Online Safety Basics
Most online harm comes from a few predictable sources: stolen or reused passwords, scams that rush you into acting, and devices that aren’t updated. A short list of habits protects you, your family and your job from the vast majority of attacks.
- Everyone
- Workers
- Home & family
The core habits
| Habit | Why | More |
|---|---|---|
| Use long, unique passwords for every account | One leaked password won’t open your other accounts | Strong Passwords |
| Use a password manager | Makes unique passwords easy | Password Managers |
| Turn on two-factor authentication | Stops most account takeovers, even with a stolen password | Two-Factor & Passkeys |
| Keep devices and apps updated | Updates fix holes attackers use | Software Updates |
| Back up what matters | Protects against ransomware, theft and broken phones | Backups |
| Slow down before clicking or paying | Scammers rely on urgency and fear | Phishing |
Spotting a scam
Almost every scam has some of these signs:
- Urgency: act now or lose your account, job, money or freedom
- Unexpected contact by text, call, email or social media
- Unusual payment: gift cards, cryptocurrency, wire transfers, payment apps or cash couriers
- Secrecy: “don’t tell anyone” or “stay on the line”
- Too good to be true: a job, prize, investment or bargain
- Requests for codes, passwords or remote access to your device
The golden rule: verify independently
If a message claims to be from your bank, employer, a government agency or a family member, don’t use the phone number or link in the message. Look up the real number yourself (on your card, statement or the official website) and call. A real organization will understand.
Protect your identity
- Freeze your credit at all three bureaus; it’s free. See Freezing Your Credit.
- Don’t give your Social Security number unless you know why it’s needed.
- Watch bank and card statements for charges you don’t recognize.
At work
Contractors and workers are targeted with fake job offers, payroll scams, fake invoices and fake training cards. See Job Scams, Payroll Scams and Cybersecurity for Small Contractors.
If something goes wrong
Act fast: contact your bank, change passwords, and report it. See If an Account Is Hacked, Identity Theft and Reporting Scams.
Standards & references
Last updated: