Most cybersecurity mistakes aren't dramatic, they're small habits like using the same password twice, hitting "remind me later" on an update, or never changing the login on your router. The good news? Most of them take about five minutes to fix.
We pulled together the 10 mistakes we see most often, plus one quick fix for each. Pick one a day, or knock out a few over coffee. Either way, your Internet gets a little safer. Your Internet should be personal, here's how to keep it that way.
Ten fixes, five minutes each. Save this list and tick them off this month.
When one site gets breached, hackers try that same email and password on other sites. If you reuse passwords, one leak can unlock your email, your bank and your streaming accounts.
The 5-minute fix: Change the password on your main email account first. Make it long and unique. A short phrase works well, like four random words strung together. Then set up a password manager so you don't have to remember the rest. Most phones and browsers have one built in.
That "update available" pop-up isn't just new features. Updates often patch security holes that hackers already know about. Putting them off leaves the door open.
The 5-minute fix: Turn on automatic updates for your phone, computer and browser. On most devices it's a single setting. While you're there, run any updates that are waiting.
Many routers ship with a simple default login, like "admin" and "password." Those defaults are easy to look up online. Anyone who gets into your router settings can change your network, see what's connected or lock you out.
The 5-minute fix: Log in to your router's admin page. The address is usually printed on a sticker on the router. Change the admin password to something unique. While you're there, make sure your Wi-Fi uses WPA3 or WPA2 security and has its own strong password.
Phishing messages are getting harder to spot. They look like your bank, a delivery service or even a friend. One click on a bad link can install malware or hand over your login.
The 5-minute fix: Build a quick pause habit. Before you click, ask three questions:
If anything feels off, don't click. Go to the company's site or app directly instead. On a computer, hover over a link to see where it really goes.
Phones break. Laptops get stolen. Ransomware locks files and demands payment. Without a backup, your photos and documents can be gone for good.
The 5-minute fix: Turn on cloud backup for your phone. For your computer, pick a cloud backup service or an external drive and set it to run automatically. A good rule of thumb is the 3-2-1 rule: three copies, on two types of storage, with one kept off-site or in the cloud.
A password alone is one lock. Two-factor authentication (2FA) adds a second one, like a code from an app or a prompt on your phone. Even if someone steals your password, they still can't get in.
The 5-minute fix: Turn on 2FA for your email, bank and main social accounts. Look under "Security" or "Login" in each account's settings. An authenticator app is safer than text-message codes, but either beats nothing.
Coffee shop and airport Wi-Fi is handy. It's also shared with strangers. On an open network, someone nearby could set up a look-alike hotspot or snoop on unprotected traffic.
The 5-minute fix: Turn off auto-join for public networks on your phone and laptop. When you're out, skip banking and shopping on public Wi-Fi, or use your phone's data instead. If you work remotely, a trusted VPN adds another layer.
Your pet's name, your hometown, your birthday. These details often show up in security questions. Posting them publicly makes them easy to guess.
The 5-minute fix: Check the privacy settings on your social accounts and set posts to friends only. Then update any security questions with answers that aren't true or public. Store those answers in your password manager.
That app you downloaded once in 2019 may still have access to your location, contacts or camera. Old accounts you forgot about can still be breached.
The 5-minute fix: Scroll through the apps on your phone and delete the ones you don't use. Then check app permissions and turn off anything that doesn't need access. Bonus points: search your email for "welcome to" to find old accounts worth closing.
Smart TVs, speakers, cameras, game consoles, doorbells. The average home has a lot of devices online. Any one of them can be a weak spot if it's outdated or unknown.
The 5-minute fix: Open your router's app or admin page and look at the list of connected devices. If you see something you don't recognize, change your Wi-Fi password. Consider setting up a guest network for visitors and smart home gadgets, so they stay separate from your laptops and phones.
You don't need to be a tech expert to stay safe online. You just need a few good habits and about 50 minutes. Happy Cybersecurity Awareness Month. Now go change that router password.