Guides
How to Set Up Fail2ban on Ubuntu and Debian
Fail2ban watches your logs and bans IPs that hammer your server. Here's how to set it up properly — and when to pick it over CrowdSec.
Frankline Wegulo
Cloud engineer by day, security researcher by habit. Background in pen testing, bug bounties, and security engineering at scale. Mostly self hosted, and write about what actually works for privacy and security , testing a lot of stuff along the way.
Guides
How to Set Up Email Aliases with SimpleLogin or Addy.io
Email aliases keep your real address out of breach data and spam lists. Here's how to set up SimpleLogin or Addy.io from scratch — first alias, browser extension, catch-all, and which one to actually pick.
Guides
How to Set Up Pi-hole: Network-Wide Ad and Tracker Blocking
Pi-hole blocks ads and trackers for every device on your network at the DNS level. Here's how to set it up on a Raspberry Pi or in Docker.
Guides
How to Set Up a Custom Domain with Proton Mail
Using a custom domain with Proton Mail means your email address lives at a domain you own — not @proton.me. That distinction matters more than it sounds. If you ever need to move providers, your address moves with you. The contacts and services that have your email don't
Guides
How to Harden Nginx: A Practical 2026 Guide
Server tokens, TLS config, security headers, rate limiting, bot blocking — the full Nginx hardening stack with current syntax and the OCSP stapling warning that most guides miss.
Guides
How to Set Up Bitwarden: The Complete Guide
Bitwarden's free tier does more than most paid password managers. Here's the complete setup: vault, browser extension, mobile app, 2FA on the vault itself, and an emergency access sheet you'll actually be glad exists.
Guides
How to Configure UFW Firewall on Linux
UFW makes iptables manageable — but most tutorials skip the IPv6 caveat that leaves half your firewall off. Here's the full setup.
Privacy
How to Configure uBlock Origin: Beyond the Defaults
Most people install uBlock Origin and never touch it again. That leaves a lot of privacy protection on the table. Here's how to configure it properly — filter lists, medium mode, dynamic filtering
Guides
How to Audit Your Browser Extensions
Most people have extensions they installed years ago and haven't thought about since. Here's how to go through them systematically and cut what shouldn't be there.
Guides
First 24 Hours After a Data Breach
You got a breach notification email. Or you saw your email address in a news story. Or someone told you the company you use got hit. Here's what to actually do — in order, without panic, focused on what matters. Step 0: Confirm the Breach Is Real Not every
Guides
First 24 Hours with GrapheneOS: What to Actually Do After Flashing
You flashed GrapheneOS. Now what? This covers the actual setup sequence — verification, lock screen, the Google Play decision, browser choice, and the permission pass that makes the whole thing worthwhile.
Security
Why MFA Isn't Enough — and What Attackers Do When It Fails
MFA stops most attacks. Not all. Here's what attackers do when they can't beat your second factor — and what actually makes accounts hard to compromise.