\n Skip to main content

How to Protect Your Privacy Online: 8 Simple Settings to Change Today

protect your privacy online: padlock on a laptop keyboard representing secure online privacy settings

Your personal data is more valuable than you think. Every website you visit, every app you install, and every account you create quietly collects something — your location, your habits, your contacts, even the ads you glance at. The good news is that you don't need to be a security expert to take control. These 8 privacy settings cost nothing, take minutes to change, and most only need to be done once.

Why Privacy Settings Matter (Even If You Have Nothing to Hide)

Privacy isn't about hiding from the law — it's about choosing who gets to see your information and what they're allowed to do with it. Data brokers buy and sell your details without asking. Advertisers build profiles from your browsing history. And every account protected by a weak password is another doorway for scammers. Changing a few default settings is the cheapest insurance you'll ever buy, and almost everything below is just a handful of clicks.

Setting 1–2: Secure Your Browser and Passwords

Your browser knows where you go, what you search, and what you buy — so it's the best place to start.

Turn on tracking protection. In Chrome, open Settings → Privacy and security → Cookies and other site data and choose "Block third-party cookies." Firefox's Strict mode and Safari's built-in tracking prevention do the same job. This stops most ad networks from following you across the web.

Enable HTTPS-only mode. Most browsers now offer "Always use secure connections," which refuses to load the unencrypted version of a site — so nobody on public Wi-Fi can read what you send.

Stop letting your browser remember passwords. Saved passwords in a browser are easy pickings for malware. Install a password manager instead, and let it generate a long, unique password for every account. Then switch on two-factor authentication (2FA) everywhere it's offered — especially email and banking. A code from an authenticator app takes ten seconds and blocks most account takeovers.

A leaner, tracking-free browser also feels faster — pair it with these steps to speed up your old laptop if your machine is struggling.

Setting 3–4: Clean Up Social Media and App Permissions

Social networks are built to collect data. Tighten them in five minutes.

Limit who can see your posts. On Facebook and Instagram, set your profile to private and make new posts visible to "Friends" only. On X (Twitter), lock your account. Your posts, photos, and location tags then stay inside your circle.

Review connected apps. Every "Sign in with Facebook" or "Sign in with Google" leaves a connection that can read your data. Open Settings → Apps and websites and remove everything you no longer use — you can always sign back in later if you need it.

Cut phone permissions down to "while using." On your phone, open Settings → Privacy (iPhone) or Settings → Apps → Permissions (Android) and work through the list. Location, camera, microphone, and contacts should be "Ask every time" or "Only while using" — not "Always." Most apps work perfectly without constant access.

online privacy settings: person using a laptop to review and change privacy and security settings

If your feed feels more like noise than connection, a digital detox weekend is a great reset.

Setting 5–6: Stop Ad Tracking and Secure Your Wi-Fi

Disable personalized ads. Google and Facebook each have one switch for this: myadcenter.google.com → Ad personalization, and Facebook → Settings → Ads preferences. You'll still see ads — they'll just stop being built from your browsing history.

Reset your advertising ID. Both iPhone and Android let you reset the identifier apps use to track you. Doing it every few months clears the profile they've built.

Lock down your router. Log in to your router's admin page, change the default administrator password, and make sure your Wi-Fi encryption is WPA2 or WPA3. Turn off WPS, which lets strangers join your network with a simple PIN. For visitors, switch on the guest network so they stay off your main devices.

Setting 7–8: Tidy Your Email and Location Sharing

Stop handing out your main email. Every newsletter, store account, and free trial turns your address into a target for spam and phishing. Use a separate alias or a "+tag" address for signups, and keep your main inbox for people you actually know.

Think before you click. Most data breaches start with a single link. Check the sender's full address, hover over links before clicking, and never enter a password from an email link — go to the site directly instead.

Turn off location when you don't need it. Your phone logs where you go every day. Disable location for apps that don't genuinely need it, and switch off the camera's geotagging so your photos don't reveal your home address. For the places you visit on purpose, you can also pause your location history in Google and Apple Maps so that running record stops building.

Your 15-Minute Privacy Checklist

  • Block third-party cookies and turn on HTTPS-only mode
  • Move your passwords to a manager and switch on 2FA
  • Make social profiles private and remove connected apps
  • Set phone permissions to "only while using"
  • Turn off personalized ads and reset your advertising ID
  • Change the router password, enable WPA2 or WPA3, and disable WPS
  • Use an email alias for signups and never click suspicious links
  • Switch off unneeded location services and camera geotagging

FAQ: Online Privacy Questions, Answered

Is a VPN necessary for privacy? A VPN hides your traffic from your internet provider and from snoopers on public Wi-Fi, but it doesn't make you anonymous — websites still see your account and cookies. The settings above matter more for everyday privacy.

Does incognito mode protect my privacy? Incognito only stops your browser from saving history and cookies locally. Your provider, your employer, and the sites themselves can still see you.

Do I really need a different password for every account? Yes — one reused password is all a hacker needs to try your email, banking, and social accounts in one go. A password manager makes this painless.

Will these settings break websites? Occasionally a site that relies on third-party cookies will ask you to log in again or lose a feature. That's usually a sign it wasn't worth trusting anyway.

Comments