High-Value Life GuideLife's expensive mistakes
中文

Policy, legal and insurance guides primarily concern mainland China. Scope and sources ↗

Back to the life guide

Chapter 14 / Complete chapter

Digital Security and Privacy

All 12 guides. Open a guide for the full benefits, conditions and references.

Search this chapter →
Chapter cartoon · view illustration
Chapter 14 editorial cartoon: One password to open every door? Enlarge illustration
One password to open every door?

Zoom in, then swipe to move around the picture.

Loading full-size illustration…

Editorial cartoon · Chapter 14One password to open every door?

Original illustration with Chinese lettering; the English dialogue is below. Humour is a reading aid, not evidence.

English dialogue
  • One password for everything?
  • So every door takes the same key?

Use a unique password solely for your email

If a password you use elsewhere gets stolen, attackers can use it to log straight into your email account. Once they gain access to your email, they c…

Cost
No cost involved. Storing it in a password manager eliminates the need to memorize it. The…
Benefit
Credential stuffing is one of the easiest attack methods: attackers simply test stolen pas…

Set a screen lock on your phone and a PIN for the SIM card

The SIM card is that tiny card inside your phone that receives SMS verification codes. If your phone gets lost, a finder can remove the card and inser…

Cost
No cost at all. You only need to set the screen lock and the SIM PIN once each.
Benefit
Someone finding a lost phone may move its SIM to another handset, receive SMS verification…

Follow these steps if you lose your phone: block the SIM card, remotely lock it, change passwords, file a police report, and freeze your bank cards if needed.

The order of actions matters more than speed. First, block the SIM card to cut off access to verification codes. Next, remotely lock the phone. Then, …

Cost
No cost involved. Completing all steps takes just a few minutes.
Benefit
Following the correct sequence is more important than acting quickly. Step one is blocking…

If your card is fraudulently used, report it and freeze the card first, then demand compensation from the bank: proving “you made the transaction” is the bank’s responsibility

If someone fraudulently uses your card, you don’t have to prove “this wasn’t me.” Instead, it’s the bank’s duty to prove the transaction was made by y…

Cost
No cost at all. As soon as you notice anything suspicious on your card statements, immedia…
Benefit
Supreme Court rulings clearly define who must provide evidence. If you claim the transacti…

Periodically check the devices logged into your account and any authorized apps, then remove the ones you no longer use

The logged-in-device list shows phones and computers that can still access an account. If unfamiliar devices or long-unused linked apps appear, change…

Cost
No cost at all. It only takes a few minutes each time. The hard part is that there’s no re…
Benefit
The device list shows current account access, while authorized apps are third-party servic…

Don’t tap “Allow all” just to use an app: the data isn’t mandatory, and refusing to share it won’t block service access

Apps request your data. If that data isn’t strictly necessary to deliver the service, the app can’t deny you access just because you refuse to share i…

Cost
No cost involved. The hard part is resisting the urge to tap “Allow all.”
Benefit
Two key legal points apply here. First, providers may not deny products or services on the…

You’re not required to use facial recognition: if other options exist, they must offer you alternatives if you refuse

As long as any other method can achieve the same result, a service provider cannot force you to use facial recognition. If you decline facial recognit…

Cost
No cost involved. When asked to use facial recognition, simply ask, “Are there any other v…
Benefit
The Administrative Measures for the Safe Use of Facial Recognition Technology clearly stat…

Do not entrust proprietary code, API keys, or confidential data to unverified "AI relay proxy stations," especially when allowing AI agents to execute local commands autonomously

An intermediary proxy sits directly between you and the model provider: it can observe, intercept, and modify everything you send and receive. In an e…

Cost
Direct official API access is typically more expensive than third-party relay proxies, and…
Benefit
In June 2026, the Ministry of State Security issued a cybersecurity advisory warning that …

Audit SIM cards and bank cards registered under your national identity once a year, and cancel unauthorized cards immediately

Criminal fraudsters frequently use stolen or forged ID information to open fraudulent SIM cards and bank accounts, often leaving victims completely un…

Cost
Zero financial cost. Check SIM cards via the "MIIT Micro-Report" official WeChat account o…
Benefit
The Anti-Telecom and Online Fraud Law mandates that telecommunications authorities provide…

Before canceling or changing a mobile phone number, migrate or unbind all linked online services and update your bank registration

Once a mobile phone number is cancelled, telecommunications carriers are legally permitted to reissue that recycled number to a new subscriber after j…

Cost
Zero financial outlay. Requires migrating accounts individually to your new number, and up…
Benefit
National Telecommunications Service Specifications mandate that the minimum quarantine fre…