In the 1990s, a colleague took me to “Snake Alley,” Taipei’s red-light district, for an evening of ingesting with “entertainers” and a few of their very muscled, severe buddies. An excellent time was had by all, luckily. Still, I used to be younger, dumb, and fortunate that I didn’t find yourself in any bother.
Some elements of the web are like that, too. If you assume you’ll be probably browsing right into a dangerous web neighborhood — a knockoff procuring website, a little-known streaming service, or someplace you’re simply not completely positive is legit — and you’ve got a spare laptop computer mendacity round, you possibly can at all times repurpose it to change into what I name a “Paranoid PC”: a laptop computer hardened for extra privateness and safety.
In my case, I used to be in a position to do it for “free.” But it does require a model of Windows 10 or 11 that’s not that frequent, and an present VPN subscription. I’m additionally not claiming that this PC configuration will shield you from any and all malware and prying eyes, however it should definitely assist.
Putting collectively a Paranoid PC
- What you’ll want: a VPN subscription and a laptop computer (16GB of RAM most popular) working Windows 10/11 Pro
I’ve repurposed an older laptop computer to create my Paranoid PC. You can use your day-to-day PC for this objective, however it additionally probably exposes you to higher dangers if something dangerous slips by way of the safety display screen. In any case, it’s a good suggestion in virtually any case to make use of an account with out administrator entry for extra safety, and probably a local account at that.
The key, although, is to have a PC arrange with Windows 10 or 11 Pro due to a characteristic it provides: Windows Sandbox.
Sandbox has been round for 5 years (!), and I nonetheless really feel prefer it’s probably the most underappreciated options inside Windows. Sandbox creates a virtualized atmosphere with minimal setup; basically, it’s a Windows PC inside your PC, protected by a “moat” that isolates it out of your PC. Once you shut Sandbox, the complete “PC” and something it has inside it is erased, completely. That contains any malware that will have wormed its method in.
Sandbox is an optionally available characteristic inside Windows 10 or 11 Pro, and to entry it you’ll want to show it on. To allow it, you’ll must go to the Windows Features management panel, which yow will discover by looking for Turn Windows options on and off inside Windows Search. (We have a deeper dive into Windows Sandbox, here.)
Once you allow Sandbox, Windows will replace itself with the suitable options, reboot, and open up Windows once more. You’ll must launch Windows Sandbox through the Start menu or the Search field.
Sandbox basically creates a PC atmosphere inside a window, however it’s a generic PC. You don’t must log in, and please don’t! We need this PC to be as quiet and unobtrusive as potential.
PCWorld
You can develop Sandbox to the size of your display screen, or depart it windowed. It’s as much as you.
Install the Brave browser
I’ve argued up to now that Sandbox supplies a robust degree of safety and privateness, simply by its lonesome. But we’re going to go additional. What Sandbox lets you do is use the built-in model of Microsoft Edge to obtain different software program. And whereas Microsoft Edge is not any slouch within the privateness division, we’re going to make use of Brave’s browser to offer an extra degree of privateness and safety.
Mark Hachman / IDG
Brave started off as a very privacy-oriented browser, and nonetheless is. Its fame has soured a bit due to its ties to cryptocurrencies, however it’s nonetheless a good selection to download for browsing the deeper reaches of the net. If you need to use one other browser, although, (or simply Edge) you possibly can. Just be sure to configure it the best way you need, including any plugins you select. I nonetheless wouldn’t log in or in any other case establish your self, nonetheless.
Install a VPN
I exploit a VPN as a result of, nicely, it’s none of your online business. And that’s the entire level. VPNs can be utilized to entry content material in different nations, keep away from the eyes of authoritarian governments, privately chat with buddies, and so forth. It’s akin to locking your door and drawing your shades, and most of the people try this in the actual world.
Mark Hachman / IDG
Running a VPN gained’t essentially shield your Sandbox PC from malware, however it does add an extra layer of anonymity safety. Some VPNs additionally embody upgraded antivirus, too. (Sometimes Brave can get a tad too aggressive in blocking downloads and scripts. In that case, go forward and use Edge to obtain a VPN as an alternative.) You would possibly have the ability to get away with working a VPN exterior Sandbox, however simply in case I put in it from throughout the Sandbox atmosphere.
Which VPN do you have to use for privateness? You can select from both a less powerful free VPN or considered one of our extra powerful paid recommended VPNs. I favor a VPN that provides beneficiant machine connections to permit me the liberty to put in it on a number of laptops, however there are loads to select from. VPNs are a class the place you get what you pay for, although.
Surf safely by way of the stormy seas
Once you’ve put in Sandbox, Brave, and a VPN, you’re performed. You can start exploring a few of the shadier elements of the net.
Feel free, in fact, to put in different software program. If you need to obtain a free or premium antivirus package for extra safety, go for it. When you concentrate on it, something dangerous goes to have to interrupt out of the Brave browser’s sandbox, then get by the antivirus, then crack Windows Sandbox. That’s not not possible, however fairly unlikely.
There are a pair issues to bear in mind, although. Pay consideration to what atmosphere your cursor is in. If you absent-mindedly open Edge in the usual desktop atmosphere, that browser window lacks all your Sandbox protections, and doubtless the VPN’s as nicely. It’s a part of the explanation I like to recommend Brave: Not solely is it designed for privateness, however it’s not a browser many individuals use. Brave indicators me that I’m inside Sandbox’s protecting embrace.
Mark Hachman / IDG
Brave additionally blocks advertisements and popups — which, in sure areas of the net, will be an avenue to malware. We nonetheless advocate that you just surf protected and do not go clicking willy-nilly on something you see. But, should you do obtain one thing malevolent, it needs to be lower off by Sandbox.
In the worst case, the place Sandbox’s “PC” turns into noticeably contaminated, you possibly can merely shut Sandbox down by closing the window. You’ll obtain a notification that this can erase all the things throughout the Sandbox atmosphere, however that’s okay. All it’s worthwhile to do is open a brand new model of Sandbox, which can be pristine and untouched. You’ll then must re-download Brave, the VPN, and some other software program, nonetheless. And we’d advocate running an antivirus scan in your primary Windows set up simply to be protected.
Sandbox does have one different characteristic value figuring out about: its File Explorer, which is type of like an airlock. If you do occur to obtain one thing involuntarily, it should obtain the conventional protections from Windows Security. But something you voluntarily obtain will land within the Sandbox Downloads folder.
Mark Hachman / IDG
You’d be nicely suggested to double-check the file by right-clicking on it. (In Windows 11, go to “Show more options” after which “Scan with Microsoft Defender” or one other antivirus program. Or drop it in VirusTotal.com to test in opposition to a number of on-line antivirus packages.)
Just test it (or run it) from inside Sandbox! From there, you possibly can lower and paste it into your primary PC working system.
Security professionals, in fact, can have extra refined safety obtainable to them. But for the common surfer, this supplies some sturdy further safety. Think of this “Paranoid PC” as a bodyguard in a darkish alley, with an enormous SUV ready to whisk you again to the actual world if issues go dangerous.
Further studying: These 10 simple security tweaks keep you safe