What you'll learn
- Spot your highest-risk accounts and devices
- Build a strong password and recovery plan
- Set up multifactor authentication and reliable backups
Know what you need to protect
Cybersecurity begins with an inventory. You cannot defend an account you forgot exists. Start with the services that could affect money, identity, or your other accounts.
Hands-on steps
- Make a private list of five important accounts: primary email, banking, phone carrier, domain registrar, and cloud services are common examples. Never put passwords in the list.
- For each account, note whether you can still access its recovery email and authenticator. Identify any that depend on an old phone number.
- Write down which devices you use to sign in and whether each has a screen lock.
- Pick one high-priority account to secure today. Start with your email because it may reset other passwords.
Remember: Your primary email and domain registrar often deserve the strongest protection.
Knowledge check: Which account would usually be the highest priority to secure first: an old game account or your main email?
Your main email, because other services often send password-reset links to it.
Use unique passwords and passphrases
Password reuse turns one data breach into a problem across multiple accounts. A trustworthy password manager can help create and store a unique password for every site.
Hands-on steps
- Choose a reputable password manager and protect it using one long, memorable master passphrase that you have never used elsewhere.
- For a test account, use the manager to generate a long random password. Never reuse a password from another website.
- Change reused passwords for your most important accounts, starting with your primary email and domain registrar.
- Check your account recovery settings and store recovery codes separately and securely.
Remember: Length, uniqueness, and safe recovery matter more than complicated character tricks.
Knowledge check: Is one complicated password reused on six websites safer than six different passwords?
No. Six different strong passwords prevent a breach of one website from unlocking the others.
Turn on stronger sign-in protection
Multifactor authentication (MFA) adds an independent proof of identity. Passkeys and security keys are phishing-resistant options where available; authenticator apps are also widely useful.
Hands-on steps
- Open the security settings of one important account (for example Cloudflare or Namecheap).
- Look for Passkeys, Two-Factor Authentication, or MFA. Choose a passkey/security key if practical, or an authenticator app.
- Complete verification and sign out, then test signing in again before changing anything else.
- Save recovery codes somewhere separate from the phone, and consider a second backup sign-in method. Never give anyone an MFA code.
Remember: An authenticator app works without cellular service, but account recovery still needs planning.
Knowledge check: What should you do if a caller asks for your one-time login code?
Do not share it. Real support staff should not need your authentication code.
Keep devices updated and back up your data
Software updates fix security flaws. Backups reduce the impact of lost phones, mistakes, ransomware, and account problems.
Hands-on steps
- On your phone or computer, check Settings for operating-system updates and apply trusted updates when convenient.
- Open your browser and major apps and confirm automatic updates are enabled.
- Choose one small non-sensitive file and copy it to a separate location you control, such as a trusted cloud drive or external device.
- Open the backup copy to verify it is readable. Write down how often you will repeat this check.
Remember: A backup is only useful after you confirm you can restore a file from it.
Knowledge check: If files are syncing to one account, does that always count as a complete backup?
No. Syncing may also copy deletions or account changes. Keep a separate recoverable copy for important data.
Reliable places to learn more
These are independent educational resources, not paid endorsements.
