Protect the email account first
Your email account is often the key to everything else. Password resets, receipts, bank alerts, work messages, and account confirmations usually arrive there. Use a strong unique password for email and turn on two-step verification if available. If someone gains control of your email, they may be able to reset passwords for many other services.
Review recovery options too. Make sure the backup phone number and recovery email are current. Remove old recovery methods that you no longer control.
Check app permissions
Many apps ask for more access than they need. Review permissions for location, microphone, camera, contacts, photos, and files. A weather app may need approximate location, but it may not need constant access. A photo editing app may need selected photos, but not your entire library forever.
Use "only while using the app" permissions where possible. Remove apps you no longer use, especially if they still have access to personal information.
Be careful on public Wi-Fi
Public Wi-Fi can be convenient, but it should be treated as a shared environment. Avoid sensitive banking, account recovery, or confidential work tasks on unknown networks when possible. Make sure websites use secure connections and avoid entering passwords on suspicious pages.
If you must use public Wi-Fi often, consider a trusted VPN service and keep device software updated. Updates are not exciting, but they often fix security weaknesses.
Share less by default
Privacy also depends on what you post. Avoid sharing documents, tickets, school details, travel plans, addresses, and personal schedules publicly. Photos can reveal more than expected through backgrounds, uniforms, license plates, or location tags.
Online privacy is a set of small habits. Strong passwords, current recovery settings, limited app permissions, and thoughtful sharing can reduce risk without making technology difficult to use.