● About the detective

Retired from the agency. Not off the case.

I spent years running a cybersecurity company. I'm retired now — but the habits don't retire with you. Here's exactly what sits between my home network and the rest of the internet today, and what any average user could borrow from it.

Purrfectly Protected mascot
My personal setup

What I actually run, day to day

Not sponsored, not affiliate picks — just what's genuinely running on my own network in retirement. Your setup should match your own comfort level, not mine.

01

Dashlane & Bitwarden

Dashlane handles my everyday logins. Bitwarden plays a different role — it's my digital estate plan: a dead man's switch holding the documents and account access I want my next of kin or a designated survivor to inherit, kept separate from my own daily accounts.

02

YubiKey

A physical hardware key for logging into my most important accounts — a second lock that can't be phished away over email.

03

AdGuard

Blocks ads and trackers before they load, which also cuts off a lot of malicious ads before they ever reach a browser tab.

04

Travel router

A small personal router I bring when traveling, so I'm never trusting a hotel or shared network directly.

05

VPN (Private Internet Access)

Encrypts my traffic whenever I'm on a network I don't fully control — coffee shops, airports, hotels.

06

Habit, not hardware

None of this matters without the boring stuff underneath it: updates, backups, and pausing before you click. Tools support habits — they don't replace them.

For everyone else

You don't need my exact setup — here's the everyday version

Every tool above has a simpler, often free equivalent that covers the same ground for a typical home user.

Password manager

You don't need two for daily use — but a second one can serve a very different purpose.

  • Bitwarden's free tier alone covers what most people need — unlimited passwords, synced across devices.
  • Your phone's built-in password manager (iCloud Keychain, Google Password Manager) is a fine starting point too.
  • The only real requirement: never reuse a password, and let the manager generate them for you.
  • Worth considering as you get older: many managers have an "emergency access" or legacy contact feature that lets a trusted person get into specific accounts if something happens to you — a simple way to make sure the people who need access actually have it.

Extra login security

A YubiKey is great, but it's not the only way to get a second lock.

  • An authenticator app (Google Authenticator, Authy) or a passkey covers most people's needs for free.
  • If you want the hardware-key level of security, a single YubiKey on your email and password manager covers your two most critical accounts.
  • Whatever you choose, just make sure two-step verification is turned on somewhere.

Ad & tracker blocking

AdGuard has a free tier, but your browser may already have you partly covered.

  • Most modern browsers (Safari, Firefox, Brave) include some tracker blocking by default — check your privacy settings.
  • AdGuard's free version or a browser extension like uBlock Origin adds stronger blocking, including a lot of malicious ad-based scams.
  • This isn't just about convenience — malicious ads are a real way scareware and malware get onto a device.

Instead of a travel router

You don't need dedicated travel hardware to stay safe away from home.

  • Your phone's personal hotspot is a more trustworthy connection than most hotel or café Wi-Fi.
  • If you do use public Wi-Fi, avoid logging into anything sensitive — banking, email — until you're back on a network you trust.
  • A VPN (see below) covers most of what a travel router protects against, without buying anything extra.

VPN

Mainly worth it for one specific situation: networks you don't control.

  • A reputable paid VPN (PIA is one option; there are several solid ones) is worth turning on for public Wi-Fi — cafés, airports, hotels.
  • At home, behind your own secured router, a VPN isn't doing much extra work for most people.
  • Avoid free VPNs with no clear business model — some make money by logging and selling exactly the data you're trying to protect.

What actually matters most

None of the tools above outrank the basics covered elsewhere on this site.

  • A password manager and two-step verification alone cover the majority of real-world risk.
  • Every tool here is a refinement on top of that foundation, not a replacement for it.
  • Start with the 4 quick wins if you haven't already.
Fine print

A quick note on all of this

Nothing on this page is sponsored, and there are no affiliate links. This is just a genuine account of what one retired security professional actually uses — treat it as one data point, not gospel.

Keep exploring

More from the site

If you're new here, the basics are a good place to start.

Start here

The 4 quick wins

If you only do four things after reading this site, make it these — they block the overwhelming majority of real-world attacks.

Review the basics →
Read the blog