You are reading a single comment by @NotThamesWater and its replies. Click here to read the full conversation.
  • help! I am a google-dependent novice. I would like some help in becoming less so, or suggestions as to where to go to learn. I will re-read this thread, but much of it passes over my head...

    I just bought a new android phone and would like, before using it, to work out how to get a slightly better level of security and to be tracked slightly less. I also need to buy a new computer for home.

    At the moment I use gmail, but have my own email domain that directs there. I don't use any banking apps (although I'd like to but concerned I don't have good enough protection if my phone gets nicked). I basically feel like I am not making best use of my phone because I am concerned about security/tracking.

    What relatively simple steps can I take to upgrade my security and protect my data / whereabouts a bit?

    E.g. stop using gmail, google drive, calendar and google maps, but replace them with what?
    continue using them but encrypt files before saving them to google drive?
    use firefox with some or all of these plug ins, use duck duck go and just keep all of my internet usage separate from my google account?
    get keepass or lastpass (which?) and/or yubico?
    start using a VPN?

    Basically clueless, but I'd like to take back a little control over my online life and protect myself if my phone gets nicked. Is that a pointless aspiration?

  • If you want to be super-paranoid:

    Root the phone*, install a google free AOSP ROM, start in aeroplane mode, encrypt )if you can - some ROMs & recoveries are tricky about encryption)

    Sideload F-droid, sideload non-google versions of everything you like

    Install a fine grained permissions manager, disable all permissions that aren't required for normal operation of the app, and aren't dependencies for other apps.

    Install an app manager that allows you to move / disable system apps

    Install various spoof apps (spoof location, spoof IMEI, phone number, MAC address etc.)

    Run your own internet-based storage, run your own VPN on a box somewhere like Panama

    Browse with script blockers, ad blockers, and cookie blockers

    To start with...

    * be careful, as some root tools are going to send pretty much everything you ever do on your phone back to some random server in a far off land

About