My neighbor recently got hacked. It was a wake-up call. I spent the weekend auditing my own home network security. Here are the practical steps I took to lock down my digital life, beyond just “use a strong password”.
Step 1: Password Manager (Non-Negotiable)
I used to reuse passwords. After my neighbor’s incident, I set up Bitwarden (free, open-source). It generated unique 20-character passwords for every account. Took 2 hours to migrate everything. Worth it.
My setup: Bitwarden + YubiKey for the master account. If someone gets my master password, they still need the physical key.
Step 2: 2FA Everywhere (But Not SMS)
SMS 2FA can be intercepted via SIM swapping. I use an authenticator app (Authy or Google Authenticator) or a hardware key. The priority order:
- Email accounts (gateway to everything else)
- Banking and financial services
- Social media
- Everything else
Step 3: Router Security (Most People Skip This)
I logged into my router for the first time in years. Default admin password was still set. Here’s what I changed:
- Admin password (was “admin”, now a 24-char random string)
- Wi-Fi encryption to WPA3 (my router supports it)
- Disabled WPS (it’s a known vulnerability)
- Disabled remote management
- Updated firmware (was 2 versions behind)
Step 4: DNS Filtering (Free Protection)
I switched to Cloudflare’s 1.1.1.2 DNS (malware blocking) or NextDNS. It blocks malicious domains before they reach your browser. Setup takes 5 minutes in your router settings.
Step 5: The 3-2-1 Backup Rule
I lost data once. Never again. My current setup:
- 3 copies of important data
- 2 different storage types (local SSD + external HDD)
- 1 offsite (Backblaze B2, $7/month)
Step 6: Browser Hardening
I installed uBlock Origin (not just any ad blocker — this one blocks trackers too). I also use Firefox with strict privacy settings. Chrome is fine, but Firefox gives you more control over tracking.
Step 7: Email Hygiene
I created a separate email for signups and newsletters. My main email is only for important accounts. This way, if a spam list leaks, my primary email stays clean.
What I Don’t Bother With
Antivirus on macOS? Skip it. Built-in XProtect is enough. VPN for everything? Overkill — I only use it on public Wi-Fi. These are the things that actually matter.
The Bottom Line
Security isn’t about being perfect. It’s about raising the bar so high that attackers move on to easier targets. These steps took me one weekend. They’ll save you months of headache.