Six pieces of infrastructure. Set up once over a quiet weekend. Defends the perimeter forever. The opposite of the doomscroll.
The privacy internet wants you to live in fear, run twelve browser extensions, audit your own DNS, and feel guilty about the rest. Quintillionaire Grindset disagrees.
The honest version is that six pieces of infrastructure cover roughly 95% of the threat surface for a normal operator. Set them up once, in an afternoon, and stop thinking about them. The remaining 5% is for journalists in hostile countries and your mother who clicks every link.
Below: the six. In order. Each one takes 5 to 15 minutes and runs forever.
Do them in this order. Each one builds on the previous. Total time: roughly two hours, then never again.
Install Blackout VPN on every device that goes online. Toggle "auto-connect on untrusted Wi-Fi." Forget it exists.
Encrypts the perimeter at the network layer, regardless of which app is leaking what. Costs less per month than two coffees. The single highest-leverage privacy move you will ever make.
Bitwarden, 1Password, or whichever you trust. Import every saved password from your browser. Delete them from the browser. Generate fresh long passwords for the top 10 accounts that matter.
90% of breaches are reused or weak passwords. One vault means one master password to remember and zero reused passwords across services. The breach radius for any single leak collapses.
Turn on two-factor authentication on email, bank, password manager, and any account holding money or work. Use an authenticator app, not SMS. SMS 2FA is better than nothing but is socially-engineered routinely.
A leaked password is no longer enough to enter. The attacker needs the password and your phone. The combined cost goes from "trivial" to "unprofitable for almost everyone."
On the phone: Settings, Privacy, Location. Set every app that does not need always-on location to "While Using" or "Never." Same for microphone and contacts. Delete five apps you have not opened in three months.
Most apps phone home with whatever they have permission to access, regardless of whether they need it for the actual feature. Revoking permissions costs nothing and breaks almost nothing.
Use a browser that blocks third-party trackers by default: Firefox with strict mode, Brave, or whichever you prefer. Add uBlock Origin if it isn’t built in. Don’t install ten extensions, install one.
Default browser settings are tuned for the advertiser. Default privacy mode reverses that. Page loads get faster. Your fingerprint shrinks. The web becomes quieter.
Use an alias service (Apple Hide My Email, SimpleLogin, or Fastmail aliases). Every newsletter, store, app, and one-time download gets a unique alias. Real address goes only to humans you trust.
Spam goes to zero. When a service leaks (and it will), you know which one and can kill the alias in one click. Your real inbox stops being a sale list.
Each one above is something you do once. None of them require ongoing vigilance. None of them require buying a course. None of them require you to change who you are.
If you do all six this weekend, you will spend the next decade safer than 99% of the internet. That is the entire pitch.
Encryption is the only form of trust that scales.
Set once. Run forever.
