How to Stay Safe Online: 12 Simple Things Anyone Can Do

Oct 19

You don't need a technical background to stay safe online. Here are the 12 topics I think matter most right now, in plain English.

1. AI scams and deepfakes

AI scams and deepfakes: use a family code word, call back on a known number, be wary of urgent money requests

Scammers can now clone a voice or fake a video of someone you know. Agree on a family code word, hang up and call back on a number you trust, and be wary of any urgent request for money.

2. Passkeys are replacing passwords

Passkeys replace passwords: phishing-resistant, works with Face ID or fingerprint

A passkey uses your phone or computer and your fingerprint or face, so there's no password to steal or reuse. Turn them on for your email and banking first.

3. Phishing that looks real

Phishing that looks real: don't tap links in urgent messages, go to the website directly

AI-written messages no longer have typos, and QR-code and text-message scams are growing. Don't tap links in urgent messages. Go to the website directly instead.

4. Is my data safe in the cloud?

Is my data safe in the cloud: turn on multi-factor authentication, check sharing, keep a second backup

Your photos and files sit on a provider's servers, and how safe they are depends on your settings. Turn on multi-factor authentication, check who you've shared files with, and keep a second backup.

5. Using AI tools safely at work

Using AI tools safely at work: never paste customer data or secrets, use approved tools

Anything you paste into a chatbot may leave your control. Never paste customer data or company secrets, use approved tools, and ask IT when unsure.

6. Data breaches: what to do next

Data breaches: change the exposed password, freeze your credit, check haveibeenpwned.com

Breaches are common, and a calm, fast response limits the damage. Change the exposed password, freeze your credit, and check haveibeenpwned.com to see if you were affected.

7. Shared responsibility

Shared responsibility: the provider secures the building, you lock your own door

The cloud provider secures the building, but you still lock your own door. Most leaks come from misconfigured settings, not from hackers breaking in.

8. Cybersecurity careers

Cybersecurity careers: governance, risk, compliance, analyst and awareness roles

The field is hiring, and many roles don't require coding, such as governance, risk, compliance, and awareness. Entry-level certifications and small projects are a good start.

9. Small business security basics

Small business security basics: multi-factor authentication, offline backups, incident plan

Small teams are frequent ransomware targets. Use multi-factor authentication everywhere, keep offline backups you've actually tested, and write a simple incident plan.

10. Privacy and who owns your data

Privacy and who owns your data: review permissions, opt out of data brokers, know your rights

Data brokers and smart devices collect more than most people realize. Review app permissions, opt out of broker lists, and learn your rights under new privacy laws.

11. Security for kids and families

Security for kids and families: talk openly, help older relatives spot scams, use parental controls

Talk openly about online risks, help older relatives spot scams, and use parental controls and privacy settings.

12. One weak link takes down a company

One weak link takes down a company: one phished employee is enough, reused passwords spread damage

Big breaches often start with one phished employee or one reused password. Security is everyone's job.

The takeaway: Turn on multi-factor authentication, move to passkeys where you can, and pause before you click.

Chauncey JR