III · Protection

Digital Safety

analysistrainingsystems

Accounts, phones, messaging, files, exposure, children.

Last reviewed 2026-10-07

Most people face a market. Some face a person. A few face a targeted adversary. Work out which before you spend a weekend on the wrong problem. Step-by-step settings go stale; the links at the bottom are for the current how-to.

Posture Check26 items for accounts and devices, not the Household Protection Plan.

Accounts

What the Standard Now Says

The current federal digital identity guidance, finalized in July 2025, drops the rules everyone hates and keeps the ones that work. No forced periodic changes. No mandatory mixes of symbols and capitals. No password hints or security questions. Long passphrases and pasting from a password manager are supported, and new passwords are screened against lists of known-breached ones.

Length Beats Complexity

A long passphrase you can remember beats a short scramble you cannot. The guidance sets a floor of 8 characters where a second factor is present and 15 where the password stands alone.

Passkeys Are the Real Upgrade

A passkey is a key pair bound to the specific site it was created for. A synced passkey does leave the device: FIDO describes the private key as copied into the provider’s sync, and Apple’s iCloud Keychain does that. A device-bound passkey stays put. Because the binding is cryptographic, a convincing fake site cannot obtain anything usable. This is why CISA describes this family as the only widely available phishing-resistant authentication.

The Second-Factor Ladder

Text-message codes are the weakest: they are phishable and they fall with your phone number. App-generated codes are better but can still be relayed by a live phishing site. A hardware key or a passkey is the top of the ladder because the site’s identity is checked by the key, not by you.

Recovery Is the Real Door

Strong sign-in with a weak recovery route is a strong front door with an open window. Remove security questions where you can, keep a second key registered, and store backup codes offline.

After a Breach Notice

Change that password, and change it anywhere you reused it — the reuse is what turns one breach into several. Turn on a stronger second factor while you are there. Checking a breach-notification service tells you which accounts to prioritize; it cannot tell you what was done with the data.

Phones

Update, First and Always

Security updates close flaws that are already being exploited. Nothing else on this list buys as much for as little effort.

The High-Risk Modes

Apple’s Lockdown Mode and Android’s Advanced Protection are for people who might be individually targeted — journalists, activists, officials, and people leaving an abusive relationship. They disable capability deliberately: attachment types, web features, accessory connections, sideloading, and insecure networks. Most people do not need them. The people who do need them badly.

Permissions Are Subscriptions

Review location, microphone, camera, contacts, and photos. Prefer “while using” over “always,” and single-photo access over the whole library. Anything you granted for one task and never used again should be revoked.

The Advertising Identifier

Both platforms give each device an advertising ID and let you reset or delete it, and let you refuse cross-app tracking. It is worth doing, but it is not a cloak: plenty of tracking does not depend on it.

What the Phone Leaks Anyway

Your carrier records which towers you connect to. That record exists whatever your app settings say. Separately, location gathered inside apps has been bought and sold commercially — in 2024 the FTC acted against 4 location-data brokers and ordered them to stop selling precise location data and to delete what they had collected, including data revealing visits to clinics, places of worship, and shelters.

Stalkerware Is Not a Security Product

Cheap covert-monitoring apps are marketed for watching a partner. Installing one on another adult’s device without consent is a crime under federal wiretap and computer-crime law in the United States and under equivalent law elsewhere, and the FTC has banned one vendor, Support King (SpyFone), from the surveillance business outright. If you suspect one is on your device, the safest first step is advice from a domestic-violence technology service rather than deleting it, because removal can escalate the situation.

Encrypted Messaging

Who Runs It

The Signal Foundation, a nonprofit, funded by donations and grants rather than advertising. The protocol is open source and is also used by other major messengers.

Encrypted by Default

Messages, voice, and video calls, one-to-one and group. There is no unencrypted mode to fall into by accident.

What It Holds About You

In response to legal process Signal has published what it can produce: the date an account was created and the date it last connected. That is the list. It cannot produce message content, contacts, group membership, or profile data, because it does not hold them.

Safety Numbers

A per-conversation fingerprint. Comparing it in person or by another channel confirms nobody has substituted a key in the middle.

Disappearing Messages

A timer that removes messages on both devices. It does not prevent screenshots, and it does not bind the other person.

Registration Lock

A PIN required to register your number on a new device. It is what stops somebody who takes over your phone number from taking over your account.

Usernames

Since 2024 you can be contacted by username and keep your phone number hidden from people who do not already have it. Registration still requires a phone number, and people who already have yours still have it.

Encrypted Backups

Signal added end-to-end encrypted backups in late 2025, recoverable only with a long key generated on your device. If you lose that key, Signal cannot recover the backup — that is the point of it, and it is also a way to lose your history.

Comparison

App	E2E	What it still holds
Signal	Yes, always	Account creation and last connection dates. Essentially nothing else.
WhatsApp	Yes, always, for personal chats	Content is encrypted, but the surrounding record is not: numbers, who messaged whom and when, device and network details, and group membership.
iMessage	Yes, between Apple devices	The backup is the catch. Standard iCloud backup is encrypted with a key Apple holds, so it can be produced. Turning on Advanced Data Protection closes that.
Telegram	No, not by default	Ordinary chats, including groups, are stored on Telegram’s servers and are not end-to-end encrypted. Only Secret Chats are, and they are one-to-one and device-bound. This is the most common misconception in the list.
RCS / SMS	Partly, and changing	Plain SMS is not encrypted at all. Encrypted RCS existed within Google Messages for Android-to-Android; a cross-platform standard was agreed in March 2025 and has been rolling out since. Check what your own devices actually negotiate.

A Compromised Device Beats Everything

Encryption protects a message in transit. It is decrypted on the screen at both ends. Anything with access to that device reads it in the clear.

The Other Person Is Not a Protocol

They can screenshot, forward, or tell someone. Encryption is not confidentiality; it is transport.

Backups Leak Conversations

An unencrypted cloud backup of an encrypted chat is the entire chat, held by someone else.

Metadata Is Content

Who, when, how often, and from where is often more revealing than the words, and it is the part most services keep.

Files and Disks

Encrypted Archive

For sending a file to someone, or keeping one in a shared place. Use a modern format with AES-256 — in practice, 7-Zip’s own .7z format. It hides the file names only when that option is turned on. Avoid legacy password-protected ZIP: that scheme is broken and can be defeated quickly when any file inside is already known, regardless of how strong your password is.

Encrypted Container

A file that mounts as a drive. Open-source tools such as VeraCrypt do this. It protects what is inside while the container is closed; once it is open on a running machine, anything on that machine can read it.

Modern File Encryption

Simple, single-purpose tools such as age handle encrypt-this-file-for-this-person cleanly. The older OpenPGP tooling does more, including signing, at the cost of considerable complexity.

Full-Disk Encryption

Built into both major desktop systems and on by default on phones. It protects a device that is lost, stolen, or powered off. It does nothing once the machine is running and unlocked, which is most of the time. On Windows, adding a startup PIN closes a documented class of hardware attack against configurations that rely on the security chip alone.

Exposure

Look First

Search your own name, with and without your city. The first 2 pages are what a stranger sees. That is the exposure you are managing.

Freeze Your Credit

In the United States a freeze is free at each of the three bureaus. The statute and the date are on Cognitive Defense. A fraud alert is weaker: it asks lenders to verify identity, lasts a year, and only needs to be placed at one bureau. A freeze does not affect your score. Freeze unless you have a reason not to.

People-Search Opt-Outs Are Partial

Removal requests work site by site and often have to be repeated, because brokers re-acquire the same data. California residents now have a single deletion portal covering registered brokers, live since January 2026, with brokers required to honor requests on a set cycle from August 2026. Everywhere else it remains manual.

Masked Email

Aliases let you give a different address to every service. When one is sold or breached, you know exactly who did it, and you can kill that address without touching anything else.

Search Removal Is Not Deletion

Google offers a tool to remove results containing your phone number, home address, or email, and to alert you when new ones appear. It changes what that search engine shows. The underlying page still exists, other engines are unaffected, and public records are generally out of scope.

What Removal Cannot Do

It cannot reach every broker, undo what was already sold or cached, or touch court filings, property records, and voter files. The goal is raising the cost of casual lookup, not disappearing.

Children

The Risk

The Shape of the Risk Has Changed

The dominant online threat to teenagers today is not an abduction plot. It is financial sextortion: an offender posing as a peer, a fast move to images, then extortion for money. Law enforcement in the United States issued a national alert in December 2022 and an update in January 2024, describing thousands of victims, predominantly boys aged 14 to 17, and, per the updated advisory, at least 20 suicides.

It Moves in Hours, Not Weeks

Unlike classical grooming, financial sextortion is fast and transactional, run at scale, often from overseas. The compression is the danger: a child can go from first contact to crisis inside a single evening.

Reporting Volumes

The national clearinghouse handled tens of millions of reports a year across all categories, with online enticement rising sharply year on year. Counting changes at the platforms make year-to-year comparisons unreliable, and the clearinghouse says so itself — the direction is clear, the precise numbers are not.

Who Offends

For in-person child sexual abuse, the offender is usually someone the family knows, which is why stranger-danger framing fails. For financial sextortion specifically, the offender is a stranger, usually overseas, usually financially motivated. Teach both, and do not let one model crowd out the other.

What Works

Filters Do Less Than They Sell

The best-known study of household internet filtering found that whether a young person encountered sexual material online had almost nothing to do with whether the household used filtering, and a preregistered follow-up found no significant protective effect. Filters are a speed bump for young children and close to irrelevant for motivated teenagers.

Conversation Does More

The research distinguishes active mediation — watching together, discussing content, and explaining why — from restrictive mediation, which is blocking and monitoring without dialogue. The active kind is more consistently associated with the outcome that matters: the child telling you when something goes wrong.

Disclosure Is the Whole Game

Decades of parenting research find that most of what parents know comes from what the child chooses to tell them, not from surveillance. Anything that reduces disclosure reduces your actual visibility, whatever the dashboard says.

The Sentence That Matters

Tell a child, in advance and more than once, that if someone online pressures them or has an image of them, they can come to you. They will not lose the device, and they will not be in trouble. That single promise, kept, is the intervention with the best evidence behind it — and in sextortion cases it is the difference between an evening and a catastrophe.

Monitoring

Transparent Beats Covert

Monitoring a child openly, at an age-appropriate level, is a parenting decision. Monitoring covertly is a different act: when discovered, and it is usually discovered, it costs the disclosure you depend on.

Taper It

Controls that fit a 7-year-old are an insult to a 15-year-old. Set the expectation early that supervision reduces as judgment is demonstrated, and follow through.

The Adult Rule Is Absolute

Covertly monitoring a partner or any other adult is not parenting. It is abuse, it is generally illegal, and it is the same software marketed for a different buyer.

Controls

Built-In Platform Controls

Both phone platforms have family controls covering screen time, content ratings, purchases, and location, and both can require approval for new apps. The phone’s own on-device image screening can blur nude images in messages and warn the child, without sending anything to the vendor.

Teen Accounts

The major social platforms have moved to restricted-by-default accounts for minors — private by default, messaging limited to existing connections, strict content filtering, time reminders, and quiet hours, with a parent’s approval required to loosen them. Video platforms have added supervised experiences with limits on short-form feeds.

What None of Them Do

No control set prevents a determined teenager from reaching another device, another network, or another account. Treat controls as friction and defaults, not as a perimeter.

Reporting

If Images of a Minor Are Circulating

A hash-based takedown service exists for anyone who was under 18 when the image was taken, including adults reporting old images. The image never leaves the device: it is fingerprinted locally and only the fingerprint is sent, and participating platforms match against it. It cannot reach platforms that do not participate or content that is encrypted, and it does not notify you when a match is removed.

The Adult Equivalent

A separate service does the same for adults, issuing a case number and re-checking over time, with the same limitation: it covers participating platforms, not the whole internet.

Reporting a Crime

The national clearinghouse operates a tip line for exploitation reports, which triages and forwards to law enforcement. In a sextortion case, preserve the account details and the messages, stop paying, stop responding, and report.

The One Thing to Say First

Paying does not end it. It marks the victim as a payer. The advice from law enforcement is to stop engaging, keep the evidence, and report.

The Research

Treat It as a Live Dispute

The claim that smartphones and social media caused a teenage mental-health crisis is argued seriously and contested seriously. Present both sides, not one.

The Strong Claim

The best-known argument holds that a rewiring of childhood around phones and social platforms from about 2010 produced measurable harm, and recommends no smartphone before high school, no social media before 16, and phone-free schools.

The Critique

Critics — including researchers publishing in the major journals and authors of the meta-analyses — argue the effect sizes are small once methods are tightened, that the trend lines do not line up as neatly as claimed, and that other causes are being crowded out.

What the Consensus Body Said

The National Academies reviewed the evidence in a report released in December 2023 and concluded there is no easy answer on whether increasing social media use is associated with growing distress, noting both documented benefits for isolated young people and real methodological weakness across the literature. It recommended concrete steps against online harassment and bullying.

What to Do with an Unsettled Question

Act on the parts that are not in dispute — sleep, harassment, sextortion, and the child’s ability to tell you something — and hold the contested parts loosely.

Where to Get the Steps

How-To

Surveillance Self-Defense

Electronic Frontier Foundation

Step-by-step guides by threat model and platform, kept current. Start here.

Open Site

Secure Our World

US Cybersecurity and Infrastructure Security Agency

Government plain-language basics: password managers, multi-factor authentication, recognizing phishing, updating software.

Open Site

Signal Support

Signal