OS Hardening Checklist

A 41-item OS Hardening checklist: Strengthen your operating system security. Tick items off and your progress saves in your browser. No account needed.

• Keep Your System Up-to-Date
• Encrypt Your Device
• Isolate Crypto Wallet & Node Operations
• Backup Important Data
• Be Cautious with USB Devices
• Activate Screen-Lock When Idle
• Enable firewall
• Review Your Installed Apps
• Manage Application Permissions
• Disallow Usage Data to Cloud
• Avoid Quick Unlock Methods
• Power Off Instead of Standby
• Use antivirus software
• Enable Secure Boot
• Use a Local Account Only
• Use Non-Admin Accounts for Daily Tasks
• Block Webcam and Microphone
• Use a Privacy Screen Filter
• Physically Secure Your Device
• Avoid Charging from Untrusted Sources
• Randomize Your Hardware Address on Wi-Fi
• Disable Unnecessary Sharing Services
• Protect Against Software Keyloggers
• Check for Hardware Keyloggers
• Prevent Keystroke Injection Attacks
• Avoid Commercial 'Free' Antivirus Software
• Guest account control
• Periodically Check for Rootkits
• Set a BIOS/UEFI Boot Password
• Use a Security-Focused Operating System
• Utilize Virtual Machines
• Compartmentalize Your Work
• Disable Unwanted Windows Features
• Secure SSH Access
• Close Unused Open Ports
• Implement Mandatory Access Control
• Deploy Canary Tokens
• Use Qubes OS for Maximum Isolation
• Use Portmaster Application Firewall
• Consider Coreboot Firmware
• Implement VM Compartmentalization Strategy