Where My Paygrade Ends: VPNs, Encryption, the Deep End
Okay so. We've spent this whole module locking the front door — password manager, two-factor, weak passwords found and fixed, the whole thing. Solid. For sure for sure.
This lesson's a little different. This one's me telling you where I stop.
Because every time I teach this class, somebody asks me about VPNs. Or "should I encrypt my hard drive." Or "my nephew says I need a firewall thing." And I want to be straight with you about that stuff instead of nodding along like I know more than I do.
I don't do deep encryption. I don't do VPNs professionally. That's above my paygaid — above my paygrade, I mean, see, I can't even type it right. That's somebody else's job, somebody who does that for a living. What I can do is tell you what these things actually are in plain words, when you might actually need them, and when you can just... not worry about it. Which, for most of you, is most of the time.
What a VPN actually is
A VPN — virtual private network — is basically a tunnel your internet traffic goes through so that whoever's running the wifi you're on can't easily see what you're doing.
Here's when that matters: you're at an airport, or a coffee shop, or some hotel up the canyon with open wifi and no password, and you're about to log into your bank. That's a real moment where a VPN helps, because open wifi with no password is a little bit of a free-for-all.
Here's when it doesn't matter much: you're home, on your own wifi, with a password on it. You're fine. You do not need to pay twelve dollars a month for a VPN to check your email at your own kitchen table.
If you travel a lot, or you work off public wifi regularly, it might be worth looking into. I'm not going to tell you which one to buy, because that's genuinely not my area, and the ones that advertise the loudest aren't always the best ones. Ask around, or ask somebody who actually knows this stuff for a living.
What encryption is, in plain words
Encryption just means your files are scrambled so that if somebody got hold of them without your password, they'd see gibberish instead of your tax return.
Your laptop probably already has some version of this built in and maybe even turned on. Windows calls it BitLocker. Mac calls it FileVault. If you want to check whether yours is on, you can search your settings for those words — I'll be honest, I've turned this on for myself and then sort of just trusted it's still working. That's a fair way to treat it. It's not something you fuss with day to day.
Where it actually matters: if your laptop gets stolen. That's really it for most of us. If someone walks off with your laptop from your car — which, don't leave your laptop in your car, that's a separate lesson — encryption is the thing standing between them and your files. Worth having on. Not worth losing sleep over.
Where I draw the line, honestly
Here's the thing though. I could keep going — firewalls, network settings, all of it. But I'd be guessing, and guessing about security is worse than just saying "I don't know."
This is the same reason I don't touch the deep Mac file stuff without pairing up with someone who actually knows it. I know my lane. My lane is: get your files findable, get your passwords out of your head and into a manager, turn on two-factor, don't leave your laptop in the car. That's a genuinely useful lane. It's just not the whole road.
And honestly, most identity theft and most account break-ins I hear about from neighbors don't come from some sophisticated hacker cracking encryption. They come from a reused password, or someone clicking a link they shouldn't have, or a sticky note somebody photographed by accident. The stuff we already fixed in this module is doing ninety percent of the work. The VPN and encryption stuff is the last ten percent, and it matters, but it's not where the real risk usually lives.
That's actually the whole opinion I'll leave you with here: a password manager is safer than your brain, full stop. More than any VPN, more than any fancy setting you can't quite remember how you turned on. Get that part right and you're most of the way there.
One more thing, since we're on the topic of "stuff scattered everywhere being a security problem too." I once found the exact same PDF — a warranty for a snowblower, of all things — saved in nine different places across two computers. Nine. I lined them all up in a screenshot once because I couldn't believe it myself. That's not a security risk exactly, but it's the same instinct as sticky notes on a monitor. Stuff scattered everywhere, nobody sure which copy is the real one, nobody in charge of it. Organizing your files and locking down your passwords are honestly the same muscle. You're just deciding where things live and who gets in.
Before next time: if you've got a few minutes, search your settings for "BitLocker" (Windows) or "FileVault" (Mac) and just check whether it's turned on. Don't change anything, just look. 👍🌞