Editing Digital Discipline

= Digital Discipline =

== Intro ==

Digital discipline means forming smart, cautious habits when navigating the internet. This isn’t just about being "tech-savvy" — it’s about self-defense. Bad OPSEC gets people doxed, stalked, hacked, and profiled.

If you post online, engage in activism, participate in drama-heavy communities, or even just want basic privacy — you need to get this stuff right. What you reveal online builds a profile, and once it's out, you can't pull it back in.

== Why This Matters ==

Your name, IP address, emails, reused usernames, even slight password reuse — all of it becomes breadcrumbs. Doxing doesn't require "hacking", it just takes sloppy digital hygiene.

Governments, companies, trolls, stalkers, and bots all rely on people giving too much away without realizing it. Digital discipline keeps your personal identity disconnected from your online presence.

== Email ==

Not all email providers are created equal. Most free services (Gmail, Outlook, Yahoo, etc.) scan your messages, sell metadata, and are integrated with surveillance-heavy ecosystems.

There are a few privacy-first providers worth trusting:

* [https://www.proton.me/ ProtonMail] – Swiss-based, open-source, encrypted, supports aliasing, and has a good mobile app.
* [https://app.tuta.com/ Tuta Mail] – German-based, zero ads, open-source, and doesn't rely on third-party trackers.

'''Tips:'''
* Don’t use your real name when signing up.
* Use different email addresses for different tasks (banking, forums, backups).
* Don’t add a recovery phone number tied to your real identity.
* Turn on 2FA (two-factor authentication) using a TOTP app like Aegis or andOTP.

== Usernames ==

One of the easiest ways to get doxed is by using the same username on every platform. Even a variation of your handle can be enough to link accounts.

'''Do:'''
* Use random, unique usernames for each platform.
* Avoid anything tied to your real name, nickname, or birth year.
* Use tools like [https://namecheckr.com/ Namecheckr] to check if a handle is used elsewhere.

'''Don’t:'''
* Use the same handle on Discord, Twitter, Telegram, Reddit, and forums.
* Leave breadcrumbs by linking accounts together via bio links, reposts, or shared avatars.

== Passwords ==

Bad passwords will get you owned. Reused passwords will get you cross-compromised. Even "unique" ones can sometimes be used to fingerprint you if they’ve been seen in a breach.

'''Bad:'''
* <code>123456</code>
* <code>james2002</code>
* <code>hunter2</code>

'''Better:'''
* <code>ScorpionEgg!2951$whiteToad</code>

'''Best:'''
* Generated by a password manager. Long, random, and different for every site.

== Recommended Password Managers ==

* [https://www.bitwarden.com/ Bitwarden] – Cloud-synced, open-source, works across devices, and allows encrypted sharing.
* [https://keepassxc.org/ KeePassXC] – Fully offline, stores data locally, ideal for air-gapped or privacy-heavy setups.

'''Bitwarden Strengths:'''
* Syncs between devices.
* Browser extension and autofill.
* Easier for beginners.

'''KeePassXC Strengths:'''
* Fully offline, no cloud syncing.
* You control where your vault lives.
* Supports YubiKey, TOTP, and custom field types.

Use what suits your risk model — Bitwarden is more convenient, KeePassXC gives you full control.

'''Bonus Tip:'''
Generate passwords with 20–40 characters. Include symbols, numbers, uppercase, and lowercase. Store recovery codes securely. Back up your vault encrypted.

---

Let me know if you want the next section on browser hygiene, cookies, or device fingerprinting.