You don't need to be a tech expert to stay safe online. You just need a handful of good habits. Here are the ones that protect you and your family from the vast majority of scams, hacks, and headaches.
Lock down your accounts
- Use a password manager so every account has a strong, unique password you don't have to remember.
- Turn on multi-factor authentication (MFA) for email, banking, and social media. Even if a password leaks, MFA usually keeps attackers out.
- Your email is the master key, if someone gets into it, they can reset everything else. Protect it the most.
Spot the scams
- Urgency is a red flag. "Act now or your account will be closed" is how scams pressure you. Slow down and verify.
- Don't trust caller ID or pop-ups. Microsoft, Apple, and your bank will not phone you about a virus or ask for remote access out of the blue.
- Never call the number in a scary pop-up or pay a "fine" with gift cards or crypto. Those are always scams.
- Hover over links before clicking to check where they really go.
Keep your devices healthy
- Install updates for Windows, your phone, and your apps: they patch security holes.
- Only download software from official sources; skip the "free" cracked versions (they're a top source of malware).
- Keep a backup of anything you'd hate to lose, so ransomware or a dead drive can't ruin your day.
If you think you've been hacked or infected
- Disconnect from the internet and stop entering any passwords on that device.
- From a different, trusted device, change your important passwords: starting with email.
- Get the device cleaned properly. Our virus removal service handles infections and secures the machine afterward.
Worried your PC isn't secure?
We'll check it over, clean anything nasty, and set you up to stay safe.
If something already got through, start with virus removal. For a business, keeping it out is managed IT.
The four things that actually matter
Most online safety advice is a long list, and length is why people ignore it. In practice, four things prevent the overwhelming majority of what we see walk through the door.
1. Turn on multi-factor authentication, starting with your email. Email is the master key — anyone who controls it can reset every other account you own. If you do one thing on this page, do that one.
2. Use a password manager. Not because reused passwords are lazy, but because a single breach at any site you have ever signed up to becomes a key to everything else. A manager makes unique passwords effortless, which is the only way anyone sticks to them.
3. Keep things updated. Most successful attacks use flaws that were patched months earlier. Postponing updates is the single most common way an otherwise careful person gets caught.
4. Back up, and test it. Ransomware stops being a catastrophe and becomes an inconvenience the moment you can restore. Untested backups fail exactly when you need them.
How the scams actually arrive
Almost nothing arrives labelled as an attack. It arrives as urgency: an invoice you need to check, a delivery that failed, an account about to be closed, a payment that did not go through. The emotional trigger is the attack; the link is just the delivery.
The defence is a habit rather than knowledge. When a message creates urgency, stop and reach the organisation the way you normally would — your own bookmark, the number on your card, the app you already have. Never the link in the message.
Nobody legitimate phones you about your computer
We will never call you out of the blue saying there is a problem with your PC. Neither will Microsoft, nor your internet provider. That call is always a scam, without exception. If someone rings and asks to connect to your machine, hang up.
If you have already let someone in, disconnect the machine from the internet and get in touch quickly. It is recoverable, and it is a great deal easier to sort out in the first day than the first month.
Got a problem like this one?
Tell us what it’s doing and we’ll tell you what it costs. Quotes are free.