
OpSec and threat modeling give you a practical way to stay private and predict how attacks unfold. You will learn how everyday behaviors can leak sensitive data and how to map the people, assets, and risks that matter to you.
Get a clear picture of your personal risk before you change a single setting. In this lesson you will inventory your accounts, devices, data, and habits to see where you are exposed.
Learn the real reasons accounts get hacked and how to stop it. In this lesson you will see how weak passwords, reused credentials, and phishing lead to most compromises. You will also understand how attackers automate credential stuffing and exploit poor recovery settings.
Master the three pillars of strong account security. This lesson explains how to build unique passwords, manage them safely with a password manager, and add two-factor authentication for an extra layer of defense. You will also compare hardware keys, authenticator apps, and backup codes to choose the best fit for your lifestyle.
Learn to use Bitwarden to manage all your passwords securely in the cloud.
Learn to manage passwords securely without the cloud. This lesson introduces KeePass, a local password manager that stores your vault entirely on your own device. You will learn to set it up, protect it with a strong master password, and back up your encrypted database safely.
Protect your accounts with strong two-factor authentication using Aegis. In this lesson you will install Aegis, add your first accounts, and back up your tokens safely.
Learn how to separate your digital life into safer zones. This lesson shows you how to reduce risk by keeping personal, work, and high-value accounts isolated. You will organize logins, browsers, and devices so that one compromise cannot expose everything at once.
Learn to hide your real email address using SimpleLogin. This lesson walks you through creating aliases that forward mail to your inbox without revealing your true address. You will set up your account, create aliases for different sites, and manage them to block spam or delete a compromised one instantly.
Learn to harden your phones and computers against common attacks. In this lesson you will update software, remove risky apps, and configure built-in security features like encryption, screen locks, and automatic updates. You will also understand how to balance usability with protection on every device you own.
Learn how attackers trick people instead of systems. In this lesson you will see how phishing emails, fake websites, and social engineering tactics convince users to give away access.
Learn how to keep your email private with Proton Mail and Tuta. In this lesson you will set up secure, end-to-end encrypted email accounts that protect your data from tracking and interception.
Learn how to browse and search the web safely without giving up your privacy. In this lesson you will compare privacy-focused browsers and search engines, adjust key security settings, and understand how tracking and fingerprinting work.
Learn to turn Firefox into a privacy-focused, secure browser. In this lesson you will adjust settings that block tracking, reduce fingerprinting, and enforce HTTPS connections. You will also explore extensions and profiles that help you browse safely without breaking usability.
Learn how to send messages that stay private and authentic. In this lesson you will explore secure messaging apps like Signal and email encryption with PGP. You will understand how end-to-end encryption works, how to verify contacts, and how to choose the right tool for different kinds of communication.
Learn to use Session for truly private messaging without phone numbers or central servers. In this lesson you will set up Session, create your unique Session ID, and exchange messages through its decentralized network. You will see how it protects your metadata and keeps conversations anonymous while staying easy to use.
Learn how to share files securely without leaving traces. In this lesson you will see how OnionShare, Wormhole, and local transfer apps to send files directly between devices. You will see how encryption, temporary links, and local networks protect your data from interception or storage on third-party servers.
Learn how to send and receive files anonymously with OnionShare. In this lesson you will set up OnionShare, create secure sharing links, and transfer files over the Tor network without revealing your identity.
Learn what metadata reveals about you even when messages are encrypted. In this lesson you will see how timestamps, IP addresses, and routing information can expose patterns of communication.
Discover how a single selfie can leak your whereabouts and habits through metadata.
Learn to sanitize and secure your files with open-source privacy tools. In this lesson you will practice removing hidden data, cleaning document metadata, and converting risky file types safely. You will see how Exiftool, Mat2, and Dangerzone each work to strip traces and protect you before sharing files publicly or with unknown recipients.
Understand why encryption is the foundation of digital security. In this lesson you will learn how encryption protects your data from interception and tampering, both online and offline.
Learn how to protect sensitive files with strong encryption using VeraCrypt. In this lesson you will create encrypted containers, mount them like virtual drives, and safely store or back up private data.
Learn how to back up data securely using decentralized and encrypted storage. In this lesson you will discover how tools like Restic protect your backups with client-side encryption and let you store them on multiple cloud or self-hosted locations. You will set up Restic to automate backups, verify integrity, and restore data when needed.
Learn how to stay private and anonymous while browsing the internet. In this lesson you will understand how VPNs, Tor, and proxies route your traffic, what each protects, and their limitations. You will practice choosing the right tool for your goal, from hiding your IP to avoiding censorship or protecting sensitive research.
Learn how to use Mullvad to browse the internet privately and without tracking. In this lesson you will set up a Mullvad VPN account, connect using its app, and confirm that your IP address and DNS requests are hidden. You will also understand how Mullvad’s privacy-focused payment system and no-logs policy protect your identity.
Learn how to browse anonymously with the Tor Browser. In this lesson you will see how Tor routes your traffic through a network of volunteer nodes to hide your IP address and activity. You will install Tor Browser, configure its security levels, and practice accessing both the regular web and .onion sites safely.
Learn when and how to use a burner phone and Faraday bags to reduce tracking and protect sensitive devices. In this lesson you will compare disposable phones, burner SIMs, and hardened devices, and you will practice configuring a phone for limited use and secure disposal. You will also learn how Faraday bags block signals, when to use them, and how to combine physical and operational controls for stronger privacy.
Learn how to protect your data and devices when crossing borders or traveling. In this lesson you will prepare for travel by minimizing sensitive information, using clean devices, and understanding local privacy risks. You will also learn how to handle searches, data inspections, and connectivity in high-risk regions while keeping essential access secure.
Learn the exact steps to take after a hack or data breach. In this lesson you will learn how to stay calm, assess the damage, and recover control of compromised accounts or devices. You will also practice creating an incident response checklist to lock down access, restore backups, and prevent the same attack from happening again.
Learn how to choose a secure operating system that fits your privacy needs. In this lesson you will compare Tails, Qubes OS, and GrapheneOS to understand how each protects data and isolates activity. You will see which system works best for portable anonymity, multi-compartment setups, or hardened mobile security.
Journalists, activists and online creators are not average users. You attract attention, you handle sensitive information and your risk is higher than most. This course gives you a practical digital security playbook designed for people like you, not a generic "do not click bad links" lecture.
You will lock down accounts, harden devices, clean up your online footprint, secure your files with real encryption and reliable backups, and prepare for travel, border crossings and harassment scenarios.
We start with threat modeling and a quick self-assessment so you know what actually matters for your life. Throughout the course you’ll follow three concrete personas:
Anna - The creator dealing with stalkers, hacked accounts, and doxxing
Ben - The journalist handling sources, leaks, and hostile environments
Omar - The activist facing surveillance, targeted phishing, and device seizure
Using their stories, you’ll build your own threat model and security plan step by step.
From there, we move into concrete actions:
Set up a password manager and strong 2FA correctly so one breach does not wreck your entire life
Separate identities and inboxes with better account hygiene and email aliases
Harden your phones and laptops with practical settings, full disk encryption and sane app choices
Improve browsing and search privacy with safer defaults and privacy focused tools
Choose and use secure messaging such as Signal or Session based on real world threat tradeoffs
Share files safely with tools like OnionShare, local transfers or privacy friendly one time links instead of random cloud drops
Understand how metadata leaks from photos and documents and strip it with tools such as exiftool or safe document conversion
Build encrypted backups that you can actually restore using a workflow that goes beyond "dump to USB and hope"
Prepare for travel and border risks, including what devices to carry, what to leave, burner devices and accounts, and how to plan for device searches
Create a simple incident response plan so you know exactly what to do when something goes wrong
By the end of the course you will be able to:
Create a realistic personal threat model and prioritize what to fix first
Secure accounts with a password manager, strong 2FA and identity separation
Harden phones and computers against common attacks and basic forensic capture
Recognize and avoid phishing, social engineering and common scam patterns
Browse, search and communicate with safer defaults and less data exhaust
Use private messaging and file sharing tools that match your risk profile
Remove or reduce metadata leaks from images and documents before sharing
Encrypt important data, verify backups and restore them under stress
Handle travel and border scenarios with a clear, pre planned strategy
Follow a written incident response checklist and maintain a personal security runbook
Who this course is for:
Journalists and media workers who handle sources, leaks or sensitive investigations
Activists, NGO staff, community organizers and researchers who face surveillance or harassment
Online creators, influencers and freelancers who are tired of worrying about hacked accounts and doxxing
Security conscious professionals who want real, applied digital security instead of certification prep
You do not need a deep technical background. If you can follow instructions and are willing to change a few habits, you can finish this course with a concrete written plan and a security setup that finally matches the risks you face.