The greenhouse of home privacy¶

A greenhouse does not run itself. It needs regular, unhurried attention: a check here, a tidy there, the occasional deeper look at something that has been quietly not quite right for a while. None of it is difficult on its own. What makes the difference is whether it happens at all, and whether it becomes a habit.

Keeping a home private follows the same logic. Each routine is small enough to complete in a single sitting. None requires specialist knowledge to begin. What they require is returning to them, which is easier when they feel like part of the rhythm of the place.

Mapping the garden¶

Once a month, take stock of every device, app and account in use. This need not be elaborate: a page in a notebook, a column in a spreadsheet, the back of an envelope. The point is to make the shape of the digital garden visible, because it is almost certainly larger and more varied than anyone carries in their head at any given moment. There will be accounts opened years ago and not thought about since. There will be apps that still hold permission to a location or a contact list for reasons that are no longer clear. There will be devices long out of use but never secured or cleared properly. Once the overgrowth is visible, it can be pruned.

Weeding out weak stems¶

Passwords are the most frequently needed part of the garden and, in most households, also the most neglected. The goal is not to change every password at once: that produces a week of effort followed by six months of reused passwords because the effort was not sustainable. Instead, pick a small number of accounts each week, perhaps five, and update those with strong, unique passphrases. The Diceware method from the games page works here without modification. A passphrase generated by rolling dice is stronger than a password made of memorable words with numbers substituted for letters, and it tends to be more memorable once there is a short story to hang it on. A password manager makes the rotation easier to sustain, because it removes the need to remember what changed and when.

Tidying the greenhouse¶

Once a month, clear out the accumulation. Delete files no longer needed. Remove apps no longer used, particularly ones that retain permissions to location, contacts or microphone. Clear browser cookies and cache, or at least review which cookies are being carried from sites no longer visited. The digital equivalent of clutter is not inert: it is a set of channels that remain open, permissions that remain active, and data that sits available to whoever can reach it. A periodic tidy-up reduces the surface.

Checking the fences and gates¶

A home network is the boundary between the devices inside it and everything outside, and it deserves a regular look. Log into the router’s interface and check which devices are connected. An unfamiliar device is worth investigating. Default router passwords are a well-known weakness and are best changed when the router is first set up; if that was missed, it is the first thing to correct. Unused features, remote access being the common example, are worth disabling where there is no active reason to use them. This need not happen weekly: once a month, or when something about the network changes, is enough. The goal is to know what is connected and to have made deliberate choices about it, rather than running on defaults that someone else chose for different conditions.

Installing shutters¶

End-to-end encrypted messaging is not difficult to adopt and makes a genuine difference to what is visible to anyone positioned between two correspondents. Choosing one or two apps that provide it by default, and using them for personal correspondence, costs very little once decided. The more useful habit to build alongside it is verification: where an encrypted messaging app offers a way to confirm that the person on the other end is who they appear to be rather than someone in the middle, that verification is worth doing with regular contacts. It is also worth understanding that metadata, who spoke to whom, when, and how often, is often not protected even when message content is.

Trimming hidden leaves¶

Most files carry metadata that was never intended to travel beyond its original context. A photograph taken on a smartphone typically contains the time, the device model, and often the GPS coordinates of where it was taken. A document created in an office application may contain the author’s name, revision history, and organisation. Before sharing files outside the household, it is worth looking at what they carry. Several free tools exist for reading and stripping metadata from common file types, and one of the games pages introduces the concept in a way that makes the habit stick. Attending to this before sharing photographs in particular becomes straightforward after a few times, and it keeps information from travelling further than intended.

Adjusting the light¶

Privacy settings across social media, apps and devices shift when platforms update their terms or introduce new features, and they shift in a direction that is rarely more restrictive by default. A quarterly review of settings across the platforms in regular use is a small investment that keeps things roughly calibrated. The most useful approach is to document what was chosen and why, so that the next review starts from a known position. A short log, even a page in a notebook, is enough.

Training the scarecrow¶

A plan is only a plan until it is tried. Once a quarter, run a small household exercise: choose a scenario, perhaps that a device has been lost, or that an account has been accessed by someone else, and work through what would actually happen. Which accounts share a password with the one that was compromised? Which devices are connected to the same network and warrant checking? Who needs to be notified? How are the credentials changed, and in what order?

The exercise will almost certainly surface things the plan assumed were handled and were not: a device that takes longer to isolate than expected, an account whose recovery process requires access to a second account that is also now suspect, a contact list nobody realised was stored on the compromised device. Finding them in a practice run costs nothing. Finding them in an actual incident costs considerably more. Running the exercise with children, once they are old enough to take part, gives the household a shared vocabulary for these situations and removes the panic that comes from meeting a problem for the very first time when it is real.

The garden journal¶

A brief record can follow each of these routines. A few sentences are enough: what was found, what surprised, what question now stands that did not before. Over time, the journal shows what has changed in the garden from one season to the next, which is more useful than any single snapshot. It also makes the routines easier to maintain, because returning to a record of previous visits makes the next visit feel continuous rather than isolated.

Last reviewed: 2026-07-09.