Say "my privacy setup" and most people picture one thing — maybe a VPN, maybe a browser extension. In practice it's never one thing. It's a stack: your email, your browser, your cloud storage, your calendar, your notes, the way you message people, the search engine you default to, and the password manager — or lack of one — holding all of it together. Nine or so separate categories, each one a company you've quietly agreed to trust with something.
This article is a map, not a manual. Each category on it deserves, and over time will get, its own closer look on this site. What matters today is seeing the whole shape at once: which categories you actually have covered, which you've never thought about, and the one category here that behaves differently from all the rest.
Before any individual category matters, one boundary matters more: whether personal and work ever touch the same device. Not which VPN you use — whether you've ever emailed yourself a photo from a work computer, or logged into your own bank account in a browser your employer controls.
Most people have done some version of this without thinking twice. It feels harmless because nothing bad has happened yet. But a work device isn't neutral ground. IT can usually see more than people assume, and a productivity monitor or keylogger doesn't announce itself before it's installed. Everything below only protects you on devices where you're actually the only audience. Draw that line first. Everything after it gets easier.
Every category in your stack has a reasonable case for convenience — one company, one bill, one login covering everything. Your password manager is the one exception. It shouldn't share a company, a login, or a recovery method with anything else you use.
Here's why. A password manager's entire job is standing between an attacker and everything else you own. If it's bundled into your email provider, your browser, or a suite you're already paying for, compromising that one account doesn't just expose that one service — it hands over the keys to every other service the vault was protecting. The convenience that makes bundling appealing everywhere else is exactly what makes it the wrong move here.
No password manager is perfect, and no single pick fits everyone the same way. What matters more than which one you choose is one requirement: it stands alone, answerable to nothing else you use.
That's a deliberate choice not to hand you a brand name in an article like this one. The specifics — what to weigh, which tradeoffs are real, which features actually matter to you — get their own full walkthrough. What belongs in a map is the principle: figure out what you actually need it to do, notice your own comfort with risk, and choose on your own terms. You'll probably get it partly wrong the first time. Most people do. Switching later isn't a failure — it's the practice working the way it's supposed to.
The remaining categories don't need the same alarm — just a moment of attention each.
Email is usually the master key to everything else, since it's how you reset every other password. Worth asking: who actually runs yours, and could you get back into your life if that inbox vanished tomorrow?
Browser holds more about you than most people realize — saved logins, autofill, and a running history of exactly where you've been.
Cloud storage feels private because it's yours, but whose laws actually apply depends entirely on which company is holding the key.
VPN shifts who can see your traffic — from your internet provider to whichever VPN company you've now decided to trust instead. A trade, not a disappearing act.
Calendar and contacts quietly map your whole social and professional life to one account, often the same one running your email.
Notes are where people paste things they'd never say out loud — passwords, medical details, half-finished thoughts. A private notes tool exists for exactly this reason.
Messaging apps vary enormously in what they can see and keep. Not all of them are built the same way, and it's worth knowing which one you're actually using and why.
Search engine sees every question you've ever been embarrassed to ask out loud. It's one of the easiest categories to change and one of the least often reconsidered.
Sign-in and SSO — "log in with Google" is convenient right up until that one account becomes the single key to a dozen others.
You don't need a plan for all nine today. You need to know they exist, and that each one is a decision, even the ones that were never made on purpose.
Look at your password manager, or the absence of one. If your passwords currently live in your browser's autofill, your email provider's built-in vault, or some other bundle, that's today's target — not a full switch by tonight, just an honest look at whether it's standing alone or riding along with something else.
If it's bundled, start weighing what you'd actually need from a standalone one: how you'd get back in if you lost your phone, whether you're comfortable trusting a company you can't fully verify, what it costs against the convenience you'd be giving up either way. Nobody else's answer is the right one for you. That's the whole point of deciding this on your own terms instead of taking someone else's pick.
Once you know what you're looking for, the real walkthrough covers how to weigh the tradeoffs and make the switch — on your terms, not a review site's.