10 Tech Habits That Take 5 Minutes and Make You Instantly Safer

Why Small Habits Matter More Than Big Solutions

There is a tendency to think of online safety as something complicated — something that requires expensive software, technical expertise, or total lifestyle changes. It doesn't. The overwhelming majority of cybercrime targets people who left the equivalent of an unlocked door or an open window. Criminals are not, by and large, master hackers. They are opportunists looking for the path of least resistance.

Each of the ten habits below takes about five minutes to adopt. None requires technical knowledge beyond following simple steps. Together, they close the most common doors that criminals walk through.

1. Lock Your Phone

If your phone has no passcode, fingerprint lock, or face recognition lock, anyone who picks it up has access to your email, your photos, your banking apps, your saved passwords, and every conversation you've ever had. Put it this way: you wouldn't leave your wallet, your checkbook, your photo albums, and your filing cabinet sitting on a park bench. An unlocked phone is exactly that.

What to do: On iPhone, go to Settings > Face ID & Passcode (or Touch ID & Passcode) and set a passcode — preferably six digits, not four. On Android, go to Settings > Security > Screen Lock and choose PIN, pattern, or fingerprint. Enable fingerprint or face unlock as a convenience on top of the passcode.

Time required: Three minutes. Maybe four if you need to think of a PIN you'll remember.

2. Turn On Two-Factor Authentication for Your Email

Two-factor authentication — often abbreviated 2FA — is a second lock on your account. Even if someone steals or guesses your password, they can't get in without also having access to your phone. It works like this: after entering your password, the service sends a short code (usually six digits) to your phone via text message or an app. You enter that code, and only then are you let in.

Your email account is the single most important account to protect because it's the recovery method for nearly every other account you own. If a criminal takes over your email, they can reset the passwords to your bank, your shopping accounts, your social media — everything.

What to do: Go to your email provider's security settings and look for "two-factor authentication," "two-step verification," or "2FA." For Gmail: myaccount.google.com > Security > 2-Step Verification. For Outlook/Hotmail: account.microsoft.com > Security > Advanced security options > Two-step verification. For Yahoo: account.yahoo.com > Account security > Two-step verification.

Time required: Five minutes. The setup is guided and straightforward.

3. Stop Reusing Passwords

This is the habit that requires the most honesty. If you use the same password — or close variations of the same password — across multiple websites, a breach at one site gives criminals the key to all the others. This isn't theoretical: criminals run automated programs that take passwords leaked from one breach and try them on banking, email, and shopping sites. It's called "credential stuffing," and it works because so many people reuse passwords.

What to do: You don't need to fix every account today. Start with the three most important: email, banking, and whichever shopping site has your credit card saved. Change those three passwords so they are each unique and strong (at least 12 characters; a memorable phrase is better than a jumble of symbols — "BlueTruckSunsetRiver!" is both strong and memorable). Write them down in a physical notebook if you need to — a notebook in your desk drawer is far safer than the same password on twenty websites.

Time required: Five minutes per account. Start with one today.

4. Install Updates Promptly

When your phone or computer says "Update Available," it's tempting to tap "Remind Me Later." We all do it. But software updates almost always include security fixes — patches for holes that criminals have already discovered and are actively exploiting. Delaying an update is like hearing that someone found a way to jimmy the lock on your front door, and choosing not to fix it.

What to do: When you see an update notification, install it. If you're worried about losing work or interrupting something, schedule it for that evening. On iPhones and many Android phones, you can set updates to install automatically overnight while the phone is charging — look for "Automatic Updates" in your settings.

Time required: Variable — but starting the update takes thirty seconds. The rest happens without you.

5. Learn to Recognize the "Tech Support" Scam Pop-Up

You're browsing the web, and suddenly a full-screen warning appears. It has official-looking logos. It says your computer is infected with viruses. It shows a phone number and urges you to "CALL MICROSOFT SUPPORT IMMEDIATELY." The page might even play an alarm sound.

This is, 100% of the time, a scam. No legitimate company can detect viruses through your web browser. The pop-up is just a web page designed to look like a system warning. The phone number connects you to a criminal who will try to charge you hundreds of dollars to "fix" a problem that doesn't exist — and may install actual malicious software while they're at it.

What to do: Do not call the number. Do not click anything on the page. Close your browser entirely: on Windows, press Alt+F4 or right-click the browser icon on the taskbar and select "Close window." On a Mac, press Command+Q. If the browser won't close normally, restart your computer. Nothing is infected, and you haven't done anything wrong — you just landed on a deceptive webpage.

Time required: Thirty seconds to close the browser and breathe easy.

6. Check Your Privacy Settings (Just the Basics)

Both Apple and Google now give you straightforward controls over what data apps can access. An app that doesn't need your location (why would a flashlight app need to know where you are?) shouldn't have it.

What to do: On iPhone, go to Settings > Privacy & Security and scroll through the list. You'll see categories like Location Services, Contacts, Photos, Microphone, and Camera. Tap each one to see which apps have access. Revoke anything that seems unnecessary. On Android, go to Settings > Privacy > Permission Manager.

Time required: Five minutes to scroll through and revoke the obvious overreaches.

7. Be Skeptical of Unsolicited Contact

We've said it before and we'll say it again: no legitimate company — not Microsoft, not Apple, not your bank, not Amazon, not the IRS — will ever call, text, or email you out of the blue and demand personal information, payment, or remote access to your computer. This is the golden rule of scam prevention.

If someone claiming to be from a company contacts you unexpectedly, hang up or close the message. Then, independently look up the company's real phone number (from your bank card, your account statement, or their official website — never from the message itself) and call them to verify.

What to do: Memorize the rule above. That's it. The habit takes no time to adopt, but the discipline of following it can save you thousands of dollars.

8. Use a Password Manager (When You're Ready)

We listed password reuse as habit 3, and a password manager is the tool that makes unique passwords practical. It's a program that remembers all your passwords for you, locked behind one master password — so you only need to remember one strong password instead of dozens.

Think of it as a digital keychain: you carry one key (your master password) that unlocks a secure box containing all your other keys. You only ever need to remember that one master key.

What to do: When you feel ready, try Bitwarden (free, works on all devices) or 1Password (paid, slightly more polished). Both walk you through setup. Start by adding just your email and banking passwords. Add others gradually as you log into them.

Time required: Ten minutes for initial setup, then seconds at a time as you add passwords.

9. Back Up What Matters

A backup is a copy of your important files stored somewhere other than your main computer. If your computer is stolen, damaged in a fire, or hit by ransomware (malicious software that locks your files and demands payment), the backup is your insurance policy.

What to do: Identify what's irreplaceable — photos, personal documents, financial records. Use a cloud backup service (iCloud for Apple users, OneDrive for Windows users, Google Drive for everyone) that backs up automatically. For extra security, also keep a copy on an external hard drive that you update once a month.

Time required: Ten minutes to set up automatic backup, then zero ongoing effort.

10. Talk About Scams With Friends and Family

Scammers thrive on silence and embarrassment. People who fall for scams often don't tell anyone because they feel foolish. This keeps others from learning the warning signs. Breaking that silence is one of the most powerful things you can do.

What to do: The next time you read about a scam — including in articles like this one — mention it to a friend or family member. "Hey, I read about a scam where people pretend to be from Apple support. Have you ever gotten one of those calls?" Sharing knowledge normalizes awareness and makes everyone in your circle harder to fool.

Time required: The length of a casual conversation.

Where to Start

Don't try to do all ten at once. That's how good intentions turn into overwhelm and nothing gets done. Pick one — ideally number 1 or number 2 — and do it right now, while the thought is fresh. Then pick another tomorrow.

Online safety isn't about being perfect. It's about making yourself a harder target than the next person, and these ten habits make you dramatically harder to victimize. Most criminals, when faced with even basic obstacles, simply move on to easier prey. Be the one they move on from.