I want to use Linux on a daily laptop and be better prepared for a cyberattack or other emergency. I don't know how to code yet. What should I focus on first, and do I need a separate Wi-Fi connection or special hardware?
How do I start building a secure, private Linux laptop as a beginner?
Asked by
q.619+socketthimble
Answers
Start by deciding what you're trying to protect and from whom. Keeping files safe if a laptop is stolen is a different problem from limiting online tracking or dealing with a targeted attack.
Linux alone won't make you completely private online. A separate Wi-Fi connection isn't automatically private either. Think about which accounts and services get your information, not just which operating system you run.
Reply to this answer
Pick a mainstream desktop distribution and get comfortable with the basics before trying elaborate hardening guides. Linux Mint is one option. You don't need to know how to code to start, but learn how updates, software installation, permissions and backups work.
A virtual machine is a low-risk way to try things without replacing your current system. It won't be quite the same as relying on Linux every day, but it's a useful sandbox. Understand commands before running them, especially commands that ask for administrator privileges.
Reply to this answer
For a daily machine, enable full disk encryption during installation, use a strong password and keep the system and applications updated. Make regular backups and check that you can restore them. An encrypted disk helps protect data when the laptop is off, but it doesn't stop every attack while you're using it.
Have a recovery plan for the encryption password too. If you lose it, your files may be inaccessible, including in an emergency.
Reply to this answer
Skip the temptation to install a penetration testing distribution just because it sounds more secure. Kali is designed for security testing, not as the obvious choice for a beginner's everyday laptop. A normal desktop distribution gives you a better place to learn its security and encryption features.
Reply to this answer
For emergency preparedness, don't assume the laptop will have internet access. Keep copies of information and files you might need offline, and consider how you'll charge the device if power is interrupted. A separate Wi-Fi network still depends on an internet connection that could be unavailable.
Reply to this answer
Add your answer
Answers are reviewed before publication.
z.63+apricotfork:
A VPN also isn't an invisibility switch. It changes who can see some of your traffic, so the provider becomes another party you have to trust.