UNDERRATED Privacy

You should access this site, and most websites, through a trusted VPN or Tor Browser.

See our recommendations for no-log VPNs here

Threat Modeling

Build Your Privacy Stack

Privacy advice fails when it treats everyone like they have the same risks. Start with the threat model that fits your life, then build from there.

Level 1 Everyday Privacy Level 2 Upgraded Privacy Level 3 Serious Privacy

If you are looking to take your privacy seriously, we strongly recommend buying & reading Extreme Privacy by Michael Bazzell . Although it is quite dense, it's packed full of extremely detailed privacy tactics.

Level 1

Everyday Privacy

For normal people who want to reduce common tracking, account compromise, identity exposure, and Google dependency without making privacy feel impossible.

Goal

Build a strong privacy setup before adding complexity, focusing on the basics.

Overview

  • Use a password manager with unique passwords on every account.
  • Use a privacy-focused browser.
  • Enable app-based 2FA or hardware security keys on important accounts.
  • Freeze your credit with Equifax, Experian, and TransUnion.
  • Move private conversations to Signal where possible.
  • Use a reputable VPN.
  • Move away from Gmail and toward a privacy-respecting email provider.

Level 2

Upgraded Privacy

For people ready to move beyond basic tools and start separating browsers, emails, phone numbers, payments, devices, addresses, accounts, and network exposure by purpose.

Goal

Create clean boundaries between different parts of your life so one account, merchant, device, or data leak does not connect everything.

Overview

  • Take your time with Everyday Privacy first.
  • Separate browsers and browser profiles by purpose.
  • Use separate email aliases and inboxes.
  • Begin to compartmentalize phone numbers.
  • Separate payment relationships with virtual cards.
  • Upgrade your mobile setup.
  • Clean up old accounts.
  • Start data broker cleanup.
  • Improve your home network and DNS.
  • Separate address exposure with remote mailboxes or local mailbox shops.

Level 3

Serious Privacy

For people facing targeted risk where identity separation, operational discipline, metadata control, dedicated devices, and mistake prevention become critical.

Goal

Build disciplined separation between identities, accounts, devices, networks, locations, phone numbers, emails, payments, addresses, and habits.

Overview

  • Coming soon. This one will take some time.
  • This level will build on Everyday Privacy and Upgraded Privacy.