In this article
- 1. Use a different password for every account
- 2. Turn on two-factor authentication, starting with email
- 3. Let everything update automatically
- 4. Slow down when a message is urgent
- 5. Check links and QR codes before you open them
- 6. Agree a family check word
- 7. Be careful on public Wi-Fi
- 8. Treat USB drives and charging points with care
- 9. Keep your kids' online life safe
- 10. Look after older relatives
- 11. Check if your details have leaked
- 12. Know what to do if you are caught
1. Use a different password for every account
When one site is hacked, criminals try the same email and password on your other accounts. A different password for each account stops one breach spreading. A password manager remembers them for you. Check how strong a password is with our strength checker, or make an easy-to-type one with the passphrase generator.
2. Turn on two-factor authentication, starting with email
Your email account can reset almost every other account you own, so protect it first. Two-factor sign-in asks for a second proof, like a code from an app. Our two-factor guide and email security guide walk you through it.
3. Let everything update automatically
Most successful attacks use flaws that were already fixed in an update. Turn on automatic updates for your phone, computer, browser and apps.
4. Slow down when a message is urgent
Scams create panic: your account is locked, a parcel is held, a relative is in trouble. Stop, then check using a number or app you chose yourself. Paste suspicious text into our phishing checker, and read the phone scam guide.
5. Check links and QR codes before you open them
Fake links copy real addresses with small changes. Our link checker and QR code checker help you spot them. When in doubt, open the official app or type the address yourself.
6. Agree a family check word
AI can now copy a person's voice from a few seconds of audio. A secret word agreed in advance lets your family confirm a call is real. Set one up with our family check word guide, and read about AI voice call scams.
7. Be careful on public Wi-Fi
Avoid logging in to banking or email on open Wi-Fi at cafes and airports. Your phone's own data connection is safer. Make sure sites show the padlock and start with https.
8. Treat USB drives and charging points with care
A USB drive can carry malware onto your computer without the internet. Read how it has been used against governments in our stories on Stuxnet and the 2008 US military breach, then follow the simple checklist in each.
9. Keep your kids' online life safe
Talk about what they play and who they talk to, and make sure they know they will not be in trouble for telling you about something odd. Our Kids Zone teaches scam-spotting through games, and the parents' guide to online gaming covers chat, in-game purchases and strangers.
10. Look after older relatives
Seniors are targeted with bank and government impersonation calls. Our Adults & Seniors page has plain-English tips, and a family check word protects against cloned voices.
11. Check if your details have leaked
Use our breach checker and the digital footprint quiz. If a password has leaked, change it everywhere you used it.
12. Know what to do if you are caught
It happens to careful people. Act quickly: contact your bank, change passwords and report it. Follow our scam recovery checklist and find the right place to report on our report a scam page.
Frequently asked questions
What is the single most important thing I can do to stay safe online?
Turn on two-factor authentication for your email account. Your email can reset most of your other accounts, so protecting it protects everything else.
How do I know if a message is a scam?
Look for urgency, requests for money or codes, and links or numbers you did not choose. Check it with a number or app you already trust, and use our phishing checker.
Do I need antivirus software?
Keep your computer and phone updated and use the built-in protection, such as Microsoft Defender on Windows. Most people do not need much more than that, plus good habits.
Is it safe to use public Wi-Fi?
It is safer to use your phone's data connection for banking and email. If you do use public Wi-Fi, stick to sites that show the padlock and avoid sensitive logins.
How can I protect my children online?
Talk openly, set simple rules, and make sure they know they can tell you about anything strange without losing their device. Our Kids Zone teaches scam-spotting through games.