Key Takeaways
Summary
24 items · 30–60 minutes
Why a Privacy Audit Matters
Digital privacy isn't a one-time setup — it's an ongoing practice. Most people configure a device or create an account in a hurry, accept the default settings, and never look back. Over time, those defaults accumulate: apps quietly tracking location in the background, old accounts holding payment details, browsers remembering more than you intended.
This checklist approaches your digital life the way you might audit a home — room by room, systematically. You don't need a technical background to work through it. If you're starting from scratch, our beginner's guide to online privacy lays the groundwork first. For a deeper look at the full data-protection picture, see personal data protection from end to end.
Work through each section below at whatever pace suits you. Even completing one category is a meaningful improvement.
Password Manager
Generates and securely stores unique passwords for every account, replacing weak or reused credentials.
Authenticator App
Provides time-based two-factor authentication codes as a more secure alternative to SMS-based 2FA.
Breach Notification Service
Checks whether your email address or passwords have appeared in publicly known data breaches.
Privacy-Focused Browser Extension
Blocks third-party trackers and advertising scripts from collecting your browsing behaviour across sites.
The Checklist
The items below are grouped by area of your digital life. Priority labels indicate what to tackle first: must items address the highest-risk gaps, should items are strongly recommended, and nice to have items offer additional protection once the essentials are covered.
Account Security
Device Settings
App Permissions
Browser & Online Activity
Social Media & Third-Party Access
Your Email Account Is the Master Key
If someone gains access to your primary email address, they can use its password-reset function to take over virtually every other account you own. Securing your email with a strong, unique password and two-factor authentication is the single most important action on this entire checklist. Treat it as a higher priority than any other account.
For settings you've never examined before, our companion article on overlooked privacy settings walks through the most commonly ignored options across phones, browsers, and social accounts. And if you're planning to sell or hand off a device, run through our device handover checklist before it leaves your hands.
Turning Audit Findings into Habits
Completing this audit gives you a clear snapshot of where you stand — but privacy is a moving target. New apps get installed, accounts accumulate, and services update their default settings. The goal isn't perfection; it's staying aware and making incremental improvements.
Schedule a lighter review every six months: check for new apps that have crept onto your devices, rotate any passwords you haven't changed in a year, and scan for accounts you no longer use. Keeping your digital life organised also makes audits faster — our guide to organising files, photos, and passwords can help reduce the clutter that makes these reviews feel overwhelming.
Don't Overlook Older Devices
Tablets, laptops, and phones that are no longer your primary devices often hold months or years of data but receive little attention during audits. If a device no longer receives operating system security updates, it's worth considering whether keeping personal accounts logged in on it is worth the risk. Review what's stored on older hardware and either update, wipe, or retire it accordingly.
The most important takeaway: small, consistent actions outperform any single big effort. Addressing even the must items in this checklist puts you meaningfully ahead of the most common privacy risks.