Summary
22 items · 30–60 minutes
Why a Privacy Audit Matters
Most privacy problems don't happen because someone targeted you specifically. They happen because a device shipped with permissive defaults, an app quietly requested access to your contacts, or an old account you forgot about got swept up in a data breach. The good news: the majority of these gaps are fixable in under an hour.
This checklist takes a room-by-room approach — working through your browser, phone, home network, smart devices, and accounts — so nothing gets overlooked. For a deeper look at the full landscape of digital security, see our comprehensive digital life protection guide.
Work through one category at a time. Check off what you've done, note what needs attention, and revisit the list every six to twelve months.
Password Manager
Generates and stores strong, unique passwords for every account so you don't have to remember them.
Breach-Notification Service
Checks whether your email address has been exposed in known data breaches.
Router Admin Panel
Accessed via your browser, this panel lets you update firmware, change credentials, and configure network security settings.
Device Companion Apps
Used to manage privacy and data-sharing settings for smart speakers, smart TVs, and other IoT devices.
The Checklist
Each group below corresponds to a part of your digital environment. Priority levels tell you where to focus first: must items are non-negotiable, should items are strongly recommended, and nice to have items round out a thorough audit.
Browser & Search
Phone & Apps
Accounts & Passwords
Home Network
Smart Home Devices
Social Media & Email
Default Settings Are Rarely Private
Devices and apps are typically configured to collect as much data as permitted by their terms of service — not as little as possible. Never assume a new device or app is private out of the box. Always check the settings yourself before regular use.
If your household includes children, pair this checklist with guidance on keeping children safe online — some settings, such as parental controls and shared-account access, deserve their own review.
What to Do With Your Results
After working through the list, you'll likely land in one of three situations. First, a few quick fixes: update passwords, flip off location access for apps that don't need it, enable two-factor authentication (2FA) where it's missing. These take minutes and deliver outsized protection.
Second, some items will require a bit more time — reviewing smart device permissions, auditing old app installs, or checking your router's firmware version. Schedule those as a follow-up task rather than letting them stall your progress.
Third, you may find accounts or services you no longer use. Deleting unused accounts removes data that could be exposed in a future breach. Most services have an account-deletion option buried in settings; searching the service name plus "delete account" usually surfaces it quickly.
Two-Factor Authentication Is Your Single Best Upgrade
If a password is compromised in a data breach, 2FA is often the only thing standing between an attacker and your account. Enable it on every service that offers it — starting with email and banking. Authentication apps (which generate one-time codes) are generally more secure than SMS-based codes, though SMS 2FA is still far better than no 2FA at all.
For anyone who wants to go further with browser-level privacy, our article on browser security settings worth turning on walks through specific controls most people never touch. And if you're exploring devices and what data they actually collect, the Devices & Gadgets hub is a useful next stop.
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.