Cyber Security For Normal People: Protect Yourself Online

Learn why security matters in today's internet-driven world and how common online risks, identity theft, and cyber crimes threaten personal finances and reputations.

Practice multi-layer security by stacking safeguards such as personal habits, passwords, two-factor authentication, encryption, and a virtual private network to protect data even if one layer fails.

Identify and understand the most common security threats, including malware such as spyware, adware, and ransomware, and social engineering tactics like phishing, to protect yourself online.

Adopt a security mindset to become aware that you are a target, and learn how to optimize daily habits for multi-layer security that protect you and your data.

Adopt a skeptical mindset to protect yourself online, recognizing scams, questioning motivations, and verifying bank or email messages by visiting official sites or calling official numbers.

Develop a skeptical mindset to avoid shady sites and apps by assessing design, user experience, and SSL indicators, and verify trust by researching the site and using official sources.

Keep all software up to date—your operating system, apps, and internet-connected devices—to patch vulnerabilities; upgrade old systems and let updates run at night for better security.

Build multi-layer security by prioritizing safe user behavior, and on Windows, switch to a standard limited account to curb malware, a move that can mitigate 92% of critical vulnerabilities.

Smartphones act as gateways to your private data and money; defend against cyber criminals, social engineering, and impersonation by securing your mobile devices.

Enable a passcode lock on your smartphone, use a complex password with letters, numbers, and symbols, and if available, add biometric authentication and separate app passcodes for multi-layer security.

Vet third-party apps before installing, and only use the official app store. Grant permissions thoughtfully, knowing you can allow none, some, or all, and adjust them in your device settings.

Locate a lost or stolen smartphone using GPS. Set up Find my iPhone or Find my device in advance, and enable remote wipe.

Realize you are a target and strengthen your defense by using unique passwords for every account, instead of reusing the same one, to deter attackers.

Discover the 25 most common passwords and why they put accounts at risk, based on Splashdata breaches and Google's password study, and learn to change weak passwords.

Explore how 12+ character long, complex passwords defend authentication against brute force attacks and how mnemonic devices and password managers help manage unique credentials.

Use a password manager like LastPass to create, store, and autofill secure passwords in an encrypted vault, protected by a strong master password across your devices.

Master two-factor authentication by combining password knowledge with possession of a device and, optionally, biometric inherence to keep accounts secure.

Explore the main mobile two-factor authentication methods, including sms, authenticator apps such as Google Authenticator, and Apple push notifications, with notes on security trade-offs and setup steps.

Enable two-factor authentication in LastPass and Google Authenticator to protect your vault; use push verification or codes to secure login even if your master password is compromised.

Enable multiple verification methods on your Google account, such as Google Prompt, Google Authenticator, voice or text codes, and securely stored backup codes.

Learn how to enable two-factor authentication on Facebook, choosing between text message, an in-app code generator, or Google Authenticator to protect your account.

Learn how to enable Twitter's two-factor authentication, switch from SMS to Google Authenticator, scan the barcode, enter generated codes, and save a backup code for account security.

set up two-factor authentication across services, prioritizing your email, bank, PayPal, and other accounts with sensitive data; use an authenticator app like Google Authenticator over SMS for stronger security.

Review your Google account's connected apps and their permissions, revoke unused access, and monitor third-party versus official apps.

Review and edit permissions for Facebook connected apps to limit data sharing, revoke unused apps, and remove any you no longer use or remember authorizing.

Learn how browser extensions gain access to data, install only from official marketplaces, review permissions, and remove unrecognized or unnecessary add-ons to reduce malware risk and protect online security.

Review and limit permissions for connected apps and extensions, ensuring you only authorize trusted third-party apps and protect your data from unnecessary access.

Encryption turns plain text into unreadable code using an encryption key. It protects private information in the digital age by making intercepted data useless without the key.

Learn how a virtual private network encrypts all online traffic, protects you on public Wi-Fi, and helps you bypass geographical restrictions and firewalls while preserving privacy.

Protect data at rest with full disk encryption. Use FileVault on macOS or DiskCryptor on Windows, and store your password in LastPass to avoid losing access.

Encrypt your smartphone by setting a strong passcode and enabling security features on iOS and Android; learn to encrypt device data and external SD cards, with potential performance impacts.

Apply core security principles to daily life—safe browsing, smartphone protection, strong passwords, multifactor authentication, connected apps, and encryption—to safeguard your data.