Hello everyone, new here.
Need help with my online setup.
I am a beginner online creator and building to be a digital nomad.
My threat model - I could potentially face a risk of real life stalking and targeted physical attacks, by non govermental orgs or individuals who oppose me, while traveling and making content, due to my background in life, who i am and my opinions. though I am not necessarily a political creator, my content can include semi political/non concensus opinions, indirectly as part of my content sometimes.
I do know about basic physical security measures, like not posting online about where I am in real time, using a vpn, not telling the name of my home town, and more…
I’ve been learning about PSA the last few months, and implemented most of the things relevant to me in the digital side of things. I use android and windows with hardened settings, switched some of the services I use to privacy focused ones and debloating my devices, but I have a few things unclear to me still, I’d be happy to get help with -
-
On android, is enabling all of the options that the Advanced Protection toggle enables, but each feature manually, instead with the one toggle, different from enabling it with the Advanced Protection toggle? is enabeling the single toggle makes some additional root level security changes under the hood, which aren’t toggleable independently?
-
I currently have most my personal accounts with my old gmail account - password manager, 2FA etc. but if I have my 2fa synced, and my 2fa account associated with my gmail account, is that a lock in loop? i have my recovery key and 2fa seeds backed up offline securely.
-
For setting up emergency situation system with a trusted contuct, is using Ente Locker a good idea? why not just give a physical emergency sheet with step by step guide for accessing all my digital data, and how to recover password manager data with recovery file store offline, and with clear instructions of what to do to help in different cases of physical emergency, to a trusted person?
-
Is using something like Ente locker the preferred way to store my password manager and 2fa master passwords? or should these go only on a physical offline backup since I don’t log in and out of these too often? it is marketed for that, but it is relatively new product, so what was the most common method until now? is Ente locker a good fit for my case? and for emergancy access system?
-
In terms of keeping my personal account unassociated with my online presence - since I currently cant justify setting up a custom domain? should i have a separate free Tutamail account as an open business contact, away from my personal email associated with my bank and password manager? or should I just use an alias from proton pass for that purpose? should i have the account associated with my youtube channel completely separated from my personal email? or having it as part of my personal email account, and just using an alias or free tutamail account as public contact a good idea? if I use aliases available to me as part of my proton account, me using proton will be revealed. does that matter, considering my password manager account is with proton? should I just use one of my aliases in proton to open a separate google account for my youtube channel, or should I open a completely new, separated google account? is having my personal google account associated with my proton pass, and then having my proton mail account which is connected to my main proton account be the email associated with my YT, but then having a free Tutamail account be a dummy contact box - is that a good idea? out of all these options whats the best way to go about this? is the idea of using a few different email accounts, in this manner, would still be considered overcomplication?
-
Also in case of any emergency - whats the right approach for which device to set as a trusted device?
-
Where should I store the security questions of accounts that have that?
-
Where should I store IMEI number of my phone, since that can also be a helpful data point for police to help find my phone if I lose it?
-
Is a password manager a good place to store things like digital copy of my ID, passport, health insurance? is Ente Locker a preferred product for this kind of use case? or should these stay offline?
Any feedback would be appreciated.