Blog

Laptop screen showing VPN connection interface with globe icon and green security indicator in modern home office setting

<h2>The Habit That Changed How I Browse</h2><p>I used to think a VPN was something only tech people needed, until I actually sat down and looked at how much of my own daily browsing happens on<a href="https://www.ncsc.gov.uk/" target="_blank" rel="noopener" data-mce-href="https://www.ncsc.gov.uk/"> networks I don't control</a>, coffee shop wifi, train stations, a client's office. Once I switched it on properly, I never went back. It's one of those changes that feels invisible day to day but quietly closes off a risk I'd been ignoring for years.</p><figure id="figure-9q2mnrezmt9uk7bw"><img id="9q2mnrezmt9uk7bw" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/5dfe439a-5d1c-46b8-a8ad-f563ca910988-n58aTG0c1e8w9nkFqTavARQugKHiy8.png" alt="Laptop screen showing a secure encrypted VPN connection with an IP address masked, illustrating how a VPN protects browsing in Liverpool" title="Laptop screen showing a secure encrypted VPN connection with an IP address masked, illustrating how a VPN protects browsing in Liverpool" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>What a VPN Actually Protects You From</h2><p>A VPN encrypts the connection between your device and the internet, so anyone sharing that same public wifi network can't casually snoop on what you're sending and receiving. It also hides your real IP address, which makes it harder for websites and advertisers to build a location-tagged profile of you over time. It isn't a magic shield against every threat, but it closes a gap that a lot of people don't realise is open.</p><h2>Free vs Paid VPNs: Why I Stopped Trusting Free Ones</h2><p>I tried a few free VPN apps early on and learned the hard way that free rarely means free. Some logged and sold browsing data to the very advertisers you're trying to avoid, others throttled speeds so badly they weren't worth using. A paid, reputable provider makes its money from subscriptions rather than your data, which is a much better incentive to actually protect you.</p><h2>The Features I Actually Check Before Recommending One</h2><p>I look for a strict no-logs policy that's been independently audited, strong encryption standards, a kill switch that cuts your connection if the VPN drops, and servers in enough locations to actually be useful. Speed matters too, since a VPN that grinds your connection to a halt just gets switched off when you need it most.</p><h2>How I Use NordVPN Day to Day</h2><p><a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN</a> is the one I actually run on my own devices, and it ticks every box above without being complicated to use. <a data-mce-href="https://kellssecurity.com/blog/vpn-guide-liverpool" href="https://kellssecurity.com/blog/vpn-guide-liverpool">I've gone deeper on how I actually got it set up</a> if you want the step by step version, and pairing it with a password manager like <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass </a>covers the two biggest gaps in most people's setup, secure connections and secure logins, in one go. If you're weighing this up for your own accounts, my<a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit"> Safety Toolkit</a> lists exactly what I use, and I'm always happy to talk it through if you <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch</a>.</p>

Why I Won't Browse Without a VPN Anymore

High-resolution computer monitor displaying abstract AI neural network visualization with glowing blue and purple interconnected data streams

<h2>Why the Old Advice Doesn't Cut It Anymore</h2><p>I used to tell people to watch for bad spelling and clumsy phrasing as a giveaway sign of a scam. That advice is fading fast. AI tools now write cleaner, more convincing messages than most legitimate businesses manage, and the old checklist of red flags is quietly going out of date. I still teach the basics, but I've had to add a lot more to the list this year.</p><h2>Voice Cloning Is the One That Worries Me Most</h2><p>A scammer only needs a few seconds of someone's voice, often lifted from a social media video, to generate a convincing clone. I've heard about calls where a "grandchild" or "colleague" asks for urgent money, and the voice sounds exactly right because in a sense it is. My advice hasn't changed much here, if a call asks for money or account details urgently, hang up and call the person back on a number you already have saved.</p><h2>AI-Written Emails That Actually Read Well</h2><p>Phishing emails used to trip themselves up with strange grammar and mismatched logos. Now they can be generated to match a company's actual tone of voice, complete with correct branding pulled from public websites. I've written before about <a href="https://kellssecurity.com/blog/spot-phishing-emails-liverpool" data-mce-href="https://kellssecurity.com/blog/spot-phishing-emails-liverpool">how I spot phishing attempts</a>, and the honest answer is I rely far less on writing quality these days and far more on checking the sender address and the link destination.</p><figure id="figure-bajh51p6iemt9v5pcq"><img id="bajh51p6iemt9v5pcq" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/ae6f6ebb-6afc-4074-986c-5ce3f771d227-Afkwyxpmn7IO2xJ0tGGrFJm7rX6tzq.png" alt="Smartphone screen scanning an ID document during an identity verification check, illustrating how AI-driven scam detection works for a Liverpool user" title="Smartphone screen scanning an ID document during an identity verification check, illustrating how AI-driven scam detection works for a Liverpool user" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: undefined undefined;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>Fake Video Calls and Deepfakes</h2><p>This is the newest one and it still catches people off guard. Video deepfakes convincing enough to fool a quick glance are now within reach of ordinary scammers, not just well funded operations. If a video call asks you to authorise a payment or share sensitive information, treat it the same as an unexpected phone call and verify through a separate channel first.</p><h2>What Still Works Against All of This</h2><p>The fundamentals hold up better than you'd expect. <a data-mce-href="https://kellssecurity.com/blog/two-factor-authentication-liverpool" href="https://kellssecurity.com/blog/two-factor-authentication-liverpool">Two factor authentication </a>stops a cloned voice or a convincing email from being enough on its own, and a password manager like <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass </a>means even a leaked password doesn't unlock everything else. If something feels off, it's always worth reporting to <a data-mce-href="https://www.actionfraud.police.uk/" href="https://www.actionfraud.police.uk/" target="_blank" rel="noopener">Action Fraud</a>, and if you want a second opinion on anything suspicious, <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch</a> and I'll take a look.</p>

How AI Scams Keep Getting Harder to Spot

Abstract glowing blue network nodes connected by lines, representing digital connectivity and data flow in deep perspective.

<h2>The Myth That Antivirus Software Is Enough</h2><p>I still hear this one all the time. Someone installs an antivirus program once, ticks the box in their head, and assumes they're covered. Antivirus software catches known threats, but it's one layer in a much bigger picture. Scammers don't need to get past your antivirus if they can just get you to hand over a password or click a dodgy link yourself. Treat it as one part of your setup, not the whole thing.</p><h2>The Myth That You'd Never Fall For It</h2><p>This is the one that worries me most, because it's usually said by people who are otherwise switched on. Nobody plans to fall for a scam. The convincing ones don't look like the obvious ones from a decade ago, they're well written, well timed, and often arrive when you're distracted or in a rush. I've written before about<a href="https://kellssecurity.com/blog/spot-phishing-emails-liverpool" data-mce-href="https://kellssecurity.com/blog/spot-phishing-emails-liverpool"> how I spot phishing attempts</a>, and the honest truth is even careful people get caught out occasionally. The goal isn't never making a mistake, it's catching it quickly when you do.</p><figure id="figure-edul4dshdsmt9vo2z0"><img id="edul4dshdsmt9vo2z0" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/50e51887-3c9b-42b3-8e96-f8a33bcb5ea8-LqgJm8smrYrtkNIs12XdZf3rzM7G0Q.png" alt="Person typing on a laptop with a security shield icon on screen, representing common cyber safety myths a Liverpool user should stop relying on" title="Person typing on a laptop with a security shield icon on screen, representing common cyber safety myths a Liverpool user should stop relying on" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: undefined undefined;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>The Myth That a Strong Password Is Enough on Its Own</h2><p>A strong password is a good start, not a finish line. If you reuse it anywhere, or it ends up in a data breach you never hear about, that strength stops mattering. I use a password manager like <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass </a>so every account gets its own long, unique password without me having to remember them, and I pair that with <a data-mce-href="https://kellssecurity.com/blog/two-factor-authentication-liverpool" href="https://kellssecurity.com/blog/two-factor-authentication-liverpool">two factor authentication</a> wherever it's offered. That combination does more for me than any password complexity rule ever did.</p><h2>The Myth That Public WiFi Is Fine for a Quick Check</h2><p>Five minutes on a cafe's open network to check your bank balance feels harmless enough, and most of the time nothing happens. But you can't see who else is on that network or what they're doing with it, and that's exactly the point. I use a VPN like <a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN </a>any time I'm on a network I don't control, even for something as small as checking email. It's not about assuming the worst, it's about not needing to find out.</p><h2>What Actually Keeps You Safe</h2><p>None of this is about being paranoid or locking yourself away from the internet. It's a handful of habits that work quietly in the background: unique passwords, two factor authentication, a VPN on networks you don't control, and a healthy pause before you click something urgent. If you want a simple starting point, my <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit</a> has the tools I actually use and recommend. And if something feels off and you're not sure, <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch</a> and I'll take a look.</p>

The Cyber Safety Myths I Keep Having to Correct

Metallic security padlock with digital circuit patterns against deep blue background, symbolizing encryption and data protection

<h2>Why I Stopped Trying to Remember Everything</h2><p>I used to pride myself on remembering every password I had. Looking back, that meant reusing three or four variations across dozens of accounts, which is exactly the habit that gets people caught out in a data breach. The moment one site leaks a password, every account sharing it becomes vulnerable too. Once I saw how often that happens, memorising strong unique passwords for every account stopped being realistic. It's worth checking your own accounts against a <a data-mce-href="https://haveibeenpwned.com/" href="https://haveibeenpwned.com/" target="_blank" rel="noopener">breach database </a>occasionally too.</p><h2>What a Password Manager Actually Does</h2><p>A password manager generates a long, random password for every account and stores it behind one master password you do remember. You never see most of your passwords, you just let the manager fill them in. It sounds like a small shift, but it means a breach on one site can't unlock the rest of your accounts, which is the whole point.</p><figure id="figure-ng7tedjgwfmt9w8p1g"><img id="ng7tedjgwfmt9w8p1g" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/ed8ddeb4-6bd0-4608-ac55-0d997904cd67-EBPmCzy4dk2HgDlHhmt72ncuyeEgpu.png" alt="Hands holding a smartphone showing a digital password vault app with saved logins and secure notes, illustrating how a Liverpool user can manage passwords safely" title="Hands holding a smartphone showing a digital password vault app with saved logins and secure notes, illustrating how a Liverpool user can manage passwords safely" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>The Case for Memorising a Few Passwords</h2><p>I'm not against memory entirely. Your master password and a couple of critical accounts, like your main email, are worth knowing by heart in case you're ever locked out of your manager. Beyond that small handful, I don't see the benefit of memorising anything. The passwords you can recall are usually the weakest ones, because a memorable password is, by definition, easier to guess.</p><h2>Where NordPass Fits Into My Setup</h2><p>I use NordPass because it works across every device I own and it flags weak or reused passwords automatically. Setting it up took less time than I expected, and it now generates and fills passwords for me without a second thought. It also pairs well with <a data-mce-href="https://kellssecurity.com/blog/two-factor-authentication-liverpool" href="https://kellssecurity.com/blog/two-factor-authentication-liverpool">two factor authentication</a>, which I'd recommend switching on for anything important.</p><h2>My Honest Recommendation</h2><p>If you're weighing up whether to switch, my honest answer is do it. The upfront effort of moving your accounts into a password manager is small compared to the risk of one leaked password unlocking your whole digital life. Start with your email and banking, then work through the rest when you have a spare half hour. My <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit</a> has <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass</a> and a few other tools I recommend, and if you want a second opinion on your setup, <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch</a> and I'll take a look.</p>

Password Manager or Memory: What Actually Works

Elegantly wrapped gift boxes with ribbons and botanical elements arranged on neutral linen, overhead view with natural lighting

<h2>Why the Christmas Rush Is a Scammer's Favourite Time of Year</h2><p>Every December I see the same pattern. Scam reports spike the moment the Christmas adverts start, because scammers know most of us are shopping faster than usual and paying less attention to the small details. A rushed shopper is exactly what they're counting on. If you're hunting for a bargain late at night after a long day, you're far more likely to skip the checks you'd normally make. That's not a criticism, it's just how tiredness and urgency work together against us.</p><figure id="figure-cnknugvo87cmt9wuwws"><img id="cnknugvo87cmt9wuwws" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/47fd530c-365f-4f5c-be4e-40b5711b9f5e-cpQTmgeYJwRRED29XBNiLDqhYORBgo.png" alt="Person shopping online on a laptop next to Christmas delivery boxes, illustrating safe online shopping habits for Liverpool shoppers during the festive season" title="Person shopping online on a laptop next to Christmas delivery boxes, illustrating safe online shopping habits for Liverpool shoppers during the festive season" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>The Payment Rule I Never Bend</h2><p>I have one rule I never break when I'm buying anything online: I never pay by bank transfer to a private seller or a shop I don't recognise. A card payment or PayPal gives you a way to get your money back if something goes wrong. A bank transfer doesn't, and once it's gone, it's gone. If a seller only accepts a direct transfer, that's usually the moment I close the tab.</p><h2>Spotting a Fake Shop Before You Type Your Card Details</h2><p>A fake shopping site can look identical to a real one these days, so I don't judge a site purely on how it looks. I check the web address for anything odd, look for a padlock next to the URL, and search the company name plus the word "reviews" in a separate tab rather than trusting the testimonials on their own homepage. It's the same instinct I use for spotting a <a data-mce-href="https://kellssecurity.com/blog/spot-phishing-emails-liverpool" href="https://kellssecurity.com/blog/spot-phishing-emails-liverpool">phishing email</a>, you're looking for the gap between what a business claims to be and what it actually is.</p><h2>Deals That Are Too Good to Be True</h2><p>If a well known brand is suddenly selling something at 80% off with no explanation, I treat that as a red flag rather than a lucky find. Genuine sales happen, but they rarely wipe that much off the price with no catch. I also avoid finishing a purchase over public WiFi in a cafe or shopping centre unless I'm running <a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN</a>, since an open network is an easy place for someone to intercept what you're typing.</p><h2>My Christmas Shopping Checklist</h2><p>My actual Christmas shopping checklist is short. Pay by card or PayPal, check the website is who it says it is, use a strong unique password stored in <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass</a> rather than reusing an old one, and turn on <a data-mce-href="https://kellssecurity.com/blog/two-factor-authentication-liverpool" href="https://kellssecurity.com/blog/two-factor-authentication-liverpool">two factor authentication </a>anywhere that holds your payment details. None of this takes long once it's a habit, and it's a lot less stressful than sorting out a fraudulent transaction in January. My<a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit"> Safety Toolkit</a> has the password manager and VPN I use myself, and if you're ever unsure about a site or a deal, <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch</a> and I'll take a look before you hand over your card details.</p>

The Online Shopping Rules I Never Break at Christmas

Glowing blue crystalline digital lock with circuit patterns and volumetric light rays on dark background.

<h2>Why I Do This Every January</h2><p>Every January I sit down and go through my entire digital life like an MOT for my accounts. It sounds excessive until you remember most of us set up our passwords, privacy settings and old accounts years ago and never look at them again. A yearly check-up catches the stuff that quietly builds up: forgotten logins, apps you don't use anymore that still hold your data, and settings that changed without you noticing. It takes an afternoon and it's saved me more than once.</p><figure id="figure-3xa5vpjeomt9xgvkf"><img id="3xa5vpjeomt9xgvkf" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/50e51887-3c9b-42b3-8e96-f8a33bcb5ea8-LqgJm8smrYrtkNIs12XdZf3rzM7G0Q.png" alt="Hands typing on a laptop displaying a digital security scan, illustrating a yearly online safety check-up for a Liverpool user" title="Hands typing on a laptop displaying a digital security scan, illustrating a yearly online safety check-up for a Liverpool user" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>Passwords and Logins Get Checked First</h2><p>I start with passwords because they're the weakest link in most people's setup. I go through my <a data-mce-href="https://kellssecurity.com/blog/password-manager-vs-memory-liverpool" href="https://kellssecurity.com/blog/password-manager-vs-memory-liverpool">password manager </a>and look for anything reused, anything short, and anything I haven't touched in years, those old accounts are exactly the kind of thing that shows up in a breach nobody tells you about. If you're still keeping passwords in your head or a notebook, I've written before about whether that actually holds up. I use <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass</a> myself because it flags weak and reused passwords automatically instead of me hunting for them one by one.</p><h2>Reviewing App Permissions and Privacy Settings</h2><p>Next I go through the apps on my phone and check what they actually have access to, location, contacts, microphone, and I switch off anything that doesn't need to be on. Social media privacy settings get the same treatment, since platforms have a habit of quietly resetting things after an update. It only takes ten minutes but it closes off a surprising number of ways your information can leak out without you doing anything wrong.</p><h2>Checking My Devices and Backups</h2><p>I also check that every account with real value, email, banking, anything worth protecting, has <a data-mce-href="https://kellssecurity.com/blog/two-factor-authentication-liverpool" href="https://kellssecurity.com/blog/two-factor-authentication-liverpool">two factor authentication </a>properly switched on rather than just offered. Then I check my backups actually work, not just that they exist, and I make sure my devices are running the latest updates. If I'm working from a cafe or anywhere on public wifi, I always have <a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN</a> running before I do anything I wouldn't want a stranger on the same network reading.</p><h2>The Checklist I Actually Use</h2><p>My checklist is short: password manager reviewed, two factor authentication turned on everywhere it matters, app permissions trimmed back, backups tested, and devices updated. None of it takes long once it's a habit, and it's a lot less stressful than sorting things out after something's already gone wrong. My <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit</a> has the password manager and VPN I use for all of this, and if you'd rather I just walked you through it, <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch</a> and I'll help you set it up properly.</p>

Blog

Why I Won't Browse Without a VPN Anymore

How AI Scams Keep Getting Harder to Spot

The Cyber Safety Myths I Keep Having to Correct

Password Manager or Memory: What Actually Works

The Online Shopping Rules I Never Break at Christmas

The Digital Safety Check-Up I Do Every Year