Today is the first day of Cybersecurity Awareness Month. You can be safer online with a handful of small habits that don’t require technical experience and don’t have to be done all at once. Pick one thing below, do it today, and come back tomorrow.
Follow along on Instagram and Facebook all month as we share one tip every day in October!
Lock the front door
Passwords and access are where most trouble starts, and where the easiest wins are. Learn more in the GCA Cybersecurity Toolkit’s Beyond Simple Passwords section.
Use strong passwords or passphrases. A long phrase you can remember beats a short password you can’t. Use a unique password or passphrase on every single account. See GCA’s Learning Portal for a course on strong passwords.
Use a password manager. It creates and remembers complex passwords and passphrases for you, so you only need to memorize one. GCA recommends Bitwarden as an option.
Lock your devices. Password-protect every device and lock the screen when you step away, even at home. Guidance on how and why to lock your devices.
Turn on multi-factor authentication. A second verification code, like a text message or authenticator app, stops most account takeovers even if your password leaks. GCA’s guide to MFA.
Use encrypted messaging. Apps like Signal keep your conversations readable only by you and the person you’re talking to. More about Signal.
Use CyberFlex. A free GCA resource helping young adults prevent, report, and recover from scams. More about CyberFlex.
Use the GCA Cybersecurity Toolkits. Free, plain-language tools and resources to reduce your risk, sorted by who you are. More about the GCA Cybersecurity Toolkit for Individuals.
Spot the scam
Most attacks on an everyday person arrive as a message asking you to hurry.
Pause before you click. Don’t open links, attachments, or images in emails and texts you weren’t expecting. Our partners at Take9 have great advice.
Check the sender. Look at the full email address, not the display name, and mark anything suspicious as spam. Advice from Valimail about how to do this.
Be suspicious. Urgency, odd phrasing, and images that look slightly wrong are tells that you should slow down before you click or enter any information. Here’s some advice on what to look for.
Avoid financial scams. Confirm any money request by calling the person on a number you already had. Read more about financial scams here.
Report scam attempts. Tell the real company and your local authorities when you encounter a scam attempt, so they can potentially take action. The GCA Cybersecurity Toolkit has resources to help report issues.
Shop safe. Stick to retailers you know, use credit cards instead of debit cards, and skip deals that look too good to be true. Specific tips for shopping safely online.
Keep things current
Most breaches exploit something that already had a fix available. The GCA Cybersecurity Toolkit’s Update Your Defenses section and Prevent Phishing and Malware section can help.
Update your software. Updates close known holes that criminals actively look for. Advice from CISA on how to do this.
Activate auto-updates. Let your phone, laptop, and apps protect themselves without you having to remember. The toolkit walks through several update features for both MacOS and Windows.
Update your hardware. Very old phones and laptops stop receiving security fixes, which quietly leaves you exposed. Start budgeting now for a newer device.
Use anti-virus software. Keep protection against viruses, spyware, and adware switched on and current. GCA recommends Microsoft Defender.
Use a firewall. Your device and router both have one — leave it enabled.
Protect your data
Assume something will go wrong one day, and make that day boring. The GCA Cybersecurity Toolkit’s Backup and Recover section can help.
Back up your data. A backup turns a disaster into an inconvenience. Keep a copy off your main device. GCA recommends Time Machine for Mac and Windows Backup for PCs.
Factory reset old devices. Wipe your data before you sell, donate, or discard anything. A guide to resetting a device.
Take an inventory. You can only protect the devices and accounts you remember you have. GCA offers a spreadsheet from CIS to help you keep track.
Use a private DNS resolver. Quad9 is free and blocks known malicious sites before they ever load on your device. More about Quad9.
Check for HTTPS. Never type personal or payment details into a site whose address starts with http://. Advice from Security Scorecard.
Out in the world
Public Wi-Fi, borrowed chargers, and printed codes all deserve a second look.
Check public Wi-Fi. Know exactly which network you’ve joined before you sign in to anything. Specific guidance for public Wi-Fi.
Charge safely. Use your own cable with a wall outlet or power bank rather than an unknown USB port if possible. GCA’s advice on how to safely charge your device.
Choose QR codes carefully. Only scan official codes, and check the address before you enter anything. Tips for scanning QR codes.
Turn off Bluetooth when idle. Leaving it on makes your device discoverable to strangers nearby. Article about disabling Bluetooth.
Use a VPN. On networks you don’t control, a VPN keeps your browsing, identity, and location private. GCA suggests Proton VPN as one possible tool to use.
Be careful what you share
Privacy is security: the less there is about you online, the less there is to use against you. Here’s some general advice about how to protect yourself.
Avoid oversharing. Every personal detail you post is material for someone impersonating you.
Limit location sharing. Better for your privacy, your safety, and your battery.
Don’t underestimate hackers. Nobody is too small to target — most attacks are automated and indiscriminate.
Start with one tip today
Our free GCA Cybersecurity Toolkit walks you through the steps above at your own pace. Start here, and follow us on Instagram and Facebook all month as we share one tip every day in October!
