Keep your apps, operating system, and browsers up to date. Enable automatic updates if available.

Use reputable, American-made products for malware protection on all Windows, Android, and macOS devices.

Do not use third-party VPN services. Use your employer-provided VPN connection, managed by your IT team.

Do not share personally identifiable information or financial information via phone, text, or email unless you initiate contact.

Do not use publicly available charging cords or USB ports (even in ride-share cars). Use your power adapter or power bank instead.

Monitor the Dark Web and your credit report for breaches of credentials and personally identifiable information.

Do not reuse passwords across multiple accounts, sites, and apps. Secure unique passwords with a password manager like 1Password or LastPass.

Limit the amount of information shared on social media. Revisit privacy settings periodically.

Shred or erase financial and intellectual property documents that are obsolete.

Offer phishing awareness coaching to your team to keep up with new threats.

Use two-factor authentication to log in to any website or app that offers 2FA, regardless of the type of data you store there.

Do not use public Wi-Fi hotspots. Use your phone’s hotspot feature or a hotspot device from a wireless provider.

Do not click links or open attachments in unsolicited emails or text messages. Ensure that email asking for information is not from an impersonator.

Do not share personally identifiable information or financial information through email if possible. Call an official phone number instead.

Download apps from legitimate sources only such as Apple App Store or Google Play.

Do not allow apps to access information such as contacts and location from your device when avoidable.

Create and save bookmarks in your browsers for frequently visited sites. Link results from searches can sometimes contain spoofed links that point to rogue sites.

Ensure you are using a reputable business-class email provider that doesn’t mine and sell user data.

Consider dedicating a device to do banking and other financial activities so it’s less likely to be compromised during other uses. When possible, use financial institution apps rather than their websites.

Replace default passwords with strong, unique passwords for every device connecting to the Internet (TVs, printers, security cameras, and so on).