Start with the security basics.

1. Protect account access

Use a different password for each account. A password manager can help keep track of them. Turn on multifactor authentication, especially for email, and save recovery codes securely.

2. Keep software current

Enable automatic updates when available. Check whether your device and operating system still receive security fixes.

3. Recognize suspicious requests

Pause when a message asks for urgent payment, a password, or a security code. Open the official app or type the address yourself instead of using the message link.

4. Prepare for recovery

Keep a separate copy of important files and practice restoring one. Document account recovery options before you need them.

Further reading: CISA Secure Our World.