- Do not trust any wired or wireless network other than your own.
- Always use VPN, or at least DNS encryption for untrusted networks.
- The best VPN is a self-hosted one, or at least use a well-known provider.
- Always verify your settings with IP/DNS leak services supporting IPv6.
- Secure access to your router and its wireless network with strong passwords.
- Set up a VPN client or DNS encryption on the router and verify that it works correctly.
- Follow the security section of the wiki for extra hardening.
- You may also find helpful the travelmate package/app.