Personal Security Checkup

• I use unique passwords for every accountNo password is reused across sites.
• I use a password managerPasswords are stored in a reputable manager.
• Multifactor authentication is onMFA is enabled on email, banking, and social accounts.
• My operating system is up to dateAutomatic OS updates are enabled.
• My apps and browser are up to dateApps and browsers update automatically.
• My important data is backed upFiles and photos are backed up regularly.
• Account recovery options are currentRecovery email and phone are correct.
• I can recognize suspicious linksI check a link's real domain before clicking.

Recommendations

• use unique passwords for every account: Start with email and banking: give each a long, unique passphrase (4+ random words).
• use a password manager: Install a password manager (e.g. Bitwarden, 1Password, or your browser's built-in one) and let it generate passwords.
• Multifactor authentication is on: Turn on MFA in account security settings; prefer an authenticator app or security key over SMS.
• operating system is up to date: Enable automatic updates in Windows Update, macOS Software Update, or your phone settings.
• apps and browser are up to date: Turn on auto-updates in your app store and restart your browser when it prompts you.
• important data is backed up: Use the 3-2-1 rule: 3 copies, 2 types of storage, 1 off-site (e.g. cloud backup plus an external drive).
• Account recovery options are current: Review recovery email, phone number, and backup codes for your main email account today.
• can recognize suspicious links: Practice with the Phishing Quiz and always hover or long-press to preview links before opening them.