Archive-Opsec is an open documentation project for privacy, OPSEC and digital security. It combines practical guides with a structured archive of breaches, surveillance, censorship, incidents and privacy law, linked to primary sources first.https://archive-opsec.pages.dev/https://archive-opsec.pages.dev/guides/authentication/account-recovery/https://archive-opsec.pages.dev/guides/authentication/account-recovery/How recovery email, phone numbers, codes, trusted devices and support processes can become the weakest path into an account.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/authentication/passkeys/https://archive-opsec.pages.dev/guides/authentication/passkeys/What public-key credentials change, where they currently hurt, and whether to adopt them now.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/authentication/security-keys/https://archive-opsec.pages.dev/guides/authentication/security-keys/How hardware-backed public-key credentials protect accounts, and what recovery planning still requires.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/authentication/two-factor-authentication/https://archive-opsec.pages.dev/guides/authentication/two-factor-authentication/A ranked comparison of second factors, how each fails, and how to recover access without losing the account.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/browsers/browser-fingerprinting/https://archive-opsec.pages.dev/guides/browsers/browser-fingerprinting/How a device gets identified from the shape of its requests, what resists it, and what a fingerprint is worth.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/email/email-privacy/https://archive-opsec.pages.dev/guides/email/email-privacy/Why email resists end-to-end encryption, and the specific compromises that are worth making.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/dns/dns-over-https/https://archive-opsec.pages.dev/guides/dns/dns-over-https/How DoH is deployed, why it was designed this way, and the operational details that decide whether it helps.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/messaging/end-to-end-encrypted-messaging/https://archive-opsec.pages.dev/guides/messaging/end-to-end-encrypted-messaging/What the encryption protects, what the provider still sees, and why metadata is usually the real story.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/browsers/choosing-a-browser/https://archive-opsec.pages.dev/guides/browsers/choosing-a-browser/What the three main engines do differently for privacy, and a decision order that fits most people.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/dns/dns-privacy/https://archive-opsec.pages.dev/guides/dns/dns-privacy/Why name resolution is the most useful thing your network can see, and what encrypted DNS changes.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/metadata/metadata-explained/https://archive-opsec.pages.dev/guides/metadata/metadata-explained/A worked primer on data about data: what leaks even with perfect encryption, and the measures that actually reduce it.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/metadata/photo-metadata-and-location/https://archive-opsec.pages.dev/guides/metadata/photo-metadata-and-location/What images can reveal beyond their visible pixels, and how to share photographs without leaking unnecessary context.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/mobile/mobile-device-privacy/https://archive-opsec.pages.dev/guides/mobile/mobile-device-privacy/What a phone knows that a laptop does not, which platform settings matter, and the limits of user control.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/network-privacy/home-network-privacy/https://archive-opsec.pages.dev/guides/network-privacy/home-network-privacy/Your router sees everything, and the devices on your network can see each other. Both are worth fixing.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/network-privacy/public-wifi/https://archive-opsec.pages.dev/guides/network-privacy/public-wifi/What a public network can observe, what HTTPS protects, and how to reduce exposure when the network itself is not trustworthy.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/operating-systems/software-updates/https://archive-opsec.pages.dev/guides/operating-systems/software-updates/Why updates matter, how to make them routine, and how to handle devices that no longer receive security fixes.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/password-managers/using-a-password-manager/https://archive-opsec.pages.dev/guides/password-managers/using-a-password-manager/Why password reuse is the main threat, what to look for in a manager, and how to migrate without a lockout.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/operating-systems/hardening-basics/https://archive-opsec.pages.dev/guides/operating-systems/hardening-basics/A short, durable hardening routine: updates, permissions, encryption, telemetry, and what to leave alone.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/operating-systems/full-disk-encryption/https://archive-opsec.pages.dev/guides/operating-systems/full-disk-encryption/What FDE does and does not protect against, and how to set it up without losing the recovery key.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/privacy-basics/data-brokers-and-data-sale/https://archive-opsec.pages.dev/guides/privacy-basics/data-brokers-and-data-sale/How personal information is collected, combined, scored and resold, and where practical limits on collection begin.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/privacy-basics/harm-reduction/https://archive-opsec.pages.dev/guides/privacy-basics/harm-reduction/A short, opinionated reading order that maximises the protection you get per hour spent.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/privacy-basics/permission-minimisation/https://archive-opsec.pages.dev/guides/privacy-basics/permission-minimisation/A practical way to decide which apps and services should access location, contacts, files, microphones and cameras.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/privacy-basics/what-privacy-means/https://archive-opsec.pages.dev/guides/privacy-basics/what-privacy-means/A working definition of privacy, the four kinds people mean, and why the word gets used to sell things.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/search-engines/search-engine-privacy/https://archive-opsec.pages.dev/guides/search-engines/search-engine-privacy/Why a search query is one of the most revealing strings you type, and what the alternatives actually change.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/threat-modeling/common-threats/https://archive-opsec.pages.dev/guides/threat-modeling/common-threats/A ranked list of realistic threats, the control that addresses each, and an honest note on the ones to ignore.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/threat-modeling/define-your-threat-model/https://archive-opsec.pages.dev/guides/threat-modeling/define-your-threat-model/Work out who you are protecting something from before you install anything, using a written, revisable model.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/threat-modeling/incident-response-basics/https://archive-opsec.pages.dev/guides/threat-modeling/incident-response-basics/A calm first-response plan for a stolen device, compromised account, suspicious login or exposed personal information.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/tor/tor-browser-and-search/https://archive-opsec.pages.dev/guides/tor/tor-browser-and-search/The configuration that makes Tor usable, why the fingerprint is identical for everyone, and how onion search works.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/tor/what-is-tor/https://archive-opsec.pages.dev/guides/tor/what-is-tor/How onion routing works, what it guarantees, what it does not, and the misconceptions that cause harm.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/vpn/what-vpns-do-and-dont/https://archive-opsec.pages.dev/guides/vpn/what-vpns-do-and-dont/The single change a VPN makes, the trust it transfers rather than removes, and how to read a provider claim.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/encryption/encryption-explained/https://archive-opsec.pages.dev/guides/encryption/encryption-explained/Encryption in transit and at rest, symmetric and asymmetric primitives, and the misconceptions that make people over- or under-trust it.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/encryption/key-management/https://archive-opsec.pages.dev/guides/encryption/key-management/The part of cryptography that actually determines whether it helps: who holds keys, where, and for how long.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/guides/encryption/secure-backups/https://archive-opsec.pages.dev/guides/encryption/secure-backups/A practical backup plan for recovering important data without turning every copy into an unprotected leak.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/censorship/google-china-2010/https://archive-opsec.pages.dev/archive/censorship/google-china-2010/Google announced a change to its China search service after disputes over censorship and cyberattacks.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/censorship/turkey-wikipedia-2017/https://archive-opsec.pages.dev/archive/censorship/turkey-wikipedia-2017/Access to Wikipedia was blocked in Turkey in 2017 after a Turkish administrative order.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/corporate-privacy/signal-subpoena-transparency/https://archive-opsec.pages.dev/archive/corporate-privacy/signal-subpoena-transparency/Signal published the limited account information it could provide in response to a subpoena.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/data-breaches/equifax-2017/https://archive-opsec.pages.dev/archive/data-breaches/equifax-2017/A 2017 intrusion into Equifax systems exposed personal information held by the credit reporting company.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/corporate-privacy/apple-app-tracking-transparency/https://archive-opsec.pages.dev/archive/corporate-privacy/apple-app-tracking-transparency/Apple introduced a permission requirement for app tracking across companies and access to the advertising identifier.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/government-documents/911-commission-report/https://archive-opsec.pages.dev/archive/government-documents/911-commission-report/The public report of the National Commission on Terrorist Attacks Upon the United States.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/data-breaches/marriott-starwood-2018/https://archive-opsec.pages.dev/archive/data-breaches/marriott-starwood-2018/A compromise of the Starwood guest reservation database was disclosed by Marriott after its acquisition of Starwood.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/government-documents/pclob-section-215-report/https://archive-opsec.pages.dev/archive/government-documents/pclob-section-215-report/A public oversight report assessing the legal and operational record of the telephone metadata programme.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/privacy-laws/ccpa-cpra/https://archive-opsec.pages.dev/archive/privacy-laws/ccpa-cpra/The CCPA and the California Privacy Rights Act, and the rights they created for California consumers.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/privacy-laws/eu-digital-services-act/https://archive-opsec.pages.dev/archive/privacy-laws/eu-digital-services-act/The EU framework for online intermediaries, including conditional liability exemptions, notice and action duties, and restrictions on targeted advertising to minors.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/privacy-laws/gdpr/https://archive-opsec.pages.dev/archive/privacy-laws/gdpr/The EU data protection regulation, its scope, and the obligations it created for organisations that process personal data.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/privacy-laws/schrems-ii/https://archive-opsec.pages.dev/archive/privacy-laws/schrems-ii/The Court of Justice judgment that invalidated the EU-US Privacy Shield and required a case-by-case assessment of transfers to the United States.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/privacy-laws/state-privacy-laws-united-states/https://archive-opsec.pages.dev/archive/privacy-laws/state-privacy-laws-united-states/The wave of US state comprehensive privacy statutes from 2020, and what differs between them.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/research-papers/robust-de-anonymization-2008/https://archive-opsec.pages.dev/archive/research-papers/robust-de-anonymization-2008/A study showing how auxiliary information can be used to re-identify records in a sparse dataset.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/security-incidents/colonial-pipeline-2021/https://archive-opsec.pages.dev/archive/security-incidents/colonial-pipeline-2021/The 7 May 2021 ransomware attack on the operator of the largest US fuel pipeline, the ransom payment, and the recovery of most of it.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/research-papers/unique-in-the-crowd-2013/https://archive-opsec.pages.dev/archive/research-papers/unique-in-the-crowd-2013/A study of how few location points may be needed to identify people in a mobility dataset.Sun, 27 Sep 2026 00:00:00 GMThttps://archive-opsec.pages.dev/archive/security-incidents/eternalblue-wannacry-notpetya/https://archive-opsec.pages.dev/archive/security-incidents/eternalblue-wannacry-notpetya/The Windows SMB vulnerability that became the most consequential exploited vulnerability of the 2010s, and the two campaigns built on it.Sun, 27 Sep 2026 00:00:00 GMT