Recently, a text message from my father prompted a familiar inquiry: “Should I be using a password manager?” This request for cybersecurity assistance is not uncommon in my family, as evidenced by my mother’s previous concern regarding an unexpected “tech support” notification that seemed to take over her computer screen. While my parents are not entirely disconnected from technology, they do not navigate the digital landscape with the same ease as many of us. To empower them with proactive measures, I decided to compile a cybersecurity best practices document that could serve as a handy reference for them and others who find themselves in similar situations.
Fix these security flaws TODAY
Here’s a concise list of security vulnerabilities that should be addressed immediately. These steps are relatively simple and applicable to nearly any PC in use.
Enable Windows Hello
Windows Hello stands out as one of Microsoft’s premier security features. It offers options such as a PIN, fingerprint, or facial recognition to safeguard a Windows 11 PC from unauthorized physical access. Setting it up is straightforward; simply navigate to Settings > Accounts > Sign-in options.
Ensure Windows Update is actually running
Regular security patches are essential, and Windows Update plays a crucial role in maintaining system integrity. To check if updates are paused or active, go to Settings > Windows Update. It’s wise to verify updates periodically to ensure your system remains secure.
Ensure Windows Defender is turned on
Windows Defender serves as the built-in antivirus for Windows 11, effectively blocking malware and other threats. Typically enabled by default, it’s important to confirm its status, especially if third-party antivirus software is in use. Check this by navigating to Settings > Privacy & security > Windows Security > Virus & threat protection.
Turn on the ‘Find my Device’ feature
In the unfortunate event of a lost or stolen laptop, having the Find my Device feature enabled can be invaluable. This feature allows users to locate their PC and lock it remotely, providing an added layer of security. To enable it, go to Settings > Privacy & security > Find my device.
Perform these security measures once and for all
These measures require a one-time setup but significantly enhance security and privacy.
Switch from a local account to a Microsoft account with 2FA
Transitioning to a Microsoft account not only simplifies recovery options but also enables two-factor authentication (2FA), adding an extra layer of security. This can be done via Settings > Accounts > Your info.
Enable device encryption
Device encryption is critical for protecting data in the event of theft. Windows 11 includes built-in encryption features, either as Device encryption in Home versions or BitLocker in Pro versions. To enable this feature, navigate to Settings > Privacy & security > Device encryption.
Switch from a Windows 11 Administrator account to a Standard account
For daily computing, using a Standard account is advisable to limit the permissions of any software that runs, including potential malware. This can be adjusted in Settings > Accounts > Family.
Use a password manager
Implementing a password manager is essential for managing online credentials securely. Rather than relying on memory or recycling old passwords, a password manager can generate and store complex passwords for various accounts. Options like NordPass, 1Password, Bitwarden, and Proton are excellent choices for this purpose.
Best cybersecurity habits to get accustomed to
Even after implementing the above measures, cultivating good habits is crucial in the ongoing battle against cyber threats.
Learn to spot phishing scams
Phishing attempts can arise from emails, compromised websites, or even phone calls. Always verify the legitimacy of communications before taking action. Familiarize yourself with common signs of phishing to enhance your defenses.
Never believe someone calling you about your PC
Legitimate tech support calls regarding your PC are virtually nonexistent. If you receive such a call, it’s likely a scam. Be cautious of unsolicited pop-ups requesting immediate action.
Never install unsolicited software on your PC
Installing unknown software can grant unauthorized access to your computer. If someone instructs you to install remote-access software, it’s best to terminate the conversation immediately.
This cybersecurity guide aims to equip those who often find themselves in the role of IT support for family and friends, serving as a comprehensive reference for enhancing PC security.
Join us on Reddit at r/WindowsCentral to share your insights and discuss our latest news, reviews, and more.
