6 Cybersecurity Habits to Help You Stay Safer Online

Good cybersecurity isn’t about having the most expensive tools - it’s about building smart, consistent habits. Here are six practical tips to help improve your online safety:

Habit #1: Lock Down Your Logins & Use MFA

Weak or reused passwords are like leaving your front door wide open. Make it a habit to create strong, memorable passphrases instead of complex character combinations. For example, "correct horse battery staple" is stronger than "P@ssw0rd1.” NIST’s guidance favors length over funky complexity; think four or more random words, unique per site, stored in a reputable password manager.

Turn on multi-factor authentication (MFA) wherever possible. MFA blocks a big chunk of account takeovers because a stolen password alone isn’t enough. Start with email, banking, payroll, and social accounts; you may want to consider an authenticator app over SMS. It’s a quick extra step that helps thwart account takeover attempts.

Make it stick

Enable MFA on your most important accounts first; e.g., password manager, email, cloud storage, and payroll.
Save app-based codes (TOTP) and keep backup codes somewhere safe.
Turn on breach alerts in your password manager to catch exposed logins fast.

Habit #2: Don’t Trust, Verify

Phishing scams remain the top initial vector, and they’re getting sneakier. Before you click a link or download an attachment, pause. Ask yourself:

Was I expecting this?
Does the sender’s address look right?
Is it asking for urgent action or sensitive info?

And always verify wiring instructions or payment changes by phone using a known number.

Make it stick

Flag “urgent” money or password requests
When in doubt, go direct: type the site URL instead of clicking email links

Habit #3: Update Without the Urgency

Software updates aren’t just about new features - they patch security holes. Make it a habit to update your devices and apps as soon as updates are available. Better yet, turn on automatic updates so you don’t have to think about it urgently.

Make it stick

Toggle automatic updates in Settings (OS, browser, mobile).
Remove software you don’t use.

Habit #4: Back It Up (and Test It)

Imagine losing all your business data tomorrow and the wider impact that might have. Make it a habit to back up your critical files regularly. Use the 3-2-1 rule:

3 copies
2 different types of storage
1 off-site (like the cloud)

And don’t just set it and forget it - test your backups periodically to make sure they actually work.

Habit #5: Secure Your Devices

Lost phones and laptops are a fast path to account compromise. Turn on device encryption (such as, FileVault on Mac, BitLocker on Windows, for example) and use antivirus or endpoint detection & response tools, if possible.

Make it stick

Enable screen-lock + auto-lock; add “Find My” and remote-wipe.
Avoid public Wi-Fi for sensitive tasks; use a hotspot when possible.

Habit #6: Talk About It

Cybersecurity isn’t just an IT concern - it’s a team effort. Make it a habit to talk about security with your employees. Share tips, celebrate good habits, encourage asking questions and reporting suspicious activity.