Personal Security

Two decades of covering cybercrime distilled into what actually protects you. No fear, no jargon — a short list of habits and settings, most of them free, ordered by impact.

Six quick wins

If you do nothing else, do these — each takes minutes.

  1. Turn on two-factor authentication for your email account. Your inbox is the master key to every other account.
  2. Use a password manager — one unique password per site. Reused passwords are how one breach becomes ten.
  3. Enable automatic updates on your phone, computer and browser. Most attacks exploit holes that were already patched.
  4. Freeze your credit at all three bureaus. Free, and it blocks new-account identity fraud outright.
  5. Never act on calls, texts or emails you didn’t initiate. Look the organisation up yourself and contact it directly.
  6. Turn on real-time transaction alerts at your bank. Fraud caught in an hour is an annoyance, not a project.

The full playbook

Looking for tool recommendations? See our tested picks for password managers, VPNs, antivirus and identity theft protection.