ghost.moe/index.html
2025-08-16 19:10:48 -07:00

661 lines
19 KiB
HTML

<!DOCTYPE html>
<html lang="en">
<head>
<meta name="description" content="A beginner-to-advanced guide to online privacy and digital security. Learn how to browse safely, lock down your phone, and reclaim your data." />
<meta name="keywords" content="privacy, security, online safety, tor, firefox, grapheneos, digital hygiene, ghost.moe, privacy starter guide, security starter guide, anti-censorship guide, bypass age verification" />
<meta name="author" content="ghost.moe" />
<meta property="og:title" content="ghost.moe — Privacy & Security Guide" />
<meta property="og:description" content="Simple steps to secure your digital life. From browsers to phones, ghost.moe helps you choose your level of protection." />
<meta property="og:type" content="website" />
<meta property="og:url" content="https://ghost.moe" />
<meta property="og:image" content="https://ghost.moe/assets/preview.png" />
<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:title" content="ghost.moe — Privacy & Security Guide" />
<meta name="twitter:description" content="Simple steps to secure your digital life. From browsers to phones, ghost.moe helps you choose your level of protection." />
<meta name="twitter:image" content="https://ghost.moe/assets/preview.png" />
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>ghost.moe — A minimalist guide to digital privacy, security, and anti-censorship.</title>
<style>
.sidebar {
position: fixed;
top: 0;
left: 0;
width: 200px;
height: 100%;
background-color: #111;
padding: 2rem 1rem;
overflow-y: auto;
}
.sidebar ul {
list-style: none;
}
.sidebar li {
margin-bottom: 1rem;
}
.sidebar a {
color: #ccc;
text-decoration: none;
font-weight: bold;
transition: color 0.2s ease;
}
.sidebar a:hover {
color: #fff;
}
.sidebar strong {
display: block;
color: #fff;
font-size: 0.95rem;
margin-top: 1.5rem;
margin-bottom: 0.5rem;
padding-bottom: 0.2rem;
border-bottom: 1px solid #333;
text-transform: uppercase;
letter-spacing: 0.05em;
}
.sidebar ul ul {
padding-left: 1rem;
}
.sidebar ul ul li {
margin-bottom: 0.5rem;
}
.sidebar ul ul a {
font-weight: normal;
color: #aaa;
font-size: 0.9rem;
}
.sidebar ul ul a:hover {
color: #fff;
}
main {
margin-left: 110px;
}
* {
box-sizing: border-box;
margin: 0;
padding: 0;
}
body {
font-family: sans-serif;
background: #0a0a0a;
color: #eee;
line-height: 1.6;
padding: 2rem;
max-width: 800px;
margin: auto;
}
header {
text-align: center;
margin-bottom: 2rem;
border-bottom: 1px solid #ddd;
}
h1 {
font-size: 2.5rem;
margin-bottom: 0.5rem;
}
.tagline {
margin-bottom: 2rem;
font-size: 1.2rem;
color: #eee;
}
section {
margin-bottom: 3rem;
}
.section p {
color: #eee;
font-size: 1rem;
line-height: 1.6;
padding: 0 1rem;
max-width: 700px;
margin-left: auto;
margin-right: auto;
}
.section a {
color: #fb2;
}
.section h2 {
font-size: 1.6rem;
margin-bottom: 1rem;
}
.description {
margin-bottom: 1.5rem;
}
.convenient {
color: #2ecc71;
}
.balanced {
color: #f1c40f;
}
.secure {
color: #e74c3c;
}
.level_guide {
margin-top: 1rem;
margin-bottom: 1rem;
list-style: none;
}
.levels {
display: grid;
grid-template-columns: 1fr;
gap: 1rem;
}
.level {
background: black;
border-left: 5px solid #ccc;
padding: 1rem;
border-radius: 6px;
margin-bottom: 1rem;
}
.level h3 {
margin-bottom: 0.5rem;
}
.level.easy {
border-color: #2ecc71;
}
.level.medium {
border-color: #f1c40f;
}
.level.hard {
border-color: #e74c3c;
}
footer {
text-align: center;
font-size: 0.9rem;
color: #eee;
padding-top: 2rem;
border-top: 1px solid #ddd;
}
.footer a {
color: #fb2;
}
/* Hide sidebar on mobile */
@media (max-width: 768px) {
.sidebar {
display: none;
}
body {
padding-left: 1rem;
padding-right: 1rem;
}
main {
margin-left: 0;
}
}
</style>
</head>
<body>
<nav class="sidebar">
<ul>
<li>
<a href="#intro">
Intro
</a>
</li>
<li>
<a href="#threats">
Threat Modeling
</a>
</li>
<li>
<strong>
Privacy
</strong>
<ul>
<li>
<a href="#browsing">
Browsing
</a>
</li>
<li>
<a href="#ffconfig">
Firefox Configuration
</a>
</li>
<li>
<a href="#phones">
Phones
</a>
</li>
</ul>
</li>
<li>
<strong>
Security
</strong>
<ul>
<li>
<a href="#accounts">
Accounts
</a>
</li>
<li>
<a href="#2fa">
Two-Factor Auth
</a>
</li>
</ul>
</li>
<li>
<strong>
Anti-Censorship
</strong>
<ul>
<li>
<a href="#vpn">
VPN
</a>
</li>
<li>
<a href="#mirrors">
Mirrors
</a>
</li>
</ul>
</li>
</ul>
</nav>
<main>
<header>
<h1>
ghost.moe
</h1>
<p class="tagline">
A minimalist guide to digital privacy, security, and anti-censorship.
</p>
</header>
<section id="intro" class="intro">
<p>
Welcome to ghost.moe. This guide is meant to help you take control of
your digital privacy and security. With more privacy and security, comes
less convenience. This is an unfortunate reality. We've broken things down
by topic, and each topic has three levels:
<ul class="level_guide">
<li>
<span class="convenient">More Convenient:</span>
These items will only require a download or checking a box in settings.
They shouldn't break anything, be annoying, or slow anything down.
</li>
<li>
<span class="balanced">Balanced:</span>
These items can cause some minor things to break, be slightly annoying, or require
a change to how you use your devices.
</li>
<li>
<span class="secure">More Secure/Private:</span>
These items will require either technical knowledge, be very annoying, require
serious planning, cause things to slow down, break things, or require a
large amount of effort.
</li>
</ul>
Start where you're comfortable.
</p>
</section>
<section id="threats" class="section">
<h2>
🕵️‍♂️ Threat Modeling
</h2>
<p>
The most important thing to consider when you are worried about privacy
and security is your threat model. Who are you trying to hide your data
from? If you only need to hide your data from your family, you may just
need to delete your browser history. If you are trying to hide your data from
governments and corporations, you will have to do quite a bit more work than
just deleting your browser history. Come up with your threat model, and think about the
tools that this adversary has at their disposal. Keep your threat model in mind
when going through this guide.
</p>
</section>
<section id="browsing" class="section">
<h2>
🧭 Web Browsing
</h2>
<p class="description">
Your web browser is typically one of the most used programs on your system. Taking
steps to lock down your web browser will greatly increase your privacy.
</p>
<div class="level easy">
<h3>
Switch to <a href="https://brave.com">Brave</a> or <a href="https://firefox.com">Firefox</a>
</h3>
<p>
Brave is easier out of the box. Firefox can be configured to be more private than Brave.
</p>
</div>
<div class="level easy">
<h3>
Use <a href="https://duckduckgo.com/">DuckDuckGo</a> instead of Google.
</h3>
<p>
DuckDuckGo does not track your searches or browsing history.
</p>
</div>
<div class="level hard">
<h3>
Use <a href="https://www.torproject.org/">Tor Browser</a> for all sensitive browsing.
</h3>
<p>
Tor is the gold standard browser for privacy and anti-censorship. It will be very slow, however.
</p>
</div>
</section>
<section id="ffconfig" class="section">
<h2>
🦊 Firefox Configuration
</h2>
<p class="description">
If you are using Firefox these settings could be enabled to make it more private/secure. Otherwise, skip this section.
</p>
<div class="level easy">
<h3>Enable "Tell websites not to sell or share my data"</h3>
<p>Note: Websites do not have to adhere to this request.</p>
</div>
<div class="level easy">
<h3>Enable "Delete cookies and site data when Firefox is closed"</h3>
<p>This will make it harder to track you between sessions.</p>
</div>
<div class="level easy">
<h3>Disable "Ask to save passwords"</h3>
<p>If someone gets access to your computer they can't find your passwords saved in your browser.</p>
</div>
<div class="level easy">
<h3>Disable all "Autofill" settings</h3>
<p>If someone gets access to your computer they can't find your information saved in your browser.</p>
</div>
<div class="level easy">
<h3>Disable all "Firefox data collection"</h3>
<p>Minimize the data collected on you, even from products you trust.</p>
</div>
<div class="level easy">
<h3>Enable "Allow websites to perform privacy-preserving ad measurement"</h3>
<p>Controversial explaination coming soon</p>
</div>
<div class="level easy">
<h3>Enable "HTTPS-only mode in all windows"</h3>
<p>Forces encryption between you and the website you visit. Can show a warning message if the website doesn't support HTTPS.</p>
</div>
<div class="level easy">
<h3>Enable "DNS over HTTPS (Increased Protection)"</h3>
<p>This prevents someone on your local network from seeing what websites you are visiting.</p>
</div>
<div class="level easy">
<h3>Install an adblocker like <a href="https://ublockorigin.com/">uBlock Origin</a></h3>
<p>Ads can be used to track you across websites or give your computer malware.</p>
</div>
<div class="level medium"> <!--Maybe this should be easy also. Need to think more about this one.-->
<h3>Enable "DNS over HTTPS (Max Protection)"</h3>
<p>This can cause warning pages to show up before using insecure DNS.</p>
</div>
<div class="level medium">
<h3>Enable "Always use private browsing mode"</h3>
<p>This will log you out of everything and erase your history after closing the browser. This is very useful on shared computers or on laptops that could easily be stolen.</p>
</div>
<div class="level medium">
<h3>Enable "Strict tracking protection"</h3>
<p>Note: This could cause some websites to break.</p>
</div>
<div class="level hard">
<h3>Block javascript with <a href="https://addons.mozilla.org/firefox/addon/noscript">NoScript</a> or <a href="https://addons.mozilla.org/firefox/addon/ghostery">Ghostery</a></h3>
<p>Javascript is code that a website chooses to run on your computer. Blocking javascript can stop websites from learning more about your computer.</p>
</div>
</section>
<section id="phones" class="section">
<h2>
📱 Phones
</h2>
<p class="description">
Most people carry their phone everywhere they go. This can be used to
track you.
</p>
<div class="level easy">
<h3>
Disable personalized ads in iOS or Android settings.
</h3>
<p>
Android: Settings > Google > Ads > Turn off "Ad Personalization"<br>
iOS: Settings > Privacy & Security > Apple Advertising > Turn off Personalized Ads
</p>
</div>
<div class="level easy">
<h3>
Manage app permissions.
</h3>
<p>
Set location permissions to “While using the app” or “Ask every time”. Disable microphone and camera access for non-essential apps. Disable system-wide location when not needed.
</p>
</div>
<div class="level easy">
<h3>
Remove unused apps.
</h3>
<p>
Apps can run in the background even if you are not using them.
</p>
</div>
<div class="level easy">
<h3>
Use a pin or password to unlock your phone.
</h3>
<p>
In some jurisdictions you can be required to unlock your phone with your fingerprint or face, but not with a pin or password.
</p>
</div>
<div class="level medium">
<h3>
Use open-source apps from F-Droid.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level medium">
<h3>
Limit app permissions manually.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level hard">
<h3>
Install a custom ROM like GrapheneOS or LineageOS.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level hard">
<h3>
Avoid all Google services.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
</section>
<section id="accounts" class="section">
<h2>
🔐 Accounts
</h2>
<div class="level easy">
<h3>
Use strong and unique passwords for every account.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level easy">
<h3>
Enable password managers like Bitwarden or 1Password.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level medium">
<h3>
Enable two-factor authentication (2FA) where available.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level medium">
<h3>
Avoid using social logins (Google, Facebook).
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level hard">
<h3>
Use pseudonyms and email aliases.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level hard">
<h3>
Segment identities for different activities.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
</section>
<section id="2fa" class="section">
<h2>
🛡️ Two-Factor Authentication
</h2>
<div class="level easy">
<h3>
Enable 2FA using SMS or email.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level medium">
<h3>
Use TOTP apps like Aegis or Authy.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level hard">
<h3>
Use hardware tokens like YubiKey or Nitrokey.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
</section>
<section id="vpn" class="section">
<h2>
🛰️ VPN
</h2>
<div class="level easy">
<h3>
Use any reputable no-log VPN service.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level medium">
<h3>
Use VPNs based in privacy-friendly jurisdictions.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
<div class="level hard">
<h3>
Self-host your own VPN using WireGuard.
</h3>
<p>
This will be expanded text describing why you should do the above, in more detail.
</p>
</div>
</section>
<footer class="footer">
<p>
<a href="https://github.com/phixxy/ghost.moe">Built with minimalism in mind</a>. No tracking, no nonsense. ❤️
</p>
</footer>
</main>
</body>
</html>