose visibility because it supports their work. The aim is to make that visibility intentional, not accidental.
Online privacy is not a one-off switch you flick and forget. It is a habit of asking one quick question before you sign up, post, download or connect: does this service really need this much information from me?
