Resolution: Greatly improve the security and privacy of the network traffic from your home network and device, with a few simple steps.

I follow @Cloudflare for their enterprise solutions, but they help us consumers out too. And a lot of it is free.

A thread... /1

The content of your web traffic is encrypted (HTTPS) - but your ISP can still see what domains you are calling. Help protect your web requests by using 1.1.1.1 (fast & secure DNS resolver), and 1.1.1.1 for Families (block known malware sites, or malware + adult content). /2

It's easy to switch your entire home network to it. Change your router's DNS lookups to 1.1.1.1/1.0.0.1 (or 1.1.1.2/1.0.0.2 for malware block, or 1.1.1.3/1.0.0.3 for adult content block). See setup instructions on https://developers.cloudflare.com/1.1.1.1/ 
/3

And suddenly, all your home network's domain name lookups (DNS) are more private by not using your ISP's DNS for it, plus are extremely fast. In fact, it's nearly twice as fast as Google's Public DNS resolver @ 8.8.8.8, that I was using before (12ms to 21ms). /4

From there, secure your device traffic -- from laptops, phones, and tablets -- by installing the 1.1.1.1 + WARP client. This is a device agent that uses 1.1.1.1 when you are off your home network, but also uses the WARP VPN client for added security over your web traffic. /5

The WARP VPN provides an encrypted tunnel from your device to @Cloudflare 's edge network. This assures you are secure from prying eyes (your ISP, or wifi sniffers). Add in the paid option ($5/mo), WARP+, to speed it all up, by using Argo Smart Routing over their backbone. /6

Sign up for 1.1.1.1 + WARP device apps via https://warp.plus/bW67d . This is a referral link to get me a some WARP+ credits.

I'd appreciate it, as I'd like to research how Argo Smart Routing over @Cloudflare backbone performs. /7

I installed WARP app on my Mac, iPhone and iPad. Once installed, copy the license key from one device to all the rest, so you are under one account. You can tweak settings to turn WARP on/off when you go to cell or other wifi networks, if desired, or just leave it always on. /8

Using 1.1.1.1 for DNS on your home router and devices, and the WARP VPN on device traffic, gives you a LOT of protection for free. Thanks @Cloudflare. Will be testing WARP+ ("the Internet fast lane") to see how it improves things. /9

From there, if you want extreme privacy on devices, you'll need a privacy-focused VPN that anonymizes its logs. I use Private Internet Access (PIA) VPN. Not cheap, but it's on sale right now, here is my referral code (giving me free month). http://www.privateinternetaccess.com/pages/buy-a-vpn/1218buyavpn?invite=U2FsdGVkX1_3muz5hs6jjv0_mQgbl6XPW5FVpXhAiLA%2CqucIlH6fcokQhL4Bi0f1IptoCXg
/10

Last VPN tip - using a VPN (WARP or PIV or others) can make certain apps angry. In particular, banking apps don't seem to like VPNs in their fraud detection routines. (My bank thinks any VPN is putting me out of the country.) Just turn it off temporarily when you hit this. /11

Beyond web traffic protection & privacy, you can get consumer-grade endpoint protection. This helps cover the other ways you can be attacked (email, txt msgs, etc). Not sure which is best but I know Bitdefender, Sophos, McAfee, Trend Micro, Kaspersky all have solutions. /12

Too bad @CrowdStrike doesn't offer consumer-grade yet. It wouldn't be as lucrative as enterprise customers but think of all that added traffic empowering Threat Graph, CrowdStrike! Perhaps a future pivot point for Falcon platform. /13

Happy New Year. Let's make it a secure one!

Got any other easy tips to help improve home network and device security? /fin