No tracking · No signup · Runs in your browser

What security should
I actually have?

Answer 6 questions. Get a personalized checklist tailored to your devices, habits, and concerns — in under 90 seconds.

90 seconds · No email required · Your answers never leave this browser

20
Recommendations
41+
Sources cited
6
Platforms covered
$0
No ads, ever

How it works

1

Tell us about you

What devices you use, what you do online, what worries you, and what you already have set up. Six questions.

2

Get your plan

A prioritized checklist personalized to your situation. Each item explains why it matters, how to do it, and how long it'll take.

3

Check things off

Progress is saved locally. Share your plan via a link. Come back later — we'll show what's new since your last visit.

A peek at what you'll get

Each recommendation is concrete, sourced, and honest about whether you actually need it.

Install a password manager Critical

Reused passwords are the #1 cause of account takeover. One unique password per site means a breach can't cascade.

20 min · Bitwarden Sources: CISA, NIST
Turn on FileVault disk encryption Critical

Without it, anyone with physical access can pull your SSD and read every file. Your password doesn't stop them.

10 min · Built into macOS Sources: Apple, EFF
Set a carrier PIN to prevent SIM swapping High

A SIM swap lets an attacker steal your phone number and bypass SMS 2FA. A carrier PIN shuts it down at the source.

15 min · One phone call Sources: CISA, FCC, FTC

We'll tell you what to skip, too

Most security advice is written by people selling something. Not here.

Skip
A VPN for everyday use

Useful for public Wi-Fi and bypassing geo-blocks. Not the universal security upgrade it's marketed as.

Skip
Paid antivirus on a Mac

macOS already has XProtect, Gatekeeper, and SIP. A paid AV adds telemetry and slowdowns, not safety.

Skip
A "secure" browser rebrand

Firefox with uBlock Origin (or plain Safari) beats every Chrome fork on privacy. Save your time.

See all our "you don't need this" takes →

Every recommendation cites authoritative sources

CISA NIST EFF Apple Microsoft Google Mozilla Citizen Lab FCC FTC

Or jump straight to a platform checklist:

Ready to find out what you actually need?

Start the assessment

This is personal security guidance, not a substitute for a professional audit. For high-risk individuals, see Access Now or EFF.