A simple safety checklist
Top 10 cybersecurity tips
These habits prevent many common scams and account takeovers. Start with the first three if you are short on time.
Reviewed September 27, 2026
- 1
Pause when a message creates urgency
Scammers want a fast emotional decision. Stop, take a breath, and verify through a separate channel.
- 2
Never share verification codes
A legitimate employee will not ask for the code sent to your phone or email.
- 3
Use a unique password for every account
A password manager can create and store long, unique passwords so one breach does not unlock everything.
- 4
Turn on two-factor authentication
Start with email, banking, and social media. An authenticator app or security key is stronger than SMS when available.
- 5
Open official apps and websites yourself
Do not sign in through an unexpected message. Type the known address or use the organization’s official app.
- 6
Keep devices and apps updated
Install operating-system, browser, phone, and app security updates promptly.
- 7
Verify unusual requests separately
Call the person or organization using a number you already know—not a number in the message.
- 8
Treat gift cards and cryptocurrency as warning signs
Government agencies, banks, and legitimate companies do not demand payment this way.
- 9
Limit personal information online
Public birthdays, family names, travel plans, and phone numbers help scammers create believable stories.
- 10
Report quickly and ask for help
Contact the bank or platform immediately. Save evidence and report the scam; acting fast may limit harm.