Review every app with access to camera, microphone, location, or contacts, and revoke every permission not actually needed.

Salary, marriage, children questions — prepare a non-aggressive closer phrase.

Don't only guard what was labeled "secret" — guard all personal info shared without permission to share onward.

All data: public/internal/confidential/restricted — each class with different protection rules.

Don't default to the biggest model. Choose by: task depth, cost, privacy, speed.

Replace one reused password across 30 accounts with unique long ones, stored in an encrypted manager.

Check all your emails on haveibeenpwned.com to know which breaches exposed your data.

Don't paste contracts, health data, or IP into a public model — may appear in later training.

One strong master password + password manager = more secure than 95% of people.

Email + bank + social + cloud: 2FA required. SMS is weak — use Authenticator app or physical key.

Send delete requests to 10 data brokers — Gulf via PDPL, global via GDPR/CCPA.

Firefox + uBlock Origin + Privacy Badger + DuckDuckGo = strong default privacy.

Before clicking any email link: check full sender, hover URL, urgency, spelling.

Replace all reused passwords in 30 days. One manager, one strong master.

Enable 2FA on email, bank, social, cloud. TOTP not SMS. Backup codes saved.

Every 6 months, download backup from Google/Apple/Meta. Backup + your right.

Every browser extension can read your visible pages. Delete what you haven't used in 30 days.

On public WiFi: always VPN + no banking + 2FA even if feeling safe.

Phone encrypted by default, but your laptop? Check. If stolen, data exposed.

Before any new app for your child: check 3 things — recommended age, privacy, stranger contact.

Before pasting anything in AI: redact names, numbers, emails, financial data.

Before allowing your child's first social media account, hold a structured conversation (not a lecture) covering privacy, strangers, and social comparison.