10 Cybersecurity Habits Everyone Should Follow

Most hacks start with a small mistake. These ten habits protect you from many common threats.

1. Use strong, unique passwords. Never reuse one across accounts.
2. Turn on two-factor authentication wherever possible.
3. Use a password manager so you do not have to remember them all.
4. Do not click suspicious links. Check the sender before you open anything.
5. Update your phone and apps. Updates fix security holes.
6. Never share OTPs or PINs. No genuine bank will ask for them.
7. Avoid public Wi-Fi for banking.
8. Back up important files.
9. Check app permissions and remove what you do not need.
10. Verify before you pay. Confirm UPI IDs and QR codes carefully.

Why these habits matter

Online fraud is rarely about clever hacking. Most of the time, a person is tricked into giving away a password, a code or money. Good habits make you a harder target. You do not need to be a tech expert. You just need to pause before you click or pay.

The ten habits in detail

1. Use strong, unique passwords. A strong password is long and hard to guess. A phrase of several random words works well. If you reuse one password and a single site leaks it, criminals try it on your other accounts.

2. Turn on two-factor authentication. This adds a second step, like a code from an app, after your password. Even if someone steals your password, they cannot get in without that second step. Turn it on for email, banking and social media first.

3. Use a password manager. It creates and stores strong passwords for you, so you only remember one main password. This makes it easy to use a different password everywhere.

4. Do not click suspicious links. Fake messages often pretend to be from a bank, a courier or a government office. Look at the sender, the spelling and the web address. When in doubt, open the official app or type the website yourself.

5. Update your phone and apps. Updates often fix security problems that criminals already know about. Turn on automatic updates so you do not forget.

6. Never share OTPs or PINs. An OTP is for you alone. Anyone who asks for it, even if they say they are from your bank, is likely a fraudster. The same goes for your UPI PIN, which you need only to send money, never to receive it.

7. Avoid public Wi-Fi for banking. Open networks in cafes or stations can be risky. For money matters, use your mobile data or a network you trust.

8. Back up important files. Keep copies of photos and documents in a second place, such as a cloud account or an external drive. If your phone is lost or locked by malware, you still have your data.

9. Check app permissions. Does a torch app really need your contacts? Go through your settings and remove access that an app does not need.

10. Verify before you pay. Check the name that shows up before you confirm a UPI payment. Never scan a QR code to receive money. Scanning is only for paying.

Common scams to watch for

• Fake bank calls or messages asking you to "verify" details.
• Fake delivery messages with a link to pay a small fee.
• Prize or lottery messages that ask for money first.
• Fake job offers that ask for a fee.
• Messages from "family" on a new number asking for urgent money. Call the person on their old number first.

If something goes wrong

Act fast. Here is what to do:

1. Change your passwords and log out of all devices.
2. Call your bank right away to block cards or accounts.
3. Report the fraud on the national cybercrime helpline, 1930, or at the cybercrime.gov.in portal.
4. Keep screenshots and messages as proof.

Frequently asked questions

Is a long password really better? Yes. Length makes a password much harder to guess.

Do I need a password manager? It is not required, but it makes strong, unique passwords much easier.

Can I trust a caller who knows my name? Not necessarily. Criminals can collect basic details. Hang up and call your bank on its official number.

The masala take

The best antivirus is the pause button. Think for five seconds before you click, pay or share.