Search the guides

Showing all 185 guides. Start typing to narrow your search.

• Guide

  How to turn on two-step verification for your Google account on Android

  Step-by-step guide to enabling two-step verification on your Google account from an Android phone. Takes about 5 minutes.

  Android

• Guide

  How to set up an authenticator app on Android

  How to switch from SMS text codes to an authenticator app for your Google account. More secure and works without signal.

  Android

• Guide

  How to set up a password manager on your Android phone

  Set up a free password manager on Android to create and store strong, unique passwords. Works across all your apps and websites.

  Android

• Guide

  How to review app permissions on Android

  Step-by-step guide to reviewing which apps have access to your camera, location, contacts, and microphone on Android and Samsung phones.

  Android

• Guide

  How to set up Find My Device on Android

  Enable Find My Device on Android so you can locate, lock, or wipe your phone remotely if it is lost or stolen.

  Android

• Guide

  How to review which apps have access to your Google account

  Check which third-party apps and services can access your Google account, and remove any you no longer use or recognise.

  Android

• Guide

  How to back up your Android phone to Google Drive

  Enable automatic Google Drive backup on Android to protect your photos, contacts, and app data in case your phone is lost or damaged.

  Android

• Guide

  How to set up data breach alerts with Have I Been Pwned

  Use Have I Been Pwned to check if your email address has appeared in a data breach and get free alerts for future breaches.

  Android

• Android

  Android security: where to start

  If you want to make your Android phone more secure but do not know where to begin, this guide is the right place to start. It explains what the main risks are, which steps make the biggest difference, and how our guides are organised so you can work through them at your own pace.

  Android, All audiences

• Android

  How secure is your Android phone? A quick check

  Not sure how well-protected your phone already is? This guide runs through five quick checks, covering the areas that matter most for Android security. Each one takes about two minutes. Work through each check below: if you find a gap, follow the link for a step-by-step guide to fix it.

  Android, All audiences

• Android

  New phone setup: essential security steps

  Setting up a new Android phone correctly from the start is one of the most effective things you can do for your security. This checklist covers the essential steps; each one takes a few minutes and ensures your phone is protected from day one.

  Android, All audiences

• AndroidUser Access Control

  Screen lock, PIN, and biometrics on Android

  Your screen lock is the first line of defence against anyone who picks up your phone. This guide walks you through setting up a strong lock screen PIN or password and adding biometric options such as fingerprint or face unlock.

  Android, All audiences

• AndroidUser Access Control

  Two-factor authentication on Android

  Two-factor authentication (2FA) adds a second layer of security to your accounts. Even if someone knows your password, they cannot log in without a second verification step. This guide explains how to set it up on your Android phone.

  Android, All audiences

• AndroidUser Access Control

  Securing your Google account

  Your Google account is the key to your Android phone. It controls access to your email, cloud backup, payment details, and every app you have signed into with Google. This checklist covers the essential steps to lock it down.

  Android, All audiences

• AndroidUser Access Control

  Managing passwords on Android

  Using weak or reused passwords is one of the most common causes of account takeover. This guide explains how to manage passwords securely on Android, including how to use a password manager to make strong, unique passwords effortless.

  Android, All audiences

• AndroidUser Access Control

  Find My Device and remote wipe

  If your Android phone is lost or stolen, Google's Find My Device lets you locate it, lock it, or wipe it remotely, before anyone else can access your personal data. This guide shows you how to enable it and what to do if you ever need it.

  Android, All audiences

• AndroidMalware Protection

  Understanding app permissions on Android

  Every Android app must ask your permission before accessing sensitive features like your camera, microphone, location, or contacts. Understanding what these permissions mean (and which ones to grant) is one of the most effective ways to protect your privacy and security.

  Android, All audiences

• AndroidMalware Protection

  Staying safe on Google Play

  Google Play is the safest place to download Android apps, but not every app in the store is trustworthy. This guide explains how to use Google Play safely, spot warning signs, and make sure your installed apps are not putting you at risk.

  Android, All audiences

• AndroidMalware Protection

  Recognising and avoiding fake apps

  Fake apps mimic legitimate applications to steal your data, harvest passwords, or display fraudulent adverts. They appear on Google Play and on unofficial sites. This guide explains how to spot them before you install, and what to do if you already have one on your device.

  Android, All audiences

• AndroidSecure Configuration

  Sideloading apps: risks you need to know

  Sideloading means installing an Android app from outside Google Play by enabling "Install unknown apps". Android allows this, but it comes with significant security risks. This guide explains what sideloading is, why it is risky, and how to do it more safely if you must.

  Android, All audiences

• AndroidMalware Protection

  Android antivirus and security apps

  Android includes built-in security through Google Play Protect, but there are situations where an additional security app adds value. This guide explains what built-in protection covers, when a security app makes sense, and what to look for if you choose one.

  Android, All audiences

• AndroidMalware Protection

  Safe browsing on Android Chrome

  Chrome on Android includes several security features that protect you from phishing sites and malware. This guide walks you through enabling them, and explains how to spot dangerous sites before you enter any personal information.

  Android, All audiences

• AndroidFirewalls

  Public Wi-Fi safety on Android

  Public Wi-Fi in cafes, hotels, airports, and shopping centres is convenient but can be risky. This guide explains the specific risks of public Wi-Fi, what attackers can do, and the straightforward steps you can take to stay safe on any public network.

  Android, All audiences

• AndroidFirewalls

  Using a VPN on Android

  A VPN (Virtual Private Network) encrypts your internet traffic and routes it through a secure server, protecting your data on public Wi-Fi and reducing tracking. This guide explains what a VPN does, when you need one, and how to set it up on Android.

  Android, All audiences

• AndroidFirewalls

  Bluetooth security on Android

  Bluetooth is convenient for headphones, speakers, and car systems, but leaving it on when you do not need it increases your attack surface. This guide covers the key Bluetooth security settings and what you need to know about safe pairing.

  Android, All audiences

• AndroidFirewalls

  Home network security for Android users

  Your home Wi-Fi network connects your Android phone to the internet, and is often the least-secured link. This guide covers the key steps to secure your home router and Wi-Fi network, which protects every device that connects through it.

  Android, All audiences

• AndroidSecurity Update Management

  Keeping Android up to date

  Keeping your Android phone updated is the single highest-impact security action you can take. Software updates patch known vulnerabilities that attackers actively exploit. This guide shows you how to check for updates, enable automatic updates, and what to do if your device no longer receives them.

  Android, All audiences

• AndroidSecure Configuration

  Android privacy settings: a practical guide

  Android collects and shares a significant amount of data by default. This checklist walks through the most important privacy settings to review and what each one means for your security and personal data.

  Android, All audiences

• AndroidSecure Configuration

  Backing up your Android phone

  A backup ensures that if your phone is lost, stolen, or needs a factory reset, your data is not gone for ever. Android's built-in Google backup is the easiest solution. This guide shows you how to enable it, verify it is working, and understand what it protects.

  Android, All audiences

• AndroidSecure Configuration

  Android device encryption

  Device encryption scrambles all the data stored on your phone so that it cannot be read without the correct PIN or password. Modern Android phones are encrypted by default, but it is worth understanding what this means and what it protects you against.

  Android, All audiences

• AndroidSecure Configuration

  Notification privacy on Android

  Notifications on your lock screen can reveal sensitive information (banking alerts, private messages, verification codes) to anyone who glances at your phone. These settings let you control what appears without disabling notifications entirely.

  Android, All audiences

• Android

  Android phishing: how to spot and avoid it

  Phishing is one of the most common ways attackers target Android users. It involves tricking you into visiting a fake website or entering personal information through a deceptive message or link. This guide explains how phishing works on Android, how to spot it, and what to do if you have clicked something suspicious.

  Android, All audiences

• Android

  Smishing (text message scams): what to do

  Smishing is phishing delivered by SMS (text message). It is one of the most common scam methods targeting people in the UK, with over 45 million spam texts sent daily. This guide explains how to recognise smishing messages and what to do when you receive one.

  Android, All audiences

• Android

  What to do if your Android is hacked

  If you suspect your Android phone has been compromised, acting quickly can limit the damage. This guide walks you through the warning signs of a hacked phone and the steps to take (in order) to secure your device and accounts.

  Android, All audiences

• Android

  Parental controls on Android

  Android and Google offer built-in parental controls through Family Link, which lets you manage what apps your child can access, set screen time limits, and review their activity. This guide covers the key steps to set up and manage parental controls on Android.

  Android, All audiences

• AndroidUser Access Control

  SIM swapping: what it is and how to protect yourself

  SIM swapping (also called SIM hijacking) is an attack where a criminal convinces your mobile network to transfer your phone number to a SIM card they control. Once they have your number, they can intercept SMS verification codes and take over your accounts. This guide explains how it works and how to protect yourself.

  Android, All audiences

• Windows

  Windows security: where to start

  Securing a Windows PC sounds like a big job. It isn't. A handful of settings do most of the work, and Windows has good protection built in: you mainly need to switch it on and check it. This guide is your starting point. It explains what to focus on, in plain English, with no jargon.

  Windows, All audiences

• Windows

  Is your Windows PC already protected?

  Before you change anything, it's worth seeing where you already stand. A lot of Windows protection is on by default, so you may be in better shape than you think. This check takes about five minutes.

  Windows, All audiences

• WindowsUser Access Control

  Microsoft account security

  Most Windows PCs sign in with a Microsoft account. That account is the key to your device, your email, and often your files, so it's worth protecting well. Three steps do the heavy lifting.

  Windows, All audiences

• WindowsUser Access Control

  Windows Hello: PIN and biometrics

  Windows Hello lets you sign in with a PIN, a fingerprint, or your face instead of typing a password. It sounds less secure. It's actually more secure.

  Windows, All audiences

• WindowsUser Access Control

  Standard and admin accounts on Windows

  When you set up a Windows PC, the first account is usually an administrator. It can install software and change any setting. Handy, but if malware runs while you're signed in as admin, it inherits those same powers.

  Windows, All audiences

• WindowsUser Access Control

  Using a password manager on Windows

  Reusing the same password across sites is one of the most common ways accounts get broken into. A password manager fixes that by remembering a strong, unique password for every account, so you don't have to.

  Windows, All audiences

• WindowsMalware Protection

  Windows Defender: what it does and how to check it

  Windows comes with solid antivirus built in, called Microsoft Defender. For most home users it's all you need, as long as it's switched on and up to date. Here's how to check.

  Windows, All audiences

• WindowsMalware Protection

  Safe browsing on Windows

  Your web browser is your front door to the internet, so it's worth setting up well. All the main browsers have built-in protection that warns you about dangerous sites and downloads. It's usually on by default, but it's worth checking.

  Windows, All audiences

• WindowsMalware Protection

  Downloading software safely on Windows

  A lot of Windows malware arrives dressed up as software you meant to install. A few simple habits keep you safe.

  Windows, All audiences

• WindowsMalware Protection

  Recognising and avoiding ransomware

  Ransomware is malware that locks up your files and demands payment to unlock them. It sounds frightening, but a few habits make it very unlikely, and a good backup makes it a non-event.

  Windows, All audiences

• WindowsFirewalls

  Windows Firewall: what it does and how to check it

  A firewall decides what's allowed to connect to your PC and what's blocked. Windows has one built in, and it's on by default. It's worth knowing it's there and how to check it.

  Windows, All audiences

• WindowsFirewalls

  Securing your home router from a Windows PC

  Your router is the front door to your whole home network, so a few minutes spent securing it protects every device you own. You can do all of this from your Windows PC in a browser.

  Windows, All audiences

• WindowsSecure Configuration

  Using a VPN on Windows

  A VPN, or virtual private network, creates a private, encrypted tunnel for your internet traffic. It's useful in specific situations rather than something everyone needs all the time.

  Windows, All audiences

• WindowsSecure Configuration

  Public Wi-Fi risks for Windows users

  Public Wi-Fi is convenient, but you don't know who else is on the network or who set it up. A laptop can be more exposed than a phone, so a few settings are worth checking.

  Windows, All audiences

• WindowsSecurity Update Management

  Windows Update explained

  Keeping Windows updated is the single most effective thing you can do for security. Windows sends three kinds of update, and it helps to know what each one is.

  Windows, All audiences

• WindowsSecure Configuration

  BitLocker: encrypting your Windows laptop

  Encryption scrambles the data on your drive so it's unreadable without your sign-in. If your laptop is lost or stolen, encryption means your files can't simply be read off the drive. On Windows this is called BitLocker.

  Windows, All audiences

• WindowsSecure Configuration

  Secure Boot explained

  Secure Boot is a setting in your PC's firmware that stops malicious software loading before Windows even starts. That kind of malware is very hard to detect once it's running, so Secure Boot is an important early line of defence.

  Windows, All audiences

• WindowsSecure Configuration

  Disabling Remote Desktop when you don't need it

  Remote Desktop lets someone control your PC from another computer. It's genuinely useful for some people, but if you don't use it, it's worth confirming it's switched off, because it's a common target for attackers.

  Windows, All audiences

• WindowsSecure Configuration

  Reviewing your Windows privacy settings

  Windows collects some data by default, and apps can ask to reach your location, camera, and microphone. Tidying these settings reduces what is shared and limits the damage if an app is ever compromised.

  Windows, All audiences

• WindowsMalware Protection

  Phishing on Windows: what to look for

  Phishing is a message or pop-up designed to trick you into handing over a password or clicking something harmful. It's the most common way ordinary people get caught out, and spotting it is a skill anyone can learn.

  Windows, All audiences

• WindowsMalware Protection

  What to do if your Windows PC is hacked

  If you think your PC has been compromised, don't panic. Working through a few clear steps in order will limit the damage and get you back to normal.

  Windows, All audiences

• WindowsSecure Configuration

  Backing up your Windows PC

  A backup is the safety net behind everything else. If a PC is lost, broken, or hit by ransomware, a good backup turns a disaster into an inconvenience. It's the most reassuring hour you'll spend.

  Windows, All audiences

• Mac

  Mac security: where to start

  Macs are well built for security, but most of the protection only works once you switch it on. The good news is that the settings that matter most take a few minutes each, and you only set them once.

  Mac, All audiences

• Mac

  A 10-minute Mac security check

  Already set your Mac up a while ago? This quick check confirms the important protections are still on. It takes about ten minutes and needs no technical knowledge.

  Mac, All audiences

• MacUser Access Control

  Secure your Apple Account

  Your Apple Account is the key to your iCloud photos, backups, Find My, and anything you've bought from Apple. Protecting it well protects all of that at once.

  Mac, All audiences

• MacUser Access Control

  Set up Touch ID and a strong login password

  Your login password is the lock on your whole Mac. If it's short or reused from another account, that lock is weak. A strong password with Touch ID gives you both safety and convenience.

  Mac, All audiences

• MacUser Access Control

  Use a standard account for everyday work

  Most Macs are set up with a single administrator account that's used for everything. Doing your daily work in a standard account instead is a simple way to limit what any malicious software can do.

  Mac, All audiences

• MacUser Access Control

  Use iCloud Keychain or a password manager

  Reusing passwords is the single most common reason accounts get taken over. A password manager fixes it by creating and remembering a strong, unique password for every site, so you only remember one.

  Mac, All audiences

• MacSecure Configuration

  Turn on Find My Mac

  If your Mac is lost or stolen, Find My lets you locate it, lock it, or erase everything on it from another Apple device or from iCloud.com. It takes a minute to switch on and could save your data.

  Mac, All audiences

• MacMalware Protection

  Gatekeeper: only run trusted apps

  Gatekeeper is a macOS feature that checks an app is from a known, trusted source before it opens. It's your first line of defence against dodgy software, and it's on by default.

  Mac, All audiences

• MacMalware Protection

  How macOS blocks malware, and topping it up

  Every Mac has built-in malware protection called XProtect. It works quietly in the background, updates itself, and removes known threats, so most people don't need to buy anything extra.

  Mac, All audiences

• MacMalware Protection

  Downloading software safely on a Mac

  Most malware that reaches a Mac arrives inside something the owner downloaded and installed. The good news is that a few simple habits remove nearly all of that risk.

  Mac, All audiences

• MacMalware Protection

  Protecting a Mac from ransomware

  Ransomware locks your files and demands money to unlock them. It's less common on Macs than on some systems, but the way to defeat it is the same everywhere: make sure you can restore your files without paying.

  Mac, All audiences

• MacFirewalls

  Turn on the macOS firewall

  A firewall controls which connections are allowed to reach your Mac from the network. macOS has a good one built in, and turning it on adds a useful layer, especially on shared or public networks.

  Mac, All audiences

• MacFirewalls

  Secure your home router

  Your router is the gateway between your home and the internet, so securing it protects every device you own, not just your Mac. Three settings make the biggest difference.

  Mac, All audiences

• MacSecure Configuration

  Using a VPN on a Mac

  A VPN scrambles your internet connection so that others on the same network can't read it. It's most useful on public Wi-Fi, and less necessary at home.

  Mac, All audiences

• MacSecure Configuration

  Public Wi-Fi safety on a Mac

  Public Wi-Fi in cafés, hotels, and airports is convenient, but you're sharing it with strangers and it's often unsecured. A few simple habits keep you safe without giving it up.

  Mac, All audiences

• MacSecurity Update Management

  Keep macOS up to date automatically

  Software updates are the single most effective security habit there is. Most attacks rely on flaws that have already been fixed in an update, so a Mac that keeps itself current is a much harder target.

  Mac, All audiences

• MacSecure Configuration

  Turn on FileVault disk encryption

  FileVault encrypts everything on your Mac's disk. Without it, someone who takes your laptop could read your files by getting around the login. With it on, your data is scrambled and useless to them.

  Mac, All audiences

• MacSecure Configuration

  Review privacy permissions

  macOS asks apps to request permission before they can reach sensitive things like your camera, microphone, or files. Reviewing those permissions now and then keeps apps to only what they genuinely need.

  Mac, All audiences

• MacSecure Configuration

  Turn off Sharing services you don't use

  macOS can share your screen, files, and even a full remote login with other computers. These are handy for some people, but if they're on when you don't need them, they're an open door. Most home users can safely turn them all off.

  Mac, All audiences

• MacSecure Configuration

  Back up your Mac with Time Machine and iCloud

  A backup is the safety net behind everything else. If your Mac is lost, broken, or hit by ransomware, a recent backup means you lose almost nothing. It's the most reassuring hour you'll spend.

  Mac, All audiences

• MacMalware Protection

  Phishing and fake alerts on a Mac

  Phishing is a message or pop-up designed to trick you into handing over a password or clicking something harmful. It's the most common way ordinary people get caught out, and spotting it is a skill anyone can learn.

  Mac, All audiences

• MacMalware Protection

  What to do if your Mac is compromised

  If you think your Mac has been compromised, don't panic. Working through a few clear steps in order will limit the damage and get you back to normal.

  Mac, All audiences

• MacSecure Configuration

  If your Mac is lost or stolen

  Losing a laptop is stressful, but if you've set a few things up in advance, your data stays protected and you have a real chance of getting it back. Here's what to do, and what to have ready.

  Mac, All audiences

• iPhone

  iPhone security: where to start

  Your iPhone holds your messages, photos, banking, and the keys to almost every account you own. It's well protected out of the box, but a few settings turn that protection all the way up. Each takes a minute or two, and you only set them once.

  iPhone, All audiences

• iPhone

  A 10-minute iPhone security check

  Set your iPhone up a while ago? This quick check confirms the important protections are still on. It takes about ten minutes and needs no technical knowledge.

  iPhone, All audiences

• iPhoneUser Access Control

  Secure your Apple Account on iPhone

  Your Apple Account guards your iCloud backups, photos, messages, and Find My. Locking it down properly protects all of it at once, and it takes a couple of minutes.

  iPhone, All audiences

• iPhoneUser Access Control

  Set up Face ID or Touch ID

  Face ID and Touch ID let you unlock and approve things instantly while keeping a strong passcode behind them. That combination is both safe and effortless.

  iPhone, All audiences

• iPhoneUser Access Control

  Choose a strong iPhone passcode

  Your passcode is the master key to your iPhone. A four-digit PIN can be watched over your shoulder or guessed. A longer code is far harder to crack and only takes a moment to set.

  iPhone, All audiences

• iPhoneUser Access Control

  Use iCloud Keychain or a password manager

  Reusing the same password across sites is the most common way accounts get taken over. A password manager solves it by making a strong, unique password for each one, so you only remember your phone's passcode.

  iPhone, All audiences

• iPhoneSecure Configuration

  Turn on Find My iPhone

  If your iPhone goes missing, Find My lets you see where it is, lock it, or erase it from another device or from iCloud.com. It's one of the most useful protections on the phone, and it's quick to switch on.

  iPhone, All audiences

• iPhoneMalware Protection

  Only install from the App Store, and spot fakes

  One of the biggest reasons iPhones stay safe is that apps come from the App Store, where Apple reviews every one. Sticking to it removes most of the risk, and a couple of checks handle the rest.

  iPhone, All audiences

• iPhoneMalware Protection

  Review your app permissions

  Apps often ask for more access than they really need. Reviewing what each one can reach is a quick way to protect your privacy, and it takes about ten minutes.

  iPhone, All audiences

• iPhoneMalware Protection

  Safe browsing in Safari

  Most scams and dodgy downloads start with a website. Safari has built-in protections that warn you about dangerous sites, and a couple of settings make them stronger.

  iPhone, All audiences

• iPhoneMalware Protection

  Remove apps you don't use

  Apps you installed once and forgot still sit in the background, keep permissions, and occasionally receive updates. Clearing out the ones you don't use is a simple bit of housekeeping that improves both privacy and security.

  iPhone, All audiences

• iPhoneSecure Configuration

  Public Wi-Fi safety on iPhone

  Public Wi-Fi in cafés, hotels, and airports is handy, but you're sharing it with everyone else on it, and it's often unsecured. You don't have to avoid it, just use it with a little care.

  iPhone, All audiences

• iPhoneSecure Configuration

  Using a VPN on iPhone

  A VPN scrambles your internet connection so others on the same network can't read it. On an iPhone it's most useful on public Wi-Fi, and less needed on mobile data or your own home network.

  iPhone, All audiences

• iPhoneSecure Configuration

  Lock down AirDrop and Bluetooth

  AirDrop and Bluetooth are useful, but left wide open they let strangers nearby send you files or try to connect. Two quick settings keep them convenient without leaving the door open.

  iPhone, All audiences

• iPhoneSecure Configuration

  Secure your iPhone's Personal Hotspot

  Personal Hotspot shares your iPhone's mobile data with your laptop or other devices. It's genuinely useful, and safer than public Wi-Fi, as long as you don't leave it open for others to join.

  iPhone, All audiences

• iPhoneSecurity Update Management

  Keep iOS up to date automatically

  Keeping iOS current is the single most effective thing you can do for your iPhone's security. Most attacks rely on flaws that Apple has already fixed, so an up-to-date phone is a far harder target.

  iPhone, All audiences

• iPhoneSecure Configuration

  When to use Lockdown Mode

  Lockdown Mode is an optional, extra-strong protection built into the iPhone. It's not for everyone, but it's worth knowing about, and genuinely valuable for the small number of people who need it.

  iPhone, All audiences

• iPhoneUser Access Control

  Set a short auto-lock

  A passcode only protects you once the phone actually locks. If your iPhone stays awake for minutes after you set it down, anyone nearby can pick it up and get straight in. A short auto-lock closes that window.

  iPhone, All audiences

• iPhoneSecure Configuration

  Review your privacy and tracking settings

  Your iPhone has strong privacy controls, but a few are worth setting deliberately rather than leaving on their defaults. Ten minutes here reduces how much apps and advertisers learn about you.

  iPhone, All audiences

• iPhoneSecure Configuration

  Back up your iPhone

  A backup is the safety net behind everything else. If your iPhone is lost, broken, or stolen, a recent backup means you keep your photos, messages, and settings, and setting up a new phone becomes simple.

  iPhone, All audiences

• iPhoneMalware Protection

  Phishing on iPhone: fake texts and calls

  Phishing is a message designed to trick you into handing over a password, a code, or money. On a phone it arrives as texts, calls, and pop-ups, and spotting it is a skill anyone can learn.

  iPhone, All audiences

• iPhoneMalware Protection

  Smishing: scam text messages

  Smishing is simply phishing by text message, and it's one of the most common scams in the UK. The texts are designed to make you tap a link in a hurry, before you've had time to think.

  iPhone, All audiences

• iPhoneMalware Protection

  What to do if your iPhone is compromised

  iPhones are hard to hack directly, so a hacked phone usually means an account has been broken into or a scam profile has been installed. Either way, a few clear steps put you back in control.

  iPhone, All audiences

• iPhoneUser Access Control

  Use Screen Time to protect the family

  Screen Time is often thought of as a way to limit hours on a phone, but it's also a genuine set of safety controls, especially useful on a child's iPhone.

  iPhone, All audiences

• Linux

  Linux security: where to start

  Linux has a strong security reputation, and it's mostly deserved. But a lot of that protection depends on a few settings and habits, and they're easy to get right. You only need to set them once.

  Linux, All audiences

• Linux

  A 10-minute Linux security check

  Set your system up a while ago? This quick check confirms the important protections are still in place. It takes about ten minutes and needs no deep technical knowledge.

  Linux, All audiences

• LinuxUser Access Control

  Use a standard account for daily work, not root

  The root account can change anything on your system. That power is useful now and then, and risky all the time. The safe habit is simple: do your everyday work in a normal user account, and only reach for admin rights when a task truly needs them.

  Linux, All audiences

• LinuxUser Access Control

  Use sudo safely

  sudo is how you run a single command with admin rights from your normal account. It's the safe alternative to logging in as root, because it grants that power one command at a time and asks for your password first.

  Linux, All audiences

• LinuxUser Access Control

  A strong login password and automatic screen lock

  Two small settings protect everything on your machine: a strong login password, and a screen that locks itself when you're away. Neither takes long to sort out.

  Linux, All audiences

• LinuxUser Access Control

  Use a password manager on Linux

  You can't remember a strong, different password for every account, and you shouldn't try. A password manager does it for you. It creates long, unique passwords, stores them safely, and fills them in when you need them.

  Linux, All audiences

• LinuxMalware Protection

  Does Linux need antivirus? An honest answer

  Here's the honest answer: most home Linux desktops don't need a traditional, always-on antivirus. That's not because Linux can't be attacked. It's because the things that keep a Linux desktop safe are mostly habits and settings, not a resident scanner running in the background.

  Linux, All audiences

• LinuxMalware Protection

  Install software from trusted sources

  On Linux, where your software comes from is the single biggest thing that keeps you safe. Software from your distribution's official repositories is checked and signed. Software pasted from a random website is not, and that's how most Linux malware gets in.

  Linux, All audiences

• LinuxMalware Protection

  Scan for malware with ClamAV

  ClamAV is a free malware scanner for Linux. You don't need to run it all the time. It's most useful for checking files on demand, especially ones you'll send to Windows users, who are the more common target.

  Linux, All audiences

• LinuxFirewalls

  Turn on the firewall

  Most desktop Linux systems come with a firewall built in, but it isn't always switched on out of the box. A firewall blocks unexpected incoming connections to your machine, so turning it on is a quick win. For normal desktop use you don't need to open any ports at all.

  Linux, All audiences

• LinuxFirewalls

  Public Wi-Fi safety on Linux

  Public Wi-Fi in a cafe or hotel is convenient, but you don't control it and you don't know who else is on it. A few simple habits keep you safe without spoiling the convenience.

  Linux, All audiences

• LinuxFirewalls

  Using a VPN on Linux

  A VPN encrypts your internet connection and hides your browsing from whoever runs the network you're on. It's genuinely useful on public Wi-Fi, and it's simple to use on Linux. It's worth being clear about what it does and doesn't do, so you know when you actually need one.

  Linux, All audiences

• LinuxSecurity Update Management

  Keep Linux up to date

  Updates are the most important security habit on any system. Most attacks rely on a known flaw that's already been fixed, so a machine that's up to date simply isn't vulnerable to them. Linux makes this easy, because one update covers your whole system and most of your apps at once.

  Linux, All audiences

• LinuxSecurity Update Management

  Turn on automatic security updates

  The safest update is the one you don't have to remember. Both main families of Linux can install security updates on their own, which means you're protected even during the weeks you forget to check. It takes a minute to set up.

  Linux, All audiences

• LinuxSecure Configuration

  Encrypt your disk with LUKS

  Disk encryption scrambles everything on your drive until someone enters the right password at startup. If your laptop is lost or stolen, your files are just noise to whoever has it. On Linux this is called LUKS, and it's built in.

  Linux, All audiences

• LinuxSecure Configuration

  Review and turn off services you don't use

  A service is a program that runs quietly in the background. Some wait for network connections, and every one of those is a possible way in. On a home desktop you probably don't need most of them listening, so turning off the ones you don't use is a simple way to shrink your exposure.

  Linux, All audiences

• LinuxSecure Configuration

  Back up your Linux system

  A backup is the safety net behind everything else. If a drive fails, a laptop is stolen, or you delete the wrong thing, a recent backup turns a disaster into an inconvenience. It's also your best protection against ransomware, because you can restore rather than pay.

  Linux, All audiences

• LinuxMalware Protection

  Phishing and scams on Linux

  Running Linux protects you from a lot of malware, but it makes no difference at all to phishing. A scam email or fake login page works the same whatever system you're on, because it targets you, not your computer. This is the threat most likely to catch out a Linux user, so it's worth knowing the signs.

  Linux, All audiences

• Linux

  What to do if your Linux system is compromised

  It's rare on a home Linux desktop, but if you think something's wrong, acting calmly and quickly limits the damage. Signs might include your machine behaving strangely, accounts you can't get into, or a program you don't recognise asking for admin rights.

  Linux, All audiences

• LinuxSecure Configuration

  If your Linux laptop is lost or stolen

  Losing a laptop is stressful, but a few quick actions protect your accounts and your data. And one thing you set up beforehand, disk encryption, decides whether your files are safe or wide open.

  Linux, All audiences

• How-toFirewalls

  Change your router's default password

  Your router comes with a factory default password that is easy for attackers to guess. Change it to a strong, unique password.

  All platforms, Home

• How-toFirewalls

  Enable your router's built-in firewall

  Most routers include a built-in firewall that filters incoming traffic. Check that it is switched on.

  All platforms, Everyone

• How-toFirewalls

  Enable Windows Defender Firewall

  Make sure Windows Defender Firewall is turned on for both private and public networks on your Windows computer.

  All platforms, Everyone

• How-toFirewalls

  Review firewall rules on your business router

  Check that only necessary ports are open on your business network router. Close any ports that are not required.

  All platforms, Business

• How-toUser Access Control

  Set up Face ID and a strong passcode

  Turn on Face ID (or Touch ID) and move from a 4-digit PIN to a six-digit or longer passcode. This is the lock on everything else on your iPhone.

  All platforms, Everyone

• How-toSecure Configuration

  Turn on Find My iPhone

  Switch on Find My so you can locate, lock, or erase your iPhone from another device if it goes missing.

  All platforms, Everyone

• How-toMalware Protection

  Learn to spot and report scam texts

  Get familiar with the scam texts common in the UK, and know how to report them free so the networks can block them.

  All platforms, Home

• How-toFirewalls

  Turn on your Linux firewall

  Switch on the firewall that comes with your system so unwanted incoming connections are blocked by default.

  All platforms, Everyone

• How-toUser Access Control

  Do everyday work as a standard user, not root

  Use a normal user account for daily tasks and switch to admin rights with sudo only when a job truly needs them.

  All platforms, Everyone

• How-toMalware Protection

  Install software only from trusted sources

  Stick to your distribution's official repositories, its app store, or trusted formats like Flatpak, and avoid pasting install commands from unknown websites.

  All platforms, Everyone

• How-toSecure Configuration

  Review and turn off services you don't use

  Check which background services and remote-access tools are running, and switch off any you don't need, such as SSH on a home desktop.

  All platforms, Everyone

• How-toMalware Protection

  Enable real-time virus protection on all devices

  Make sure a reputable antivirus / anti-malware tool with real-time scanning is active on every computer you use.

  All platforms, Everyone

• How-toMalware Protection

  Enable safe browsing in your web browser

  Turn on phishing and malware protection in Chrome, Firefox, Safari, or Edge to warn you before you visit dangerous sites.

  All platforms, Home

• How-toMalware Protection

  Never open unexpected email attachments or links

  Treat any unexpected file attachment or link, even from someone you know, with suspicion before you click.

  All platforms, Everyone

• How-toMalware Protection

  Install approved security software on all business devices

  Ensure every device used for work has an approved, up-to-date endpoint protection tool installed and monitored.

  All platforms, Business

• How-toMalware Protection

  Turn on Gatekeeper to run only trusted apps

  Make sure macOS is set to allow apps only from the App Store and identified developers, so unverified software can't run without your say-so.

  All platforms, Everyone

• How-toUser Access Control

  Use a standard account for everyday work on your Mac

  Do your daily work in a standard account rather than an administrator account, so a bad click cannot make deep changes to your system.

  All platforms, Home

• How-toSecure Configuration

  Turn on Find My Mac

  Switch on Find My so you can locate, lock, or erase your Mac from another device if it is ever lost or stolen.

  All platforms, Everyone

• How-toSecure Configuration

  Review your Mac's privacy permissions

  Check which apps can reach your camera, microphone, files, and screen, and turn off any access an app doesn't need.

  All platforms, Home

• How-toSecure Configuration

  Enable full-disk encryption on your laptop

  Turn on BitLocker (Windows) or FileVault (Mac) to encrypt everything on your laptop's hard drive.

  All platforms, Everyone

• How-toSecure Configuration

  Remove unused apps and software

  Uninstall applications you no longer use from your devices. Every extra app is a potential vulnerability.

  All platforms, Everyone

• How-toSecure Configuration

  Review app permissions on your phone

  Check which apps have access to your camera, microphone, location, and contacts. Remove permissions that aren't needed.

  All platforms, Home

• How-toSecure Configuration

  Disable remote desktop access if not needed

  If you do not use Remote Desktop Protocol (RDP) or similar remote access tools, disable them on your computers.

  All platforms, Everyone

• How-toSecure Configuration

  Turn off software and features your business does not use

  Remove or switch off software, apps, and services on your business devices that nobody uses. Every extra program is one more thing that can be attacked.

  All platforms, Business

• How-toSecure Configuration

  Set up every new business device the same secure way

  Create one standard, secure setup and apply it to every business computer and phone before it is used, so nothing goes out with weak default settings.

  All platforms, Business

• How-toUser Access Control

  Use a password manager

  Install a password manager and move your passwords into it. A password manager generates and stores strong, unique passwords for every account, so you only need to remember one.

  All platforms, Everyone

• How-toMalware Protection

  Learn how to spot a phishing email

  Learn the three things to check before clicking any link in an email. Fake phishing emails are responsible for the majority of hacked accounts in the UK, and they are getting harder to spot.

  All platforms, Everyone

• How-toSecure Configuration

  Back up your most important files

  Set up automatic backup to the cloud for your photos, documents, and important files. If your device is lost, stolen, or infected with ransomware, a backup means you don't lose everything.

  All platforms, Everyone

• How-toMalware Protection

  Learn to recognise common UK scams

  Get familiar with the scams most commonly used against people in the UK right now, from fake parcel delivery texts to HMRC phone calls. Knowing what to expect is the first line of defence.

  All platforms, Home

• How-toUser Access Control

  Use an app for your login codes instead of texts. It's more secure

  Replace text message login codes with a free app such as Google Authenticator on your most important accounts. App-generated codes are more secure because they cannot be stolen, even if someone takes over your phone number.

  All platforms, Everyone

• How-toUser Access Control

  Check and update the passwords on your most important accounts

  Check that your email, banking, and social media accounts all have strong, unique passwords. Replace any that are reused across multiple sites or that are short and easy to guess.

  All platforms, Everyone

• How-toSecure Configuration

  Use a VPN when connecting to public Wi-Fi

  A VPN is a free or cheap app that scrambles your connection when you use public Wi-Fi in coffee shops, hotels, and airports. Without one, anyone else on the same network could potentially read your emails or login details.

  All platforms, Everyone

• How-toSecure Configuration

  Set your phone up to erase itself if it's ever lost or stolen

  Set your phone up so that if it is ever lost or stolen, you can erase everything on it from any other device. This takes a few minutes and could prevent serious data exposure.

  All platforms, Everyone

• How-toSecure Configuration

  Test that your backup actually works

  Restore a single file from your backup to confirm it is working correctly. Many people discover their backup has been failing silently only when they need it most.

  All platforms, Everyone

• How-toUser Access Control

  Sign up for data breach alerts

  Register your email address on Have I Been Pwned (haveibeenpwned.com) to receive free alerts if your details appear in a future data breach. You will hear about it before an attacker tries to use it.

  All platforms, Home

• How-toFirewalls

  Set up a guest Wi-Fi network at home

  Create a separate Wi-Fi network for visitors and smart home devices. A guest network isolates your main computers and phones from anything you do not fully control or trust.

  All platforms, Home

• How-toSecure Configuration

  Review your social media privacy settings

  Check who can see your posts, your location, and your personal information on each social media account. Fully public profiles give scammers and identity thieves easy access to information they can use against you.

  All platforms, Home

• How-toMalware Protection

  Set up email authentication for your domain (SPF, DKIM, DMARC)

  Add SPF, DKIM, and DMARC records to your domain's DNS settings. These prevent attackers from sending emails that appear to come from your business, protecting your clients, suppliers, and reputation.

  All platforms, Business

• How-toSecure Configuration

  Apply the 3-2-1 backup rule

  Keep 3 copies of important data, stored on 2 different types of media, with 1 copy held offsite or in the cloud. This approach protects against ransomware, hardware failure, fire, and theft simultaneously.

  All platforms, Everyone

• How-toUser Access Control

  Check your credit report for signs of identity theft

  Run a free credit check via Experian, Equifax, or TransUnion to see if anyone has applied for credit in your name. Catching identity theft early limits the financial and personal damage significantly.

  All platforms, Home

• How-toSecure Configuration

  Review what data Google holds about you

  Visit your Google account's privacy settings, review what activity and personal data is stored, and turn off any collection you are not comfortable with. Includes location history, search history, and ad personalisation.

  All platforms, Home

• How-toUser Access Control

  Use a physical security key to lock down your most important accounts

  A hardware security key (such as a YubiKey) is the most secure form of two-step verification available. Adding one to your email account and other critical accounts eliminates the risk of phishing-based account takeover entirely.

  All platforms, Everyone

• How-toUser Access Control

  Turn on login alerts for your social accounts

  Enable notifications for new logins on your Facebook, Instagram, X, and other social media accounts. You will be alerted immediately if someone accesses your account from an unrecognised device.

  All platforms, Home

• How-toUser Access Control

  Save your backup sign-in codes somewhere safe

  Print or securely save the backup codes for your most important accounts, especially those protected by a login-code app. These codes are the only way back in if you lose your phone.

  All platforms, Everyone

• How-toSecure Configuration

  Remove personal contact details from your social media profiles

  Review every social media profile and remove any personal information you do not need to share publicly: phone number, home address, birthday, and workplace. This information is routinely harvested for use in targeted scams and identity theft.

  All platforms, Home

• How-toSecure Configuration

  Set a strong screen lock on your phone

  Set a PIN, password, or biometric lock on your phone so that no one can access it if it is lost or stolen. A screen lock is the single most important protection on a mobile device.

  All platforms, Home

• How-toSecurity Update Management

  Keep your phone's operating system up to date

  Enable automatic updates on your iPhone or Android phone so that security patches are installed as soon as they are released. Outdated phone software is one of the most common ways attackers gain access to devices.

  All platforms, Everyone

• How-toMalware Protection

  Only install apps from official app stores

  Only download apps from the Apple App Store or Google Play Store, never from links in emails, text messages, or websites. Apps from unofficial sources bypass the security checks that Apple and Google apply to every app.

  All platforms, Everyone

• How-toUser Access Control

  Review and reduce app permissions on your phone

  Check which apps have access to your location, camera, microphone, and contacts, and remove any permissions that are not needed. Many apps request more access than they actually need to function.

  All platforms, Home

• How-toSecure Configuration

  Set your phone to lock automatically after 30 seconds

  Configure your phone to lock itself automatically after 30 seconds of inactivity. If you put your phone down and walk away, it will lock before anyone else can pick it up and access it.

  All platforms, Home

• How-toFirewalls

  Be careful what you do on public Wi-Fi on your phone

  Avoid accessing banking apps, email, or any account that contains sensitive information when connected to public Wi-Fi. Public networks in cafés, hotels, and airports are not secure.

  All platforms, Everyone

• How-toUser Access Control

  Set up two-factor authentication on your email

  Add two-factor authentication (2FA) to your email account so a password alone is not enough to get in.

  All platforms, Everyone

• How-toUser Access Control

  Change any weak or reused passwords

  Identify and replace passwords that are short, simple, or used on more than one account.

  All platforms, Everyone

• How-toUser Access Control

  Review connected apps in your Google or Microsoft account

  Check which third-party apps have been granted access to your Google or Microsoft account and remove any you no longer use.

  All platforms, Everyone

• How-toUser Access Control

  Create separate admin and day-to-day user accounts

  Use a standard (non-admin) account for everyday tasks. Only switch to the admin account when you need to install software or change system settings.

  All platforms, Business

• How-toSecurity Update Management

  Enable automatic operating system updates

  Turn on automatic updates for Windows, macOS, iOS, or Android so security patches are applied as soon as they are released.

  All platforms, Everyone

• How-toSecurity Update Management

  Keep your web browser up to date

  Check that your browser (Chrome, Firefox, Safari, Edge) is on the latest version and set to update automatically.

  All platforms, Everyone

• How-toSecurity Update Management

  Enable automatic firmware updates on your router

  Check whether your router can update its firmware automatically and turn this feature on if available.

  All platforms, Everyone

• How-toSecurity Update Management

  Set a monthly reminder to update all apps

  Manually check for and install updates for all installed apps on your computer and phone once a month.

  All platforms, Everyone

• How-toSecurity Update Management

  Establish a patch management process for your business

  Create a documented process to ensure all business devices and software are patched within 14 days of a critical update being released.

  All platforms, Business