288 Comments
User's avatar
YOUR DOCTOR KLOVER's avatar

Love this checklist, especially the framing that your digital footprint is an attack surface, not just a privacy preference. The “recover old emails → search your inbox for old sign-ups → delete/close accounts” workflow is exactly how I’d triage risk for a patient-facing org: you can’t secure what you’ve forgotten exists. Two clinician-ish add-ons I’d emphasize:

1. Credential hygiene beats willpower. Use a password manager + unique passwords + 2FA/passkeys wherever possible; then leaks become “annoying” instead of catastrophic. Your HaveIBeenPwned + Google removal steps are solid starting points. 2. Data broker + credit controls matter for real-world harm (identity theft, harassment). Freezing credit + opting out of people-search sites often reduces downstream risk more than any single setting toggle.

Also appreciate the reminder that “99%” is aspirational; privacy is a process, and the biggest win is shrinking the easy-to-exploit surface area fast!

Brooke's avatar

What password manager would you suggest?

Meeru's avatar

Proton is best I suppose and they do have free trial

Thomas, an old GI's avatar

Recommend NOT using a VPN that REQUIRES all your personal information in order to HIDE all your personal information.

MULVAD only has an account number. Otherwise they really DO'NT know who I am.

Kasey Scharnett King's avatar

Now I need to check what info I put into my VPN.

Daniel's avatar

Protonvpn is also a good one but Mullvad is the best one

mortua conjuga's avatar

i use proton. it's good 👍🏾

Thomas, an old GI's avatar

I hear good things about Proton, as well.

kuwwa's avatar

how about Proton?

Bwabbit's avatar

How about we delete the elite and their loyal sociopaths pissing on everything we love instead?

The Long Game's avatar

THIS is the answer. Attempting to defensively mitigate all the million little ways the ruling bloodlines and their lackeys facilitate leaks is a waste of time compared to just ENDING THE RULERSHIP.

Alessandra Nitti's avatar

Guess it’s easier to just protect your identity. Unless US citizens finally decide to overthrow this government and the related Brolygarchy.

Noel Veva's avatar

It doesn’t seem like a very good idea to type your password for anything into a search engine 🤔

Phoenix's avatar

I did a double take at this too..

Claire's avatar

this is so interesting.. on the one hand it makes my heart sink because i would like to go through this process but it sounds long and stressful (!) i have over the years had 'burner' accounts as you call it or mixed my real data with fictional (such as names and DOBs) but i dunno if this makes me more or less secure as it would be harder for me to access old accounts to now deleter the data, as i would have forgotten the random made up info i entered at the time. Hmm.

WendyKehoe's avatar

I can relate. Trying to avoid trouble, sometimes, gets us in trouble. I’m wondering if there is a way to clean everything up & eliminate digital footprint ever again?

Deborah Guerrero's avatar

Google is the main account I’d want to delete first.

Chumz's avatar

Me too! I’ve been transferring my important emails to proton email acct. Once completed, goodbye google acct. They are compromised and have no intention on protecting peoples privacy once the A.I. data base for surveillance is fully implemented.

Deborah Guerrero's avatar

Just fyi, I’ve read some intel on proton (including vpn) that makes me leery too. I’ll attach if I can find.

Andrea Maria Romandini's avatar

I feel like nothing digital is entirely safe… every time I switch to a new browser or email I find out it’s compromised 🤦🏻‍♀️

MlleAbeilles's avatar

Oh no, really??? What other options do I have?

Deborah Guerrero's avatar

Good question. I don’t have a good answer. At least not one I’m tech savvy or rich enough to employ. I always assume that most all communications are being stored, if not tracked by some algorithm , most likely both.

If future reprisals include one’s personal history, especially on social media, even deleted, I know I’m screwed anyway. So I keep sharing because folks need information presented so they can decide for themselves what’s true, or not.

Anybody wanna weigh in?

Mark Shields's avatar

Works, but doesn't work

Leah's avatar

What works that doesn’t work?

Deborah Guerrero's avatar

Absolutely agree. I’ve not used my gmail for eons, wish I were tech savvy enough to transfer or extract content so I could delete it entirely.

gpj2736's avatar

You can transfer all of your gmail emails, photos etc using Google Takeout. I just did this two weeks ago and transferred my gmails & photos to a thumbdrive. Look up instructions for using it.

Criz's avatar

What do you recommend for email

WomenWarriors's avatar

Proton do VPN and Email. Super Private/Secure.

Kate Herford's avatar

Who are you moving your email too. I’ve deleted everything Google and Microsoft. I transitioned to Proton and it was easy. Just a couple of button clicks and my emails were transferred. I had however gone through them and deleted any that were no longer relevant.

You don’t have to be tech savvy. There’s the saying ‘how do you eat an elephant? One bite at a time’. The same goes for removing yourself from big tech and social media. My last step is Apple - both Mac and iPhone. The computer I should be able to do this weekend.

WomenWarriors's avatar

KH - are you able to describe that process, step by step? I think it would be very useful for many people.

Kate Herford's avatar

Hi WomenWarriors I’ve actually written a book which informs of the importance of going through these steps and the processes, including recommended alternative platforms. I’ve made it as simple as I can for those who struggle with tech.

And I say struggle 😜 I’m new to Substack and am not sure about dropping links here. Please send a direct message and I’ll share it that way

WomenWarriors's avatar

KH - Dropping Links doesn’t worry me or others of a confident mind.

Deborah Guerrero's avatar

I now have a proton email account.

Kate Herford's avatar

that’s awesome! Sometimes the fear of what it will take to make change holds us back. Glad to see you took the plunge.

Becoming Human's avatar

You should look into who owns proton now… :(

Kate Herford's avatar

I felt the same why when I did research. I took the approach that if they are good at what they do, it’s better than Google, Microsoft and Apple harvesting data. And being hosted in Switzerland was a bonus.

In reality anything SMART or digital, ie computer based can be compromised. The lesser of evil is the result.

Mark Walker's avatar

Can anyone recommend a decent email app??? Thanks

Leah's avatar

I started the process of moving everything from google to proton. They have some great tools to make the process easier. Google is the evil twin to AOL back in the day. It weaves itself all through your computer and accounts creating a massive spiderweb, but with consistency and forward thinking protection it can be done.

eden's avatar

ai generated image?

Kelo's avatar

It kind of read like an AI generated article too

Merri's avatar

Same, I care and want to see art created by humans (or talented animals, like that elephant who paints). AI gives me the creeps and I want no part of it.

Vero's avatar

This is not meant as an attack on author or content, but I have to say I feel a little conflicted about the ai image when the list itself is a indirectly criticising the systematic problems of data politics

Vereya in Nature's avatar

critical thinking at work… if only more people noticed the discrepancy,,,

M         V's avatar

"I do not mean to pry, but you don't by any chance happen to have six fingers on your right hand?" takes on a new meaning nowadays.

Kevin's avatar

About deleting old credit history, this can lower your credit score since they use age of accounts, I don't have enough history anymore it only goes back 25 years and that dings my score.

Had I not cancelled my oldest card ( into the 80's ) I'd have a "perfect" credit score....

Don't need that old credit card but your history is part of your score.

And yes, only an oldster like myself would know that is an issue.

Otherwise a great rundown and a couple of things I hadn't thought of, nice work !

Bill Lacey's avatar

Credit scores are a scam. Want that “perfect” score? Sign up for 6 more credit cards and carry balances on all of them. They’ll tell you doing that proves to them you can handle credit responsibly. Haha. That’s like telling someone who regularly drives drunk they are a good driver for making it home every night. The incentives for a good credit score are the exact opposite of being fiscally responsible.

Nancy's avatar

Sadly credit scores are important for younger people needing loans for a home, a car, even renting an apartment but I agree they are indeed a scam that often just encourages people to take on more debt, but fiscal responsibility employed early on will eventually lead one into a position where they don't need to worry about their credit score.

Monnina's avatar

There is no profit for Wall St. in ordinary folk being fiscally responsible. If you are not deep in debt you are their enemy.

Alessandra Nitti's avatar

“Credit score?” In what kind of twisted society do you live in? I am just curious.

The Focused Data Scientist's avatar

Gonna be trying that ASAP

ToxSec's avatar

it’s a really good list they put together!

rambling rory's avatar

Proton Password manager, Mozilla Relay and some other services provide email aliases.

DoG's avatar

Getting out is the easy part, staying out is key.

It's a good exercise either way, but STAY out.

Key tools to stay out include a very secure browser configured correctly, and if you MUST do a cell phone, use a pixel with grapheneOS or similar.

Great article!

Adia Bali's avatar

The stalker example at the end is haunting. What struck me most is your point about hackers analyzing for months. It's not paranoia if someone can really piece together your identity from your digital crumbs. The burner accounts and false information strategies are smart.

Polly Underwood's avatar

As your privacy advisor, I have reviewed your checklist. It is a **solid starting point for a "digital self-cleaning,"** but it contains **three critical risks**, several outdated practices, and some major omissions that leave you vulnerable to modern threats.

Below is the **Safety Evaluation** (what you must fix immediately) followed by the **Enhanced Privacy Protocol v2.0**.

---

### 🚨 Safety Evaluation: Critical Flaws

*Read this before acting on your original list.*

**1. CRITICAL RISK: Step 3b (Googling your password)**

> *Original: "You need to google... '<account>' + '<password>'"*

**⛔ DO NOT DO THIS.**

Typing your password into Google Search sends that password in plain text to Google’s servers, saves it in your search history, and potentially logs it in data tracking metrics. If you weren't compromised before, you just compromised yourself.

* **Correction:** Only use hashed databases like **HaveIBeenPwned** or the "Password Checkup" feature inside a password manager.

**2. OUTDATED ADVICE: Step 7 (Rotating passwords)**

> *Original: "You should be REGULARLY changing your passwords... every 6 months"*

**⛔ STOP.** NIST (National Institute of Standards and Technology) guidelines changed years ago. Forcing rotation leads to weak passwords (e.g., `Password123!` becomes `Password124!`).

* **Correction:** Use **long, random, unique passwords** (generated by a manager) and **never change them** unless you have confirmation of a breach.

**3. MISLEADING ADVICE: Step 8 (VPNs and Banking)**

> *Original: "DO NOT use a VPN when dealing with banking services"*

**⚠ FALSE.** Modern banking uses HTTPS (TLS encryption). A VPN adds a tunnel around that encryption. It does not make banking less safe.

* **Correction:** Banks *may* flag your login as suspicious because the IP address changes, locking your account. It is an *inconvenience*, not a *security risk*. You can use a VPN for banking, but turn it off if your bank's fraud detection is too aggressive.

---

### 🛡️ Enhanced Privacy Protocol v2.0

Here is your optimized, modernized algorithm. It incorporates the "Right to Erasure" laws (GDPR/CCPA) and emphasizes **compartmentalization** over simple deletion.

#### Phase 1: Discovery & Triage

**Step 1: The Master List (Updated)**

* **Action:** Search your primary email inboxes for: `verify`, `welcome`, `confirm`, `subscription`, `receipt`, `invoice`.

* **Action:** Open your web browser’s "Saved Passwords" list. This often holds accounts you forgot to delete from your email.

* **Tool:** Export these to a spreadsheet. Mark them: *Keep, Delete, or Abandoned.*

**Step 2: Breach Check (Sanitized)**

* **Action:** Go to [HaveIBeenPwned.com](https://haveibeenpwned.com). Enter your email addresses and phone numbers.

* **Action:** If a password was found in a breach, mark every account using that password as "Critical Priority" for changing.

#### Phase 2: The Purge (Deleting Data)

**Step 3: Account Deletion via "Right to Erasure"**

* **Action:** Do not just look for a delete button. Many services hide it.

* **Tool:** Use **JustDelete.me** (a directory of deletion links).

* **The Nuclear Option:** If you cannot find a delete button, send an email to their privacy/support address:

> *"I am exercising my Right to Erasure under GDPR/CCPA. Please permanently delete my account and all associated data. Confirm compliance within 30 days."*

**Step 4: Data Broker Scrubbing (New Critical Step)**

* **Context:** Googling yourself (Step 4 in your list) is reactive. You need to cut off the source. Companies like Whitepages, Spokeo, and PeopleFinder sell your info.

* **Manual Way:** Visit the "Opt-Out" page of the top 10 data brokers and submit removal requests.

* **Automated Way:** Use a paid service (like DeleteMe, Incogni, or Kanary) to automate this continuous battle.

**Step 5: Google Cleanup**

* **Action:** Use Google's **"Results about you"** tool (found in the Google App or account settings). This allows you to request removal of search results containing your phone number or home address.

* **Action:** Use the **Google Search Console** removal tool *only* for content you own or "outdated content" where the page no longer exists but Google still shows it.

#### Phase 3: Hardening (The Shield)

**Step 6: The Password Manager (Required)**

* **Action:** Stop memorizing passwords. Download a manager (Bitwarden, 1Password, or KeePassXC).

* **Action:** Generate a unique, 20+ character string for *every single account*.

**Step 7: Multi-Factor Authentication (MFA) (Crucial Omission)**

* **Action:** A password is not enough. You must enable 2FA on every account that supports it.

* **Hierarchy of Safety:**

1. **Hardware Key (Best):** YubiKey.

2. **App-based (Good):** Aegis, Raivo, Google Authenticator.

3. **SMS/Email (Weak):** Vulnerable to SIM swapping, but better than nothing.

#### Phase 4: Cloaking (Future Prevention)

**Step 8: Email Aliasing (Enhanced Step 9)**

* **Action:** Never give your real email to a new service again.

* **Tool:** Use services like **SimpleLogin** or **AnonAddy**. They create a relay address (e.g., `netflix.pizza29@aleas.com`) that forwards to your real email. If that alias gets spammed, you just toggle it off.

**Step 9: Browser Compartmentalization**

* **Action:**

* **Browser:** Firefox or Brave.

* **Extensions:** uBlock Origin (ads/tracking), Privacy Badger.

* **Strategy:** Use "Containers" in Firefox. Open Facebook in a specific container so it cannot see what you are doing in your "Banking" container.

**Step 10: Disinformation (Poisoning)**

* **Action:** As you noted, you cannot delete everything. For accounts you cannot delete but don't use:

* Change the name to "John Doe".

* Change the birthday to Jan 1st, 1990.

* Change the address to a generic Starbucks location.

* *Then* abandon the account. This corrupts the data profile they hold on you.

### Summary Checklist for the User

1. **Stop** Googling your passwords.

2. **Install** a Password Manager immediately.

3. **Enable** 2FA on email and banking (Priority #1).

4. **Scrub** data brokers (the source of public Google results).

5. **Use** Email Aliases for all future sign-ups.

Dedischado's avatar

May I also suggest using the Brave browser or Secured Firefox as well.

Dedischado's avatar

I haven’t used it myself, so I don’t know.

Andrea Maria Romandini's avatar

I like it so far - I mean, we can never be 💯 sure but I feel ok about using it vs Safari/Firefox/anything Goog related 🤷🏻‍♀️

Ammora Collins's avatar

This is beyond silly for regular people.. what are you trying to hide? Why are you afraid of your old emails? I cannot fathom living in paranoia like this.

Abi Bouhmaida's avatar

You are not a victim, yet.

Frank's avatar

Hi, why do you advise against using a VPN for online banking? Isn't the encrypted connection important for sensitive tasks? Thanks.

petit oiseau 🕊️'s avatar

Some banking apps don't allow a vpn to be used, the app will be unusable until the vpn is turned off. On another note, it's possible it will trigger fraud alerts.

Frank's avatar

I also notice that watching a video on Youtube now requires me to complete a CAPCHA. Very annoying.

petit oiseau 🕊️'s avatar

oh man, the captchas can get annoying pretty quickly!

Frank's avatar

Thanks for the explanation. So far, I have had no problem accessing banking apps with the VPN enabled. The sites that have blocked my VPN include Yelp.com and T-mobile.com.

User's avatar
Comment deleted
Jan 7
Comment deleted
Nana Booboo's avatar

Then I can help myself to your bank account?

Ammora Collins's avatar

You’d find about $6 so have at it cuz THIS IS AMERICA

Proportional Violence's avatar

So you won't mind if I take out a mortgage and auto loan in your name, then default on them? This would make you responsible for repayment. Courts and lawyers cost a lot of money to prove otherwise, not to mention hassle, time, credit rating, and future loan prospects.

Mandalorian Of Christ's avatar

YOu see…some people get so engrained in wearing that “Tin Foil” hat and forget to just live their life while here. All they have to do is Repent and accept Christ and NOTHING on this world is worth worrying about because if you live as Christ tells you to, you’ll be just fine

Phoenix's avatar

Wow. For real, if even a tenth of the people who claim to be Christians actually lived as Christ told us to, the world wouldnt be in such a horrific place rn.

Staring down the barrel of WWIII, facing environmental obliteration, 90% of wealth held by 10% of the population while children starve and people work 3 jobs to scrape by, AI "revolution" maybe 2 years away from deciding it doesnt need us and making us extinct, children raped by the elite who are happy to turn the world upside down to protect each other and a global economy built like a house of cards. And all of humanitys combined knowledge held on a rickety digital structure that could be taken out in an hour if bad actors decided they wanted to.

Wheres Christs teachings about humanities current existential threats?

Mandalorian Of Christ's avatar

Those are ALL worldly things that sadly the scriptures pretty much said WOULD happen. Is it right? Is it Good? No. There are Real Christian organizations out there doing what they can to help those people in need in the places they’re needed. Is it enough for the WORLD? No…but it’s THEM doing what they were called to do. I freely admit I can’t do a lot with my situation of being a single father and caretaker to an autistic son…but I’ve been putting funding away out of my checks now that I’m doing fairly well, the last couple of years I’ve starting doing my tithing of 10% from all my paychecks. Not having a church home, I’m looking for the RIGHT charity or the right way to use this funding to help where I can.Christian’s can’t do it all, no…but we can LEAD by example and do what we were called to do which not many are, or they’re “worldy Christians” and that speaks for itself. Christian’s that are LIVING how Christ showed won’t save this world, but they may make a few disciples in their time…remember, we TRUST in God and live how he showed us. The first Christian’s were thrown to the Lions and boiled in oil…and they didn’t once didn’t fight back because they knew they were Saved and where they’d be after they died…they knew their soul would go to be with Christ in the Kingdom when it comes. Yes, while a looming WW3 is scary…I don’t fear it. I trust God and I know by trusting HIM where I’ll be when Jesus returns.

Sage's avatar

You are required to use the knowledge you have though. You’re not going to start your car while pumping gas.

Miles Of Thoughts's avatar

mate a little over blown but mane once a year going through this process is pretty good practice. hell i don’t have anything to hide but seems like every site wants my email for some shitty mailing list so just less junk in my mail is always a plus

Helen Nan's avatar

Not paranoia. Sensible. It's the same as locking your house before you go to sleep. Hackers want your money and your ID. If they get one you get to lose it all, if they get the other you become on first name basis with every government official - either way, precious living time sucked away. And this quote from the movie "Anon" I love: "I have nothing to hide; I just have nothing I want you to see."

petit oiseau 🕊️'s avatar

I'd recommend checking out r/privacy on reddit. This particular question gets asked there a bit and there are some great answers that you might enjoy reading :)

ToxSec's avatar

some people really want to ensure their privacy!

Ammora Collins's avatar

Good thing all those Epstein accomplices could delete their digital footprints so easily!!!

True's avatar

Because I dont want to continue to get phone calls from a website I visited but never provided my number to…

Guy Dalziel's avatar

Security hygiene is not paranoia, it's risk mitigation. It is well understood in cybersecurity how old accounts can lead to compromise, such as addresses, phone numbers, security questions, card details, reused passwords, etc. This information is routinely used to attack higher value targets later.

User's avatar
Comment deleted
Jan 7
Comment deleted
Ammora Collins's avatar

Jacob, your assumption remains just that. Try turning the phone off and going for a walk sometime.

User's avatar
Comment deleted
Jan 7
Comment deleted
Ammora Collins's avatar

Yes, I am extemely arrogant about email privacy 😆😆 Godspeed Jacob.

Ted's avatar

If you're not interested in privacy of emails and digital info why did you read a whole article and then take time to comment and even reply to other comments about how little you care about the topic at the bottom of the article!?!

User's avatar
Comment deleted
Jan 6
Comment deleted
Ammora Collins's avatar

Again, I cannot fathom living in paranoia like this.

Michael's avatar

This is America...

Charlabelle's avatar

And therein lies the problem.