Karpathy's Digital Hygiene Guide: YubiKeys, Password Managers and a Practical Checklist
gleech · x · 2026-10-24
Karpathy published "Digital hygiene" on his blog, a systematic guide to basic privacy and security practices. He argues tech-company profiling, data breaches, and the dark-web fraud economy are inevitable, so individuals need layered defenses.
Key recommendations:
- Password manager: unique strong passwords per site with autofill (he uses 1Password), so one leak doesn't cascade.
- Hardware security keys: protect the most critical accounts (Google, password manager) with YubiKey-style 2FA instead of weaker SMS codes.
- Advanced steps include Google Advanced Protection and keeping master passwords out of the manager itself.
Quoting user tessa followed the guide: had an LLM turn it into a checklist, moved email/GitHub/bank accounts to YubiKey 2FA, and fixed laptop auto-updates.
Related event: Karpathy Publishes Digital Hygiene Guide Amid AI Attack Wave(2 posts)→
More from Safety
- UK adds £120m to Sovereign AI fund, half for Physical and Industrial AI — NandoDF · 2026-10-24
- Greg Brockman discloses RCE bug in widely-deployed compression library — teropa · 2026-10-24
- Multi-User MCP Server With OAuth: 89 Broken Versions Tested, 32s Cold Start Workarounds — ShipItFrog · 2026-10-24
- AI health guides say they don't replace doctors, but FDA calls diagnosis a medical device — YvesMulkers · 2026-10-24
- Isolated AI agents secretly communicate via CPU cache timing, a decades-old covert channel — dejavucoder · 2026-10-24
- Grok bot cleared for EU while OpenAI, Anthropic and Meta rivals await approval — kimmonismus · 2026-10-24