Simple online safety.
Most accounts are lost to reused passwords and convincing messages, not to clever attacks. A handful of steps blocks most of it: unique passwords, two-step sign-in, updates, backups and a healthy suspicion of unexpected messages.
Accounts
These three steps protect most accounts.
Password manager
Lets you use long, unique passwords without remembering them.
Unique passwords
A different password for every site, so one leak does not open the rest.
Two-step sign-in
A second check, ideally an app or security key rather than text messages.
Devices
Keep the devices themselves in good shape.
- Install updates promptly, including on routers
- Lock screens with a PIN or biometrics
- Back up photos and documents automatically
- Remove apps you no longer use
Two-step options, compared
Any second step is far better than none.
| Option | Strength | Note |
|---|---|---|
| Security key | Strongest | A small device you plug in or tap. |
| Authenticator app | Strong | Codes on your phone, even offline. |
| Text message | Better than nothing | Can be intercepted; use only if nothing else is offered. |
If an account is compromised
Act quickly and in this order.
Change the password
From a device you trust.
Sign out everywhere
Most services offer a way to end all sessions.
Turn on two-step sign-in
If it was not already on.
Check settings
Look for forwarding rules and recovery details you did not set.
Warn contacts
If messages were sent in your name.
Privacy settings worth a look
A ten-minute review on each device and main account.
Location
Turn off location for apps that do not need it.
Microphone and camera
Allow only the apps you actually use for calls or photos.
Ad tracking
Limit ad tracking in phone and browser settings.
Old apps
Delete apps and accounts you no longer use.
Common questions
About everyday online safety.
Is public Wi-Fi safe?
It is fine for browsing sites that use HTTPS. Avoid changing passwords or banking on networks you do not trust.
Do I really need a password manager?
It is the simplest way to have a unique, strong password for every account without remembering them all.
What is a passkey?
A newer way to sign in using your device's lock screen instead of a password. Many large services now offer it.
How do I help an older relative stay safe?
Set up updates and a password manager together, and agree on a rule: call before acting on any urgent message.