Basic security / DNS tips

This simple guide explains the basics of securing your home network. We'll cover essential steps to protect your Wi-Fi, devices, and online privacy. These tips are beginner-friendly and can significantly improve your security without needing advanced technical skills.

1. Secure Your Router

Your router is the gateway to your home network. Securing it is the first step.

• Change the default admin password: Log into your router's admin panel (usually at 192.168.1.1 or similar) and set a strong, unique password.
• Update firmware: Check your router manufacturer's website for updates and install them to patch security vulnerabilities.
• Disable remote management: Turn off any features that allow access to your router from outside your home network.
• Use WPA3 encryption: In your router settings, enable WPA3 (or WPA2 if WPA3 isn't available) for Wi-Fi security. Avoid WEP or open networks.
• Set a strong Wi-Fi password: Use a long passphrase with letters, numbers, and symbols.

2. Protect Your Devices

Every device on your network (computers, phones, smart devices) needs basic protection.

• Keep software updated: Enable automatic updates for your operating system, apps, and antivirus software.
• Use antivirus/malware protection: Install reputable free options like Windows Defender (built-in on Windows) or Malwarebytes.
• Enable firewalls: Turn on the built-in firewall on your devices and router.
• Avoid public Wi-Fi for sensitive tasks: If you must use it, consider a VPN (Virtual Private Network) for encryption.
• Get a Tails if you want even more privacy https://tails.net/install/index.en.html
• Secure your browser like firefox, or use https://librewolf.net

3. Use a Privacy-Focused Browser

Browsers can track your activity. Switch to a more secure, privacy-oriented one.

• Try Ungoogled Chromium, a version of Chrome without Google's tracking features. Download binaries from the official site and install it as your default browser.
• Enable extensions like uBlock Origin for ad-blocking and HTTPS Everywhere for secure connections.

4. Secure Your DNS for Privacy

DNS (Domain Name System) translates website names to IP addresses. Using a secure DNS prevents leaks, blocks malicious sites, and improves privacy.

• Recommended non-logging DNS providers:
  • Triro DNS – Secure and fast. For DNS over HTTPS (DoH) in your browser or phone: https://eu.tri-dns.net/dns-query.
  • Alternatives: DNS.SB or servers from OpenNIC Project.
• Run your own DNS blocker: Set up Pi-hole on a Raspberry Pi or similar device. It acts as a network-wide ad and tracker blocker.
• How to set it up: In your router settings, change the DNS servers to one of the above (e.g., for Triro, use their IP addresses). For browsers, configure DoH in settings.

5. Test Your Setup

After making changes, verify everything is secure.

• Check for DNS leaks: Use DNSLeakTest.com or DoILeak.com.
• Test DNS performance and security: Try DNSCheck.tools or CMDNS.
• Use https://www.virustotal.com/gui/home/upload to scan files you receive or want to download from non-tursted sources
• Use https://wormhole.app/ to send larger files securely (you can double encrypt them if you like)

Additional Tips

• Encrypt you communications over unsecure mediums like email, whatsapp (meta data and possible backdoors, cloud tools...) Use https://timeseed.io/quickstart.html or (advanced) https://www.gnupg.org/gph/en/manual/c14.html
• Never use your ISP DNS server, your ISP email domain or your ISP default settings for wifi
• Never use or install a CBDC (digital "euro") tool or app, no matter whatsapp
• Use privacy wallets like DANA wallet (https://github.com/cygnet3/danawallet) (Bitcoin silent paymnets) or https://sideswap.io/ (Liquid network)
• Segment your network: Use guest Wi-Fi for visitors and IoT devices to isolate them from your main devices.
• Monitor your network: Apps like Fing can show connected devices and alert you to unknowns.
• Be cautious with smart home devices: Change default passwords and keep them updated.
• Remember: Security is ongoing. Regularly review and update your setup.

If you're new to this, start with one or two steps, like securing your router and switching DNS. For more advanced advice, consult reliable sources or a professional.

Tip me if you like this