Online Privacy in 2026: A Practical Guide for Africans

By the Diolichat team · Updated 2026-02-10 · 13 min read

Why privacy matters more than ever

Data breaches, identity theft, and surveillance are growing across Africa. Rwanda's Law No. 058/2021 on Data Protection gives you rights over your data — but you still need to take practical steps to protect yourself. This guide covers what you can do today, with free or affordable tools.

Passwords — your first line of defense

• Use a password manager: Bitwarden (free, open source) or 1Password ($3/mo). Never reuse passwords across sites.
• Generate long passwords: 16+ characters, mixed case, numbers, symbols. A manager remembers them so you don't have to.
• Enable 2FA everywhere: Use an authenticator app (Google Authenticator, Authy) — not SMS, which can be intercepted.
• Check for breaches: Visit haveibeenpwned.com regularly. If your email appears, change those passwords immediately.

Browsing safely

• Use a privacy-focused browser: Firefox or Brave. Both block trackers by default.
• HTTPS everywhere: Never enter passwords on HTTP sites. Enable HTTPS-only mode in your browser settings.
• VPN: Use one when on public Wi-Fi. ProtonVPN (free tier) and Windscribe are good options with African servers.
• Clear cookies and cache: Or use private/incognito mode for sensitive browsing.
• Search privately: DuckDuckGo doesn't track your searches. Startpage gives Google results without the tracking.

Protecting your phone

• Lock screen: Use a PIN (6+ digits), fingerprint, or face unlock.
• App permissions: Review which apps have access to camera, microphone, contacts, and location. Revoke anything unnecessary.
• Encryption: Modern Android and iOS encrypt by default when a lock screen is set.
• Find My Device: Enable so you can locate, lock, or wipe a lost phone.
• App sources: Only install apps from the official Play Store or App Store.

Social media privacy

• Review privacy settings: On Facebook, Instagram, Twitter/X — set posts to "Friends" or "Followers only" by default.
• Limit personal info: Don't share your phone number, home address, or daily routine publicly.
• Watch what you share: Photos can reveal location (EXIF data). Strip metadata before sharing.
• Third-party apps: Revoke access to apps you no longer use. They often retain permission to read your data.
• Think before you post: Once something is online, it's nearly impossible to fully remove.

Email security

• Separate emails: Use one address for banking/important accounts, another for newsletters and signups.
• Phishing awareness: Never click links in unexpected emails. Go directly to the website by typing the URL.
• Encrypted email: ProtonMail and Tutanota offer free encrypted email. Worth considering for sensitive correspondence.
• Email forwarding: Be cautious with auto-forwarding — it can expose contents to less secure providers.

Data protection law in Rwanda

• Law No. 058/2021 requires organizations to protect your personal data and obtain consent before processing it.
• You have the right to access, correct, and delete your data held by organizations.
• Organizations must report data breaches within 72 hours.
• If you believe your data rights are violated, you can file a complaint with the National Cyber Security Authority (NCSA).

Privacy isn't paranoia — it's common sense. Start with a password manager and 2FA today. Those two steps alone block the majority of account takeovers.