Protect Yourself

Practical protection for your digital life.

Use the guides, examples, and checklists on this page to protect your accounts, recognize manipulation, secure your devices, and recover when something goes wrong.

The four essentials

Start here

01

Use unique passwords

Let a reputable password manager create and remember long, unique passwords. Never reuse an important password.

02

Turn on MFA

Use an authenticator app or security key when available. Never approve a login prompt you did not start.

03

Install updates

Update phones, computers, browsers, routers, and apps. Enable automatic updates whenever practical.

04

Pause before acting

Urgency, secrecy, fear, and unexpected payment requests are common signs of social engineering.

Email and message examples

Learn the pattern, not just the wording.

Attackers constantly change names, logos, and stories. The pressure tactic and the unsafe request are the clues that travel from scam to scam.

Example: fake password warning

“Your Microsoft password expires today. Keep access by signing in below.”

What gives it away

  • Unexpected deadline and threat of lost access
  • A sign-in link you did not request
  • Sender name may look right while the address is wrong

Safer move: Open Microsoft 365 from your own bookmark or app. Do not use the message link.

Example: boss or coworker impersonation

“I am in a meeting. Buy gift cards now and send me the codes. Keep this confidential.”

What gives it away

  • Urgency plus secrecy
  • An unusual payment request
  • Pressure to avoid the normal approval process

Safer move: Call the person at a known number or verify face-to-face.

Example: fake fraud alert

“Suspicious charge detected. Tap here immediately to secure your bank account.”

What gives it away

  • Fear is used to force a fast reaction
  • The message asks you to follow its link
  • The phone number may imitate a real bank

Safer move: Open the bank app yourself or call the number printed on your card.

These are fictional training examples. Real scams may be polished, personalized, and free of spelling mistakes.

How-to library

Choose the part of your life you want to secure.

Accounts

Passwords, MFA, recovery codes, and active sessions

Protect email first, remove unknown devices, and make account recovery harder for an attacker to steal.

Devices

Phones, computers, updates, encryption, and backups

Reduce common entry points and preserve a clean path back when a device is lost, damaged, or infected.

Messages

Email, text, phone, social media, and AI-enabled scams

Recognize pressure tactics, verify identity through a second channel, and avoid handing over codes or remote access.

Home network

Wi-Fi, routers, smart devices, and guest access

Replace default credentials, update the router, use modern encryption, and separate devices when possible.

Privacy

Permissions, location sharing, data brokers, and oversharing

Limit what apps, websites, and strangers can learn or reuse to impersonate you.

If you think you were hacked

Contain first. Investigate second.

  1. Disconnect the affected deviceTurn off Wi-Fi or unplug the network cable if active malware is suspected.
  2. Use a different trusted deviceChange the password for your email first, then financial and other important accounts.
  3. End unknown sessionsReview recent logins, remove unfamiliar devices, and revoke suspicious app access.
  4. Call through a known numberContact your bank, employer, or service provider using a number you independently verified.
  5. Preserve evidenceSave screenshots, dates, sender addresses, transaction details, and messages before deleting anything.

Trusted help

Free tools and official resources

Government guidance

CISA: Secure Yourself & Your Family

Simple guidance from the Cybersecurity and Infrastructure Security Agency.

Visit CISA

Breach check

Have I Been Pwned

Check whether an email address appears in known data breaches. Change reused passwords if you find a match.

Check an email address

Recovery

IdentityTheft.gov

Use the U.S. Federal Trade Commission's step-by-step recovery process if your identity has been stolen.

Build a recovery plan

File and link reputation

VirusTotal

Check a suspicious file or URL against multiple security engines. Never upload confidential, medical, financial, or private files.

Open VirusTotal

Important: Free scanners provide signals, not guarantees. A clean result does not prove that a file or website is safe.