Use a standard account for daily work, not root
The root account can change anything on your system. That power is useful now and then, and risky all the time. The safe habit is simple: do your everyday work in a normal user account, and only reach for admin rights when a task truly needs them.
Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.
Get my free Dashboard →
Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.
Why this matters
If a bad download or a mistyped command runs while you have full admin rights, it can change your whole system without stopping to ask. In a standard account it can't. It has to ask for your password first, which gives you a moment to think.
Check how you log in
Most desktop installs already set you up as a standard user with sudo rights, which is exactly what you want. To check, open your settings under Users. Your main account should be a normal or standard user, not "root". Direct root login should be switched off, and on most desktop distributions it already is.
If you need a second account
Setting up a separate account for someone else? Make it a standard user too. Only give admin rights to people who genuinely need them, and even then, they should use those rights only when required.
Track your Linux security progress. Free.
Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.
Start your free security check