Here’s to a Cyber Secure 2025

Dec 30

2025 is here and there is no better time for some cyber-themed New Year’s resolutions! Here’s our top recommendations for you to start off the new year with greater security and enhanced privacy.

1. Update Your Devices and Software

Enable automatic updates: Most security patches and bug fixes are included in regular updates. Let your devices update automatically so you don’t have to remember. If you received a new device over the holidays, there’s no better time to check and see if it has automated updates turned on.
Check manually when needed: If an update doesn’t automatically install, set aside time regularly to do a check. It’s a great idea to use reminders on your computer or mobile devices. We recommend quarterly checks. This is particularly important for any devices that may impact your privacy, such as Internet-connected cameras inside your home (we strongly caution against such systems, as a general rule).
Upgrade outdated tech: If your Internet-connected mobile device, computer, or critical hardware such as a home router is too old for current updates, it’s time for a replacement.

2. Strengthen Your Passwords

Use a passphrase: Instead of simple words or key dates, opt for something like a short sentence with symbols and numbers (e.g., “MyCatEats2Fish!”).
Avoid reusing passwords: If one account is compromised, all your other accounts become vulnerable, too. Simply changing the characters on the end is not a new unique password.
Try a password manager: Tools like 1Password securely store all your unique passwords, so you only have to remember one master password.

3. Implement Two-Factor Authentication (2FA)

Add an extra layer of security: 2FA requires entering a one-time code from a trusted source (such as a text message or app) in addition to your password. Using any form of 2FA is better than none at all.
Use authenticator apps: Apps like Google Authenticator, Microsoft Authenticator or Authy are more secure than SMS-based text messages for receiving codes.
Use passkeys or tokens for critical accounts: New account security options like passkeys that are tied to your devices or physical tokens such as YubiKeys offer further security; but ensure you don’t lose those devices -- regaining access can be a challenge.

4. Adjust Your Privacy Settings

Review social media: Take a moment to check who can see your posts and personal details. Customize your settings so only friends or approved contacts can view what you share. Review these settings at least annually as social media companies including X and LinkedIn have made major changes in the past, particularly when it comes to using your data to train new AI models.
Be skeptical of unknown contacts: Don’t accept friend requests or direct messages from strangers without verifying who they are. Even if someone you know is connected with them, don’t automatically trust the request. Be particularly wary if it’s a new connection request from someone you already were connected with as this may be a duplicated or spoofed account.
Stay cautious with messages: Phishing attacks often arrive via social media messages and don’t just come from emails. If you’re unsure about a link or an attachment, don’t click on it.

5. Be Careful with AI

Avoid sharing sensitive info: When using AI chatbots or generative text tools, don’t reveal private details such as addresses, financial data, or other personal or sensitive work information.
Check authenticity: AI technology can be used to create deepfakes or false narratives. Always verify sources before trusting or sharing content online. Always be skeptical and think critically about the message and what it may be trying to get you to do, say or think.
Understand data collection: Many AI services store user data to improve their algorithms. Familiarize yourself with a tool’s privacy policy to know where your information might end up.
Beware of AI-generated phishing attempts: Cybercriminals are increasingly using AI to craft highly convincing phishing messages. Keep an eye out for unusual language or requests via text, e-mail, or social media.

6. Monitor Your Digital Footprint

Regularly search your name: Set up Google Alerts for your name or a monthly reminder to Google yourself and see what information is publicly available. Review Google’s My Activity site to find and remove unwanted personal information where possible.
Check your statements and set up alerts: Spot unusual charges by reviewing bank and credit card statements monthly. If your banking provider has options to turn on account alerts and notifications, consider doing so.
Consider a credit freeze or alert: If you suspect any fraudulent activity, contact credit bureaus to protect your financial identity. Regularly check your credit score and credit records for new accounts or unauthorized changes.

Cybersecurity can seem overwhelming for many, but the steps above are simple, quick and something everyone can do to stay safe online. While cybersecurity technologies such as anti-virus, firewalls and e-mail filters help protect all of us online, they aren’t perfect and taking small steps can make a huge difference for all of us.