Use a password manager (Bitwarden, 1Password, etc.)

Generates and stores strong unique passwords

Create unique passwords for every account

Use passphrases of 16+ characters where possible

Never reuse passwords across sites

Change passwords immediately if a breach is reported

Enable 2FA on email accounts

Email is the gateway to all your accounts

Enable 2FA on banking and financial accounts

Enable 2FA on social media accounts

Use authenticator app (not SMS) where possible

Google Authenticator, Microsoft Authenticator, or Authy

Store backup codes in a secure location

Be suspicious of unexpected emails with links or attachments

Check sender addresses carefully for spoofing

Never click links in emails - type URLs directly

Don't open unexpected attachments

Report phishing emails to your IT department or [email protected]

Keep operating system updated

Keep all software and apps updated

Use reputable antivirus software

Enable automatic updates where possible

Enable device encryption

Set up device lock with strong PIN/biometrics

Use a VPN on public WiFi

NordVPN, ExpressVPN, or Mullvad are good options

Secure home WiFi with WPA3 or WPA2

Change default router password

Disable WPS on your router

Create a guest network for visitors

Set up automatic cloud backup for photos and documents

Keep an offline backup on external drive

Test that backups can be restored

Follow 3-2-1 rule: 3 copies, 2 types of storage, 1 offsite