Spooky Security · Claude vs. Claude

Resources

The tools and pages that came up while we prepared, each with who it's for. Links go to the maker's own site. Nothing here is sponsored.

Passwords and sign-in

1Password or Bitwarden

Password managers that create and remember a different password for every account, and warn you about weak or breached ones.

This is forEveryone. Bitwarden has a free plan.

Google Password Manager or Apple Passwords

The password managers already built into Chrome, Android, iPhone and Mac (Apple's is the Passwords app).

This is forEveryone who'd rather not add another app.

Ente Auth, 2FAS, Aegis

Authenticator apps for one-time sign-in codes, with backups you control. Aegis is Android only.

This is forAccounts that don't offer passkeys yet.

YubiKey

A physical security key that fake sign-in pages can't fool. Get two and register both.

This is forPeople with crypto, a public profile, or client accounts.

Your accounts and number

Google Security Checkup, Apple Account, Microsoft security

Check your sign-in methods, recovery phone and email, signed-in devices, and connected apps.

This is forEveryone. Start with your main email.

Have I Been Pwned

Free emails when your address shows up in a data breach.

This is forEveryone.

Carrier number locks: Verizon, T-Mobile, AT&T

An account PIN plus your carrier's number-transfer and SIM locks, so nobody can move your number to their phone. Most are in the carrier's app.

This is forEveryone with a mobile number.

Money and identity

Credit freezes: Equifax, Experian, TransUnion

Free. Lenders can't see your credit report while it's frozen, so most new credit can't be opened in your name. Lift it briefly when you apply for credit. Do it at home.

This is forUS residents.

Trezor or Ledger

Hardware wallets that keep crypto keys offline. Buy only from the maker's own site, and keep the recovery phrase on paper.

This is forPeople who hold their own crypto.

Backups

Time Machine, Windows File History, iCloud or Google backup

Automatic backups you can restore. Keep one copy on a drive you unplug, because syncing to the cloud also syncs deletions.

This is forEveryone.

Home network, remote access and many computers

Tailscale

A private network so you can reach your own computers, and home cameras or gadgets through one computer at home, without exposing them to the internet. Protect its login with a passkey or security key.

This is forPeople who connect to their computers or home cameras remotely, or run home servers.

Your router's guest network

Put smart-home gadgets, cameras and the smart TV on their own Wi-Fi, so a hacked gadget can't reach your computers. Change their default passwords, keep their updates on, and turn off port forwarding and UPnP in the router.

This is forAnyone with cameras, smart speakers, smart plugs or a smart TV.

Fleet

Keeps an inventory of the software on many computers and flags known flaws.

This is forPeople who manage several computers and can run a small server.

Code and websites

Cloudflare security-audit skill

Has Claude Code or another coding agent hunt for vulnerabilities in your own code, with each finding checked by a second agent.

This is forDevelopers with their own apps or site code.

Extra protection

Lockdown Mode (Apple) and Advanced Protection (Google)

The strongest phone and account settings. Expect some friction, and you can turn them off.

This is forPeople who may be personally targeted.

Locking down Signal (Freedom of the Press Foundation)

Usernames, a hidden phone number, disappearing messages and Registration Lock.

This is forSensitive conversations or a public profile.

Cloudflare WARP or another VPN

Hides which sites you visit from the network you're on. It helps privacy, but it isn't a security must and doesn't stop scams.

This is forPrivacy on hotel, airport and conference networks.

Learn more

Ark security guide and this month's threats

The comprehensive prompt and a dated roundup of what attackers are doing right now.

This is forAnyone running the full check-up.

EFF Surveillance Self-Defense and Consumer Reports Security Planner

Friendly, longer guides from people who've done this for years.

This is forAnyone who wants to learn more.

If someone close to you may have access

National Domestic Violence Hotline

Confidential help, including with tech safety: 1-800-799-7233, or chat on their site. Talk to an advocate before changing settings, because some changes can alert the other person.

This is forAnyone worried that a partner or ex has access to their devices or accounts.