Advanced Plus Security Amnesia's PC Security Config

[Amnesia]

07/11/26 update- hey, I've updated my setup.
I'm wondering if i should switch Bitdefender TrafficLight as they have moved on to another extension that wasn't released on the Firefox store yet....
I'm thinking on switching image/cloning backup software, i had some issues with the new versions of AOMEI Backupper.

looking of suggations on those two topics and basicly anything else u want! tyyyyy ><

========================
original post-
I bought a new laptop for studying and configured it last week, I am posting here to hear out your recommendations regarding my security setup

 

[Shadowra]

No encryption software like VeraCrypt?

Restore points are unfortunately not enough... I recommend that you create backups (of files or the whole system) which will be useful in the event of a problem (Acronis, Aomei etc)

 

[harlan4096]

As @Shadowra stated, Windows Restore Points is a very weak backup strategy, a full image system backup tool would be welcome.

Thanks for sharing

 

[Amnesia]

No encryption software like VeraCrypt?

Restore points are unfortunately not enough... I recommend that you create backups (of files or the whole system) which will be useful in the event of a problem (Acronis, Aomei etc)

Important things are being backed up regularly on mega/google drive/optical disks and HDDs(ye I still use optical disks, they have a long shelf life and they're cheap)

tbh, I don't have a lot of experience with encryption software I'm using BitLocker on some flash drives and from time to time I use axcrypt for sensitive data like password manager export and things like that... Is VeraCryot a full system encryption? like when you log in it decrypts your drive..?

 

[Berny]

I only use VeraCrypt (great tool !) to fill up containers with data. For backups I use the clone option from AOMEI Disk Partition Assistant Pro. I regularly clone “C“ drive (OS only) to external SSD sata drives, all my data is stored on external SSD’s. If needed i replace the “C” drive from my device with the target drive that contains the clone. AOMEI Disk Partition has also a Bitlocker option

 

[Shadowra]

Is VeraCryot a full system encryption? like when you log in it decrypts your drive..?

You can encrypt a disk or an entire partition, but I don't recommend the 2nd option: it can take a very long time to decrypt.....

 

[Amnesia]

You can encrypt a disk or an entire partition, but I don't recommend the 2nd option: it can take a very long time to decrypt.....

I only use VeraCrypt (great tool !) to fill up containers with data. For backups I use the clone option from AOMEI Disk Partition Assistant Pro. I regularly clone “C“ drive (OS only) to external SSD sata drives, all my data is stored on external SSD’s. If needed i replace the “C” drive from my device with the target drive that contains the clone. AOMEI Disk Partition has also a Bitlocker option

I'll go search for more information online regarding VeraCrypt and see if it's a tool that I really need in my arsenal, also do you back up the whole drive(with software and everything) or just the OS files?

 

[Berny]

@Amnesia

I create a full clone that contains beside the EFI partition all other partitions, which means that OS + Software is cloned to a target Samsung SSD drive, replacing the “C” drive is a piece of cake ...

I have no data on the “C” drive , all my files are on docking station with two SSDs + of course off line backups.
Kaspersky is protecting my devices but a main problem ( e.g. hardware ) is not catastrophic …

 

[Amnesia]

Amnesia's PC Security Config · Setup v2
Updated Nov 7, 2026

What changed

• Main use of this computer: For work or educational use → For home and private use
• Real-time protection: Windows Security (Defender)
  Trend Micro HouseCall for Home Networks → Windows Security + CyberLock
• Periodic malware scanners: Windows Security-
  * Quick scans: every week
  * Full scans: once a month
  * Custom scans: every time I download a file that I think should be scanned before launching/extracting it.
  Malwarebytes Free -
  (doesn't startup upon booting, opens when I need it and closes when I finish using it)
  * Quick scans: when I feel like doing it
  * Full scans: once per several months
  * Custom scans: every time I download a file that I think should be scanned before launching/extracting it.
  
  -In addition, I scan downloaded files that I think should be scanned with VirusTotal if possible(size limitation). → Windows Security-
  Default quick scans
  Full scans- manually once a month or so
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  EMSISOFT emergency kit- second opinion
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  Quick scans- when I feel like doing it
  Full scans- once per several months
  
  *In addition, I scan downloaded files that I think should be scanned with VirusTotal+SOPHOS Intelix Portal if possible(size limitation).
• Browsers and extensions: Bitwarden - Free Password Manager
  Privacy Badger
  uBlock Origin
  TrafficLight
  User-Agent Switcher for Chrome
  VT4Browsers → Bitwarden
  Bitdefender's TrafficLight
  uBlock Origin
  ClearURLs
  LocalCDN
  VT4Browsers
• Secure DNS: Cloudflare 1.1.1.2
  + When Windscribe is running(most of the time) R.O.B.E.R.T. → NextDNS
• Maintenance tools: Trend Micro Unarchiver One
  CrystalDiskInfo
  HiBit Uninstaller
  GIGABYTE Control Center
  GeForce Experience
  Intel® Graphics Command Center
  Intel Driver & Support Assistant
  Windows Tools(Reg edit, Disk Cleanup etc) → Privacy/Anti-telemetry/attack surface reduction-
  O&O ShutUp10
  HiBit Uninstaller
  Ashampoo Webcam Guard(blocked on FW)
  Technitium MAC address changer
  VeraCrypt
  AxCrypt
  Spybot Identity Monitor
  Eraser
  Custom scripts and reg/gp/task scheduler/services changes.
  
  General-
  CrystalDiskInfo
  Sysinternals Suite
  Angry IP Scanner
  HWiNFO64/CPU-Z/GPU-Z/RivaTuner
  
  Driver related-
  Intel Driver & Support Assistant(on-demand)
  NVIDIA App
  Crucial Storage Executive
• File and photo backups: Big items are backed up manually to Optical disks/HDD when I feel like it.
  Small items are backed up on various free cloud storage options(Google Drive, OneDrive, Mega, Dropbox etc). → Big items are backed up manually to Optical disks/HDD when I feel like it.
  Important things are backed up on Google Drive(subscription).
  Other things are backed up on various free cloud storage options(OneDrive, Mega, Dropbox etc).
• System recovery: Windows restore points. → Windows restore points + AOMEI Backupper images
• Device firewall: Microsoft Defender Firewall → Other firewall
• Router and network details: Sagemcom router, ISP Firewall → Sagemcom router, ISP Firewall.
  Aruba Instant On 1960 switch.
• Custom security settings: Minor changes, mostly default → Portmaster + Windows Firewall
• Computer specs: GIGABYTE G6 Laptop -
  Intel Core i7 13620H
  NVIDIA GeForce RTX 4060 Laptop
  GIGABYTE G6 KF motherboard
  Hynix DDR5 4800 CL40 16G x2(32G)
  Gigabyte SSD 2500E M.2 2280 NVMe 500GB x2(1TB) → GIGABYTE G6 Laptop -
  Intel Core i7 13620H
  NVIDIA GeForce RTX 4060 Laptop
  Hynix DDR5 4800 CL40 16G x2(32G)
  Gigabyte SSD 2500E M.2 2280 NVMe 500GB x2(1TB)
• Subscriptions: None → Google AI Pro (formerly Google One AI Premium)
• On-device encryption: Not applicable → Windows BitLocker / Device Encryption
• Usage and exposure: Visiting familiar websites, Visiting unknown or untrusted websites, Browsing the dark web, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Sharing and receiving files and torrents, Gaming, Gaming with third-party mods, Streaming audio/video content from trusted sites or paid subscriptions, Streaming from untrusted sites, Coding and development → Visiting familiar websites, Visiting unknown or untrusted websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Sharing and receiving files and torrents, Gaming, Gaming with third-party mods, Streaming audio/video content from trusted sites or paid subscriptions, Streaming from untrusted sites, Coding and development
• Two-factor authentication: Not specified → Aegis Authenticator

Spoiler: Full setup snapshot

My current setup

• Operating system: Windows 11
• OS version and support details: Pro
• Real-time protection: Windows Security + CyberLock
• File and photo backups: Big items are backed up manually to Optical disks/HDD when I feel like it.
  Important things are backed up on Google Drive(subscription).
  Other things are backed up on various free cloud storage options(OneDrive, Mega, Dropbox etc).
• Device firewall: Other firewall
• Browsers and extensions: Bitwarden
  Bitdefender's TrafficLight
  uBlock Origin
  ClearURLs
  LocalCDN
  VT4Browsers
• Main use of this computer: For home and private use
• On-device encryption: Windows BitLocker / Device Encryption
• Device sign-in security: Account password
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Always notify
• Smart App Control: Off
• Network firewall: Enabled
• Router and network details: Sagemcom router, ISP Firewall.
  Aruba Instant On 1960 switch.
• Custom security settings: Portmaster + Windows Firewall
• Periodic malware scanners: Windows Security-
  Default quick scans
  Full scans- manually once a month or so
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  EMSISOFT emergency kit- second opinion
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  Quick scans- when I feel like doing it
  Full scans- once per several months
  
  *In addition, I scan downloaded files that I think should be scanned with VirusTotal+SOPHOS Intelix Portal if possible(size limitation).
• Malware sample testing: I do not participate in malware testing
• Environment for malware testing: N/A
• Secure DNS: NextDNS
• Desktop VPN: Windscribe unlimited data plan, running most of the time and startup when booting.
• Password and passkey manager: Bitwarden free
• Two-factor authentication: Aegis Authenticator
• Maintenance tools: Privacy/Anti-telemetry/attack surface reduction-
  O&O ShutUp10
  HiBit Uninstaller
  Ashampoo Webcam Guard(blocked on FW)
  Technitium MAC address changer
  VeraCrypt
  AxCrypt
  Spybot Identity Monitor
  Eraser
  Custom scripts and reg/gp/task scheduler/services changes.
  
  General-
  CrystalDiskInfo
  Sysinternals Suite
  Angry IP Scanner
  HWiNFO64/CPU-Z/GPU-Z/RivaTuner
  
  Driver related-
  Intel Driver & Support Assistant(on-demand)
  NVIDIA App
  Crucial Storage Executive
• Subscriptions: Google AI Pro (formerly Google One AI Premium)
• System recovery: Windows restore points + AOMEI Backupper images
• Usage and exposure: Visiting familiar websites, Visiting unknown or untrusted websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Sharing and receiving files and torrents, Gaming, Gaming with third-party mods, Streaming audio/video content from trusted sites or paid subscriptions, Streaming from untrusted sites, Coding and development
• Computer specs: GIGABYTE G6 Laptop -
  Intel Core i7 13620H
  NVIDIA GeForce RTX 4060 Laptop
  Hynix DDR5 4800 CL40 16G x2(32G)
  Gigabyte SSD 2500E M.2 2280 NVMe 500GB x2(1TB)
• Feedback preference: Detailed suggestions and alternatives welcome

Detailed suggestions and alternatives welcome.

 

[Amnesia]

07/11/26 update- hey, I've updated my setup.
I'm wondering if i should switch Bitdefender TrafficLight as they have moved on to another extension that wasn't released on the Firefox store yet....
I'm thinking on switching image/cloning backup software, i had some issues with the new versions of AOMEI Backupper.

looking of suggations on those two topics and basicly anything else u want! tyyyyy ><

 

[Amnesia]

Amnesia's PC Security Config · Setup v3
Updated Nov 7, 2026

What changed

• Browsers and extensions: Bitwarden
  Bitdefender's TrafficLight
  uBlock Origin
  ClearURLs
  LocalCDN
  VT4Browsers → Browser: LibreWolf, well configured.
  —
  Bitwarden
  Bitdefender's TrafficLight
  uBlock Origin
  ClearURLs
  LocalCDN
  VT4Browsers
• Password and passkey manager: Bitwarden free → Bitwarden(free)
• System recovery: Windows restore points + AOMEI Backupper images → Windows restore points + AOMEI Backupper(free) images

Spoiler: Full setup snapshot

My current setup

• Operating system: Windows 11
• OS version and support details: Pro
• Real-time protection: Windows Security + CyberLock
• File and photo backups: Big items are backed up manually to Optical disks/HDD when I feel like it.
  Important things are backed up on Google Drive(subscription).
  Other things are backed up on various free cloud storage options(OneDrive, Mega, Dropbox etc).
• Device firewall: Other firewall
• Browsers and extensions: Browser: LibreWolf, well configured.
  —
  Bitwarden
  Bitdefender's TrafficLight
  uBlock Origin
  ClearURLs
  LocalCDN
  VT4Browsers
• Main use of this computer: For home and private use
• On-device encryption: Windows BitLocker / Device Encryption
• Device sign-in security: Account password
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Always notify
• Smart App Control: Off
• Network firewall: Enabled
• Router and network details: Sagemcom router, ISP Firewall.
  Aruba Instant On 1960 switch.
• Custom security settings: Portmaster + Windows Firewall
• Periodic malware scanners: Windows Security-
  Default quick scans
  Full scans- manually once a month or so
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  EMSISOFT emergency kit- second opinion
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  Quick scans- when I feel like doing it
  Full scans- once per several months
  
  *In addition, I scan downloaded files that I think should be scanned with VirusTotal+SOPHOS Intelix Portal if possible(size limitation).
• Malware sample testing: I do not participate in malware testing
• Environment for malware testing: N/A
• Secure DNS: NextDNS
• Desktop VPN: Windscribe unlimited data plan, running most of the time and startup when booting.
• Password and passkey manager: Bitwarden(free)
• Two-factor authentication: Aegis Authenticator
• Maintenance tools: Privacy/Anti-telemetry/attack surface reduction-
  O&O ShutUp10
  HiBit Uninstaller
  Ashampoo Webcam Guard(blocked on FW)
  Technitium MAC address changer
  VeraCrypt
  AxCrypt
  Spybot Identity Monitor
  Eraser
  Custom scripts and reg/gp/task scheduler/services changes.
  
  General-
  CrystalDiskInfo
  Sysinternals Suite
  Angry IP Scanner
  HWiNFO64/CPU-Z/GPU-Z/RivaTuner
  
  Driver related-
  Intel Driver & Support Assistant(on-demand)
  NVIDIA App
  Crucial Storage Executive
• Subscriptions: Google AI Pro (formerly Google One AI Premium)
• System recovery: Windows restore points + AOMEI Backupper(free) images
• Usage and exposure: Visiting familiar websites, Visiting unknown or untrusted websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Sharing and receiving files and torrents, Gaming, Gaming with third-party mods, Streaming audio/video content from trusted sites or paid subscriptions, Streaming from untrusted sites, Coding and development
• Computer specs: GIGABYTE G6 Laptop -
  Intel Core i7 13620H
  NVIDIA GeForce RTX 4060 Laptop
  Hynix DDR5 4800 CL40 16G x2(32G)
  Gigabyte SSD 2500E M.2 2280 NVMe 500GB x2(1TB)
• Feedback preference: Detailed suggestions and alternatives welcome

Detailed suggestions and alternatives welcome.

 

[Amnesia]

Amnesia's PC Security Config · Setup v4
Updated Nov 7, 2026

What changed

• Router and network details: Sagemcom router, ISP Firewall.
  Aruba Instant On 1960 switch. → Sagemcom router, ISP Firewall.
  Aruba Instant On 1960 switch(Vlans, IoT separation, MAC filtering).

Spoiler: Full setup snapshot

My current setup

• Operating system: Windows 11
• OS version and support details: Pro
• Real-time protection: Windows Security + CyberLock
• File and photo backups: Big items are backed up manually to Optical disks/HDD when I feel like it.
  Important things are backed up on Google Drive(subscription).
  Other things are backed up on various free cloud storage options(OneDrive, Mega, Dropbox etc).
• Device firewall: Other firewall
• Browsers and extensions: Browser: LibreWolf, well configured.
  —
  Bitwarden
  Bitdefender's TrafficLight
  uBlock Origin
  ClearURLs
  LocalCDN
  VT4Browsers
• Main use of this computer: For home and private use
• On-device encryption: Windows BitLocker / Device Encryption
• Device sign-in security: Account password
• Security updates: Allow security updates and latest features
• Update channels: Allow stable updates only
• User Account Control (UAC): Always notify
• Smart App Control: Off
• Network firewall: Enabled
• Router and network details: Sagemcom router, ISP Firewall.
  Aruba Instant On 1960 switch(Vlans, IoT separation, MAC filtering).
• Custom security settings: Portmaster + Windows Firewall
• Periodic malware scanners: Windows Security-
  Default quick scans
  Full scans- manually once a month or so
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  EMSISOFT emergency kit- second opinion
  Custom scans- every time I download a file that I think should be scanned before launching/extracting it.
  Quick scans- when I feel like doing it
  Full scans- once per several months
  
  *In addition, I scan downloaded files that I think should be scanned with VirusTotal+SOPHOS Intelix Portal if possible(size limitation).
• Malware sample testing: I do not participate in malware testing
• Environment for malware testing: N/A
• Secure DNS: NextDNS
• Desktop VPN: Windscribe unlimited data plan, running most of the time and startup when booting.
• Password and passkey manager: Bitwarden(free)
• Two-factor authentication: Aegis Authenticator
• Maintenance tools: Privacy/Anti-telemetry/attack surface reduction-
  O&O ShutUp10
  HiBit Uninstaller
  Ashampoo Webcam Guard(blocked on FW)
  Technitium MAC address changer
  VeraCrypt
  AxCrypt
  Spybot Identity Monitor
  Eraser
  Custom scripts and reg/gp/task scheduler/services changes.
  
  General-
  CrystalDiskInfo
  Sysinternals Suite
  Angry IP Scanner
  HWiNFO64/CPU-Z/GPU-Z/RivaTuner
  
  Driver related-
  Intel Driver & Support Assistant(on-demand)
  NVIDIA App
  Crucial Storage Executive
• Subscriptions: Google AI Pro (formerly Google One AI Premium)
• System recovery: Windows restore points + AOMEI Backupper(free) images
• Usage and exposure: Visiting familiar websites, Visiting unknown or untrusted websites, Making audio/video calls, Opening email attachments, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Sharing and receiving files and torrents, Gaming, Gaming with third-party mods, Streaming audio/video content from trusted sites or paid subscriptions, Streaming from untrusted sites, Coding and development
• Computer specs: GIGABYTE G6 Laptop -
  Intel Core i7 13620H
  NVIDIA GeForce RTX 4060 Laptop
  Hynix DDR5 4800 CL40 16G x2(32G)
  Gigabyte SSD 2500E M.2 2280 NVMe 500GB x2(1TB)
• Feedback preference: Detailed suggestions and alternatives welcome

Detailed suggestions and alternatives welcome.