Use strong passwords
Think of passwords as the keys to your online accounts. Use a different password for every account so that if one password is stolen, your other accounts are still protected.
The best passwords are long and difficult to guess. A password manager can help you create and store strong passwords securely, so you don't have to remember them all yourself.
Try a passphrase
A passphrase is a password made up of four or more random words, such as "crystal onion clay pretzel" or "red house sky train".
Long passphrases are often easier to remember and harder for criminals to crack than short passwords.
Turn on multi-factor authentication (MFA)
Multi-factor authentication, sometimes called two-factor authentication or 2FA, adds an extra layer of security to your accounts. After entering your password, you'll also need a second form of verification, such as a code sent by text message, a code generated by an authentication app or a physical security key.
Even if someone learns your password, MFA can help stop them getting into your account. An authentication app or security key is stronger than a text message code, but any form of MFA is better than none.
Keep your devices and apps updated
When your phone, tablet or computer asks you to install an update, don't ignore it. Updates often contain important security fixes that close known weaknesses criminals use to get into devices.
Turn on automatic updates where you can, and keep your operating system, web browser, apps and security software up to date.
Be careful with unexpected messages
Scammers don't just use emails. They may contact you by text message, social media, messaging apps or phone calls.
Don't click links in unexpected messages, and be just as cautious about opening attachments, providing personal information or making a payment. If you're unsure, contact the organisation using details from its official website or app rather than those provided in the message.
Secure your home Wi-Fi
Your home Wi-Fi network gives all your connected devices access to the internet, so it's important to protect it.
Change the default login on your router, because default details can be found online. Use a strong password for your Wi-Fi network too and make sure your router's software is kept up to date whenever updates are available.
Think before sharing personal information
Be careful about how much personal information you share online. Details such as your full date of birth, home address, phone number and location can sometimes be used by scammers for identity theft or targeted scams.
Check your privacy settings on social media and only share information with people you trust.
Back up important files
Computers can fail, devices can be lost or stolen, and ransomware can lock you out of your own files.
Regularly back up important photos, documents and other files to an external hard drive, cloud storage service or both. Automatic backups make this easier, and it's worth opening a few backed-up files now and then to check they work. If something goes wrong, you'll still have access to your important information.
Use trusted websites
When shopping, banking or entering personal details online, check that the website address begins with "https://".
However, remember that HTTPS only means the connection is encrypted. It does not guarantee the website is genuine, and scammers can and do set up fake online stores that use it. Always check that you've visited the correct website and that you trust the organisation you're dealing with.
Trust your instincts
If something seems suspicious, rushed or too good to be true, it probably is.
Take your time, ask questions and seek advice from someone you trust if you're unsure. A little extra caution can help you avoid scams and protect your personal information.
Sources: Australian Cyber Security Centre (cyber.gov.au), Scamwatch (ACCC), the Office of the Australian Information Commissioner, IDCARE and CHOICE.
