First thing: keep your software updated. It sounds boring, but it actually matters a lot. The National Cybersecurity Alliance recommends turning on automatic updates for your operating system, browsers, antivirus tools, and apps whenever possible. You can usually find those options in your Settings menu. When you ignore update notifications, you’re basically leaving a door unlocked that the developers already built a lock for.
Passwords are the next big one. Weak or stolen passwords are one of the most common ways hackers get into accounts. Use strong passwords, keep them stored somewhere secure (not a sticky note on your monitor), and don’t share them with anyone. Many sites now offer extra security options for free, like two-factor authentication, so it’s worth turning those on wherever you can.
Back up your files. Seriously. The FTC recommends copying important files to an external hard drive on a regular basis so that if something goes wrong — a virus, a crash, anything — you haven’t lost everything. It takes maybe ten minutes to set up. Future you will be grateful.
And don’t wait until something bad happens to start caring about this stuff. A little bit of setup now means you’re not scrambling later trying to undo the damage.