These are the tools and resources that get our highest recommendation

Tools are just one part of a complete approach to online privacy and safety

…but they are a very critical part!

Secure connection – USe A VPN

ProtonVPN is part of the complete Proton package. For a single (very reasonable!) price you get a blazing fast VPN with worldwide access, and advanced features that most commercial VPN services don’t have – such as Secure Core that anonymizes traffic on its own network.

Advanced users may want to run a private instance of Wireguard, especially if you already use cloud servers for development work. Wireguard is one of the most advanced VPN protocols and also has improved usability features.

Strong Passwords – Use A Password Manager

Bitwarden is the best overall password manager with a complete feature set and top scores for security according to third-party audits.

In addition, Chrome and Safari web browsers incorporate Passkeys, which are more secure than passwords. Use Passkeys for any site that allows them (such as Gmail) but many sites and services have not incorporated that technology.

Another option is to use a physical hardware key. We recommend the Yubikey. You should have at least two in case one gets lost, but it’s even better to have three to prevent a lockout. They work like a passkey that can never leave the physical device.

Safe Files – Use Secure Cloud Storage

There are several good options for secure file storage. The very best may be a self-hosted solution such as a Synology storage device. The simplest versions are very affordable and offer large storage on two redundant drives. When kept on a properly secured home network, the network device can be reached from anywhere in the world (yes, over an encrypted VPN connection of course).

Good commercial cloud storage providers include Proton (also part of the vpn/email package) or Mega. Both are free for light usage, and very inexpensive for typical personal use.

The keyword when evaluating cloud storage providers is ‘zero knowledge’. That means only you can access your files and there is no backdoor. Dropbox and Google Drive are notorious for their security gaps.