A strong password is like a strong front door – hard to break through.

Always lock your computer and devices with password access.

Use strong, unique passwords for every account.

Using the same password across different sites makes it easier for hackers to access multiple accounts once one is compromised. Password managers can generate strong, random passwords and store them for you – so you don’t have to remember them all.

Use at least 10 characters, including 1 capital, 1 symbol, and 1 number.

FYI We use 25, including capitals, 3 x symbols and 3 x numbers. This might sound complex, but we utilise aspirational phrases connected to our company culture to recall passwords easily.

Don’t reuse passwords on different sites.

Use password managers such as LastPass, 1Password or Roboform.

Most info-stealing malware is designed to scan your browser’s saved password vault.

Instead of letting Chrome or Safari save your login details, use a dedicated password manager such as 1Password, LastPass or Roboform.

These tools encrypt your passwords and store them more securely.

Sure LastPass was breached in 2022 – a very unique and highly targeted campaign involving access to the home computer of a senior DevOps engineer – but LastPass still remains one of the world’s leading password managers.

Hackers love email. It’s a common way in.

Don’t open attachments or click links unless you’re expecting them.

If something feels off – even from someone you know – pause.

Always double-check the reply-to address. Fake emails often look almost real.

EG

On Tue, Aug 14, 2024 at 9:23 AM, Tom Jones <tom@tomjones.com> wrote 

Reply-To Tom Jones <tom@timjones.com>

or

On On Tue, Aug 14, at 9:23 AM, Tom Jones <tom@tomjones.com> wrote 

Reply-To Tom Jones <dodgyemailaddress@hotmail.com>

Hover your mouse over links to see where they go before clicking.

If you’re unsure, call the sender and ask.

Cybercriminals can do more damage when everything is connected. Keep things separated such as work tools, personal apps and financial info. If one thing is attacked, the others stay safe. So avoid adding your gaming account to your work computer. 

Losing your data is bad. Getting hacked is worse. Stop both.

Regularly update your Website CMS, plugins and themes: outdated software allows backdoor access for breaches and hacks. 

Set up automatic weekly or monthly backups to the cloud and an external drive.

Download Malwarebytes (free) and run it at least once a month or once a fortnight.

Keep apps and systems updated regularly.

You can visit haveibeenpwned.com and enter your email address. This Free tool will tell you if your data has been part of a known breach – and which sites were affected.

Alternatively, sign up for alerts. You’ll be aware early if your email or passwords show up in a data breach so you can make changes.

Turn on security alerts for banking, email and social media accounts. Many platforms will notify you about unusual logins, password changes or failed login attempts – so you can act fast if something goes wrong.

Especially when using shared or public devices. Better yet, deactivate old accounts you no longer need. Fewer active accounts mean fewer entry points for hackers.

Be cautious when downloading free apps, browser extensions or pirated software.

These are common ways info stealers sneak onto your computer.

Only install tools from verified sources or official app stores.

Honesty is the best policy when you’ve been breached or scammed. 

If you’ve been scammed – you’re not alone. It happens. What matters is how you respond.

With breaches, one of the biggest issues wasn’t just the hack – it was the delay and confusion in telling people what really happened.

If something goes wrong, it’s better to be upfront. The faster you tell others, the faster you can protect each other.

Tell friends or coworkers so they don’t fall for the same scam.

Share details in private groups or team chats.

Train your team: Run regular cybersecurity training sessions.

Set clear policies: Define rules for data handling, device use and reporting issues.

Build a security-first culture. Encourage your team to stay alert and report anything suspicious.