Personal cybersecurity becomes far less overwhelming once you know exactly what needs protecting. This checklist walks through the five areas worth reviewing, in the order they tend to matter most.
None of this requires a background in security. Most items take minutes, not hours, and none of them ask you to give up convenience for its own sake. Work through the sections in order, or jump straight to the one that has been on your mind.
Prefer a printable copy? Tell us where to send it and we’ll email you the full checklist as a PDF.
Tell us where to send it. Two fields, and it’s yours.
1. Accounts and identity
- Turn on multi-factor authentication for email, banking and any account that can reset another account.
- Use a password manager, and give your most important accounts a password that exists nowhere else.
- Check whether your email address appears in a known data breach, and change any password it exposed.
- Separate the email address you use for banking and identity from the one you hand out to shops and newsletters.
- Where it is offered, switch to a passkey or a hardware security key instead of a password.
2. Devices
- Keep your phone, laptop and tablet on automatic updates rather than postponing them.
- Set a screen lock with a code or biometric on every device that holds email, messages or photos.
- Review which apps can see your location, contacts and microphone, and remove the access that no longer makes sense.
- Know where your devices are backed up, and confirm you could recover one if it were lost tomorrow.
3. Your home network
- Change any router password that is still the one it shipped with.
- Create a separate guest network for visitors, smart speakers and other connected devices.
- Make a short list of what is actually connected to your network. Most people are surprised by the answer.
- Review who still has remote access to your home systems, including anyone who installed or maintained them.
4. The people around you
- Agree a plain sentence for checking an unusual request, such as “did you actually send this?”, so nobody feels accused for asking it.
- Talk to family members or assistants about what they post publicly, and about you.
- Search your own name online, including alongside family members’ names, and note anything that surprises you.
- Identify whether anyone close to you has access to accounts or systems that matter to your security, and review it.
5. When something feels wrong
- Know, in advance, who you would call if you clicked something you should not have.
- Agree a call-back rule for any request involving money or credentials: confirm it on a known number before acting.
- If you do click something, disconnect the device, change the password from a different device, and keep the original message rather than deleting it.
- Treat a false alarm as a success, not a waste of anyone’s time. The habit only works if using it never feels like a mistake.
You do not need to do all of this in one weekend. You need to know where you stand, and pick one section to start with.
This checklist covers the habits that make the biggest difference. It will not catch everything, and it is not meant to replace a proper review of your specific situation. If you would like a second pair of eyes on where your own protection is worth strengthening first, we are one conversation away.
