32bit.cafe/content/guides/internetsafety.html

---
title: Staying Safe Online
author: Jay
aliases:
  - /internetsafety
---
<h2>Staying Safe Online</h2>
<blockquote>Lovingly written and submitted by <a href="https://transrats.neocities.org" target="_blank">Jay</a>. Thank you, Jay!</blockquote>
<section>
<p>The internet can be a scary place, and there's a lot that could go wrong. Unfortunately, many internet safety guides are incomplete at best and anxiety-inducing at worst. The intention here is to provide a semi-quick primer on internet safety, with links and ideas on how to get more in-depth if you so choose.</p>
</section>

<h3>Personal Details: Do I need to be anonymous?</h3>

<section>
<p>One important thing to remember about the internet — specifically social media spaces and public Discord servers — is you never really know who's looking at what you post. Privating your accounts and only allowing access to close friends is a simple way to avoid this, but what if you want to be a part of a bigger space or want to get your work (whether it be art, writing, an online store) out there? Not all of these points will apply equally to everybody, and it's important to keep your own use-cases in mind. But here's a rundown of information you should generally keep to yourself:</p>

<h4>Full legal name/last name</h4>
<p>It's important to keep these secret in the broader web, especially if you want to keep your personal and work lives separate! By knowing your legal name and/or last name, it's very possible people could find your relatives, school(s), place of work, and more depending on what online databases your information has found itself into.</p>
<p>If you have a really unique first name, it might be best to keep that private as well.</p>


<h4>Address/location</h4>
<p>Obviously you don't want strangers appearing at your house, but as a rule of thumb you shouldn't post your general location online either; that means not saying the name of the place if you're going to a specific small business or local restaurant. Sometimes people post online if they're going to a big event, such as a concert or a convention. Think about waiting until after the event to advertise that you were there!</p>
<p>A lot of the time, photos you take on your phone will have location data embedded in them. This is called metadata; it's important to remove this before posting photos! A quick and easy way to do this just involves taking a screenshot of the photo you want to post, then posting the screenshot. If you want to go more in-depth, you can use <a href="https://github.com/szTheory/exifcleaner" target="_blank">Exifcleaner</a>.</p>
<p>If you want to follow things like school-related pages on social media, it's a good idea to at least have a separate account for that sort of thing.</p>
<p>Generally, sharing your country or state is safe. Just be cautious, of course.</p>


<h4>Age, primarily if you're a minor</h4>
<p>This cannot exactly be used to track you, but it's important to avoid predators whenever possible. If you're a child/teenager, advertising that freely will often cause more predators to interact with you.</p>

<h4>Personal issues, family drama/information, etc.</h4>
<p>Not everyone has a good place to turn to when they need to vent, and that leads to many using social media as a way to cope. This is not inherently bad. If you are going to discuss things like personal mental health struggles, your triggers/traumas, or family issues, it's at least best to do this on a private account. Venting into the void likely won't help you in the long-term, and putting your most vulnerable moments out on the public web can (and sometimes will) be used against you.</p>
</section>

<h3>Password Safety</h3>
<blockquote>This section was lovingly written and submitted by <a href="https://vm70.neocities.org" target="_blank">VM</a>. Thank you, VM!</blockquote>

<section>
<p>The websites you use that require sign-up keep track of your data with your account. Your login credentials, which are made up of both your username and your password, help websites verify your identity so that you can log in. If someone else can guess the password you use, they can access your account. Strong passwords are hard for others to guess, so they keep your info safe from online attackers.</p>

<p>Think of your password like a key for your mailbox. You should only give copies of your key to the people you trust the most (including yourself) with the letters in your mailbox. If someone gets a hold of your key, they can open your mailbox and read your letters. If you use the same key for different mailboxes, they can read your mail from multiple different mailboxes. Similarly, it's important to make sure that you don't share your login credentials so that you can maintain control over who gets to access your account data.</p>

<ul>
<li>If you make your passwords yourself, make sure they are easy for you to remember but hard for others to guess.
<ul>
<li>Don't use common passwords like "password", "123456", or "555555". These are very easy to guess; for example, here are <a href="https://github.com/danielmiessler/SecLists/blob/master/Passwords/2020-200_most_used_passwords.txt" target="_blank">200 of the most common passwords used in 2020</a>.
<li>Don't use single words as passwords like "fortune". These are easy to guess with enough computer power and time. Adding numbers to the end of a single word (like "cookie3") makes it only slightly harder to guess.
<li>Don't use info that other people know about you in your password like names, dates, addresses, phone numbers, pets' names, or car models. If your friends can find it, so can possible attackers.
<li>Make your password at least 16 characters long. Longer passwords with less special characters are usually harder to guess than shorter, more complicated passwords with more special characters.
<li>Include different types of characters in your password like numbers, uppercase / lowercase letters, and special characters.
</ul>
<li>You can use tools to help you make secure passwords if you have trouble coming up with them.
<ul>
<li>Use password checkers like <a href="https://password.kaspersky.com/" target="_blank">Kaspersky Password Checker</a>, <a href="https://www.security.org/how-secure-is-my-password/" target="_blank">security.org Password Checker</a>, or <a href="https://www.uic.edu/apps/strong-password/" target="_blank">UIC Password Checker</a> to make sure they're secure.
<li>Make passwords with special programs like the <a href="https://www.random.org/passwords/" target="_blank">RANDOM.ORG Password Generator</a>.
<li>Use virtual dice like in <a href="https://diceware.dmuth.org/" target="_blank">Diceware</a> to make passphrases from words.</li>
</ul>
<li>Don't share your passwords with other people, especially not with strangers. Doing this removes your control over who gets to see and share your password.
<ul><li>Never share passwords through phone calls, emails, or text. For example, customer service agents shouldn't ask you for your password.</ul>
<li>Never use the same password for two different accounts. Some websites you log into may have their login credentials leaked or published online through a data breach. This gives attackers clues for accessing your accounts on other websites.
<ul>
<li>Tools like <a href="https://haveibeenpwned.com/" target="_blank">Have I been Pwned?</a> or <a href="https://monitor.firefox.com/" target="_blank">Firefox Monitor</a> help check if your email was listed in a data breach.
</ul>
<li>Use tools to help keep track of passwords if you have trouble remembering them.
<ul>
<li>Password managers like your browser's integrated password manager, <a href="https://keepassxc.org/" target="_blank">KeePassXC</a>, and <a href="https://bitwarden.com/" target="_blank">BitWarden</a> can help you securely store passwords and synchronize them across devices. Most of them come with built-in password generators.
</ul>
<li>Use multi-factor authentication, also known as MFA or 2FA, to further protect your account. This lets the website send you a code to type in after entering your login credentials. This adds an extra layer of defense but makes logging in slower.
<li>Set a reminder to regularly update passwords once every few months. This makes sure that the passwords you use won't stay relevant in the event of a data breach.</li>
</ul>
</section>

<h3>Talking to People Online</h3>

<section>
<p>Not everybody on the internet is out to get you, obviously. But some people are, and it's important to be able to identify red flags and know what to do if somebody starts to make you uncomfortable. Coping with harassment and abuse is a bit out of the scope of this guide, but hopefully these tips can help you avoid some of it to begin with.</p>

<h4>Don't feed the trolls</h4>

<p>If somebody is harassing you or your friends, showing up in comment sections looking for a fight, or otherwise making insane, inflammatory statements and nobody knows who they are, they might be just trying to get a rise out of you. The best thing to do is block and move on; do not engage. You will not change anybody's worldview in a YouTube comment section, and by engaging with them (especially publicly) you've given them an opportunity to elaborate on their often hateful views and spread it to more onlookers. People who do this often crave attention; if you don't give it to them, they will normally stop, or at the very least move on to another target.</p>
<p>It can be very fun to mess with these people and call them out publicly, but it's important you try to fight that urge. Even if you find it funny, people scrolling past may be upset by the things the troll says, and putting yourself into a cycle of hatred and constantly talking to people who make you upset is not good for you.</p>

<h4>Stay safe from malicious people</h4>
<p>If you are a child/teenager, and an adult online is acting overly-friendly, calls you mature, wants to share personal life details, or otherwise treats you like the center of their world, be wary. This is often a red flag, and people who do this are often dangerous to you and your friends.</p>
<p>At any age, people talking about and asking for lots of personal details (real name/family life/trauma/age/location) shortly after meeting you is a red flag.</p>
<p>Block people if they make you feel uncomfortable or upset. You do not owe anyone an explanation for no longer talking to them, and this is especially so for folks you meet online. Trust your gut, and ask a trusted friend for input if you're unsure.</p>

<h4>Avoid suspicious links and downloads</h4>
<p>Don't click fishy links! Always check the full URL of links sent to you, especially by strangers. Make sure, for example, a Paypal link you recieve DOES go to paypal.com — not 'paypal.xyz' or 'paypal.payment.co'. You can use <a href="https://www.urlvoid.com/" target="_blank">URLvoid</a> to check a link if you're unsure about it. You never know what a scam website might be doing with your data or device!<p>
<p>Don't download/open fishy files! Always try to check with other real people (e.g. not from people in YouTube comment sections) if a program is legitimate or not. <a href="https://www.virustotal.com/gui/home/upload" target="_blank">VirusTotal</a> can help you if you already did download a file and are unsure if it's safe to open, but it's best not to download suspicious files to begin with.</p>
</section>

<h3>Separation of Identity</h3>

<section>
<p>The world is very connected now! Many schools, workplaces, and local event groups will have an online presence and may even require you to be a part of it. If you want to take part in these things as well as have your own online presence, it's a good idea to separate your identities.</p>

<h4>Using different names</h4>
<p>If you have interests you don't want real-life friends or family to know about, or you're closeted as queer and could be at risk if somebody found out, it's a good idea to use an alias online. If you have some accounts you want to share with people in real life and some that you don't, make sure you use different usernames/aliases with them, and don't link one to the other. Don't put your face on anything you'd be upset at somebody in real life potentially finding.</p>

<h4>Email</h4>
<p>It's a good idea to have at least two emails; one for personal use, which does not use your legal name, so that you can give and recieve email from people online, and one for 'professional' use. The professional email should have your legal/full preferred name and should be something you'd be fine giving to an employer. 32bit.cafe actually offers free email, if you're in the market for a new one.</p>
</section>

<h3>Downloads</h3>

<section>
<p>Adblockers are obvious, but there's other helpful programs you can download or use to keep yourself safe online.</p>

<ul>
<li>Block trackers</li>
<ul>
<li><a href="https://privacybadger.org/" target="_blank">Privacy Badger</a></li>
</ul>
<li>Block ads</li>
<ul>
<li><a href="https://ublockorigin.com/" target="_blank">uBlock Origin</a></li>
<li><a href="https://github.com/gorhill/uMatrix" target="_blank">uMatrix</a> (for more advanced users of uBlock Origin)</li>
<li><a href="https://letsblock.it/filters/search-results" target="_blank">Let's Block It</a> (works with uBlock Origin to block scammy search results)</li>
</ul>
<li>Avoid scams on Amazon and eBay</li>
<ul>
<li><a href="https://www.fakespot.com/" target="_blank">Fakespot</a></li>
</ul>
<li>Delete metadata</li>
<ul>
<li><a href="https://github.com/szTheory/exifcleaner" target="_blank">ExifCleaner</a></li>
<li><a href="https://play.google.com/store/apps/details?id=com.jarsilio.android.scrambledeggsif&pli=1" target="_blank">ScrambledExif</a></li>
</ul>
<li>More secure search engine</li>
<ul>
<li><a href="https://duckduckgo.com" target="_blank">DuckDuckGo</a></li>
</ul>
</ul>
</section>

<h3>Further Reading</h3>

<section>
<ul>
<li><a href="https://websafety.carrd.co/" target="_blank">Staying Safe on the Internet: Tips for Better Personal Protection</a></li>
<li><a href="https://shouldiblockads.com/" target="_blank">Should I block ads? yes, you should use an ad blocker.</a></li>
<li><a href="https://staysafe.org/10-tips-to-stay-safe-online/" target="_blank">10 Tips to Stay Safe Online</a></li>
<li><a href="https://www.reddit.com/r/degoogle/comments/huk4rp/why_you_should_degoogle_intro_degoogling/" target="_blank">Why You Should DeGoogle & Intro DeGoogling Techniques</a></li>
<li><a href="https://www.privacyguides.org/en/" target="_blank">The Guide to Restoring Your Online Privacy</a></li>
<li><a href="https://crimethinc.com/2020/08/26/doxcare-prevention-and-aftercare-for-those-targeted-by-doxxing-and-political-harassment" target="_blank">Doxcare: Prevention and Aftercare for Those Targeted by Doxxing and Political Harassment</a></li>
</ul>
</section>