complete protection guide: defend against Chat Control
i wrote this because every "privacy guide" i've seen is either too theoretical ("understand the threat model first") or too overwhelming ("install 47 tools and configure each one for 2 hours"). this is neither. this is what i actually tell friends when they ask "what should i do?"
organized by effort level. start with the 10-minute stuff today. work your way up.
tier 1: do this today (10 minutes)
these take almost no effort and provide the biggest privacy gains.
1. switch your DNS (2 minutes)
your DNS queries — every website you visit, every app you open — are visible to your ISP by default. switch to encrypted DNS. it's free. it takes 2 minutes. it's the single highest-ROI privacy action you can take.
on your phone:
- iOS: settings → wifi → tap the (i) next to your network → configure DNS → manual → add
1.1.1.1and1.0.0.1 - android: settings → network → private DNS →
dns.cloudflare-dns.com
on your computer:
- use NextDNS or Cloudflare 1.1.1.1 — both have one-click installers
i wrote a full DNS protection guide with device-specific instructions and provider comparisons.
2. install uBlock Origin (3 minutes)
if you're using Chrome, switch to Firefox. if you're already on Firefox, install uBlock Origin from the addon store. it's free, open source, and blocks:
- trackers (the scripts that follow you across websites)
- fingerprinting (the techniques that identify you without cookies)
- ads (the delivery mechanism for most tracking)
- malware domains
this isn't just about ads. uBlock Origin is a privacy tool. i wrote a full adblocker privacy guide with recommended filter lists.
3. install Signal (5 minutes)
Signal is the gold standard for encrypted messaging. open source, non-profit, E2EE by default.
- download Signal from signal.org (not from links in messages)
- register with your phone number
- enable disappearing messages: settings → privacy → disappearing messages → 1 week
- enable registration lock: settings → privacy → registration lock
- invite your 5 most important contacts
that's it. 5 minutes and your most important conversations are encrypted. read my full encrypted messaging guide for more options.
tier 2: do this week (1-2 hours)
these take a bit more effort but significantly improve your privacy posture.
4. get a VPN (30 minutes)
a VPN doesn't protect message content (that's what E2EE does) but it hides metadata. which services you use, when, from where. metadata is what surveillance systems actually analyze.
what to look for:
- no-logs policy (audited, not just claimed)
- outside 14-eyes jurisdiction (or at least outside the EU)
- accepts crypto payments (for anonymous signup)
- WireGuard or OpenVPN support
- kill switch (blocks traffic if VPN drops)
my picks:
- Mullvad — my personal choice. swedish, accepts cash/crypto, no email needed for signup, audited no-logs. €5/month.
- ProtonVPN — from the ProtonMail team. swiss jurisdiction. free tier available. good for beginners.
- IVPN — similar to Mullvad in philosophy. accepts crypto, no-logs, audited.
avoid:
- NordVPN — massive marketing budget, US-based parent company, past data breach
- ExpressVPN — acquired by Kape Technologies (formerly known as Crossrider, a malware company)
- any free VPN — if you're not paying, you're the product
full VPN guide with setup instructions and provider comparisons.
5. switch your AI tool (30 minutes)
if you're using ChatGPT, Claude, or any AI tool that stores your conversations — those conversations could be scanned under Chat Control. switch to something private.
options:
- NanoGPT — no conversation storage, crypto payments, 50+ models. $8/month. this is what i use daily. my full review.
- local models — run AI on your own hardware with Ollama or LM Studio. nothing leaves your machine. trade-off: need decent hardware, models aren't as powerful.
- Venice AI — anonymous AI chat, no account needed. good for quick questions.
i wrote a full AI privacy & Chat Control guide explaining why this matters.
6. set up Session (30 minutes)
Session is the messenger for your most sensitive conversations. no phone number required, decentralized, onion-routed.
- download Session from getsession.org
- create an account (no phone number, no email)
- write down your recovery phrase — lose it and you lose everything
- use it for conversations where maximum anonymity matters
Session is slower than Signal and has a smaller user base. don't try to move all your conversations to it. use it for the 5% of conversations where anonymity is critical.
tier 3: do this month (a few hours)
these are for people who want serious privacy, not just basic protection.
7. encrypt your email (1 hour)
email is the weak link. even if you use encrypted messaging, your email is probably exposed.
options:
- ProtonMail — end-to-end encrypted email based in switzerland. free tier available. go/protonmail
- Tutanota — similar to ProtonMail, based in germany. encrypted calendar included.
- PGP — if you want to keep your current email provider, use PGP encryption. it's clunky but it works. Thunderbird has built-in PGP support.
8. encrypt your cloud storage (1 hour)
if you use Google Drive, Dropbox, or iCloud — your files are readable by the provider. encrypt them before uploading.
Cryptomator — creates encrypted vaults inside your cloud storage. works with any provider. free and open source. cryptomator.org
9. harden your browser (30 minutes)
beyond uBlock Origin:
- Firefox with strict tracking protection (settings → privacy → strict)
- HTTPS-Only Mode (settings → privacy → HTTPS-Only Mode → enable)
- disable WebRTC (can leak your real IP even with VPN) —
about:config→media.peerconnection.enabled→ false - container tabs — install "Firefox Multi-Account Containers" to isolate websites
10. contact your MEP (30 minutes)
tools alone won't stop Chat Control. political pressure matters.
- go to votewatch.eu and find your MEP
- check how they voted on Chat Control 1.0
- if they voted yes: email them explaining why you disagree. be specific and polite.
- if they voted no: email them thanking them and asking them to oppose 1.2
- check the country-by-country guide for specific action items
tier 4: the nuclear options
these are for people with serious threat models. journalists, activists, whistleblowers.
self-hosted Matrix server
run your own messaging server. the EU can't compel a platform to scan if there's no platform. Element/Matrix with self-hosting gives you full control.
Tails OS
a privacy-focused operating system that runs from a USB stick. routes all traffic through Tor. leaves no trace on the computer you use it on. tails.net
burner devices
for the highest-threat situations: a separate phone with a separate SIM, used only for sensitive communications. paid for with cash. never turned on at home.
the combined setup
if you want the full picture, here's my personal setup:
| layer | tool | cost |
|---|---|---|
| messaging | Signal (daily) + Session (sensitive) | free |
| VPN | Mullvad | €5/month |
| DNS | NextDNS with aggressive blocking | free-$2/month |
| browser | Firefox + uBlock Origin | free |
| AI | NanoGPT (cloud) + Ollama (local) | $8/month |
| ProtonMail | free-$5/month | |
| cloud | Cryptomator + any provider | free |
| adblocker | uBlock Origin + custom filter lists | free |
total cost: €13-20/month. that's less than a Netflix subscription for actual privacy.
the mindset shift
the most important thing isn't any specific tool. it's the mindset shift:
- assume your messages are scanned — because under Chat Control, they might be
- default to encryption — if a tool doesn't offer E2EE, don't use it for sensitive stuff
- minimize metadata — even encrypted messages reveal metadata (who, when, how often). VPNs and Session help with this.
- separate your identities — don't use the same email, phone, or account for everything
- stay informed — Chat Control is evolving. follow the legal challenges and country positions
you don't have to do everything at once. start with tier 1 today. add tier 2 this week. you'll be more private than 99% of EU citizens.
last updated: july 2026