Most online attacks on families aren't sophisticated. They work because of reused passwords, old software and accounts with no second lock on the door. Fix those and you've shut out most of the trouble. Here's where to start.
1. Stop reusing passwords
When one website gets breached, criminals try the same email and password on banks, email and shopping sites. A password manager creates and remembers a different strong password for every account. Many are free or a few dollars a month, and the one built into your phone or browser is far better than reusing the same password everywhere.
2. Turn on two-step verification for your most important accounts
Two-step verification (also called 2FA or multi-factor authentication) means a stolen password alone isn't enough to get in. Start with your email, since it can reset every other password, then your bank and your phone's main account (Apple or Google). An authenticator app or a passkey is stronger than a text-message code, but any second step is much better than none. (Passkeys unlock with your fingerprint or face. See our guide Biometrics Made Simple.)
Want the strongest lock? Use a hardware security key. It's a small key you plug in or tap to sign in, and even a scammer who has your password can't get in without it. Our SecuX PUFido security key (FIDO2, USB-C) works with Google, Microsoft, Apple and many other accounts. Tip: set up a backup sign-in method or a second key, and keep your account's backup codes somewhere safe in case the key is ever lost.
3. Let your devices update themselves
Updates fix security holes that criminals already know about. Turn on automatic updates on every phone, tablet and computer in the house, and don't forget the Wi-Fi router.
4. Back up your photos and files
Ransomware, a lost phone or a cracked laptop all hurt less when your memories are backed up. Turn on cloud backup on each phone, and consider an external drive for the family computer. For papers you'd rather not keep in the cloud, like tax returns, medical records or copies of IDs, a fingerprint-encrypted USB drive gives you an offline copy that only opens for your fingerprint. Store it somewhere safe at home.
5. Freeze your credit
A credit freeze stops anyone from opening new credit in your name. It's free at all three bureaus (Equifax, Experian and TransUnion), it doesn't affect your credit score, and you can lift it any time you need to apply for a loan. You can freeze your kids' credit too.
While you're protecting your identity, think about your wallet too. Contactless card skimming is uncommon, but an RFID-blocking wallet or a pack of RFID-blocking card sleeves is an inexpensive extra layer for your cards, IDs and passport.
Bonus: cover the camera
A simple webcam cover on the family laptop or computer means nobody can peek in, even if something sneaks past your other defenses. It takes ten seconds to stick on.
Shop the gear mentioned here
- Computer Security: hardware security keys, webcam covers, microphone blockers and more
- Biometric Security: fingerprint-encrypted USB drives and fingerprint locks
- Personal Security: RFID-blocking wallets, card sleeves and passport protection
Want a guided walkthrough?
Step-by-step courses with screenshots for iPhone, Android, Windows and Mac are coming soon. Until then, browse the rest of our free Security Guides.