Plain-language defenses against the threats that actually hit normal people: phishing, malware, ransomware, weak passwords, and unsafe browsing. Practical, opinionated, and built around habits you can keep.
Verify URLs before entering credentials, prefer bookmarks over search results for sensitive sites, never run software from links sent by strangers, and treat any 'urgent' message as suspicious by default.
Run through these steps in order. Each step links to the right diagnostic tool.
Turning on multi-factor authentication (MFA) on email and your password manager. Email is the master key — protect it first.
Yes. Reusing passwords is the single biggest cause of consumer account compromise. A manager turns hundreds of unique strong passwords into one habit.
Mismatched sender domain, urgency pressure, unexpected attachments, requests to confirm credentials, and links that don't match the visible text. When in doubt, navigate directly instead of clicking.
Not for safety on HTTPS sites — those are already encrypted. A VPN matters when you want privacy from your ISP or network operator, when traveling, or when geo-fencing applies.
Change the password on the breached account and anywhere you reused it, enable MFA, watch for follow-on phishing, and consider freezing your credit if PII was exposed.
Monitor it continuously
Save this check, get alerts on changes, and track multiple domains in one dashboard.
Curated tools we trust. Some links are sponsored — see our advertising disclosure.