Before You Start — Essential Mindset

Published: May 2026

Before you install any software or visit any site, you need to understand the fundamental principles of digital privacy and operational security. This page covers the mindset and rules that will keep you safe.

The Golden Rules

1. Trust nothing, verify everything. Always check PGP signatures, links, and vendor reputations.
2. Never use your real identity. Use pseudonyms, burner emails, and never reuse credentials.
3. Encrypt everything. If it's sensitive, it must be encrypted with PGP before it leaves your device.
4. Stay within the walls. Never discuss your activities outside of encrypted channels.
5. Assume you are being monitored. Act accordingly.

Understanding Your Threat Model

Who are you protecting yourself from? Law enforcement? Hackers? Your ISP? Your family? Different threats require different countermeasures.

• Low risk: You just want to hide your browsing from your ISP. Use Tor Browser.
• Medium risk: You are accessing sensitive information. Use Tails or Whonix.
• High risk: You are dealing with sensitive data or transactions. Full OPSEC with encrypted OS, PGP, and Monero.

Legal Considerations

This guide is for educational purposes. The techniques described here are designed to protect your privacy and security, not to facilitate illegal activities. Know the laws in your country and act responsibly.