Stealth

Most breaches are not genius hackers. They are reused passwords, phished logins and unpatched devices. Close the easy doors and you are harder than 95% of targets.

Email is the master key

Whoever owns your inbox can reset everything else. Protect it with a hardware key and a unique password.

Phishing

Never log in from a link you were sent. Type the address yourself. Urgency is the tell.

Updates

Patch phones, browsers and routers promptly. Most exploits target bugs that already have fixes.

Least privilege

Daily use on a standard account, not admin. Remove apps and browser extensions you don’t use.

Network

Change the router’s default password, update its firmware, put smart-home devices on a guest network.

Lockdown mode

If you are a high-value target, iPhone Lockdown Mode and Android Advanced Protection shrink the attack surface.

Encryption turns data into noise for anyone without the key. Use it at rest (on disk), in transit (on the wire) and end-to-end (only you and the recipient can read it).

Messages

Signal is the gold standard for end-to-end encrypted chat and calls. Turn on disappearing messages by default.

Devices

FileVault (Mac), BitLocker (Windows), LUKS (Linux). Modern phones encrypt by default once a passcode is set.

Files

Use age or VeraCrypt for encrypted archives. Cryptomator for encrypting files before they reach any cloud.

Email

Proton Mail or Tuta encrypt mailboxes. Normal email is a postcard; don’t send secrets by it.

The weak point

Encryption is only as strong as the key and the endpoint. A malware-infected phone reads your Signal messages before they’re encrypted.

A private key is the asset. Whoever holds it owns the account, the wallet or the identity. Treat keys like bullion.

Seed phrases

Write the 12 or 24 words by hand or stamp them in steel. Never photograph, type, email or store them in a password manager.

Geographic split

Store copies in two secure places. For large sums use multisig (2-of-3 keys in different locations) so no single theft or fire loses everything.

Passphrase (25th word)

An extra passphrase creates a hidden wallet. A decoy wallet with a small balance can defuse a $5 wrench attack.

Hardware wallets

Buy direct from the manufacturer. Verify the device on arrival. Never enter a seed on a website, ever.

API and SSH keys

Never commit keys to code. Use environment variables or a secrets manager, rotate on any suspicion, scope to least privilege.

Inheritance

Write a sealed letter of instructions for heirs, separate from the keys. Secrecy that dies with you is a loss.

Privacy is choosing what to reveal. Anonymity is revealing nothing linked to you. Compartmentalize: one identity per purpose, never crossed.

Know your threat

Hiding from advertisers, a stalker or a nation-state are three different jobs. Model the threat before picking tools.

VPN

Hides your traffic from the local network and ISP, but the VPN company sees it. It is privacy from some, not anonymity.

Tor

Routes traffic through three relays so no single one sees who you are and where you go. Slow, but the real tool for anonymity.

Browser

Brave, Firefox with uBlock Origin, or Mullvad Browser. Block trackers and third-party cookies.

Compartments

Separate emails and phone numbers for banking, shopping, social and private life. A leak in one doesn’t expose the rest.

Data brokers

Your address, relatives and phone number are for sale. Opt out one by one or pay a removal service yearly.

Home address

Use a PO box, virtual mailbox or registered agent for public filings, packages and LLC paperwork.

AI multiplies both attacker and defender. Use it to work faster, and assume adversaries use it to fake faces, voices and messages.

Deepfake voices

Cloned voices of family and executives are used in scams. Verify through a second channel or a safe word before sending money.

Data you feed it

Anything typed into a cloud AI may be stored. Keep keys, client data and secrets out, or run a local model.

Local models

Open-weight models run on your own hardware, so sensitive work never leaves the machine.

Prompt injection

AI agents that read email or web pages can be hijacked by hidden instructions. Don’t give an agent money or keys without human approval.

Defensive AI

Use AI to review code, summarize logs, spot phishing and draft security plans. It is a force multiplier for a small team.

Every post is intelligence. Location, routine, relationships and wealth can be mapped from a feed in minutes.

Delay location

Post after you leave a place. Never show a live location, your home exterior, your street or your car plate.

Metadata

Photos carry GPS in EXIF data. Most platforms strip it on upload, but files sent directly often keep it.

Reflections and details

Windows, sunglasses, mail, badges and keys in photos have all been used to find people.

Stealth wealth

Don’t post assets, balances or crypto holdings. Flaunting wealth invites fraud, kidnapping and lawsuits.

Security questions

Your first pet and high-school mascot are in your old posts. Answer security questions with random passwords.

The best fight is the one you saw coming and avoided. Awareness is a habit, not paranoia.

Cooper color code

White: oblivious. Yellow: relaxed awareness (your default in public). Orange: a specific possible threat. Red: action.

Baseline and anomaly

Read the normal behavior of a place. Then watch for what breaks it: someone too focused on you, hands hidden, a mismatch in dress or mood.

OODA loop

Observe, orient, decide, act. Whoever cycles faster controls the encounter.

Exits and seats

Enter any room and note two exits. Sit with a view of the door.

Gray man

Neutral clothes, no logos, no tactical gear, no flash. Blend in so you’re never selected.

Travel

Share your itinerary with one trusted person. Carry a decoy wallet. Keep your phone charged and your door locked with a wedge.

Avoid, escape, then fight only if you must. Winning is going home.

Hierarchy

Awareness, then avoidance, then de-escalation, then escape. Physical defense is the last layer, not the first.

De-escalation

Hands up, open and in front ("the fence"), calm voice, step back at an angle. You look peaceful and stay ready.

Train real arts

Brazilian jiu-jitsu, boxing, Muay Thai and wrestling are pressure-tested with live sparring. Train at least twice a week.

Targets

If attacked: eyes, throat, groin, knees. Strike to create space, then run.

Tools

Pepper spray, a flashlight and a phone. Know your local laws on carrying anything.

The law

Force must be proportionate and end when the threat ends. Know your state’s self-defense and duty-to-retreat rules.

The shinobi were masters of intelligence, not just combat. Their edge was patience, disguise, information and the art of not being there.

Shinobi = endurance

The character 忍 means to endure. The first skill is patience: wait, watch, strike only on your terms.

Hensōjutsu

The art of disguise. Today: a boring online profile, generic clothes, a quiet car. Be forgettable.

Intelligence first

"Know the enemy and know yourself; in a hundred battles you will never be in peril." — Sun Tzu

Economy of motion

"Do nothing which is of no use." — Miyamoto Musashi. Spend no energy, word or dollar without purpose.

Need to know

Tell people your plans after they succeed. Share information by role, not by friendship.

Silence

"Speech is silver, silence is golden." Every secret-keeping order ever built runs on this rule.