Online security doesn’t should be difficult. With some easy steps, you’ll be able to simply defend your PC from malware and safeguard your private information with little or no further effort.
The better part? None of the following pointers value cash. In reality, most important security tools you need are completely free. You can preserve your self and your PC protected on-line with out spending a single dime. Here’s how.
1. Use an antivirus
Antivirus software program is a must have for any PC. Thankfully, you don’t should exit of your solution to get one anymore as a result of all Windows 11 and Windows 10 PCs include Windows Security and Microsoft Defender, supplying you with entry to a minimal-yet-capable antivirus.
It mechanically scans your system within the background and checks the information you obtain and the functions you run, recognizing malware earlier than it will probably take maintain. You can go additional and configure Microsoft Defender for extra security if you would like.
Or you can go for a third-party antivirus, a lot of which include extra security features. If you determine to take this route, know that we currently recommend Norton 360 Deluxe, however any antivirus will do if all you care about is primary safety.
Recommended: The best antivirus software for Windows
Just make sure to go away your antivirus’s real-time safety function enabled. Don’t flip off real-time scanning as a result of errors can occur to anybody—and once they do, you need your antivirus to be energetic.
2. Use a password supervisor
Once you begin utilizing a password supervisor, you’ll by no means return—it’s that life-changingly handy. So, if you happen to aren’t utilizing one but, we extremely suggest utilizing a password supervisor. (A free one, even!)
Recommended: The best password managers worth using
The unlucky reality is that many firms—regardless of how massive they’re or how respected they appear—find yourself dealing with information breaches and leaks that launch their password databases to the general public.
That’s why the largest danger you’ll be able to take on-line is reusing the identical password for a number of accounts. If your password will get leaked in a knowledge breach, hackers can use your e-mail/password mixture to interrupt into your different accounts that use the identical password.
The resolution? Use robust passwords which can be distinctive each single time.
The downside? Remembering so many passwords is sort of inconceivable—and that’s why it is advisable to be utilizing a password supervisor.
A password supervisor remembers all your passwords and associates them with their respective websites, apps, accounts, and so forth. All it is advisable to do is bear in mind the grasp password; the password supervisor will fill within the acceptable password every time it is advisable to log in.
3. Keep your software program updated
Chris Hoffman / IDG
Modern working programs and all of the functions in your system obtain common safety updates that repair exploits and vulnerabilities. If you skip these vital patches, you’re opening your self as much as dangers.
The excellent news is that almost all trendy functions—whether or not it’s Windows, Microsoft Office, Google Chrome, or one thing else—recurrently test for and mechanically set up such updates.
If you’ve disabled automated updates, you need to rethink. There could also be a distinct segment motive to take action, however more often than not you’re simply placing your self in peril.
And sure, sooner is best than later. If your working system or internet browser says it must restart to put in updates, do it. Sure, it’s inconvenient to restart your Windows PC or internet browser in the course of one thing, however it simply would possibly defend you from an assault.
4. Stop utilizing unsupported working programs and functions
It’s one factor for working programs and functions to get automated updates—it’s one other factor when these updates are discontinued.
No software program lasts without end. Eventually, builders and corporations finish long-term assist and cease issuing safety updates for older {hardware} and software program. At that time, the {hardware}/software program ought to be handled as unsafe and you need to cease utilizing it as quickly as you’ll be able to.
What occurs if you happen to preserve utilizing it? Older software program and unsupported gadgets step by step develop more and more extra weak to assault, and it’ll solely be a matter of time earlier than you get hit with one thing.
For instance, Windows 7 is no longer supported and utilizing it places you in danger as a result of newly found safety holes aren’t being patched. The identical is true for particular person functions—like Office 2016 and earlier variations of Microsoft Office, which now not obtain safety updates.
While an older model of Office would possibly work effectively to your wants, it might open you as much as an assault. For instance, you would possibly obtain a malicious Word doc that exploits an Office vulnerability to hack you.
That’s one motive why Microsoft Office 365 is a good deal: you’ll at all times have entry to the most recent variations of Office on all of your gadgets.
5. Be conscious when shopping the online
How you browse the online is vital. In a really perfect world, you shouldn’t have to fret in regards to the websites you go to and whether or not one thing might go fallacious—however the world is way from ideally suited.
Untrustworthy web sites can assault your browser via unpatched safety flaws. More generally, sketchy web sites might attempt to obtain malware onto your PC, trick you with misleading advertisements, or get your private info with phishing scams.
Take care when shopping the online and be conscious. Think twice earlier than downloading software program, keep away from dodgy websites that make guarantees that appear too good to be true, and don’t enter private info on any web site that you just haven’t vetted and belief 100 %.
6. Only obtain information and software program from reliable websites and sources

Chris Hoffman / IDG
Any time you obtain software program, it’s important to be very cautious. Even one thing as innocuous as a PDF or Word doc can probably wreak havoc in your PC if it exploits an unpatched flaw in your PDF reader or Microsoft Word.
Any file you obtain off the web can do nasty issues to your PC, and solely an antivirus that acknowledges it should defend you. So, you need to solely obtain, set up, and run software program that you just utterly belief—and provided that you get it from a supply you belief.
Also, cease ignoring Windows SmartScreen! On Windows, SmartScreen warnings pop up whenever you attempt to run software program that few folks have downloaded and run earlier than. You can inform Windows to run the appliance anyway, however you need to at all times pause and think about whether or not you really belief the appliance. If you don’t, then you definately shouldn’t run it. When doubtful, persist with known-as-trustworthy functions.
7. Learn to determine phishing scams
Phishing scams have grown into an enormous downside during the last a number of years, and also you’re in danger whether or not you’re utilizing a Windows PC, a Chromebook, a smartphone, or the rest.
Long story quick: a phishing rip-off is one the place somebody tries to bait you into gifting away delicate info or putting in malware. This is normally achieved by tricking you into clicking a misleading hyperlink.
More on this: The most common types of phishing scams
Phishing scams are tough as a result of they’re normally disguised as coming from a trusted supply: a good firm like Microsoft, a extensively used service like USPS, or perhaps a good friend or member of the family. That’s why is so vital to study how to identify phishing emails and text messages.
A password supervisor might help right here, too. Let’s say you click on a phishing hyperlink and find yourself on a faux website pretending to be your financial institution. If you have been in your actual financial institution’s web site, your password supervisor would know and mechanically fill in your login particulars. But because it’s an imposter website, your password supervisor gained’t fill in—a clue that one thing is amiss.
8. Don’t click on unsolicited hyperlinks
Every hyperlink ought to be handled as questionable, whether or not that’s on a web site, on social media, in an e-mail, or perhaps a textual content message. If you by no means click on on unsolicited hyperlinks, you’ll be able to drastically cut back your danger of malware.
For instance, let’s say you get a textual content message a few bundle supply failure and it is advisable to click on this hyperlink and supply private info to be sure you get it. You don’t know whether or not it’s a rip-off or not—however you aren’t anticipating a supply, so that you deal with it as questionable. In most instances, you simply efficiently prevented being scammed.
The identical goes for whenever you get a hyperlink that purports to come back from Amazon, PayPal, or your bank card firm. It might have an alarming angle to it, equivalent to claiming your account has been banned. This is supposed to induce panic and trigger you to decrease your guard. But if in case you have a basic coverage of not clicking unsolicited hyperlinks, you’ll be okay.
When doubtful, keep away from unsolicited hyperlinks and go straight to the supply. Got an alert e-mail that claims to be out of your financial institution? Don’t click on it. Instead, manually navigate to the financial institution in your internet browser. Got an pressing alert a few bundle from FedEx? Don’t click on it. Go straight to the FedEx web site your self and ensure if it’s true.
9. Use an ordinary Windows consumer account

Chris Hoffman / IDG
When on Windows, we suggest utilizing a “Standard” account sort relatively than an “Administrator” account sort for day-to-day exercise.
Yes, Administrator accounts are extra handy as a result of they will set up software program on the system degree with fewer hurdles. But being logged into an Administrator account additionally makes it simpler for malware to take maintain.
For passive safety, it’s higher to create a secondary Windows consumer account with Standard consumer permissions. That means if malware does attempt to infect you, it should have a tougher time doing so.
For finest outcomes, solely use an Administrator account to arrange your PC and set up software program, then change to a secondary Standard account to your day-to-day pc utilization. Microsoft has an in depth assist web site with details about creating new user accounts.
The excellent news is that Microsoft is making some changes to Windows that may make this unnecessary soon.
10. Set up two-factor authentication to your accounts
Two-factor authentication is non-negotiable as of late. With this further layer of safety for an account, even when somebody is aware of your account’s password, they nonetheless gained’t be capable to check in.
Why? Because the intruder will additionally want a selected two-factor authentication code: maybe a code despatched to your telephone, a code generated by an app, or perhaps a bodily safety key.
I like to recommend setting up two-factor authentication with all accounts that assist it, significantly financial institution accounts and e-mail inboxes. It could also be a tad extra inconvenient to check in—you’ll have to offer a code along with your typical password—however it’s an vital solution to keep protected on-line.
Outdated practices that don’t actually assist
I feel you’ll agree with me that the above suggestions and ways aren’t very tough in any respect. Some are one-and-done (like utilizing a Standard Windows account), some are repeated (like preserving software program up to date), and a few are passive (like by no means clicking unsolicited hyperlinks), however they’re all easy.
Now that you realize what to do, you also needs to take a look at my different recommendation on what you shouldn’t do. In reality, there are a number of outdated security practices which will have been helpful prior to now however are now not useful. It’s higher to cease doing them now.