Blog

Independent shopkeeper at retail counter with laptop showing web analytics and local maps integration, customer browsing merchandise in modern shop

<h2>Why Liverpool's Small Businesses Are a Target</h2><p>I talk to a lot of small business owners in Liverpool who assume cybercriminals only go after the big names. In reality it's the opposite, small businesses are often the easier target because the security is thinner and the payoff, customer data, payment details, supplier accounts, is still worth stealing. A local shop or a two person consultancy can lose a week of trading, or worse, over one convincing phishing email. That's not there to scare you, it's just the reality I see from working with businesses across the city.</p><figure id="figure-eo0qc1gl63mt9y699q"><img id="eo0qc1gl63mt9y699q" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/27f9c4d3-dd6b-4ed5-868e-f4ce5b26546e-wMqr97xT3RODJv3gkRfTVSoU2vveTv.png" alt="Small business owner in a Liverpool shop reviewing security and payment data on a tablet, representing cybersecurity protection for local businesses" title="Small business owner in a Liverpool shop reviewing security and payment data on a tablet, representing cybersecurity protection for local businesses" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>The Basics I'd Get Right First</h2><p>Before anything fancy, I'd get the basics locked down. Every account needs a strong, unique password stored somewhere other than your head, which is exactly why I recommend a password manager like <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass</a> to every business I work with. Software updates should never sit there waiting, since most breaches exploit a gap that was patched months earlier. And back up anything you couldn't afford to lose, tested, not just switched on and forgotten.</p><h2>Training Your Team Without Boring Them to Death</h2><p>The biggest risk in most small businesses isn't the technology, it's a rushed member of staff clicking the wrong link on a Monday morning. I don't believe in hour long lectures nobody remembers. A five minute conversation about what a phishing email looks like, repeated every few months, does more good than one big session people forget by lunchtime. If you want a fuller walkthrough for choosing outside help, I've covered that in my <a data-mce-href="https://kellssecurity.com/blog/cybersecurity-buyers-guide-for-liverpool-businesses" href="https://kellssecurity.com/blog/cybersecurity-buyers-guide-for-liverpool-businesses">buyer's guide to cybersecurity for Liverpool businesses</a>.</p><h2>Protecting Customer Data and Your Reputation</h2><p>Customer trust is the thing that actually gets damaged in a breach, not just the data itself. <a data-mce-href="https://kellssecurity.com/blog/two-factor-authentication-liverpool" href="https://kellssecurity.com/blog/two-factor-authentication-liverpool">Two factor authentication</a> on anything that touches customer information is non negotiable in my book, it's a small bit of friction that stops most opportunistic attacks cold. If your team ever works from a cafe or shared space, a VPN like <a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN</a> keeps that connection private rather than broadcasting it to anyone else on the network.</p><h2>When It's Time to Bring in Help</h2><p>Some things are worth doing yourself, and some aren't. If you're handling sensitive data at scale, or you've had a scare already, that's usually the point where bringing in proper support pays for itself. My <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit</a> has the password manager and VPN I recommend to every business I speak to, and if you want a second pair of eyes on your setup, <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch </a>and I'll take an honest look.</p>

Protecting Small Businesses in Liverpool: Cybersecurity Strategies and Tips

Abstract neon particle stream flowing through dark space with blue and purple light rays and gentle bokeh effects, suggesting digital privacy and encryption.

<h2>Why I Get Asked About This So Often</h2><p>People ask me almost every week which VPN they should get, and I understand why the choice feels overwhelming. Search "best VPN" and you'll get fifty near identical review sites, most of them chasing affiliate commissions rather than telling you what actually matters. I've already written about <a data-mce-href="https://kellssecurity.com/blog/vpn-guide-liverpool" href="https://kellssecurity.com/blog/vpn-guide-liverpool">what a VPN does and when you'd actually want one</a>, so this post skips that bit and gets straight into how I'd choose one myself if I was starting from scratch today.</p><h2>The One Thing I Check Before Anything Else</h2><p>Before speed, before price, before any of the flashy extra features, I check the no-logs policy and where the company is based. A VPN that keeps no record of what you do online is the entire point of using one, and if the company sits somewhere with weak privacy laws or a habit of handing data to governments, none of the rest matters much. I look for independently audited no-logs claims rather than just a promise on a website, because plenty of providers have been caught out saying one thing and doing another.</p><figure id="figure-z3n61yekfpmt9yquyc"><img id="z3n61yekfpmt9yquyc" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/5dfe439a-5d1c-46b8-a8ad-f563ca910988-n58aTG0c1e8w9nkFqTavARQugKHiy8.png" alt="Laptop showing a secure encrypted VPN connection, representing how to choose a trustworthy VPN service for online privacy" title="Laptop showing a secure encrypted VPN connection, representing how to choose a trustworthy VPN service for online privacy" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>Speed, Devices, and the Stuff That Actually Affects Daily Use</h2><p>Once I trust a provider with my data, the next thing I care about is whether it'll slow me down. A VPN that grinds your connection to a crawl gets uninstalled within a week, no matter how good its privacy policy looks on paper. I also check how many devices one subscription covers, since most households have a laptop, a couple of phones, and often a tablet or smart TV wanting protection too. I went through <a data-mce-href="https://kellssecurity.com/blog/vpn-services-guide-liverpool" href="https://kellssecurity.com/blog/vpn-services-guide-liverpool">a proper feature by feature comparison</a> in an earlier post if you want the full breakdown.</p><h2>What I Look For in Customer Support and Price</h2><p>Price matters, but I've learned not to chase the cheapest option purely because it's cheap. A VPN that costs a pound or two more a month but comes with responsive support and a kill switch that actually works is worth it the first time something goes wrong. I also check the length of the money-back guarantee, since a provider confident in its own product will happily give you thirty days to change your mind.</p><h2>My Recommendation If You Just Want This Decided For You</h2><p>If you'd rather skip the research and just want a straight answer, I use and recommend <a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN </a>for exactly the reasons above, an independently audited no-logs policy, strong speeds, and support that's genuinely useful when you need it. Pair that with a password manager like <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass </a>and you've covered two of the biggest gaps in most people's setup in one afternoon. If you want a second opinion on your specific setup, my <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit </a>has both, or <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch </a>and I'll talk you through it.</p>

How I'd Choose a VPN Service If I Were Starting Today

Close-up circuit board patterns with glowing neon blue lines and bokeh lights, dark moody cybersecurity aesthetic.

<h2>Why I Stopped Trying to Spot Every Phishing Email</h2><p>I used to think the answer to phishing was getting better at spotting it. Look for the spelling mistakes, check the sender address, hover over the link before you click. I've <a data-mce-href="https://kellssecurity.com/blog/how-to-identify-email-phishing--tips-for-liverpool-residents" href="https://kellssecurity.com/blog/how-to-identify-email-phishing--tips-for-liverpool-residents">written about all of that before</a>, and it's still useful, but I've come round to a different way of thinking about it. Phishing emails are getting better. Some of the ones landing in my inbox now don't have a single typo, and the sender address is spoofed well enough to fool anyone glancing at it on a phone screen. Recognition alone isn't enough anymore, so I've built a set of defences that don't depend on me catching every single one.</p><figure id="figure-0kctgb456dmt9z9tvf"><img id="0kctgb456dmt9z9tvf" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/f03bf8e0-01bb-49ba-a409-b7b6816e10d4-w3YQja3emCHasEoPLCVFsQhfwCfaL4.png" alt="Laptop screen running a phishing email analysis dashboard, representing the defensive tools and habits used to catch phishing attempts in Liverpool" title="Laptop screen running a phishing email analysis dashboard, representing the defensive tools and habits used to catch phishing attempts in Liverpool" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>The Filtering and Verification Habits That Actually Do the Work</h2><p>Most of my defence happens before an email ever gets a chance to trick me. I keep my email provider's spam filtering switched on and I report anything suspicious rather than just deleting it, because every report trains the filter to catch the next one faster. When something does land that claims to be my bank, a delivery company, or HMRC asking me to click through and "verify" something, I don't click. I open a new browser tab and go to the organisation's website directly, or I call them on a number I already have saved, not one from the email. It takes an extra thirty seconds and it's saved me more than once. If I'm on public wifi at a coffee shop, I make sure I'm connected through a VPN like <a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN </a>before I log into anything, since a fake hotspot is just phishing with extra steps.</p><h2>Password Managers and Two Factor Authentication as My Safety Net</h2><p>The truth is, I assume I'll eventually click something I shouldn't. Everyone does sooner or later, no matter how careful they are. So the defences I actually rely on are the ones that still protect me even when a phishing email gets past my judgement. A password manager like <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass </a>means I'm never typing my real banking password into a fake banking page, because the autofill simply won't recognise a copycat site and won't fill anything in. That mismatch alone has tipped me off to fake sites more than once. On top of that, I've got <a data-mce-href="https://kellssecurity.com/blog/the-importance-of-two-factor-authentication-in-protecting-your-data" href="https://kellssecurity.com/blog/the-importance-of-two-factor-authentication-in-protecting-your-data">two factor authentication </a>turned on everywhere it's offered, so even if a password does get stolen, it's close to useless to whoever's got it without the second step too.</p><h2>What I Do the Moment Something Looks Off</h2><p>If I do click something I shouldn't have, or I suspect I have, I don't sit on it. I change the password for that account straight away, from a different device if I can, and I check whether the same password was used anywhere else. I also report the email, both to my provider and to <a data-mce-href="https://www.actionfraud.police.uk" href="https://www.actionfraud.police.uk" target="_blank" rel="noopener">Action Fraud</a>, the UK's national reporting centre for fraud and cybercrime. Reporting feels like a small thing, but it's how patterns get spotted and how genuinely dangerous campaigns get shut down faster.</p><h2>Building Defences That Don't Rely on You Being Perfect</h2><p>If there's one thing I'd want a Liverpool business owner or a worried parent to take from this, it's that phishing defence isn't about becoming perfect at spotting fake emails. It's about building a setup where one mistake doesn't turn into a disaster. That means layering things: filtering, verification habits, a password manager, two factor authentication, and knowing what to do the moment something feels wrong. If you want a hand working out where your own setup has gaps, my <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit </a>is a good place to start, or you can <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch </a>and I'll walk through it with you directly.</p>

The Phishing Defences I Actually Rely On

Friendly delivery person at residential doorway holding shopping bags full of fresh groceries and household items

<h2>Why I Still Get Nervous Typing In My Card Details</h2><p>I've been doing this a long time and I still feel a small flicker of doubt every time I type my card number into a new website. That flicker is doing you a favour, if you're honest with yourself about it. Online shopping scams cost UK shoppers hundreds of millions of pounds a year, and Liverpool isn't spared from that, especially around big sale periods when everyone's guard drops because they're rushing to grab a bargain before it disappears. I've written before about the <a data-mce-href="https://kellssecurity.com/blog/safe-christmas-shopping-liverpool" href="https://kellssecurity.com/blog/safe-christmas-shopping-liverpool">seasonal spike in scams around Christmas</a>, and the same instincts apply whenever you're buying from somewhere unfamiliar, not just in December.</p><figure id="figure-v0p7pe16lmt9znnxf"><img id="v0p7pe16lmt9znnxf" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/be409020-5454-4578-b2a5-6371fe17f2a6-j7OAOOFRUISSCWSoOLvGJ4ZsbacMlK.png" alt="Laptop screen showing a secure online payment confirmation page, representing safe online shopping and checkout habits for Liverpool shoppers" title="Laptop screen showing a secure online payment confirmation page, representing safe online shopping and checkout habits for Liverpool shoppers" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>The Checks I Run Before I Buy From a New Site</h2><p>Before I hand over any card details to a shop I haven't used before, I run through a short checklist. I look for a proper company name, a UK address, and a contact page that isn't just a form disappearing into the void. I check the web address starts with https and has the little padlock, though I don't treat that as proof of anything on its own anymore, since scammers can get padlocks too. What I really trust is a quick search of the company name plus the word "reviews" or "scam", because genuine problems tend to show up fast in other people's experiences. If a site's only reviews are five stars and suspiciously generic, that's usually the real red flag, not the padlock.</p><h2>How I Pay When I Want an Extra Layer of Protection</h2><p>The payment method matters almost as much as the site itself. I always use a credit card rather than a debit card for anything over about £100, because Section 75 protection means the card company is jointly liable if something goes wrong, which is a real legal backstop that a debit card just doesn't give you. I never pay by bank transfer to an individual seller I don't know, no matter how convincing the story is, because once that money's gone, it's gone. I also use a password manager like <a data-mce-href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" href="https://go.nordpass.io/aff_c?offer_id=488&amp;aff_id=131235&amp;url_id=9356" target="_blank" rel="noopener">NordPass </a>for every shopping account I create, so a breach at one retailer doesn't hand someone the keys to my email or my banking too.</p><h2>The Deals That Are Almost Always a Trap</h2><p>If a deal looks too good, it usually is, and I say that as someone who still gets tempted by a "70% off, today only" banner more than I'd like to admit. Fake ads for big-brand trainers, electronics, and garden furniture are everywhere on social media at the moment, often running from accounts that were created a few weeks ago and have almost no followers. I check how long a page has existed and whether it has genuine engagement before I trust an ad, and if I'm shopping on public wifi in a Liverpool café, I make sure I'm connected through a VPN like <a data-mce-href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" href="https://go.nordvpn.net/aff_c?offer_id=15&amp;aff_id=131235&amp;url_id=902" target="_blank" rel="noopener">NordVPN </a>first, since public networks are exactly the kind of place card details get intercepted.</p><h2>What I Do If a Purchase Goes Wrong</h2><p>If something does go wrong, speed matters. I contact my card provider straight away to flag the transaction and start a dispute, keep every email, screenshot, and order confirmation as evidence, and report the scam to <a data-mce-href="https://www.actionfraud.police.uk" href="https://www.actionfraud.police.uk" target="_blank" rel="noopener">Action Fraud </a>so it's on record and can be linked to other reports about the same seller. <a data-mce-href="https://kellssecurity.com/blog/the-importance-of-two-factor-authentication-in-protecting-your-data" href="https://kellssecurity.com/blog/the-importance-of-two-factor-authentication-in-protecting-your-data">Two factor authentication </a>on my accounts means that even if my shopping details end up in a breach somewhere, it's much harder for anyone to actually get into my accounts and cause more damage. If you want help going through your own setup before your next big shop, my <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit </a>is a good starting point, or you can <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch </a>and I'll talk you through it.</p>

How I Actually Shop Online Without Getting Scammed

Delivery driver in uniform jogging with parcels toward residential home during golden hour light

<h2>The Text That Starts It All</h2><p>It's December, the doorbell hasn't rung in two days, and then a text lands: "Your parcel could not be delivered. Please rearrange delivery here." There's a link. It looks legitimate enough, styled like <a data-mce-href="https://www.royalmail.com/help-and-support/scams-and-fraud" href="https://www.royalmail.com/help-and-support/scams-and-fraud" target="_blank" rel="noopener">Royal Mail </a>or a well known courier, and because you're actually expecting three or four parcels this time of year, your brain doesn't pause the way it might in June. That's exactly what makes this the busiest scam text of the year, and I get sent screenshots of it from people in Liverpool almost every week between November and Christmas.</p><h2>Why December Is Prime Time for This</h2><p>Scammers don't need to guess whether you're expecting a delivery in December, because almost everyone is. The volume of real courier texts goes up at the same time, so a fake one slips in among genuine ones without standing out. This is smishing, the text message version of phishing, and it works on the same principles<a data-mce-href="https://kellssecurity.com/blog/phishing-defences-liverpool" href="https://kellssecurity.com/blog/phishing-defences-liverpool"> I've covered before</a>. The link usually leads to a page asking for a small "redelivery fee" and your card details, or it prompts you to download something under the guise of tracking your parcel. Either way, the goal is the same: get your card number, or get access to your device.</p><h2>How I Tell a Real Delivery Update From a Fake One</h2><p>I never click a link in a text about a delivery, no matter how convincing it looks. If I'm expecting something, I go straight to the retailer's own order tracking page or the courier's official app, which I've downloaded directly from the app store rather than through any link. Genuine couriers in the UK don't usually ask for a card payment to redeliver a parcel that's already been paid for, so any message asking for money to "release" a delivery is a strong sign something's wrong. If I'm not expecting anything at all, the text goes straight in the bin, or gets reported.</p><figure id="figure-qvedyew5r9mta5l99m"><img id="qvedyew5r9mta5l99m" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/ccff61d6-4a43-4015-9ec4-7bff77eb368c-pGe4DXGC4GHJyAlHR10Wl428MuVpOI.png" alt="Smartphone showing a fake "Package Delivered" text notification, the kind of scam delivery text Liverpool shoppers receive most often in December" title="Smartphone showing a fake "Package Delivered" text notification, the kind of scam delivery text Liverpool shoppers receive most often in December" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><h2>The Other December Scam I Watch For: Gift Cards</h2><p>The second one I see a lot in December involves gift cards, not deliveries. It usually starts as a message claiming to be from a friend, a boss, or even a family member, asking you to urgently buy gift cards and send over the codes. It plays on the rush of the season, when people are already buying gift cards as presents anyway, so the request doesn't feel as odd as it should. No legitimate request, personal or professional, will ever ask you to pay in gift cards. If you get one, call the person directly on a number you already have, not one from the message, before you do anything else.</p><h2>What I Do When a Parcel Actually Goes Missing</h2><p>Real missing parcels do happen, and the process for that looks nothing like the scam texts. I contact the retailer I bought from directly, since they're responsible for getting my order to me, not the courier. I check the tracking through the retailer's own account page, and if a delivery photo shows a parcel left somewhere I don't recognise, I report it to the retailer with a screenshot. For scam texts, I forward the suspicious message to 7726 for free, which flags it to my mobile provider, and if money or details have actually been taken I report it to <a data-mce-href="https://www.actionfraud.police.uk" href="https://www.actionfraud.police.uk" target="_blank" rel="noopener">Action Fraud</a>. I've written before about<a data-mce-href="https://kellssecurity.com/blog/safe-christmas-shopping-liverpool" href="https://kellssecurity.com/blog/safe-christmas-shopping-liverpool"> the wider run of Christmas shopping scams</a> and <a data-mce-href="https://kellssecurity.com/blog/safe-online-shopping-liverpool" href="https://kellssecurity.com/blog/safe-online-shopping-liverpool">the secure payment habits </a>that back all of this up, and together they cover most of what catches people out this time of year. If a message doesn't sit right with you, my <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit </a>has more on spotting these, or you can <a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact">get in touch</a> and I'll take a look with you.</p>

The Delivery Scams I See Every December

Close-up of hands securing cooperative membership card and financial documents in protective folder aboard vessel

<h2>Why Personal Information Is Worth More Than People Think</h2><p>Your personal information is worth more than you'd think, and not just to you. Your name, date of birth, address, and a few answers to "security questions" are often all a scammer needs to open credit in your name or talk their way past a call centre pretending to be you. Companies want it too, sometimes for good reasons and sometimes just to sell you things. I don't think you need to become paranoid about this, but I do think most people hand over far more than they realise, far more often than they need to.</p><p><br data-mce-bogus="1"></p><h2>The Information I Never Give Out Without a Reason</h2><p>There's a short list of details I treat as genuinely sensitive: my date of birth, my home address, my mother's maiden name, and anything that looks like a security question answer. If a website, a caller, or a text message asks for one of these out of nowhere, I stop and ask myself why they actually need it. A genuine bank will never ask you to confirm your full password or PIN over the phone. A genuine competition doesn't need your date of birth to enter you into a prize draw. When in doubt, I give the minimum required and nothing more.</p><p><br data-mce-bogus="1"></p><h2>Where Most People Leak Data Without Realising</h2><p>Most of the damage isn't done by a dramatic hack. It's done a little at a time, through things that feel harmless. A "which Harry Potter character are you" quiz that asks for your birthday. A loyalty card sign-up that wants your full address and phone number. An app that asks for access to your contacts, location, and photos just to let you crop an image. Social media profiles set to public, with a birthday, hometown, and school all sitting there for anyone to piece together. None of these feel dangerous on their own, which is exactly why they work.</p><p><br data-mce-bogus="1"></p><h2>The Habits That Actually Protect It</h2><p>The habits that make the biggest difference are boring, and that's fine by me. I use a <a data-mce-href="https://kellssecurity.com/blog/password-manager-vs-memory-liverpool" href="https://kellssecurity.com/blog/password-manager-vs-memory-liverpool">password manager </a>so every account has a different, properly random password instead of a variation on the same one. I turn on two factor authentication everywhere it's offered, so a leaked password alone isn't enough to get in. I go through my social media privacy settings every so often and lock down anything that doesn't need to be public. And I've got into the habit of pausing before I fill in a form, just long enough to ask whether this particular website genuinely needs my date of birth to sell me a phone case.</p><figure id="figure-kcjyb58ydsmta6hb88"><img id="kcjyb58ydsmta6hb88" src="https://rjdavx8ozyznxeyh.public.blob.vercel-storage.com/production/websites/infinite-images/a8f46e59-16db-438c-b9d8-5ddfeee326ea-ydCf4gWOQ0Z1aqN1t3hy4v5cVvxHA7.png" alt="Close-up of a hand entering a passcode on a digital security keypad, representing the everyday login and account checks that protect personal information" title="Close-up of a hand entering a passcode on a digital security keypad, representing the everyday login and account checks that protect personal information" class="object-cover bg-gray-100 rounded-2xl md:rounded-3xl lg:rounded-4xl" style="aspect-ratio: 16/9; object-position: center center;" data-corners="default" data-aspect="16:9" data-caption="" data-positionX="undefined" data-positionY="undefined" data-fullWidth="false"/></figure><p><br data-mce-bogus="1"></p><h2>What I Do If My Information Has Already Been Exposed</h2><p>If you think your details have already been caught up in a data breach, you can check services like <a data-mce-href="https://haveibeenpwned.com" href="https://haveibeenpwned.com" target="_blank" rel="noopener">Have I Been Pwned</a> to see whether your email address has turned up in a known leak. If it has, change the password on that account and anywhere else you've reused it, and turn on<a data-mce-href="https://kellssecurity.com/blog/two-factor-authentication-liverpool" href="https://kellssecurity.com/blog/two-factor-authentication-liverpool"> two factor authentication</a> if you haven't already. Keep an eye on your bank statements for anything you don't recognise, and report anything that looks like fraud to <a data-mce-href="https://www.actionfraud.police.uk" href="https://www.actionfraud.police.uk" target="_blank" rel="noopener">Action Fraud</a>. My <a data-mce-href="https://kellssecurity.com/toolkit" href="https://kellssecurity.com/toolkit">Safety Toolkit </a>has more on locking things down properly, or you can<a data-mce-href="https://kellssecurity.com/contact" href="https://kellssecurity.com/contact"> get in touch</a> and I'll help you work through it.</p>

Blog

Protecting Small Businesses in Liverpool: Cybersecurity S...

How I'd Choose a VPN Service If I Were Starting Today

The Phishing Defences I Actually Rely On

How I Actually Shop Online Without Getting Scammed

The Delivery Scams I See Every December

How I Protect My Personal Information Online