Free Home Cyber Security Checklist

Start with your main email

Email is often the route back into other accounts.

My main email uses a strong password that I do not use elsewhere.Multi factor authentication is turned on for my main email.The recovery phone number and email address are current.I know where to check recent sign ins and security alerts.

Important accounts

Focus on the accounts that hold personal information or control other services.

My Apple, Google or Microsoft account has multi factor authentication turned on.Banking and payment accounts use the strongest sign in protection available.Social media recovery details and privacy settings have been reviewed.Important recovery codes are stored somewhere private and separate from the device.

Passwords

Unique passwords stop one compromised account from affecting several others.

I do not reuse the same password for important accounts.I use a reputable password manager or have a clear plan to start using one.Shared household accounts are managed without sending passwords in messages or email.

Phones and computers

Updates and screen locks reduce common risks if a device is lost or stolen.

Automatic updates are turned on for phones, tablets and computers.Every device has a PIN, password or biometric screen lock.Find My Device or the equivalent lost device service is set up.Old devices have been signed out, erased or stored securely.

Backups and home Wi-Fi

Check that important files can be restored and that your router and wireless network have sensible security settings.

Important photos and documents are backed up automatically.I have checked that at least one important file or photo can be restored.The home router's administrator password is no longer the default password.The router receives security updates and is still supported by its manufacturer or provider.Wi-Fi uses the strongest encryption my router supports and a strong, unique network password.The Wi-Fi network name does not reveal my name, address or other personal details.Visitors can use a guest network where available; smart-home devices are separated from computers and phones when the router supports it.

Scams and unusual requests

A short pause can prevent an urgent message from becoming an expensive mistake.

I verify unexpected money or account requests using contact details I already trust.My household has a simple way to verify unusual messages from family members.I know how to contact my bank quickly using its official app, card or website.

AI tools

AI accounts can hold conversations, uploaded files and links to other services.

AI accounts use a unique password and multi factor authentication where available.I have reviewed which email, file or calendar services are connected to AI tools.I avoid sharing passwords, banking details, identity documents or private family information with AI tools.

Recovery plan

Knowing what to do first makes a difficult situation easier to handle.

I know how I would recover my phone number and important accounts if my phone were lost.I know how to reach official account recovery pages without relying on links in messages.I know to contact my bank immediately if money or banking information is affected.Useful support and reporting contacts are recorded somewhere I can find them.

Home cyber security checklist.