Physical Security & OPSEC

Operational security practices for the physical world that underpin your digital sovereignty.

<h2>Device Access Control</h2>
<ul>
    <li><strong>Physical locks:</strong> Use Kensington locks for laptops, privacy screens for monitors.</li>
    <li><strong>Strong PINs and biometrics:</strong> Use complex PINs (6+ digits) and biometric authentication where available.</li>
    <li><strong>Auto-lock settings:</strong> Configure devices to lock after 5 minutes of inactivity.</li>
    <li><strong>Remote wipe capability:</strong> Enable Find My Device or equivalent remote wipe features.</li>
</ul>

<h2>Network Security at Home</h2>
<ul>
    <li><strong>Router security:</strong> Change default admin passwords, update firmware regularly, disable WPS.</li>
    <li><strong>Network segmentation:</strong> Separate IoT devices from your main network using a guest VLAN.</li>
    <li><strong>Firewall configuration:</strong> Enable your router's firewall and configure appropriate rules.</li>
    <li><strong>Disable UPnP:</strong> Universal Plug and Play can expose internal services to the internet.</li>
</ul>

<h2>Supply Chain Security</h2>
<ul>
    <li><strong>Device inspection:</strong> Check for unexpected hardware modifications when purchasing refurbished devices.</li>
    <li><strong>Secure boot:</strong> Enable Secure Boot to prevent unauthorized firmware from loading.</li>
    <li><strong>Buy from reputable sources:</strong> Avoid second-hand devices from unknown sources.</li>
    <li><strong>Factory reset verification:</strong> Perform your own factory reset on used devices.</li>
</ul>

<h2>Emergency Preparedness</h2>
<ul>
    <li><strong>Data backups:</strong> Maintain 3-2-1 backups (3 copies, 2 media types, 1 offsite).</li>
    <li><strong>Recovery tools:</strong> Keep a bootable USB drive with emergency tools.</li>
    <li><strong>Contact list:</strong> Have offline contact information for recovery services and emergency contacts.</li>
    <li><strong>Documentation:</strong> Keep records of serial numbers, purchase receipts, and software licenses.</li>
</ul>

<h2>Digital Detox Practices</h2>
<ul>
    <li><strong>Screen-free zones:</strong> Designate areas where devices are not permitted.</li>
    <li><strong>Scheduled disconnections:</strong> Regular periods without internet connectivity.</li>
    <li><strong>Physical separation:</strong> Keep devices in a different room overnight.</li>
    <li><strong>Airplane mode:</strong> Use airplane mode in sensitive environments.</li>
</ul>

<div class="quote">
    "Your physical security is the foundation of your digital security. Compromise one, and you compromise both."
</div>

<a href="/guides/" class="back-link">← Back to Guides</a>