15 Steps to Stay Digitally Secure in the Age of AI Hacking

Use a password manager

Generate a unique random password for every account. When one service gets breached (and they do, constantly), attackers try those same credentials everywhere else. A password manager like 1Password or Bitwarden kills that risk entirely. It also autofills, so it is actually faster than reusing passwords.

Set up hardware security keys

YubiKeys are physical devices that act as your second factor. An attacker would need to physically hold the key to log in. Phone-based SMS codes are dangerously easy to steal through SIM swapping, where someone calls your carrier, pretends to be you, and redirects your number to their phone. Buy 2-3 YubiKeys and keep them in different locations.

Enable biometrics everywhere

Face ID, fingerprint, whatever your device supports. Set it up on your password manager, banking apps, anything sensitive. This is the third authentication layer: something you are. Nobody can steal your face from a database.

Treat security questions like passwords

"What is your mother's maiden name?" is Googleable in 10 seconds. Generate random answers and store them in your password manager alongside your passwords. Never answer security questions truthfully.

Turn on disk encryption

FileVault on Mac, BitLocker on Windows. If your laptop gets stolen, encryption means the thief gets a useless brick instead of every file you have ever created. Takes 2 minutes to enable, runs silently in the background, zero performance impact on modern hardware.

Minimize smart home devices

Every "smart" device is an internet-connected computer with a microphone sitting in your house. They collect data, call home constantly, and get hacked regularly. That Wi-Fi air quality monitor from Amazon does not need your GPS coordinates. Fewer connected devices means fewer entry points into your network.

Switch to Signal for messaging

Signal encrypts messages end-to-end. Nobody can read them: not Signal, not your carrier, not anyone intercepting the data. Regular SMS and even iMessage store metadata (who you talked to, when, how often) that anyone with access can analyze. Turn on disappearing messages. 90 days is a good default.

Use a privacy-focused browser

Brave is built on Chromium, so all Chrome extensions work and it feels identical. It blocks trackers and ads by default. You are not the product.

Switch your search engine

Brave Search has its own independent index, unlike DuckDuckGo which is a skin on Bing. If a result is not great, add "!g" to redirect that specific query to Google. $3/month for premium. Worth it to be the customer instead of the product.

Use virtual credit cards

Services like Privacy.com let you mint a new card number for every merchant. Set spending limits per card. Enter random billing info. If a merchant gets breached, attackers get one disposable number instead of your real financial identity. No merchant gets your actual home address.

Get a virtual mailing address

Services like Virtual Post Mail receive your physical mail, scan it, and let you view it digitally. You decide what to shred and what to forward. Stop giving your real home address to every random internet merchant during checkout.

Stop clicking links in email

Email addresses are trivially easy to spoof. With AI, phishing emails now look indistinguishable from real ones. Instead of clicking, manually navigate to the website and log in from there. Disable automatic image loading in email settings because embedded images track whether you opened the message.

Use a VPN selectively

A VPN hides your IP address from the services you connect to. You do not need it on 24/7. Turn it on when you are on public Wi-Fi or dealing with services you trust less. Mullvad is a good option: no accounts, no email required, pay with cash if you want.

Set up DNS-level ad blocking

DNS is the phonebook your device uses to find websites. Blocking at this level means ads and trackers get killed before they even load. NextDNS works across every app and browser on your device. Set it once, forget about it.

Install a network monitor

Little Snitch on Mac shows you which apps are communicating, how much data they are sending, and where it is going. Any app calling home more than expected is suspicious and probably worth uninstalling. This is how you catch the things the other 14 steps miss.

Base (USDC)

Solana (USDC)