The Online Safety Basics I Make Sure Every Family Knows

Why I Keep Coming Back to the Basics

People ask me for the clever tricks and shortcuts, but the basics do most of the work. Every scam I've helped someone untangle traces back to one of a handful of gaps: a reused password, a text clicked too quickly, a phone left unlocked, a software update ignored for months. None of it is complicated. It just needs doing, and doing consistently, by everyone in the house, not just whoever's most "into computers". I'd rather a family nail these four habits than chase every new threat I read about, because the basics are what actually stop the scams that reach real people.

Passwords and Two-Factor Authentication Come First

If I could only fix one thing for a family, it would be passwords. Reusing the same one across every account is still the single biggest risk I see, because one leaked password unlocks everything else. I use a password manager to generate and store a different one for every account, which sounds like effort but takes about thirty seconds once it's set up. Two factor authentication is the second half of that, and I've written before about why I treat it as non-negotiable. Between the two, most of the accounts that get broken into simply wouldn't have been. If a password manager feels like a hassle to set up, I tell people to start with just their email account, since that's usually the one everything else can be reset through.

Teaching Kids (and Grown-Ups) to Spot a Scam

I don't sit anyone down for a lecture. What works better is talking through real examples as they come up: the "delivery" text that wants your card details, the email pretending to be your bank, the message from a "friend" asking for money out of the blue. I've put together a proper guide on how I spot a phishing email before I click anything, and I'll happily walk any family through it. The goal isn't paranoia, it's a habit of pausing for two seconds before you tap. Kids pick this up fast once they see it framed as a puzzle to solve rather than a lecture, and they'll often spot the next one before I do.

Locking Down Social Media and Privacy Settings

Social media accounts leak more than people realise, from location tags on photos to birthdays and pet names that double as security question answers. I walk families through locking their profiles to friends only, turning off public tagging, and checking what third-party apps still have access from years ago. It only takes a few minutes, and it closes off a lot of the personal detail a scammer would otherwise use to make a fake message sound convincing.

Keeping Devices and Software Up to Date

Update notifications are annoying, I get it, but they're often patching a security hole that's already being used against people. I set devices to update automatically wherever I can, so nobody has to remember. On public wifi, especially anywhere in town, I'll use NordVPN to keep the connection private rather than trusting an open network I don't control. It's a small habit that closes a door a lot of people leave wide open. The same goes for old routers and smart devices that never get patched, since they're often the weakest link precisely because nobody thinks to check them.

Backing Up What Actually Matters

Photos and documents that only exist on one phone are one lost or stolen device away from being gone for good. I set every family up with automatic cloud backup for photos, and I make sure at least one other copy of anything genuinely important, like scanned ID documents or insurance paperwork, lives somewhere separate from the device it was created on. It's the kind of thing nobody thinks about until the phone falls in a puddle or gets stolen on a night out.

The One Habit That Ties It All Together

If there's one thing I'd want every family to take from this, it's that online safety isn't a single fix, it's a handful of small habits repeated until they're automatic. Start with passwords and two factor authentication, add the pause-before-you-click habit, and keep software updating itself in the background. For more of exactly this kind of practical advice, my Safety Toolkit has everything in one place, and if you'd rather just talk it through, get in touch and I'll help however I can. For anything trickier, the National Cyber Security Centre is a solid place to check too. None of this is about being paranoid, it's just about making the easy things automatic so I can save my attention for whatever's genuinely unusual.