You do not need to become a security expert. You need one focused evening — about 90 minutes — and the five free tools on this site, used in the right order. Do these five steps tonight and you will be better protected than the vast majority of people online.
Step 1 (10 min): Find out where you stand
Start with the Am I Breached? check — seven questions, a score out of 11, and a prioritized fix-it list. It runs entirely in your browser, and its output is literally your agenda for the rest of the evening. Whatever it flags red, that is your Step 2.
Step 2 (25 min): Fix your passwords — the right way
One rule beats every other security tip: a different password for every account that matters. Humans cannot do that from memory, so use a password manager and let it remember for you. Test your current password habits against the Password Strength Checker — watching “cracked in 2 seconds” appear is the motivation most people need. Then set up two-factor authentication on email and banking first: email is the master key to everything else.
Step 3 (20 min): Make your files un-losable
Ransomware, spilled coffee and dead drives all have the same cure: copies. The Backup Plan Generator asks four questions and hands you a personal 3-2-1 plan — print it, buy the one drive it suggests, and turn on the automatic tool your computer already ships with. Full background in the 3-2-1 rule made simple.
Step 4 (15 min): Harden the doors people actually knock on
Most people are not hacked — they are talked into opening the door. Learn the 10 red flags of a phishing email, and when a suspicious message lands, run it through the Scam Message Checker before you click anything. Then give your router 15 minutes with the home Wi-Fi hardening guide — it is the one device protecting everything else in the house.
Step 5 (15 min): A quick privacy sweep
Finish with the browser settings that actually matter and the social media privacy checkup (do the top three items tonight; the rest can wait for the weekend). Bonus: the PC Power Cost Calculator will tell you if that always-on PC is quietly costing you real money.
Done. Now put a date in your calendar
Security is not a project, it is a habit with a very low maintenance dose: re-run the breach check every few months, restore one file from backup once a quarter, and treat every urgent unexpected message as guilty until proven innocent. All five tools live on one page — bookmark it.
Quick answers
What is the single most important security step?
A different password for every account that matters, kept by a password manager — plus two-factor authentication on your email. Email is the master key: whoever controls it can reset everything else.
Do I really need to back up if I use the cloud?
Sync is not backup: if ransomware encrypts your files or you delete something, the cloud faithfully syncs the damage. The 3-2-1 rule (three copies, two kinds of storage, one off-site) survives every failure mode, and takes one evening to set up.
How do I know if I have been hacked?
The common tells: login alerts you did not trigger, mail rules you did not create, money movements you do not recognize, and devices suddenly slow or ad-ridden. The Am I Breached check scores your exposure in 60 seconds, and the Breach Response Wizard gives ordered steps for each scenario.
Is antivirus enough in 2026?
Built-in protection (like Windows Defender) is genuinely good now — the gap it cannot cover is you: reused passwords, phishing clicks and unbacked-up files cause far more losses than exotic malware.
