OPSEC

What’s opsec?

OPSEC, or Operational Security is the idea of minimizing your data exposure by separating identities, reducing tracking, and maintaining good security habits. It makes it harder for people to track and dox you, so think of it as maintaining your digital shield to protect you from anybody you may encounter during your work. Good opsec can single-handedly stop most inexperienced/larper “hackers” and other losers from being able to do anything to you.

Software

Proton VPN

Why Use It?

A VPN:

Hides your home IP address from websites.
Encrypts traffic between your device and the VPN server.
Protects you on public Wi-Fi.

We use ProtonVPN thanks to their free tier and data privacy dedication.
ProtonVPN (But) if you paid for Mullvad that’s the absolute best one.)

Remember: A VPN alone does not make you anonymous. Logging into an account still identifies you to that service.

Recommended Settings:

Kill Switch
Auto-connect (unnecessary if you remember to connect before ops)
WireGuard (or another modern protocol)
DNS Leak Protection

Server Choice:

On free tier, ProtonVPN will automatically set you to a random server.
Only change countries/server when you have a legitimate reason.

Browsers

Recommended Shield Settings:

Use Brave browser

ENABLE THESE SHIELDS AND ANY OTHER ONES:

Block Ads & Trackers
HTTPS Upgrades
Block Third-Party Cookies
Fingerprinting Protection (Aggressive)

It is recommended to set everything to as aggressive or strict as possible. Disable setting at your own risk!

Tool Use Cases

Keep activities separated with dedicated profiles. ONLY USE BRAVE FOR TEAM PURPOSES


Metadata Remover tools	Anytime you post media anywhere. Metadata2go is fine for most cases.
Preferred Browser	Personal, daily use. Maintain decent internet hygiene.
Brave	Team use, NEVER for personal use.
ProtonVPN	Whenever you’re doing something sketchy. No harm in using.

This prevents cookies and browsing history from mixing. Before posting media, make sure to change the file name to a random string of letters/numbers and clean the metadata.

Extensions

Keep extensions to an absolute minimum.

Every extension:

Increases attack surface.
Can collect browsing data.
Makes your browser more unique.

If your using extensions, the only one you should use is UBlock Origin.

Temporary Email

Use ProtonMail <- note: add link or Tempmail
Use temporary email for:

One-time signups
Downloads
Software trials
Testing

Do not use it for:

Important accounts
Password recovery
Long-term communication

Password Security

Use a unique password for every account.
Store passwords in a password manager or write them physically.
Enable Multi-Factor Authentication (MFA) whenever available.
Prefer authenticator apps or hardware security keys over SMS when possible.
For really sensitive stuff do a string of random numbers and letters

Good Habits

Keep your operating system and software updated.
Download software only from official sources.
Don’t mix personal and SLICIS stuff in the same browser profile.
Don’t stay logged into unnecessary accounts while browsing.

Pre-Ops checklist

Use this checklist before every operation or SLICIS work:

Connect to Proton VPN.
If calling, join team call AFTER connecting to VPN.
Open the correct Brave profile.
Sign into only the accounts needed.
Use temporary email for one-time registrations.
Log out of accounts if appropriate.

Core Principle

Remember that good OPSEC isn’t about being invisible but more about exposing as little information as necessary. Consistency matters more than complexity.