Backlink: [← Return to main index](../../README.md) Protecting your money and personal data is essential. If someone gains access to your accounts, they can steal funds right away. They may also use your account to scam people on your contact list. In short, your identity becomes vulnerable too.
English text comes from the independent translation maintained by dlgrv. New entries without a translation appear in Chinese. The author's Chinese original is authoritative for the latest content. Translation snapshot: dlgrv/HowToLiveBetter · 11818c6
Enable two-factor authentication on email, payment, and social accounts; prioritize phone pop-ups over SMS codes
Two-factor authentication means an extra verification step beyond the password when logging in. Using a pop-up prompt on your phone that requires a single tap to confirm blocks over 90% of phishing and account theft attempts. In contrast, older verification methods such as answering questions like “Where did you log in last time?” or “What is your backup email?” only block around 10% of such attacks.
Cost
No cost involved. Each account takes just two to three min…
Benefit
Google analyzed 350,000 real-world account hijacking attempts. For authentication methods relying on device ve…
02Evidence C
Use a unique password solely for your email
If a password you use elsewhere gets stolen, attackers can use it to log straight into your email account. Once they gain access to your email, they can reset passwords for any other accounts linked to it. Therefore, your email password must be unique and never reused anywhere else.
Cost
No cost involved. Storing it in a password manager elimina…
Benefit
Credential stuffing is one of the easiest attack methods: attackers simply test stolen passwords against other…
03Evidence C
Set a screen lock on your phone and a PIN for the SIM card
The SIM card is that tiny card inside your phone that receives SMS verification codes. If your phone gets lost, a finder can remove the card and insert it into another phone to receive those codes, then reset all your accounts one by one. Setting a PIN on the SIM card means that whenever the card is moved to another phone, the user must enter that PIN before the phone can be used — effectively blocking that path.
Cost
No cost at all. You only need to set the screen lock and t…
Benefit
Without a SIM PIN, a finder can easily move your SIM card to another phone, receive verification codes, and re…
04Evidence C
Follow these steps if you lose your phone: block the SIM card, remotely lock it, change passwords, file a police report, and freeze your bank cards if needed.
The order of actions matters more than speed. First, block the SIM card to cut off access to verification codes. Next, remotely lock the phone. Then, use a computer to change your email and payment passwords. After that, file a police report to obtain a receipt. Finally, freeze your bank cards as needed. Even if you’re using someone else’s phone, you can still call your carrier to block the SIM card.
Cost
No cost involved. Completing all steps takes just a few mi…
Benefit
Following the correct sequence is more important than acting quickly. Step one is blocking the SIM card, which…
05Evidence A
If your card is fraudulently used, report it and freeze the card first, then demand compensation from the bank: proving “you made the transaction” is the bank’s responsibility
If someone fraudulently uses your card, you don’t have to prove “this wasn’t me.” Instead, it’s the bank’s duty to prove the transaction was made by you. If they can’t, they must compensate you. This only applies if you report and freeze the card right away. Delaying this step means you’ll bear any additional losses that occur afterward.
Cost
No cost at all. As soon as you notice anything suspicious…
Benefit
Supreme Court rulings clearly define who must provide evidence. If you claim the transaction resulted from cou…
06Evidence C
Periodically check the devices logged into your account and any authorized apps, then remove the ones you no longer use
“Logged-in devices” refer to the phones and computers that can still access your account right now. Account thieves often lie low for a while before making their move. If you see any unfamiliar devices on the list, or third-party apps you no longer use still linked to your account, log out from all devices and change your password right away.
Cost
No cost at all. It only takes a few minutes each time. The…
Benefit
Account theft rarely happens instantly — attackers usually spend some time lurking first. The list of logged-i…
07Evidence A
Don’t tap “Allow all” just to use an app: the data isn’t mandatory, and refusing to share it won’t block service access
Apps request your data. If that data isn’t strictly necessary to deliver the service, the app can’t deny you access just because you refuse to share it. It may only collect what it actually needs. For instance, a map app needs your location, but a flashlight app has no business asking for your contacts list.
Cost
No cost involved. The hard part is resisting the urge to t…
Benefit
Two key legal points apply here. First, providers may not deny products or services on the grounds that a user…
08Evidence A
You have the right to view, copy, correct, and delete your personal information; if refused, you can sue.
You have the right to demand that a company let you view, copy, correct, and delete your personal information. When a service is discontinued, its retention period expires, or you withdraw consent, the company is obligated to delete that data on its own. If it refuses your request, it must provide a valid reason; otherwise, you can take it to court. Deactivating an account and deleting personal information are two separate actions — after deactivating, you must separately request deletion.
Cost
There is no cost involved. Only if the company drags its f…
Benefit
There are several situations in which a company must proactively delete personal information: when a service i…
09Evidence A
You’re not required to use facial recognition: if other options exist, they must offer you alternatives if you refuse
As long as any other method can achieve the same result, a service provider cannot force you to use facial recognition. If you decline facial recognition, they must offer alternatives such as a card swipe, password entry, or ID verification. They also cannot threaten that “the service won’t be provided” if you refuse. Installing facial recognition devices in hotel rooms, public showers, changing rooms, or restrooms is strictly prohibited.
Cost
No cost involved. When asked to use facial recognition, si…
Benefit
The Administrative Measures for the Safe Use of Facial Recognition Technology clearly state: “Where other non-…