Keeping your computer, phone and other connected devices secure doesn't have to be complicated. Good cyber hygiene means developing everyday habits that help protect your devices, accounts, personal information and financial information from malware, phishing, unauthorized access and other cyber threats. Think of it as digital maintenance. Just as you lock your doors, maintain your car and protect important documents, a few simple online security habits can help protect your digital life.
Install updates for your operating system, web browser, applications and security software when they become available. Software updates often include security patches that address vulnerabilities that could otherwise be exploited by cybercriminals. Whenever possible, turn on automatic updates so important security fixes aren't missed.
Don't forget about your:
Keeping your devices and software up to date is one of the simplest ways to improve your security.
Avoid using the same password for multiple accounts. If a password is stolen in a data breach, criminals may try those same credentials on other websites and services. Using unique passwords helps limit the damage if one account is compromised. A password manager can make this easier by creating and securely storing unique passwords for your accounts. For important accounts, consider using a long, unique passphrase rather than a short or easily guessed password.
Multi-factor authentication (MFA), sometimes called two-factor authentication (2FA), adds another layer of protection to your accounts. Instead of relying only on your password, MFA requires an additional verification step when you sign in.
Turn it on whenever it is available, particularly for important accounts such as:
Where available, consider using phishing-resistant authentication methods such as passkeys or security keys for your most sensitive accounts. MFA can help protect an account even if your password has been compromised.
Many computers and mobile devices include built-in security features. Make sure they are enabled and kept up to date.
Depending on your device, this may include:
Use reputable security software and avoid downloading security programs from unfamiliar websites. A firewall can help monitor and control network traffic, providing another layer of protection between your device and potential threats.
Imagine losing your photos, documents or other important files because your device fails, is lost or is infected with ransomware. Regular backups can help you recover your information.
Consider backing up important files to:
For particularly important information, maintaining more than one backup can provide additional protection. Don't just assume your backups work. Test them periodically to make sure you can actually recover your files when you need them. The Canadian Centre for Cyber Security recommends regularly testing backup recovery and keeping backups separate from your computer where possible.
Your home Wi-Fi network connects many of your devices to the internet, so it deserves attention too. Use a strong, unique Wi-Fi password and change the default administrator credentials on your router. If your router supports WPA3, use it. If WPA3 isn't available, use the strongest current security option supported by your router.
You should also keep your router's firmware updated when updates are available. When using public Wi-Fi, be particularly careful with sensitive activities such as online banking. If you need to access financial information while away from home, consider using cellular data or another trusted connection.
Even the best technical security tools can't replace good judgment. Phishing messages are designed to trick you into clicking a link, opening an attachment, providing personal information, sharing login credentials or sending money.
Be cautious when a message:
Before clicking, stop and verify. If a message appears to come from your bank, government organization or another company, contact the organization using information you find independently rather than using the link or phone number provided in the suspicious message.
Personal information can be valuable to fraudsters. Think carefully about what you share online, particularly on social media. Information such as your full name, date of birth, address, workplace, family relationships, travel plans or other personal details can sometimes be combined with information from other sources to create more convincing scams or attempts at identity theft.
Before providing personal information online, ask:
Who is asking for it, why do they need it and how will it be used?
If an unexpected message asks for personal or financial information, verify the request independently before responding.
If your computer allows you to create different types of user accounts, consider using a standard user account for everyday activities instead of an administrator account. Administrator accounts have broader system permissions. Using a standard account for routine activities can limit what malicious software or an unauthorized user may be able to do if your account is compromised. If you need administrator access to install software or make system changes, you can use your administrator credentials when required.
Cyber threats continue to evolve. Scammers regularly change their tactics, and new phishing and impersonation techniques can make fraudulent messages increasingly convincing. Take a few minutes from time to time to learn about current scams and security recommendations from trusted sources. The Canadian Centre for Cyber Security provides guidance for Canadians on protecting devices, accounts and personal information. Staying informed can help you recognize suspicious activity before you act on it.
You don't have to be a cybersecurity expert to improve your online security.
Start with these basic habits:
Small habits can make a meaningful difference over time.
If you believe your device, online account or banking information may have been compromised, don't panic. Start by taking steps to limit further access.
Depending on the situation, you may want to:
If you believe you have been the victim of fraud, you can report it to the Canadian Anti-Fraud Centre at 1-888-495-8501. If your YNCU banking information may have been compromised, contact YNCU as soon as possible so our team can help you determine what steps to take.
Cybersecurity doesn't have to mean understanding every technical threat or becoming an expert in computers. The most important steps are often simple: keep your software updated, use strong and unique passwords, turn on MFA, back up your information, protect your Wi-Fi and think twice before clicking unexpected links or sharing personal information. Good cyber hygiene is about creating habits that make your digital life safer—one small step at a time.
Cyber hygiene refers to the routine practices people use to protect their devices, accounts, personal information and data from cyber threats. Examples include using strong passwords, enabling MFA, installing software updates, backing up files and recognizing phishing attempts.
Good cyber hygiene can reduce the risk of malware infections, account compromise, identity theft, data loss and other cyber threats. No security measure can eliminate every risk, but consistent security habits can make it more difficult for criminals to access your information.
Some of the most important practices include keeping software updated, using unique passwords, enabling multi-factor authentication, backing up important information, securing your Wi-Fi network and being cautious with unexpected messages and links.
Install security and software updates as soon as reasonably possible. Automatic updates can help ensure that important security patches aren't missed.
A reputable password manager can help you create and store unique passwords for different accounts. This can make it easier to avoid reusing passwords and improve overall account security.
Yes. Multi-factor authentication adds an additional verification step beyond your password and can help protect accounts if a password is stolen or compromised.
The appropriate backup schedule depends on how frequently your information changes and how important it is. Important files should be backed up regularly, and backups should be tested periodically to make sure they can be restored.
Public Wi-Fi can introduce additional security risks. For sensitive activities such as online banking, consider using your cellular data or another trusted connection instead.
If you clicked a suspicious link, don't provide additional information. Close the page and consider changing any credentials you may have entered. If financial or banking information was provided, contact your financial institution promptly using a trusted contact method.
Contact your financial institution as soon as possible. Explain what information may have been exposed and follow their instructions for protecting your account. You should also monitor your accounts for unusual activity and consider reporting suspected fraud to the Canadian Anti-Fraud Centre.