You don't need to be a security expert to stay safe online. These practical steps cover the most common threats and how to protect yourself from them.
Using the same password across multiple sites is the single biggest security mistake people make. If one site gets hacked, every account with that password is compromised.
A strong password is:
Tip: A passphrase is easier to remember and just as secure. Try something like Purple!Horse9Running — long, random, and memorable.
Nobody can remember dozens of unique passwords — that's what password managers are for. They store all your passwords securely and fill them in automatically.
Screenshot: Bitwarden browser extension filling in a password
Important: Your master password is the one password you must never forget and never write down digitally. Write it on paper and store it somewhere safe at home.
Two-factor authentication means that even if someone gets your password, they still can't log into your account without a second code from your phone. Turn this on for every important account.
Screenshot: Two-factor authentication setup page showing QR code
Tip: Save your backup codes when 2FA is set up. These let you get back into your account if you lose your phone. Store them somewhere safe.
Phishing emails pretend to be from legitimate companies to trick you into giving up your password or clicking a malicious link. Here's how to spot them:
Screenshot: Example phishing email with suspicious sender address highlighted
Remember: Your bank, Microsoft, Apple, and the CRA will never ask for your password by email. Ever. If you receive such an email, delete it.
Most successful attacks exploit known security holes that have already been patched in updates. Keeping your software up to date is one of the most effective things you can do.
Screenshot: Windows Update showing all updates installed