Summary
24 items · 45–90 minutes
Why a Privacy Audit Matters
Your digital footprint grows quietly. Every app you install, account you create, and device setting you leave at its default adds another surface where your personal information lives — often without your active awareness. A privacy audit is a structured way to take inventory of that exposure and close gaps before they become problems.
This checklist works across three layers: your online accounts, your devices, and the apps you use daily. You don't need technical expertise to complete it — just time and a methodical approach. Before you start, it helps to read through how online privacy works end to end so you understand what you're actually protecting against.
Work through each group at a pace that suits you. The checklist is designed to be completed in a single session, but splitting it across a few evenings is equally effective.
Password Manager
Generates and stores strong, unique passwords for every account so you don't reuse credentials.
Breach Notification Service
Checks whether your email addresses appear in known data breach databases.
Your Phone's App Permission Settings
Lets you review and revoke camera, microphone, location, and contact access for installed apps.
Authenticator App
Generates time-based one-time codes for two-factor authentication, more secure than SMS codes.
Notepad or Spreadsheet
Track accounts, permissions, or settings flagged during the audit that need follow-up action.
What You'll Need Before You Start
Gather the basics before diving in. You'll want access to your primary email address (for account recovery steps), your phone or tablet nearby for two-factor authentication checks, and a reliable way to note accounts or settings that need follow-up. A password manager is strongly recommended — see whether a password manager is right for you if you haven't considered one before.
Secure Your Email First
Your primary email account is the master key to nearly everything else online — it's how most accounts are recovered when passwords are lost. If an attacker gains access to your email, they can reset credentials for banking, social media, and any other linked service. Prioritize securing your email with a strong, unique password and two-factor authentication before addressing any other account on this list.
Also take note of any older or secondary devices — phones you still use occasionally, tablets shared with family members, or laptops that rarely get updates. These are common blind spots. If you've recently retired a device, review what to do before handing it down or selling it.
The Full Privacy Audit Checklist
Work through each group below in order. Items marked must are non-negotiable for basic protection. Should items are strongly recommended for most people. Nice to have items add meaningful extra protection for those who want a more thorough result.
Account Security
Third-Party App Access
Device Settings
App Permissions
Social Media and Public Profiles
If you use cross-device app syncing, be aware that convenience comes with trade-offs. Understanding what cross-device syncing actually shares will help you make informed decisions about which sync features to keep enabled.
Don't Overlook Shared or Borrowed Devices
If you've ever logged into an account on a shared computer, a friend's phone, or a device you no longer own, your credentials may still be stored in that device's browser or account. Log out of active sessions remotely through your account security settings — most major platforms list all active sessions and allow you to terminate them individually.
After the Audit: Keeping It Current
A one-time audit is a solid start, but privacy hygiene is an ongoing practice. Set a recurring reminder every six to twelve months to repeat the key steps — especially reviewing app permissions and checking for new third-party account access. New apps and services accumulate faster than most people expect.
It's also worth revisiting your browser habits. How your browser handles tracking and data collection has a direct impact on your day-to-day privacy exposure, independently of any settings you control. And if you hold assumptions about what protects you online, common privacy myths worth questioning is a useful reality check.
Finally, privacy decisions often touch on the apps you use to communicate. If video calling tools are part of your routine, understanding how they handle your data can inform whether your current choices align with your privacy goals.
The content on this site is provided for informational purposes only and should not be considered a substitute for professional advice. While we strive to provide accurate and up-to-date information, we make no guarantees regarding its completeness or accuracy. Always consult a qualified professional for advice specific to your circumstances before making any decisions.