How to Stay Safe Online

Most people have a vague sense that they should be doing more to protect themselves online. They know passwords should be stronger, that public Wi-Fi is risky, that phishing exists. But between knowing and actually implementing is where most of us stall. Let's make this actionable.

Let's be honest about this for a moment. It sounds simple on paper, and yet most people skip right past it without a second thought. The reason isn't laziness — it's usually habit, or the false sense that you already know what you're doing. But small adjustments here can change the entire experience.

The most important thing: a password manager

Weak, reused passwords are the single biggest security vulnerability for most ordinary people. A password manager (1Password, Bitwarden, and Dashlane are all excellent) generates strong, unique passwords for every account and stores them securely. You only need to remember one master password. This is the most important step you can take.

There's a version of this that most people do out of convenience, and a version that actually works. The gap between them is usually smaller than you'd expect — a few deliberate choices, a bit of advance thought, and suddenly the whole thing feels less like a compromise and more like something you genuinely chose.

"Weak, reused passwords are the single biggest security vulnerability for most ordinary people. A password manager (1Pass..."

Two-factor authentication on everything that matters

Enable 2FA on your email, your banking, your social media, and any account that holds sensitive information. An authenticator app (Google Authenticator or Authy) is more secure than SMS codes. This single step makes it dramatically harder for someone to access your accounts even if they have your password.

A friend who's been doing this for years told me something that stuck: the details you ignore at the start always come back around. Not as disasters, usually, but as persistent low-grade frustrations that you keep blaming on other things. Getting the foundation right eliminates a whole category of annoyance.

Recognising phishing attempts

Phishing emails and texts are getting increasingly sophisticated — they no longer look like Nigerian prince scams. The rule: any message creating urgency, asking you to click a link or provide credentials, should be treated with suspicion. Go directly to the website yourself rather than clicking. Call the organisation directly rather than responding.

Think of it as building good defaults. Not rules, exactly — more like the path of least resistance that also happens to lead somewhere good. Once those defaults are in place, you don't have to think about them anymore. They just run.

"Phishing emails and texts are getting increasingly sophisticated — they no longer look like Nigerian prince scams. The r..."

Public Wi-Fi

Avoid accessing sensitive accounts (banking, email, anything with personal data) on public Wi-Fi. If you must, a reputable VPN (Mullvad and ProtonVPN are both trustworthy) encrypts your traffic and significantly reduces the risk.

There's a version of this that most people do out of convenience, and a version that actually works. The gap between them is usually smaller than you'd expect — a few deliberate choices, a bit of advance thought, and suddenly the whole thing feels less like a compromise and more like something you genuinely chose.

Privacy hygiene

Regularly audit the apps and services that have access to your accounts and data. Remove any you no longer use. Review privacy settings on your social media profiles. Consider a privacy-focused browser (Firefox, Brave) and search engine (DuckDuckGo) for everyday use.

A friend who's been doing this for years told me something that stuck: the details you ignore at the start always come back around. Not as disasters, usually, but as persistent low-grade frustrations that you keep blaming on other things. Getting the foundation right eliminates a whole category of annoyance.

"Regularly audit the apps and services that have access to your accounts and data. Remove any you no longer use. Review p..."

None of this requires a complete overhaul. The beauty of small, consistent improvements is that they compound over time in ways that sudden big changes never quite manage. Start with one thing. Get comfortable with it. Then add another.

The people who do this well aren't necessarily the most disciplined or the most informed. They're the ones who've stopped treating it as something to get through and started treating it as something to actually enjoy. That shift in framing is worth more than any single tip I could give you.