Free Cyber Education

Personal Security Basics

This guide helps you verify and improve common security settings. Open your provider's website or app directly; never enter passwords, recovery codes, or private keys into an assessment or send them to ovniTEK.

Protect your primary email

Start with the email account you use to reset other accounts. Review its sign-in settings, enable a passkey or security key when available, or use an authenticator app. Keep an independent recovery method and verify recent account activity.

Protect your phone number

If your number can recover important accounts, ask your carrier about an account PIN and port-out lock. Where possible, prefer a passkey or authenticator over text codes for sensitive accounts.

Use unique passwords

Use a reputable password manager to generate a distinct password for each important account. Protect the manager with strong sign-in and a secure recovery method. Change any password that is reused or known to be exposed.

Keep recovery methods current

Review backup email addresses, trusted devices, and provider-issued recovery codes. Store codes separately and privately. Do not rely on a lost device as your only way back into an account.

Keep devices supportable

Turn on system updates and a screen lock. Confirm whether storage encryption is enabled before relying on it. Replace unsupported operating systems and review recovery options before making major changes.

Back up what matters

Keep at least one independent copy of files that would be difficult to replace. A synchronized folder may repeat a deletion across devices. Test restoring a harmless file to confirm the copy works.

Verify unexpected messages

When a warning asks you to sign in or call, avoid the supplied link or number. Open the known app or enter the service's address yourself, then check for a real alert. Use extra care on unfamiliar public networks.

Review breach exposure carefully

You can check your own email with Mozilla Monitor or Have I Been Pwned. A historical listing does not itself prove current compromise. Review affected accounts directly, replace exposed or reused passwords, and enable strong sign-in.

Review home Wi-Fi

If you manage the router, change its administrator password, check that updates are supported, and use WPA2 or WPA3 where compatible. Disable Internet-facing management unless you deliberately need it. If your provider manages the router, ask how it handles updates and account access. For router-specific steps, see the FTC home Wi-Fi guide.