Least privilege: stop living as admin
Daily account for the browser, extra password for the system. Old hygiene for home machines.
Least privilege is a military and Unix idea that never got a marketing team. You get the access you need for the job, not the access that is convenient. On a home computer that means a daily account that cannot install drivers, and an admin password you type when you mean it.
Why the extra prompt exists
When Windows or macOS asks for permission to change the system, that is the whole design. People click Yes because they wanted a font. The program that asked may have been a font. It may have been something else that rode along.
Living as Administrator or root means every PDF, every browser tab, every stolen session cookie sits next to the keys to the machine. Malware loves that seating chart.
On a server, the web process should not own the database root password. The backup user should not deploy code. The intern’s SSH key should not be in root’s `authorized_keys`. This sounds like bureaucracy. It is how a mistake stays a mistake instead of a rebuild.
Home version without a policy binder
- Daily login is a standard user.
- Admin password is long and not reused, stored in the password manager.
- Kids get their own account. Not yours.
- Browser and mail do not run elevated.
- Remote admin tools are off unless you are using them right now.
Cloud accounts follow the same pattern. The mailbox that can reset everything else gets 2FA first. A shopping account does not need to be the same as the domain registrar. Separate what you can. It is slower on day one. It is faster than a Sunday spent rotating twenty logins because one of them was also admin.
The old operators called this hygiene. The word is unfashionable. The practice is not.