Resistance quiz

The score is calculated locally in your browser. Nothing is sent anywhere; your answers stay on your device.

1. 01 How do you talk to friends and family most of the time?

   WhatsApp / Messenger / SMSMetadata and centralised platforms stay the weak point.Telegram for most conversationsBetter than the big platforms, but the privacy is still limited.Signal or Molly for most chatsAlready a solid base for censorship resistance.SimpleX / Session / Matrix for sensitive useLess dependence on a phone number and a central platform.
2. 02 Which service do you use most for your email?

   Gmail / Outlook / iCloud MailStorage and content access stay heavily centralised.Proton Mail or Tuta for everyday useAlready a stronger option for privacy.Proton / Tuta + PGP for some contactsA good level of resistance if you use it consistently.Regular PGP / OpenPGP with careful metadata habitsA much more robust posture.
3. 03 Which browser and search engine do you use most?

   Chrome + GoogleConvenient, but highly trackable.Firefox or Brave with a private search engineA real step forward for privacy.Brave / Firefox + DuckDuckGo / Startpage / SearXNGAlready a solid daily baseline.Mullvad Browser / LibreWolf / Tor Browser by contextA stronger posture against surveillance.
4. 04 How do you resolve domain names?

   Your ISP or router DNSThe easiest option, but often the least private.Encrypted DNS from a mainstream providerA good first step.Quad9 / Mullvad DNS / NextDNSA real improvement if you want to limit traceability.Encrypted DNS plus a deliberate anti-tracking strategyA more deliberate and robust posture.
5. 05 What kind of VPN do you use?

   No VPNThe most exposed case for network traceability.A free or dubious VPNCan be worse than none if the provider is opaque.A reputable no-log VPN with a clear policyA real improvement to privacy.Mullvad / Proton VPN / IVPN for regular useA more serious and coherent posture.
6. 06 How do you manage your passwords?

   Reused passwords or saved in the browserHigh risk in a breach or account compromise.A basic password managerAlready a very good step forward.Bitwarden / KeePassXC / Proton PassA healthy posture that is simple to maintain.Password manager + unique, long passwordsThe most robust way to reduce damage from a breach.
7. 07 What level of two-factor authentication do you use?

   No 2FAThe weakest level of account protection.SMS or phone callBetter than nothing, but very fragile.TOTP in an app (Aegis / Ente Auth)A good everyday protection layer.Hardware key or phishing-resistant 2FAThe strongest practical resistance level.
8. 08 Where do you store your sensitive files?

   Google Drive / iCloud / OneDriveVery convenient, but centralised.Proton Drive or a basic encrypted storage serviceA real improvement.Cryptomator or local encrypted storageA more robust posture.Local storage + self-hosting / advanced encryptionThe most serious level for sovereignty.
9. 09 Where do you spend most of your social life online?

   Meta / X / big platforms onlyThe simplest, but the most exposed to pressure.Mastodon / Matrix / Nostr occasionallyA useful diversification.A mix of decentralised networks and direct contactA more independent posture.Alternative networks and low platform dependenceThat is the true logic of resistance.
10. 10 What operating system do you use most?

    Stock Android / iOS / WindowsVery convenient, but much less privacy-respecting.A more private Android / Linux / macOSAlready a good improvement.GrapheneOS / Linux / BSDA stronger base.GrapheneOS + Linux + careful setup disciplineAlready a very strong posture.
11. 11 How much do you use Tor / Tails / anonymity tools?

    Almost neverVery exposed if the threat ever becomes serious.Occasionally, without much disciplineA first step, but still fragile.Tor for some sensitive tasksAlready more serious.Tor + Tails with strong disciplineThe most suitable level for a high-threat context.
12. 12 How do you handle your digital money?

    Bank cards and standard accounts onlyTraceability is high.Some more privacy-aware payment toolsA first effort at separation.A mix of private accounts and limited crypto useAlready more deliberate.Stronger financial-sovereignty practicesA much more serious posture.