The Plain-English Guide to Staying Safe Online
You don't need to be a tech expert to protect yourself. These straightforward steps cover the basics for you and the people you care about.
Manual To Success Editorial Team
Published Updated 9 min read
Online scams and account takeovers can happen to anyone. The good news is that a handful of habits block most common problems. If you only do three things after reading this, make them a password manager, two-step verification, and a healthy suspicion of urgent messages.
Use a password manager
Reusing the same password across sites is one of the most common ways accounts get compromised. A password manager creates and remembers a unique, strong password for every account.
Many reputable options exist, and most modern browsers and phones include a built-in one. You only need to remember a single strong main password.
Turn on two-step verification
Two-step verification (sometimes called two-factor authentication) asks for a second confirmation, like a code from an app, when you sign in. Even if someone learns your password, they can't get in without it.
Start with your email account. It's the key to resetting almost everything else.
Learn to spot phishing
Phishing messages try to rush you into clicking a link or sharing information. Common signs include urgent warnings, unexpected attachments, misspelled sender addresses, and requests for passwords or payment.
When in doubt, don't click. Go to the company's website or app directly, or call a number you already trust.
Keep devices updated
Software updates often fix security weaknesses. Turn on automatic updates for your phone, computer, browser, and apps.
It's one of the easiest protections available, since it works in the background once it's on.
Be thoughtful on public Wi-Fi
Public networks at cafés and airports are convenient but less private. Avoid signing in to sensitive accounts on them when possible.
Using your phone's mobile data or a personal hotspot is often a safer choice for anything important.
Look out for family members
Talk with kids about what's okay to share online and who they can come to if something feels wrong. For older relatives, explain common scams like fake tech-support calls and "grandchild in trouble" messages.
Agreeing on a family code word for real emergencies is a simple way to defeat impersonation scams.
If something goes wrong
If you think an account has been compromised, change the password right away from a trusted device, turn on two-step verification, and check for unfamiliar activity.
Contact your bank directly if any payment information may be involved, and report scams to the appropriate authorities, such as the FTC at ReportFraud.ftc.gov in the U.S.
The short version
- Use a password manager and a unique password for every account
- Turn on two-step verification, starting with your email
- Slow down when a message feels urgent, and verify independently
- Keep automatic updates on for every device
- Talk with family about common scams and agree on a code word
Sources
- How To Recognize and Avoid Phishing Scams. Federal Trade Commission.
- Protect Your Personal Information From Hackers and Scammers. Federal Trade Commission.
- Secure Our World. Cybersecurity and Infrastructure Security Agency.
- ReportFraud.ftc.gov. Federal Trade Commission.
