How to Encrypt Your Data - EFF Guide

January 4, 2026

Quick Overview

In today's digital world, protecting your data is essential. The Electronic Frontier Foundation (EFF) provides a trusted guide through Surveillance Self-Defense to help you encrypt your information and stay safe online. This article walks you through key steps, from device encryption to strong passwords and more. Start simple and build better habits for privacy.

Person at desk enabling encryption on laptop with security icons around

Why Encrypt Your Data?

You share a lot online—photos, messages, files. Without protection, anyone from hackers to companies could access it. Encryption scrambles your data so only you can read it with the right key.

The EFF stresses that encryption is your best defense against surveillance. I've seen friends lose data to theft, and full encryption saved others. It's not just for experts; anyone can do it.

Encrypt Your Devices: Full-Disk Encryption

The EFF recommends encrypting your entire device. This protects everything if your laptop or phone is lost or stolen.

  • Windows: Use BitLocker (built-in on Pro versions) or Device Encryption.
  • macOS: Enable FileVault.
  • Linux: LUKS is common in most distributions.
  • iPhone/iPad: Data Protection is on by default with a passcode; add Advanced Data Protection for iCloud.
  • Android: Encryption is usually enabled by default on modern devices.

For stronger protection, consider VeraCrypt for cross-platform containers. Always use a strong passphrase—EFF suggests at least six random words from their diceware list.

Steps to Set Up Full-Disk Encryption

  1. Back up your data first.
  2. Go to your system's security settings.
  3. Enable the built-in tool and set a long passphrase.
  4. Store recovery keys safely (not on the device).

This process might take time initially, but it runs smoothly afterward.

Hand holding smartphone displaying 2FA code from authenticator app

Understanding Two-Factor Authentication: A Beginner’s Guide

Two-factor authentication (2FA) adds an extra step to logins. Even if someone steals your password, they need your second factor.

EFF recommends apps like Authy or Google Authenticator over SMS (which can be intercepted). Better yet, use hardware keys like Yubikey.

Enable 2FA on email, banking, and social accounts first. It takes minutes but blocks most attacks.

How to Enable 2FA

  • Go to account security settings.
  • Choose 'app' or 'security key' method.
  • Scan the QR code with your authenticator app.
  • Save backup codes.

From experience, once set up on key accounts, it becomes second nature.

Password Management Best Practices

Weak or reused passwords are a big risk. Use a password manager to create and store unique, strong ones.

EFF advises choosing audited managers like Bitwarden (open-source and free) or 1Password.

Create a strong master passphrase using diceware: Roll dice to pick words for something long and memorable.

Top Tips for Passwords

Practice Why It Helps
Use a manager Generates unique passwords
Enable 2FA Extra layer if password leaks
Avoid reuse One breach doesn't affect all
Long passphrases Harder to crack than short complex ones

I've switched to a manager years ago—no more forgotten passwords or weak ones.

Glowing icons representing privacy tools like VPN, password vault, and encrypted messaging on dark background

How to Use BleachBit to Clean Your Computer for Privacy

BleachBit is a free tool that deletes temporary files, caches, and histories securely.

It overwrites data to prevent recovery, clearing browser tracks and freeing space.

Download from the official site, select cleaners (like browser cache), preview, then clean. Run it regularly for maintenance.

Top 10 Online Privacy Tools You Should Know About

Build layers of protection with these tools (updated for current recommendations):

  1. Tor Browser - For anonymous browsing.
  2. Signal - End-to-end encrypted messaging.
  3. Proton Mail - Secure email.
  4. Mullvad or Proton VPN - Hide your IP.
  5. Bitwarden - Password manager.
  6. uBlock Origin - Ad and tracker blocker.
  7. HTTPS Everywhere - Forces secure connections (now built into many browsers).
  8. VeraCrypt - File encryption.
  9. DuckDuckGo - Privacy-focused search.
  10. Privacy Badger - Blocks hidden trackers.

Start with a few that fit your needs.

Final Thoughts

Following the EFF's guide makes encryption straightforward. Start with device encryption and 2FA, then add a password manager and cleaners like BleachBit.

Privacy is ongoing, but these steps give strong protection. You control your data—take action today.

For more, visit the EFF Surveillance Self-Defense site: https://ssd.eff.org/

Related Articles

Back to top