Online security: where to start
Most account takeovers don’t need any clever hacking. A reused password or one click on a fake link is enough. A handful of habits closes those doors better than any single app, and a VPN is just one of them.
Passwords
The usual story goes like this: some site where you once made an account gets breached. Criminals take the list of emails and passwords and automatically try them on email, banking and shopping sites. If you reuse a password, one company’s problem becomes yours everywhere.
A password manager fixes this. It creates long, random passwords and fills them in for you, so the only one you need to remember is the one for the manager itself. The managers built into browsers and phones are decent these days if you’d rather not install anything.
Two-factor authentication
Turn it on at least for email, banking and social media. Authenticator apps or hardware keys are the strongest options. SMS codes are better than nothing but the easiest to intercept. More and more services also support passkeys, which replace the password altogether.
Updates
Security patches for your system, browser and apps close holes that someone already knows about and is using. Automatic updates are the simplest protection you can switch on. That includes your router, which most of us only think about when it stops working.
Phishing
A text about a parcel fee, an email “from your bank” about a locked account, a message from a friend asking for a code. The pattern is always the same: urgency plus a link. A few rules go a long way:
- don’t click links in messages you weren’t expecting, go to the site yourself,
- check the address bar before you type a password,
- remember that your bank will never ask for your password or one-time codes by phone or text,
- treat time pressure as a warning sign, not a reason to hurry.
Public Wi-Fi
You share a café or airport network with strangers and have no idea how it’s set up. A fake hotspot called “Airport_Free_WiFi” can capture the traffic of everyone who joins it. A VPN encrypts data on your device before it goes anywhere, so a middleman can’t read it. There’s a short checklist in VPN on public Wi-Fi.
Less data, less risk
Every account you no longer use is another place your data can leak from. It’s worth clearing them out now and then, and checking which apps on your phone can see your location, contacts or microphone. A browser that blocks trackers limits what ad networks know about you. We look at what a VPN adds to this in Online anonymity.
Backups
Ransomware, a dead drive, a lost phone. In every case, a backup is what saves you. A good rule: three copies of your data on two different kinds of storage, with one kept somewhere else, for example in the cloud.
Where a VPN fits
A VPN protects your connection. It encrypts traffic, hides your IP address and lets you choose which country you appear to be in. It won’t replace good passwords or updates, but it closes a gap most people never think about. If you’re looking for one, start with the map and the provider comparison.