YOUR DEFENCE Start over 0 /224 actions
Exposed Everything is still ahead, and that is good news: the first steps pay off the most.
Another 7 actions to reach Awake .
Nothing ticked this week. Pick it up whenever you like, 0 of 16 areas are already started.
The 16 areas · 224 actions 0 done
THE AREA IN DETAIL Click an area above to switch list The fundamentals Before the settings, the mindset. Map what you expose, understand how you get attacked, and build the reflexes that stop 90% of real attacks.
0/21 actions
Read the terms before you accept them Clicking “I agree” without reading is signing a contract blindfolded. At the very least, skim what the service does with your data, the way you’d read the ingredients to dodge an allergen. Important 10 min ch. 01 · p. 14 ToS;DR Treat the internet as insecure by default Assume anything you send online can be read, copied or diverted. Before you send an ID for a rental or a scan of your card, ask yourself whether the recipient has really earned that trust. Important En continu ch. 01 · p. 14 Stay deliberate instead of running on autopilot Most attacks bet on your autopilot: the reflex click on a pop-up, the tempting link, the impulsive reaction. Taking back control of those habits blocks a large share of threats on its own. Important En continu ch. 01 · p. 15 Pause when a message plays on your emotions Urgency, fear or excitement are exactly the levers social engineering pulls: you’re rushed so you can’t think. The moment a message triggers a strong emotion, stop, breathe, and only act afterwards. Essential Sur le moment ch. 01 · p. 25 Ask three questions before reacting to a message Before you click or reply, filter it: was this message expected, is the sender really who they claim to be, and is it normal to be approached this way? Three reflexes are enough to unmask most traps. Essential Sur le moment ch. 01 · p. 25 Map your attack surface (1/5): inventory your devices You only protect what you’ve listed. Write down everything that connects: computers, phones, smart devices, printers, drives and USB sticks, with their OS and versions. Every forgotten device is a blind spot. Essential 30 min ch. 01 · p. 31 Map your attack surface (2/5): list your online accounts Every account is one more door into your digital life. List them all: email addresses, social media, banking and payments, shopping, streaming, forums. What you don’t list, you won’t secure. Essential 30 min ch. 01 · p. 31 Map your attack surface (3/5): locate your important data Your sensitive documents live somewhere: on the drive, on an external disk, in the cloud. Know exactly where, because you can’t back up or defend data you’ve lost track of. Essential 30 min ch. 01 · p. 31 Map your attack surface (4/5): assess your weak points Run every device and account through the sieve: firewall and antivirus on, updates done, strong passwords, two-factor, data encrypted and backed up. Wherever the answer is “no,” you’ve found a gap. Essential 30 min ch. 01 · p. 32 Map your attack surface (5/5): pinpoint your critical points Not everything carries the same weight. Spot the devices you use most, the accounts holding the most sensitive information, and the data that would do the most damage if it leaked. That’s where your effort goes. Essential 20 min ch. 01 · p. 32 Recognize the signs of a compromise A device slowing down for no reason, programs or files you never installed, unusual error messages: those are the engine misfiring. A noticeable change in behavior deserves an investigation, not a shrug. Important En continu ch. 01 · p. 35 Keep an eye on your account activity A sign-in from an unfamiliar place, a password changed without you: these traces reveal a break-in before it does real damage. Check the login history of your sensitive accounts regularly. Important En continu ch. 01 · p. 36 Check a login alert on the site itself, never through the message A “suspicious login detected” email is phishing’s favorite disguise. Never click its link: open the official site yourself and, if the alert is real, you’ll find it waiting in your account. Essential Sur le moment ch. 01 · p. 36 Stay calm when you suspect an attack Panic drives rushed decisions, and those almost always make things worse. When you’re under attack, the first thing to do is stay calm: size up the problem before you act. Important Sur le moment ch. 01 · p. 36 Set up regular backups The number-one regret after an attack is not having backed up. With recent copies of your files, ransomware becomes a setback, not a catastrophe: you restore instead of paying the ransom. Essential 1 h puis auto ch. 01 · p. 37 Prepare a plan for reacting to an attack The worst time to improvise is mid-crisis. Decide the first moves while you’re calm: disconnect the infected device from the network, change your critical passwords right away, and know who to alert. Important 30 min ch. 01 · p. 37 Review an incident afterwards to harden your defenses An attack you survive without learning from invites the next one. Once things are calm, retrace what happened and where it got in, then close that exact gap so it can’t reopen. Advanced 1 h ch. 01 · p. 37 Put tools in place to monitor your devices The human eye misses things: an up-to-date antivirus and well-tuned alerts catch suspicious activity while you get on with your day. Early detection is what turns a break-in into a mere scare. Advanced 30 min ch. 01 · p. 37 Keep learning and staying informed Scams evolve faster than any piece of software. Your best defense isn’t a tool but your own awareness: continuing to learn is precisely what keeps your resilience standing over time. Important En continu ch. 01 · p. 38 Invest in a few well-chosen tools Protecting yourself doesn’t mean emptying your wallet. A few modest, well-placed purchases, like a password manager or a backup solution, do more for your security than ten expensive gadgets. Important Variable ch. 01 · p. 39 Test your protections regularly A backup you never restore or an alert that never fires are worthless when the day comes. Test your protections like you test a smoke detector: better to learn they work before the fire, not during it. Important Trimestriel ch. 01 · p. 39 Tick all Untick all
Read the terms before you accept them Clicking “I agree” without reading is signing a contract blindfolded. At the very least, skim what the service does with your data, the way you’d read the ingredients to dodge an allergen.
01 Look for what the service collects, resells and shares; ToS;DR (tosdr.org) flags the worst clauses for you.