Threat models for ordinary people

Most privacy advice is calibrated for someone whose adversary is a state. That advice is exhausting, and because it is exhausting, people abandon it entirely and end up with nothing.

Name the adversary

An ex-partner with your old password is a different problem from an ad network, which is a different problem from a subpoena. Ranked honestly, the first two account for nearly everything that actually happens to nearly everyone.

Start there. A password manager and two-factor auth defeat more real attacks than any amount of onion routing.