In today’s wild west of the internet, protecting your digital life is more crucial than ever. Hackers, scammers, and snoops are lurking around every virtual corner, ready to pounce on your precious data. But fear not! I’ve put together a robust security setup using a VPN, secure email, network-wide ad blocking, a hardened browser, and self-hosted software. Let me walk you through it:

VPN: NordVPN
First up, I use NordVPN to encrypt my internet traffic and mask my IP address. Why is this important? Well, do you like the idea of some hacker sipping a latte at Starbucks while casually browsing through your browsing history? Yeah, didn’t think so. NordVPN acts like an invisibility cloak for your online activity. Not just Nord, any decent VPN service. But make sure it has no logging policy and has been audited.

Email: ProtonMail
For truly private email, I ditched Gmail (Not technically, it has years worth of Data) and switched to ProtonMail. Why the switch? Let’s just say I prefer my emails not being read by Google’s army of ad-targeting algorithms. With ProtonMail’s end-to-end encryption, I can rest easy knowing my messages are for my eyes only (and the intended recipient’s, of course).
I have stopped receiving less spams, and mails are more organized. But it comes at a cost.

Network-wide ad blocking: Pi-hole
Ads aren’t just annoying; they can also be vectors for malware. That’s where Pi-hole comes in. Running on a Raspberry Pi, it blocks ads and trackers at the network level. Why is this important? Think of it as a bouncer for your network, kicking out the sketchy ad riffraff before they can even get through the door.

Browser: Brave
For everyday web surfing, I rely on Brave with its built-in privacy protections. Why Brave? Because it blocks trackers and upgrades connections to HTTPS whenever possible, making it much harder for snoops to see what weird Wikipedia rabbit holes (I don’t do that) I’m falling down at 2AM.

Self-hosted software
Lastly, I run a variety of self-hosted, open source software on a home server. Why self-host? In a word: control. By hosting my own cloud storage, password manager, media server, etc., I get to decide exactly how my data is stored and accessed – no need to blindly trust some Big Tech overlord.
Some examples:

  • Nextcloud for replacing Dropbox/Google Drive
  • Bitwarden for password management
  • Jellyfin media server instead of Netflix/Spotify
  • Home Assistant for private smart home control

Layered security FTW
No single tool is 100% foolproof, but by combining multiple layers of security, I can make life much harder for would-be attackers. Think of it like an onion (pun intended) of privacy – a stinky, tear-inducing onion that sends hackers running for the hills.

The cost of security
Now, I’ll be the first to admit that this level of security comes at a cost – both in terms of money and convenience. VPNs, secure email, and self-hosted software often require paid subscriptions or extra hardware. And let’s face it, constantly jumping through encryption hoops can be a bit of a hassle compared to just using default apps and services.

But here’s the thing: just like with physical security, you have to decide what level of protection is right for your needs. If you’re a high-profile target or dealing with super sensitive data, you might need Fort Knox-level security. But for the average user, even basic measures like a good password manager and two-factor authentication can go a long way.

There are also plenty of free and open source options out there, like the Bitwarden password manager or the Signal messaging app, that provide solid security without breaking the bank. It’s all about finding the right balance for your specific situation.

Minimal but effective
At the end of the day, the security setup I’ve outlined here is just one possible approach – and probably overkill for many folks. What’s most important is being aware of the risks and taking steps to protect yourself in a way that aligns with your needs and values.

For me, the combination of a VPN, secure email, Pi-hole, Brave, and self-hosted software hits that sweet spot of strong security without too much hassle. Is it perfect? Nah. But it helps me sleep a little better at night knowing I’ve got multiple layers of defense in place.

So take a look at your own online life and threat model, and see where you might be able to bolster your defenses. Start small, stay consistent, and don’t be afraid to adjust your approach over time. With a little effort and the right tools, you can dramatically boost your digital security – no tin foil hat required. Happy (and secure) surfing, my friends!

And if all else fails, there’s always the option of retreating to an off-grid cabin in the woods. But good luck streaming Netflix out there.