Online protection does not need to be complex or costly. A few key habits can significantly lower your risk of cybercrime. While no one is completely “hackproof,” you can build strong online resilience.
The Tatua Digital Resilience Centre recommends four essential behaviors: the Core 4 Online Safety Habits. These straightforward steps help shield your personal information, protect your accounts, and keep your devices secure.
Meet The Core 4: Cybersecurity Basics
1. Use long, unique, and complex passwords (and a password manager!)
Passwords are your primary defense against unauthorized access to sensitive information.
Follow these guidelines for strong passwords:
- Each password should be long, unique, and complex. Aim for at least 16 characters, using a random combination of letters, numbers, and symbols. Every account needs its own password.
- Don’t reuse passwords. Every account must have its own unique password. Adding numbers or replacing a letter with a symbol does not make a password unique or secure.
- Use a password manager to generate and store strong passwords. There are many free and secure options available. If you prefer to keep a password notebook, treat it as carefully as cash.
2. Enable multifactor authentication (MFA)
Multifactor authentication (sometimes called 2FA) adds an extra security layer by requiring something more than just your password to log in. Think of it as using two locks on your digital door instead of only one. This could be:
- A one-time code sent to your phone
- A biometric scan like a fingerprint scan or Face ID
- A physical security key
Enable MFA on your accounts, especially for email, banking, and social media. Never share MFA codes with anyone, whether by phone, text, or email. Only scammers ask for these codes.
3. Keep software updated
Software updates don’t just bring new features. They often fix security flaws that criminals exploit. It usually takes a few minutes, but updates are worth it. Here are some tips:
- Turn on automatic updates when possible for your devices and apps – you can usually find these options in your Settings menu.
- Install updates promptly for your operating systems, browsers, antivirus tools, and apps.
- Don’t postpone updates; your security is worth it.
- Remember that phones, smartwatches, and tablets are computers too—keep these devices updated.
4. Watch out for phishing and scams
Phishing remains the most common online threat. Criminals send fake emails, texts, or social media messages to trick you into revealing sensitive information or clicking malicious links. These messages often play on your emotions, pressuring you to act before thinking. Scammers may even call you directly. Here’s how to spot phishing and scams:
- Be highly skeptical of unexpected messages, especially those urging immediate action or asking for personal details.
- Phishing emails may trigger excitement (“You’ve won!”) or fear (“Your account has been compromised!”) to get you to act quickly.
- Don’t click suspicious links or download unexpected attachments.
- Report phishing attempts to your email provider, social media platform, or IT department.
- If you’re unsure if a message is legit, ask a friend, coworker, or family member. A second set of eyes can be invaluable in spotting scams.
More Simple Steps To Stay Safe Online!
5. Back it up
The best way to protect your valuable work, music, photos, data, and other digital information is to make copies and store them safely. If you have a copy of your data and your device falls victim to ransomware or other cyber threats, you can restore it from a backup. If you break your computer or it crashes, you won’t lose the data along with the device. Use the 3-2-1 rule as a guide:
- Keep at least three (3) copies of your data.
- Store two (2) backup copies on different storage media, like on the cloud or on an external hard drive.
- At least one copy should be stored offsite; this includes using cloud storage.
One of the easiest backup options is cloud storage, a secure network of servers you can access through your online account.
6. Check your privacy settings
Every time you sign up for a new account, download a new app, or get a new device, configure the privacy and security settings to your comfort level for information sharing.
- Review what information an app requests and consider whether it’s truly necessary for functionality.
- Think about who can see your profile.
- Regularly review your apps, platforms, and games, and delete those you no longer use.
7. Share with care
When you’re having fun on social media, think before posting about yourself and others. Consider what a post reveals, who might see it, and how it might affect you or others. With every post, think about:
- Who will see it?
- Could it reveal personal information?
- How could it affect your digital reputation?
8. Report phishing
One of the best ways to take down criminals is by reporting phishing attempts, and it’s easier than ever now.
- If the email came to your work email address, report it to your IT manager or security team.
- If you’re at home and receive a phishing email at your personal address, most email services and social media platforms offer easy ways to report it.
Do not click any links (even “unsubscribe”) or reply to phishing emails. Delete suspicious messages immediately and block the sender in your email, social media platform, or phone.
9. Don’t reply to mistaken texts or messages
A common scam nowadays starts with a seemingly “mistaken” text, where an unknown number contacts you, and it seems like a mistake.
- The text can be simple (“How are you”) or elaborate (“Do you have a dentist recommendation?”)
- If you respond, the other person will strike up a conversation and “friendship”
- These mistaken text scams, which are also called pig butchering scams, can last for weeks or months before the criminal requests money or tells you about an exciting investment opportunity.
Not responding to a call or text from an unknown number isn’t rude—it’s safe.
10. Use secure wi-fi
For your home router, change the default password. Public Wi-Fi is convenient but may not be secure:
- Avoid accessing sensitive accounts like banking or email.
- Use a VPN or your phone’s hotspot for a safer connection.
- Turn off auto-connect for wi-fi and Bluetooth. These settings can make your device connect to unknown or malicious networks automatically.
- On public computers in hotels, libraries, or cafes, avoid accessing personal accounts. If you must, always clicking “log out” closing the browser isn’t enough. Keep these habits in mind, and stay safe online.
