Smartphone, don't spy!

Checklist: Behavior-based risks

Behavior-based risks arise from careless or unthinking behavior by individuals. These include careless online activities such as using weak passwords, clicking on insecure links, sharing sensitive information on insecure platforms or not updating software. These behaviors increase the risk of cyberattacks, data misuse or identity theft as they make it easier for attackers to exploit vulnerabilities. Behaviour-based risks can be minimized through conscious and security-oriented action.

• Do not use biometric unlocking
• Your backups are stored decentrally
• You don't share your passwords with other people
• You have not activated your mobile data connection continuously
• You use anonymous SIM cards
• Deactivate your sim card when traveling with a group
• Do not use your anonymous SIM card at the same time as a non-anonymous card
• You deactivate your SIM card when traveling in modern cars
• Switch off all electronic devices when crossing fortified border installations
• You don't give out your phone number
• You don't make calls with your anonymous card
• You get your phone credit anonymously
• You suppress your phone number when you make calls
• Dial emergency numbers such as 110 and 112 carefully
• You don't give your name immediately when you answer the phone
• Are your apps and system up to date?
• Use a password manager
• Do not take screenshots of personal or sensitive data
• You use alternative app stores
• You do without Google Play services and Apple services
• You use privacy-friendly apps
• You use secure messengers
• You do without voice messages
• Do not share your Apple ID and deactivate iMessage
• You have activated lockdown mode on your iPhone
• You are careful when scanning QR codes
• You clean up links before you share them with others
• You do not carry your bank card directly next to your smartphone
• You use privacy-friendly payment options
• Use alternative frontends
• You use decentralized open source alternatives to common social media platforms
• You use passkeys
• You secure your accounts with two-factor authentication
• You use different pseudonyms and email addresses
• You do not use your pseudonyms at the same time
• You use privacy-friendly search engines
• You only use encrypted cloud storage
• You delete metadata from your images
• You do not publish images with shadows and time
• You consistently refuse your consent on websites
• You read through data protection declarations
• Avoid logins via Google, Apple or Microsoft
• You check the authenticity of important messages
• You do not reply to spam messages
• You have agreed a secret password with your family