Protect
Strong, unique passwords, 2FA on important accounts, and updates turned on.
Plain language · Real habits
The Cyber Security Guru
Cyber security tips for non-geeks — small steps that actually protect you online.
Loading…
Start here
Security is a rhythm, not a one-time fix
You do not need to become an expert — you need a few repeatable habits. Lock down accounts, spot scams early, and recover quickly when something breaks.
Three pillars
What “good enough” looks like
Think in layers: make it hard to break in, easy to notice trouble, and possible to bounce back.
Notice
Pause before clicking links, verify senders, and check bank alerts regularly.
Recover
Backups, a password reset plan, and knowing how to freeze credit if needed.
Quick wins
Do these in the next ten minutes
Small actions compound. Pick one and check it off.
01 Turn on 2FA for email
02 Update phone & laptop
03 Remove old browser extensions
04 Check bank alert settings
Tips & tools
Guidance you can actually use
No acronyms wall — just habits that match how real people use the internet.
Tip 01
Password manager
Let it create long, unique passwords for every site. One strong master password; the app handles the rest.
Tip 02
Two-factor authentication
Enable an authenticator app or key on email, banking, and social. Prefer the app over SMS when offered.
Tip 03
Slow down on “urgent” messages
Phishing loves panic. Open sites in a new tab by typing the address — not from the message link.
Tip 04
Install updates
Phone, laptop, and browser updates patch known holes. Turn on automatic updates everywhere you can.
Tip 05
Back up what matters
Cloud or external drive — ransomware and lost devices hurt less when you have a second copy.
Tip 06
Share less, verify more
Social quizzes and “copy/paste challenges” often harvest security answers. Treat unexpected calls as untrusted until verified through an official channel.
Toolbox
Handy sites to bookmark
Free, reputable helpers — use them before you click “buy” on the latest scareware.
Have I Been Pwned
See if your email appeared in known breaches.
haveibeenpwned.com →
2FA Directory
Which services support two-factor auth and how.
2fa.directory →
FTC phishing guide
Recognize and report phishing — consumer-focused.
consumer.ftc.gov →
CISA — Secure Our World
Official basics: passwords, phishing, updates, reporting.
cisa.gov →
RSS
Follow the story without the algorithm
Paste these URLs into Feedly, NetNewsWire, Inoreader, or your reader of choice.
FAQ
Short answers to common worries
Tap a question to expand. No account required — this is all static info on one page.
Do I need antivirus on my phone?
For most people, sticking to official app stores, keeping the OS updated, and avoiding sideloaded apps is enough. If you’re high-risk, ask your IT provider for a managed option.
Is public Wi‑Fi always dangerous?
Banking and logins are safer on cellular data or a VPN you trust. For reading the news or maps, the risk is usually lower — still avoid downloading installers or entering passwords on sketchy captive portals.
What’s the one thing I should do first?
Protect your email: unique password in a manager, plus 2FA. Email resets unlock many other accounts, so it’s the highest-leverage fix.