Recommended tools

The tools we point to when a story is about one of these threats. We picked them for what they do, not for what they pay.

No affiliate links on this page: we earn nothing from these links. Keine Affiliate-Links, keine Provision.

Phishing

Phishing-resistant keys stop stolen passwords and one-time codes from being replayed.

• YubiKey 5 NFC - Hardware security key - phishing-resistant login (FIDO2 / passkeys) for Google, Microsoft, GitHub and more.

MFA bypass & account takeover

A hardware key is the strongest second factor most people can buy.

• YubiKey 5 NFC - Hardware security key - phishing-resistant login (FIDO2 / passkeys) for Google, Microsoft, GitHub and more.

Password & credential leaks

A unique password per site turns a leak into a non-event; breach alerts tell you what to change.

• Proton Pass - Password manager with breach alerts and hide-my-email aliases (Swiss, open source).
• Bitwarden - Open-source password manager with a free plan.

Ransomware

An offsite, versioned copy of your files is what gets you back without paying.

• Proton Drive - Encrypted cloud storage with file versioning - an offsite copy for ransomware recovery.

Public Wi-Fi & tracking

Encrypts your traffic on networks you do not control.

• Proton VPN - No-logs VPN for public Wi-Fi and travel, with a free tier.

Email privacy & spam

Aliases keep your real address out of the next leak.

• Proton Mail - End-to-end encrypted email with aliases.

Trademarks belong to their owners.