10 Essential Cybersecurity Tips Every Consumer Should Know
We are in week 43 of this year, it finally feels like fall, and Halloween is coming at the end of the week. Let the universal pondering about “where did the year go?” begin. Halloween – the fan-favorite, kids hyped up on lots of sugar, pursuit of the best costumes, day-of-fun – unofficially kicks off the holiday season. And holiday shopping. In case you’re wondering, there are only 8 more shopping weekends before we celebrate a new year.
As we close out Cybersecurity Awareness Month, and head straight into the biggest shopping season of the year, we encourage you to remain vigilant about cybersecurity. It’s no secret that our personal information is everywhere — from social media accounts to online banking apps – and that, unfortunately, makes us prime targets for bad actors, scammers, and identity thieves.
I’ve shared my mom’s story before – and yes, seniors are at a bigger risk of falling victim to scams – but fraudsters are excellent at their craft, and just like my grand dogs shown here in their ghost costumes, these ghoulish bad actors are often hiding in plain sight.
Admittedly, developing better cyber hygiene habits is not nearly as much fun as our daughter has in parading her beloved pups in whatever costumes amuse her most in a given year, but implementing these 10 essential tips is worth the time and effort and can go a long way to protecting your personal data.
1. Use Strong, Unique Passwords
Your first line of defense against cyber threats is a strong password. Avoid simple ones like “123456” or “password.” Instead, create passwords that are long (12+ characters) and include a mix of letters, numbers, and symbols.
You can also use unique random word password phrases and/or password managers, which store your credentials and can be used to generate strong, unique passwords, as Calvin DeBoer, CTO of Horizon, shared on our Cybersecurity Awareness webinar.
2. Turn On Multi-Factor Authentication (MFA)
Multi-factor authentication (MFA) is a process that adds an extra layer of security by requiring a second form of verification — for example, the use of a one-time code sent to your phone. Whenever possible, enable MFA on your email, banking, and social media accounts. Note that this is also sometimes called two-factor authentication (TFA).
3. Watch Out for Phishing Scams
Phishing is the term used to refer to the use of fraudulent messages to trick people into providing sensitive information. It remains one of the most common ways hackers steal information. Be cautious with emails or texts that:
- Create a sense of urgency (“Your account will be locked!”)
- Contain spelling mistakes or suspicious links
- Ask for personal details or payment info
- Always hover over links before clicking and verify the sender’s address. When in doubt, contact the company directly.
4. Keep Software Up to Date
Cybercriminals often exploit known software flaws. Make sure your computer operating system, apps, and browsers are updated automatically. This simple habit can patch vulnerabilities before hackers can take advantage.
5. Avoid Public Wi-Fi for Sensitive Activities
Public Wi-Fi networks (like at airports or cafés) are convenient — and risky. Hackers can easily intercept data transmitted over open networks.
When possible, use your mobile hotspot or a VPN (Virtual Private Network) to encrypt your connection and keep your information safe.
6. Protect Personal Information on Social Media
Oversharing online can make you an easy target for scams and identity theft. Avoid posting sensitive details like your birthday, address, or travel plans, and regularly review your privacy settings.
Think before you post — even something as simple as your pet’s name could help someone guess your password.
7. Shop Safely Online
Online shopping is convenient, but it can expose you to fake websites and scams. Before you enter payment info, check for:
- A padlock icon in the browser
- URLs starting with https:// (the “s” means secure)
- Verified sellers or trusted retailers
- Whenever possible, use a credit card or secure payment service like PayPal, and avoid saving payment details in your browser.
8. Back Up Your Data Regularly
Imagine losing all your photos, documents, and files overnight. Backing up your data ensures you can recover from a ransomware attack, device failure, or accidental deletion.
Use both cloud storage and an external hard drive for added protection.
9. Learn to Recognize Scams
Cybercriminals are creative — and scams evolve constantly. Common ones include:
- Fake tech support calls claiming your computer is infected
- Phony package delivery texts with malicious links
- “Too good to be true” investment opportunities
Always pause before responding. If something feels off, verify through official channels or ignore it altogether.
10. Stay Informed
Cybersecurity isn’t a one-time effort — it’s a lifelong habit. Stay updated on emerging threats by following trusted sources like:

“To infinity and beyond,” we will likely need to be hyper-vigilant about the ghostly task of being vigilant about our digital security, but by implementing a few smart habits, you can dramatically reduce your risk. It can seem overwhelming for sure, but it helps for me to think about this as digital wellness – being intentional about awareness and giving regular attention to protecting our family’s personal information and finances.