Online Privacy Basics: VPNs, Password Managers and a Safer Smart Home
What VPNs and password managers actually do, what they don't, and simple habits that keep your accounts and smart home safer.
Disclosure: This guide contains affiliate links. If you buy through them, ITS-ALL-HERE may earn a commission at no extra cost to you. We don't list prices because they change often; tap a link to see the current price on the seller's site. Learn more.
Staying safe online doesn't require a computer science degree. A handful of good habits and a couple of well-chosen tools go a long way. This guide explains, in plain English, what a password manager and a VPN actually do, what they don't do, and how to keep the smart gadgets in your home from becoming a weak spot.
Step one: strong, unique passwords
The single most useful thing most people can do is stop reusing passwords. When one website has a data breach, criminals often try the same email and password on other sites. If every account has its own password, a breach at one site doesn't unlock the others.
The problem is that nobody can remember dozens of long, random passwords. That's what a password manager is for. It stores your passwords in an encrypted vault, can create strong new ones for you, and fills them in on your devices so you only need to remember one strong main password.
NordPass
A password manager that stores your passwords and fills them in across your devices.
A password manager that stores your passwords and fills them in across your devices.
Whichever password manager you choose, make your main password long and memorable (a short phrase of several unrelated words works well), never use it anywhere else, and turn on two-step sign-in for the password manager itself.
Step two: turn on two-step sign-in
Two-step sign-in (also called two-factor authentication) asks for a second proof, such as a code from an app or a prompt on your phone, when you log in. Even if someone gets your password, they still can't get in without that second step. Turn it on for your email first, because your email can be used to reset almost everything else, then for banking, shopping and social media accounts.
What a VPN does, and what it doesn't
A VPN (virtual private network) encrypts the connection between your device and the VPN provider's servers. In everyday terms, that means:
- People on the same public Wi-Fi network, like at a coffee shop, hotel or airport, have a much harder time seeing what you're doing.
- Your internet provider sees that you're connected to a VPN, but not the individual websites you visit.
- Websites see the VPN server's location instead of your home internet address.
It's just as important to know what a VPN doesn't do. It doesn't stop you from clicking a phishing link, doesn't remove viruses, and doesn't make you anonymous to sites you're signed in to. You're also trusting the VPN company with your traffic, so choose an established provider and read its privacy policy. A VPN is one layer of protection, not a replacement for good passwords, updates and caution.
Here are the two VPN services we partner with. Both offer apps for common devices; check each site for current plans and the devices supported.
NordVPN
A VPN service that encrypts your internet connection on phones, computers and other devices.
A VPN service that encrypts your internet connection on phones, computers and other devices.
Surfshark
A VPN service with apps for phones, computers, tablets and TVs.
A VPN service with apps for phones, computers, tablets and TVs.
When comparing VPNs, look at how many devices one plan covers, whether there are apps for everything you own, the refund policy, and how easy the app is to turn on. A VPN only helps when it's switched on.
Step three: keep everything updated
Software updates often fix security holes. Turn on automatic updates for your phone, computer, browser and apps. It's free, it takes no effort once it's set up, and it closes many of the doors attackers rely on.
A safer smart home
Smart speakers, cameras, plugs and other connected gadgets are convenient, but each one is a small computer on your home network. A few simple steps help keep them in line:
- Change default passwords and use your password manager to store the new ones.
- Turn on two-step sign-in for the apps that control your devices, when it's offered.
- Update the device's app and firmware regularly.
- Secure your Wi-Fi with a strong password, and consider a separate guest network for visitors.
- Review camera and microphone settings, and only keep the devices you actually use.
Here are some of the smart home products on our site. Each is useful on its own, and each benefits from the steps above.
SwitchBot
Smart home gadgets such as button pushers, curtain motors, smart locks and sensors.
Smart home gadgets such as button pushers, curtain motors, smart locks and sensors.
Kasa Smart Plug HS103P2 (2-Pack)
Wi-Fi plugs that let you turn lamps and small appliances on or off from your phone, on a schedule, or by voice with Alexa or Google. No hub needed.
Blink Mini Indoor Smart Security Camera
A compact plug-in 1080p camera with motion alerts and two-way audio. A simple, low-cost way to keep an eye on your home from your phone.
Amazon Echo Dot (5th Gen) Smart Speaker
A compact Alexa speaker that handles music, timers, reminders and smart-home control. A small, affordable way to make any room a little smarter.
Spot the scams
No tool can protect you from everything. Be suspicious of messages that create urgency ("your account will be closed today"), ask for passwords or codes, or push you to install software or pay with gift cards. When in doubt, don't click the link. Go to the company's website or app directly, or call a number you already trust.
A quick privacy checklist
- Use a password manager and give every account its own password.
- Turn on two-step sign-in, starting with your email.
- Turn on automatic updates on every device.
- Use a VPN on public Wi-Fi.
- Change default passwords on smart home devices and keep them updated.
- Slow down when a message feels urgent or asks for a code.
The bottom line
Most online trouble comes from reused passwords, missing updates and convincing scams. A password manager, two-step sign-in and a VPN for public Wi-Fi cover a lot of ground, and a few minutes spent locking down your smart home finishes the job. Browse more in our Finance & Software and Tech & Gadgets categories.