- Threat-model first: for most people the real risks are breaches, account lockout, and profiling — not spies.
- Layer 1: password manager + TOTP two-factor everywhere. Your email account is the master key to your life — defend it hardest.
- Layer 2: email on your own domain. Change providers forever without changing your address.
- Layer 3: 3-2-1 backups — three copies, two media, one offsite — plus a quarterly export of everything the platforms hold.
- Layer 4: swap the easy dependencies: browser, search, notes, maps.
- Layer 5: self-host photos and files on a $150 mini PC with Tailscale. It's easier than it's ever been.
A sovereign household can grow potatoes, catch rain, and still be one suspended account away from losing twenty years of photographs, every contract they've signed, and the ability to receive a password reset. Digital dependency is the least visible of the modern dependencies and the most concentrated: for a typical person, two companies could jointly delete their past and lock their present. The good news — unlike land or solar, digital sovereignty costs almost nothing but attention.
Layer zeroKnow your actual enemy
Security advice fails when it's aimed at the wrong adversary. Be honest about yours. For nearly everyone, the ranked threats are: criminal breaches (your password from a hacked forum reused on your bank), account lockout (an algorithm flags you, support is a chatbot, appeal denied), data loss (dead phone, dead laptop, no backup), and profiling (your behavior sold as a commodity). Nation-state surveillance is real and, for almost everyone reading this, irrelevant to design for. Build for the boring threats and you get resistance to the exotic ones nearly free.
Layer oneCredentials: the keep inside the castle
One weekend, three moves, and you're ahead of 95% of the internet:
- A password manager (Bitwarden and 1Password are the standard answers), generating a unique random password for every site. Credential reuse is how one leaked forum password becomes your drained bank account — uniqueness ends that entire class of attack.
- Two-factor everywhere it's offered — app-based TOTP codes, not SMS, which is vulnerable to SIM-swapping. Store TOTP in a dedicated app (or the manager itself; purists separate them) and print the recovery codes.
- Fortify the throne room: your primary email resets every other password you own, which makes it the single point of failure for your whole identity. Give it your longest passphrase and, ideally, a $30 hardware security key (YubiKey-class). Two keys — one lives offsite.
Layer twoIdentity: your name on your own land
Here is the highest-leverage move on this page. As long as your address is [email protected], your identity is a tenant on their land — evictable, and expensive to move because five hundred accounts point at it. Buy a domain (~$12/year), point it at any respected email host (Fastmail, Proton, mailbox.org), and become [email protected]. The provider becomes a utility you can swap: if they raise prices, degrade, or suspend you, you re-point the domain to a new host and your address never changes. Nobody even notices.
While you're there, use aliases — bank@, shopping@, newsletters@ — one per category or even per service. When one starts drawing spam, you know exactly who leaked or sold it, and you delete the alias instead of abandoning an inbox.
Every platform holding your history offers a bulk export — Google Takeout, Apple's privacy portal, Instagram's download tool, your bank's statements. Set a calendar event four times a year: export everything, drop it into the backup system below. Lockout stops being catastrophe and becomes inconvenience. This habit costs twenty minutes and is the single cheapest insurance in this entire almanac.
Layer threeMemory: the 3-2-1 rule
The oldest rule in system administration, still undefeated: three copies of anything you can't lose, on two different kinds of media, one of them offsite. A concrete household implementation:
- Copy 1: the live data on your computer and phone.
- Copy 2: an external drive at home, updated automatically (Time Machine, Backblaze-style client, or a simple rsync script) — not manually, because manual means never.
- Copy 3: offsite — either encrypted cloud backup, or the beautifully analog version: a second drive that lives at a relative's house and swaps places with the home drive whenever you visit.
Then the step everyone skips: test a restore twice a year. Open the backup, pick a random file, recover it. An untested backup is a superstition, not a system.
Layer fourLoosen the platform grip
No heroics required — just swap the dependencies that cost nothing to swap, and let the hard ones wait. Browser: Firefox or Brave, with uBlock Origin. Search: Kagi (paid, excellent) or DuckDuckGo. Notes: local-first files that sync as files — Obsidian on a folder of plain Markdown will still open in 2050; a proprietary cloud database will not. Maps: Organic Maps or OsmAnd, fully offline — which is also simply the correct tool the day the cell network isn't there. Messaging: Signal, where your social graph allows it.
A word on VPNs, since the ads are unavoidable: a VPN doesn't make you anonymous — it moves your trust from your ISP to the VPN company. That's a worthwhile trade on hotel Wi-Fi and hostile networks, and mostly theater otherwise. Spend the subscription money on the mini PC below instead.
Layer fiveThe home cloud: your own keep at last
Five years ago self-hosting was a hobby for sysadmins. Today it's a $150 used mini PC (or the old laptop in your closet), Docker, and an afternoon. The starter stack, in order of payoff:
| Service | Replaces | Why it's first-tier |
|---|---|---|
| Immich | Google/iCloud Photos | Auto-backup from phones, faces, search. The crown jewel of self-hosting. |
| Syncthing | Dropbox | Peer-to-peer file sync between your own devices. No server logic to break. |
| AdGuard Home / Pi-hole | — | Network-wide ad and tracker blocking for every device in the house. |
| Jellyfin | Streaming boxes | Your media library, served to your TVs, no subscriptions. |
| Paperless-ngx | The filing cabinet | Scan every document; OCR makes your whole paper life searchable. Pairs perfectly with the sovereign's binder. |
Two rules keep it safe and sane. First, don't open ports to the internet — install Tailscale (free for personal use) on the server and your devices, and everything is reachable from anywhere over an encrypted mesh with zero exposed surface. Second, the 3-2-1 rule applies double to the server itself — self-hosting without automated backups isn't sovereignty, it's just moving the single point of failure into your closet. Master those two habits before hosting anything critical, and treat hosting your own passwords (Vaultwarden) as a graduation exercise, not a starting point.
AppendixThe five weekends
- Weekend 1: password manager installed, top-20 accounts migrated, TOTP on all of them, hardware key on email.
- Weekend 2: domain bought, mail host configured, top accounts re-pointed to the new address, aliases created.
- Weekend 3: backup drive automated, offsite copy established, first platform export archived.
- Weekend 4: browser, search, notes, and offline maps swapped. VPN subscription reconsidered.
- Weekend 5: mini PC + Docker + Tailscale; Immich receiving phone photos; server backups running.
Five weekends, well under $400 all-in, and the shape of your digital life inverts: platforms become conveniences you use rather than landlords you petition. Keep using whatever cloud services you like — but from now on, they hold copies. You hold the originals.