🔒 Cybersecurity — Stay Safe Online

1. Why This Matters

Ransomware, phishing, and identity theft aren't things that only happen to corporations. Regular people lose savings, social media accounts, and personal data every day. The good news: the basics are easy, and they stop the overwhelming majority of attacks.

You don't need to be a security expert. You need good habits. This guide covers everything that matters for a regular computer user.

2. Password Hygiene

The solution is three rules:

1. Use a password manager. It generates, stores, and auto-fills unique passwords for every site. You only need to remember one master password. This is the single biggest security upgrade you can make.
2. Unique password per site, always. If your password for a forum leaks, attackers can't use it anywhere else.
3. Minimum 14 characters. Length beats complexity. "correct-horse-battery-staple" is stronger than "P@ssw0rd!" and easier to remember.

3. Two-Factor Authentication (2FA)

2FA adds a second check after your password — usually a 6-digit code that changes every 30 seconds. Even if an attacker has your password, they can't log in without the code from your phone.

App-based 2FA (recommended): Install an authenticator app on your phone:

• Aegis (Android, free, open-source) — best option for Android users
• Google Authenticator or Microsoft Authenticator — widely supported, easy to use

Enable 2FA immediately on: Gmail / Google, GitHub, your bank, PayPal, social media accounts, and anywhere you store money or personal data.

How to enable on Gmail: Google Account → Security → How you sign in → 2-Step Verification → Get started.

4. Recognising Phishing

Phishing is the number one way accounts get compromised — fake emails or websites designed to steal your credentials. Train yourself to spot the red flags:

• Urgency. "Your account will be closed in 24 hours!" Legitimate services don't panic you into clicking.
• Wrong sender address. The name says "PayPal" but the email is from noreply@paypa1-support.ru. Look at the actual address, not the display name.
• Hover before you click. Hover over any link to see the real destination URL in your browser's status bar. Does it match where it claims to go?
• Spelling and grammar errors. Professional companies proofread their emails. Typos and awkward phrasing are red flags.
• Requests for passwords or payment. No legitimate company will ever ask for your password by email or in a chat message.
• Unexpected attachments. Especially .exe, .zip, .docm, or .xlsm files from unknown senders.

5. Safe Browsing

• Check for HTTPS (padlock icon in the address bar) before entering any personal information. HTTP sites transmit data unencrypted.
• Install uBlock Origin. It blocks ads, trackers, and malicious scripts. Available free for Chrome, Firefox, and Edge. Reduces attack surface significantly.
• Avoid public Wi-Fi for sensitive tasks. Coffee shop Wi-Fi is unencrypted. Don't do online banking or log into important accounts on it without a VPN.
• Use a VPN on public networks. A VPN encrypts your traffic even on unencrypted networks. See section 6 for VPN recommendations.
• Don't reuse browser sessions. If you use a shared or public computer, always browse in private/incognito mode and sign out when done.

6. VPNs — What They Do (and Don't Do)

A VPN (Virtual Private Network) encrypts your internet traffic between your device and the VPN server. What it does:

• Protects you on public Wi-Fi — your ISP (and coffee shop owner) can't see your traffic
• Hides your IP address from websites you visit
• Can bypass regional content restrictions

What it doesn't do:

• Make you anonymous — the VPN provider can still see your traffic
• Protect you from phishing, malware, or bad passwords
• Replace HTTPS — you still need it

Paid options worth it: Mullvad (€5/month, accepts cash, no account email needed) and Proton VPN Plus are consistently recommended by privacy researchers.

7. Keep Software Updated

The vast majority of successful malware attacks exploit known vulnerabilities — security holes that were already patched, but on unpatched systems. Updating is the simplest security measure that exists.

• Enable automatic Windows updates. Settings → Windows Update → Advanced options → Automatic. Let them run.
• Update your browser automatically. Chrome, Firefox, and Edge auto-update by default. Don't disable this.
• Uninstall unused software. Every installed program is a potential attack vector. If you haven't used it in a year, remove it.
• Update your router firmware. Most people never do this. Check your router's admin panel (usually 192.168.1.1) and update if available.

8. Backup Strategy — The 3-2-1 Rule

The 3-2-1 rule is the industry standard for backup strategy. It protects against hardware failure, ransomware, fire, and theft:

Practical example: Your main PC (copy 1) + an external hard drive (copy 2, different media) + Google Drive or OneDrive sync (copy 3, offsite).

Free cloud options: Google Drive (15GB free), Microsoft OneDrive (5GB free, 15GB with a Microsoft 365 subscription), Backblaze Personal Backup (~$9/month for unlimited, excellent value).

9. What To Do If You've Been Hacked

Stay calm. Act fast. In order:

10. Free Security Tools