How to Protect Yourself on the Internet

> Start the checklist Why I recommend 1Password
8habits
~2 hrstotal, once
$0for most of it
Rule zero

Your email is the master key

Every “Forgot password?” link goes to your email. Whoever gets into it can reset almost everything else, so protect your email first.

🏦 Bankreset → email
YOUR EMAILthe master key
🛒 Shoppingreset → email
📸 Photos & cloudreset → email
💬 Social mediareset → email
In this order

Lock it down

01

LOCK YOUR EMAIL FIRST

A long password used nowhere else, plus 2-step verification. Make sure the recovery phone and backup email are current.

DO ITEmail settings → Security~10 min
02

ONE PASSWORD PER SITE

Reuse one password and a single leak opens every door. Adding the year or a “!” doesn’t make it new. Let a password manager handle it.

DO ITSet up 1Password~30 min
03

ADD A SECOND LOCK

With 2-step verification, a stolen password alone won’t get anyone in. An authenticator app beats text-message codes.

DO ITBank, shopping, social~5 min each
04

LOCK YOUR PHONE NUMBER

Scammers can talk a carrier into moving your number, and your text codes go with it. A PIN on your phone account stops that.

DO ITAsk your carrier for a port-out PIN~5 min
05

SAY YES TO PASSKEYS

Sign in with your face or fingerprint. Nothing to type or steal, and it won’t work on fake websites.

DO ITAccept when a site offers one~2 min each
06

DIDN’T START IT? TAP NO

A surprise “Is this you?” sign-in prompt means someone else is trying. Never read a code to anyone who calls you.

DO ITMake it a reflex0 min
07

TURN ON AUTO-UPDATES

Updates patch the holes attackers look for. Let phone, computer and browser update overnight.

DO ITSettings → Software Update~5 min
08

FREEZE YOUR CREDIT

Stops new loans or cards in your name. Free, doesn’t hurt your score, and you can lift it anytime.

DO ITEquifax, Experian, TransUnion~15 min
My pick

Use 1Password

It’s what I recommend to clients, friends and family. Remember one strong password and it handles the rest.

  • Unique passwords everywhere, made and filled in for you.
  • Phishing alarm built in. It only fills on the real site. No autofill? Stop and look closer.
  • Watchtower flags hacked sites, reused passwords and weak ones.
  • Passkeys and 2-step codes live in it too.
  • Families plan shares a vault, and an organizer can help a locked-out family member.

Getting started

  1. Sign up at 1password.com (free trial).
  2. Make your one password four or five random words.
  3. Print your Emergency Kit and store it safely at home.
  4. Install it on your phone and browser. Turn on Face ID or Touch ID.
  5. Update email and bank first, then work through Watchtower.
Pro tip: keep the 2-step codes for your email and for 1Password itself in a separate authenticator app, so one lockout can’t trap you out of both.

Bitwarden or Apple’s Passwords app work too. Any password manager beats reuse.

Scams run on panic

Spot it, slow down

RED FLAGS

  • Rushing or threatening you
  • Gift cards, wire transfers or crypto
  • A link inside a scary message
  • “Don’t tell anyone” or “Don’t hang up”
  • Asking for a code, password or remote access

FEELS OFF? DO THIS

  • Hang up and call a number you already know.
  • Open the app yourself instead of tapping the link.
  • Check with someone before paying. Real companies wait.
  • Agree on a family code word for emergencies.
Speed matters

If something goes wrong

RIGHT AWAY

  1. From a trusted device, change your email password and sign out other sessions.
  2. Call your bank on the number on your card.
  3. Gave someone remote access? Shut the computer off and get help.

THIS WEEK

  1. Change any reused passwords.
  2. Freeze your credit.
  3. Report it at ReportFraud.ftc.gov, or IdentityTheft.gov if your identity was used.
Saves in this browser

The checklist

0 / 8