Second Phone Setup

Your phone is the single largest OPSEC vulnerability in the hobby. It contains your messages, browsing history, location data, photos, and app installation records. A partner who sees a notification, a colleague who glances at your screen, or a customs officer who requests access can all compromise you through your phone. A dedicated second device eliminates these risks entirely.

---

Option 1: Dedicated Second Phone

The most secure approach. A physically separate device that never touches your personal or professional identity.

Phone Selection

• Budget Android ($50–150): Samsung Galaxy A series, Xiaomi Redmi, or Motorola Moto G. These run all necessary apps (WhatsApp, Telegram, browsers) without issue. No need for a flagship device
• Refurbished iPhone ($100–200): iPhone SE or older models work well. iOS provides good security. Create a fresh Apple ID with no connection to your main account
• Google Pixel ($150–300): The best option for privacy-conscious users. Pixel phones can run GrapheneOS (a privacy-focused Android fork) and receive timely security updates

SIM Card

• Prepaid SIM: Purchase a prepaid SIM card with cash. In many countries, SIM registration laws require ID, but prepaid plans offer more separation than contract plans tied to your name and address
• eSIM services: Airalo, Holafly, and similar eSIM providers offer data-only plans that do not require physical presence to purchase. Useful for international travel
• Local SIMs abroad: Buy a local prepaid SIM in each destination. Cheap, disposable, and not linked to your home identity. In Thailand, Philippines, Colombia, and most tourist destinations, SIMs cost $2–10 with data
• Google Voice or similar: A free US phone number through Google Voice provides an additional communication layer. Register it to the hobby email, not your personal account

Account Setup

• Create a new Google account or Apple ID specifically for this device. Use a dedicated hobby email (ProtonMail or Tutanota for privacy)
• Do not sign into your personal Google, Apple, or Microsoft account on this device. No cross-contamination
• Do not enable cloud backup to any account linked to your identity
• Do not sync contacts between your personal and hobby phones

---

Option 2: Dual SIM / eSIM on Your Main Phone

A compromise option for those who do not want to carry a second device. Most modern smartphones support dual SIM or physical SIM + eSIM.

Advantages

• Single device to carry and manage
• Second number for hobby communication without a second phone
• Cheaper than maintaining a separate device

Disadvantages

• All data is on one device. If someone accesses your phone, everything is there — personal and hobby
• App separation is imperfect. WhatsApp can only be linked to one number per installation (dual WhatsApp workarounds exist but are clunky). Telegram supports multiple accounts natively
• Notifications cross-contaminate. A Telegram message from a provider can appear on your lock screen while your partner is looking at your phone

If You Choose This Option

• Use Android's Work Profile or Samsung's Secure Folder to isolate hobby apps in a password-protected container
• On iPhone, use Focus modes to hide hobby app notifications when in personal/work mode
• Disable lock screen previews for all messaging apps
• Use a separate browser (Firefox Focus, Brave) for hobby browsing — not the same browser you use for personal activity

---

Essential Apps to Install

Communication

• WhatsApp: The global standard for provider communication. Register with your hobby number. Enable disappearing messages by default
• Telegram: Essential for Ukraine, Russia, and growing in other markets. Supports multiple accounts, secret chats with end-to-end encryption, and self-destructing messages. Use "Secret Chats" mode for sensitive conversations
• Signal: The gold standard for encrypted messaging. Fewer providers use it, but excellent for any communication where maximum privacy is needed
• LINE: Required in Thailand and Japan. Register with your hobby number
• KakaoTalk: Required in South Korea

Browsing

• Brave Browser: Built-in ad blocking, Tor integration, privacy-first. The best general-purpose hobby browser
• Firefox Focus: Automatically deletes browsing history on close. Zero-footprint browsing
• Tor Browser: Maximum anonymity. Slower but routes traffic through multiple nodes. Useful for accessing forums and directories on .onion sites

VPN

• Mullvad VPN: Accepts cash and cryptocurrency. No account required (uses a generated number). The most privacy-respecting VPN available
• ProtonVPN: Swiss-based, strong privacy policy, free tier available. Integrates with ProtonMail
• NordVPN / ExpressVPN: Good general-purpose options with extensive server networks for geo-unblocking

Other Essentials

• Maps (offline): Download offline maps for your destination in Google Maps or OsmAnd. Navigate without data connection and without sending location queries to servers
• Translate: Google Translate with offline language packs. Essential for communicating with providers who do not speak your language
• Uber / Bolt / Grab: Ride-hailing registered to your hobby email and number. Separate ride history from your personal account
• Currency converter: Quick conversion for negotiating in local currency
• Password manager: Bitwarden (free, open-source) to manage hobby-specific account passwords. Separate from your personal password manager

---

Security Hardening

Lock Screen

• Use a strong PIN or password (not a pattern, not a 4-digit PIN). 6+ digit PIN or alphanumeric password
• Disable biometrics (fingerprint, face unlock). In many jurisdictions, law enforcement can compel biometric unlock but cannot compel a password. This also prevents a sleeping person's finger from being used to unlock the phone
• Disable lock screen previews for all apps. Notifications should show "New message" without content
• Set auto-lock to 30 seconds or less

Data Protection

• Enable full-disk encryption. Standard on modern iOS and Android, but verify it is active in Settings
• Disable cloud backup for the hobby device. No iCloud, no Google backup. Data stays on device only
• Disable photo geotagging in camera settings. No GPS data embedded in photos
• Disable Google location history and Apple "Significant Locations"
• Review app permissions regularly. No app should have location, camera, or microphone access unless actively needed

Border Crossing

• At international borders, customs officers in some countries (US, UK, Australia, Canada) can request access to electronic devices
• Option 1: Leave the hobby phone at home when not traveling for hobby purposes
• Option 2: Factory reset the phone before crossing borders. Reinstall apps and restore from encrypted backup after clearing customs
• Option 3: Ship the phone to your destination via mail/courier, avoiding border inspection entirely
• Option 4: Buy a cheap local phone at the destination and dispose of it before returning

---

Storage and Physical Security

• At home: Keep the hobby phone in a locked drawer, safe, or secure location that a partner, roommate, or cleaning person would not casually access
• When traveling: Use the hotel safe for the hobby phone when not in use. Do not leave it in luggage that could be searched
• Emergency wipe: Know how to factory reset your phone quickly. On Android: Settings > System > Reset. On iOS: Settings > General > Transfer or Reset iPhone. Practice this so you can execute it in seconds if needed
• SIM management: Keep spare SIM cards in your wallet, not in the phone packaging. A loose SIM card in a wallet is unremarkable; phone packaging with multiple SIMs raises questions

---

Ongoing Maintenance

• Keep software updated. Security patches matter. Set the hobby phone to auto-update
• Periodically clear data. Delete old conversations, clear browser history, and remove unused apps
• Rotate numbers. If you change destinations frequently, getting a new local SIM for each trip provides natural rotation of your contact number
• Audit regularly. Every few months, review what is on the hobby phone. Delete anything that could be compromising if the phone were lost or accessed
• Test your wipe procedure. Once a year, factory reset and rebuild the phone from scratch. This ensures you can do it quickly if needed and keeps the device clean

---

Cost Breakdown

The budget option provides 90% of the privacy benefit for under $100 upfront. The premium option adds features like GrapheneOS, dedicated VPN, and premium email — marginal improvements for most users but worthwhile for those with higher exposure (public figures, professionals in sensitive industries).

---

Common Mistakes

• Signing into personal accounts. The single most common mistake. Logging into your personal Gmail, iCloud, or social media on the hobby phone defeats the entire purpose of separation. One absent-minded login links the devices permanently in Google's or Apple's records
• Sharing contacts across devices. If you save a provider's number on your hobby phone and then that number appears on your personal phone via contact sync, the separation fails. Keep contact databases completely isolated
• Same WiFi network. Connecting both phones to your home WiFi creates a network-level association. Use mobile data on the hobby phone at home, or at minimum use the VPN when on shared WiFi
• Carrying both phones together. If you always carry both phones, location data shows them moving together. For maximum separation, leave the hobby phone at home when not actively using it
• Cloud photo sync. The default settings on both iOS and Android sync photos to the cloud. If you take a photo on the hobby phone and it syncs to a cloud account, that photo is no longer private. Disable all cloud photo services on the hobby device
• Forgetting app notifications. A WhatsApp message from a provider appearing as a notification on your Apple Watch, iPad, or desktop browser (if WhatsApp Web is connected) can be catastrophic. Ensure the hobby WhatsApp account is not linked to any other device

---

The Minimalist Alternative

If a full second phone feels excessive, the absolute minimum for privacy improvement:

• Use Samsung Secure Folder or Android Work Profile on your existing phone to isolate hobby apps
• Install a separate browser (Brave or Firefox Focus) used exclusively for hobby browsing
• Get a Google Voice number for hobby communication (free, no second SIM needed, works over WiFi)
• Create a separate Telegram account (Telegram natively supports multiple accounts)
• Disable lock screen previews for all messaging apps

This approach costs nothing and takes 15 minutes to set up. It provides partial separation that stops casual discovery (a partner glancing at your phone) but will not survive a determined forensic examination. For most hobbyists, it is a good starting point before investing in a full second device. This guide pairs with the broader privacy and opsec guide for a complete operational security picture. After a trip, use the post-trip cleanup checklist to remove digital traces from whichever setup you use. Check the legal risk tool for your jurisdiction to calibrate how much separation you actually need.