How to stay safe online

Most attacks exploit the same gaps: outdated software, weak or reused passwords, missing backups, and rushed decisions. Fix those and you block the majority of threats.

Keep software updated

Enable automatic updates for your operating system, browser, and critical applications. Many breaches use vulnerabilities that were patched months or years earlier—the target simply had not updated. Reboot when updates require it; postponed reboots leave you exposed. For work devices, follow your organization's patch schedule.

Use unique passwords and two-factor authentication

A password manager lets you use a different, strong password for every site. When one site is breached, attackers cannot reuse your password elsewhere. Turn on two-factor authentication (2FA) for email, banking, and any account that can reset others. Prefer app-based codes or hardware keys over SMS when available—SMS can be hijacked via SIM swap.

Verify before you act on urgent requests

Attackers create urgency: "Your account will be locked," "The CEO needs a wire transfer now," "Confirm your identity immediately." Slow down. For financial or account changes, verify through a channel you initiate— call a number from your statement or the company's real website, not a number from the email. Legitimate organizations will not punish you for taking time to confirm.

Back up and test restores

Backups protect you from ransomware, hardware failure, and accidental deletion. Keep at least one copy that malware cannot reach—an external drive you disconnect after backing up, or a cloud service with versioning and separate credentials. Test that you can restore files. Backups that have never been tested often fail when you need them.

Be cautious with links and downloads

Do not click links in unexpected emails or messages. If you need to log in somewhere, type the address or use a bookmark. Avoid pirated software and random "codec" or "crack" downloads—they are common malware carriers. When your browser or antivirus warns about a file or site, take it seriously. For Tor onion addresses, verify through official sources—our trusted markets directory provides verified onion links for Crown, Erebus, Hades, and Vhagar.