October is Cybersecurity Awareness Month. You do not need to be technical to benefit. These ten habits stop most everyday attacks.
- Install system updates. Updates fix security holes. Turn on automatic updates.
- Use a screen lock. A PIN of six digits or more, a pattern or biometrics.
- Use a password manager and a unique password for each important account.
- Turn on two-factor authentication for email, banking, shopping and social accounts. An authenticator app is safer than SMS where available.
- Install apps only from official stores and check the publisher, reviews and permissions. See the privacy checklist for cycle apps for a good example of what to check.
- Review permissions. A calculator does not need your contacts. Remove permissions you do not understand.
- Do not tap links in unexpected texts. Open the real site or app yourself. See spam text protection.
- Do not trust caller ID alone. Numbers can be faked. Read how caller ID works.
- Back up your data to a cloud account or computer, including contacts: backup guide.
- Use Find My Device (Android) or Find My (iPhone) so you can lock or erase a lost phone.
If you think you were hacked
- Change the password of the affected account from a safe device.
- Turn on two-factor authentication.
- Sign out other devices.
- Contact your bank if money is involved.
- Run a security check in your phone settings and remove apps you do not recognise.
Help the people around you
Show one family member how to turn on two-factor authentication. Most scams succeed because the target does not know what to look for.
Use the tools already on your phone first: set your default phone app, block spam calls and keep updates on. Then add habits one at a time.