laptop illuminating hands typing on keyboard in dark room

Best Practices to Stay Safe Online

Written by
Dan J Fell
Published
September 10, 2025
Updated
September 10, 2025

Staying safe online is harder than it has ever been, a challenge that grows as half (50%) of businesses report having experienced some form of cybersecurity breach or attack in the last 12 months. It may be out of your hands at that point, but personal information is as easy to guard as it is to give away. Utilizing these tips, you can keep yourself safe from account theft, identity theft, phishing scams, and more.

Utilize a password manager

According to a survey from Security.org, 89% of hacking victims used the same password more than once. A password manager allows you to store all of your usernames, passwords, emails, and more in one place. You set unique, randomly generated passwords for each account, while only needing to remember one login. This means if an account were to be compromised, it would only affect that account, preventing the spread of the damage.

Add layered protection with multi-factor authentication

Two-factor authentication adds a second step to your login by requiring a code that is either sent to your phone via text message or displayed in an app on your phone. This confirms that you are the one logging into your account by combining your password with your code, which works like a key. This code identifies you by your phone number or device, requiring you to have your second factor to log in, and preventing anyone who doesn’t have your phone from accessing your account.

Safeguard personal information

Do not share any of your personal information unless necessary, including with family members or other trusted people. Never share passwords, multi-factor authentication codes, or any other personal information with anybody. If a shared account is used, share only that unique password using a password manager. You can also obfuscate your email to hide your main email, which is personal information.

Be wary of urgent warnings, pop-ups, and sponsored content

Urgent warnings of immediate action needed from an unknown contact are usually clear indicators of a phishing scam. Pop-ups can mislead you into entering a scam by impersonating the site you are trying to reach, capturing any information you enter along the way. Sponsored content is a common avenue for scammers to use to impersonate reputable brands and companies, redirecting you to their scam website that likely uses some of the aforementioned tactics.

Avoid inbound scam tactics

Clicking links in emails you do not expect is dangerous, due to scam emails and impostor websites. These emails often impersonate well-known brands and their marketing materials. If looking for a specific brand, go directly to that brand’s website. If looking to call, use the number listed on their website. Reputable business listings are also often an accurate way to visit the correct website and call the correct number. Do not rely on sponsored ads or search engine summaries to get accurate website or contact information.

Skip the guest Wi-Fi

Do not use public, guest, or shared Wi-Fi to access sensitive personal information and accounts, such as those of financial institutions. Use a VPN to secure your connection before accessing any sensitive personal information and accounts on public Wi-Fi.

Secure home Wi-Fi and connected devices

Use a WPA2-AES or stronger encrypted password for your home Wi-Fi. This ensures attackers can’t access your personal information through your home Wi-Fi. Be sure to secure any smart devices by ensuring they aren’t broadcasting their own wireless signal once they’re connected.

Limit allowed smart home devices

Each smart home device is another attack vector for your personal information. If your smart home device, or smart home device company, were ever breached, attackers could have access to it. Keep to what is necessary and turn off what is not being used.

Keep devices updated

Security for software and devices is changing constantly, exposing vulnerabilities that were previously unknown. Always keep devices and software up to date to avoid security vulnerabilities and instability.

Ultimately, it is up to you to keep yourself safe online. Important steps to take include securing your accounts with unique passwords, using multi-factor authentication, and safeguarding personal information. Use your best judgment, and go with caution if you aren’t sure.