Whether you're a total beginner or just looking to brush up, this guide walks you through staying safe online in plain, simple steps — because everyone deserves to feel confident online.
You don't need to be a tech expert. These three habits alone will protect you from the vast majority of online threats.
Using the same password everywhere is the easiest thing to fix. If one site gets hacked, criminals will try that password on your email and bank too. Changing just this one habit makes a huge difference.
Before clicking any link in an email, take a second to check it feels right. If it's unexpected or asking you to act fast, go directly to the website instead. Your instincts are usually spot on.
Avoid doing anything sensitive — like banking or shopping — on public Wi-Fi. Your mobile data is a much safer option and it's just as easy to use.
Small, consistent actions that take minutes but protect you all year round.
Even if someone steals your password, 2FA means they still can't get in without a second code sent to your phone. Turn it on for your email first — it's the most important one. Look for "Security" in your account settings.
Software updates fix security holes that criminals use to get in. When you see "update available" — don't ignore it. Turn on automatic updates on your phone and laptop so it just happens in the background.
If your device is stolen or hit by a virus, a backup saves everything. Use free cloud storage like Google Drive, iCloud, or OneDrive and set it to back up automatically — you'll never have to think about it again.
Windows Defender (built into Windows 10 and 11) is genuinely good and completely free. On a Mac, the built-in protections are solid too. You don't need to pay for basic protection.
Banks will never ask you to move money to a "safe account" or give your PIN over the phone. If something feels off, hang up and call your bank directly using the number on the back of your card.
Visit haveibeenpwned.com — type in your email address and it'll tell you if your details have appeared in any known data breaches. It's free, safe, and takes 10 seconds.
Urgency is a classic trick — scammers want you to panic and click before you think. Legitimate companies won't threaten you in an email. Always pause, take a breath, and go directly to the website to check.
If you didn't enter a competition, you can't have won it. Messages offering Amazon vouchers, phone upgrades, or cash prizes out of the blue are almost always scams. Delete and move on.
You can report suspicious emails and texts in the UK at actionfraud.police.uk. Forward suspicious texts to 7726 (it's free). You can also check any suspicious link before clicking it at virustotal.com.
You don't need to memorise dozens of complicated passwords. There's a much easier way.
A password manager remembers all your passwords for you and creates strong, unique ones automatically. You only need to remember one master password. The good news? You probably already have one — iPhones and iPads use Apple Keychain, Android and Chrome users have Google Password Manager, and if you're on Windows, Microsoft Edge has one built in too. No download, no extra cost — just turn it on.
AI assistants like ChatGPT, Gemini, Copilot, and Claude are genuinely helpful for everyday tasks. But there are a few simple habits that keep you safe every time you use them.
Never type your full name, address, date of birth, National Insurance number, passport details, or anything you'd only share on an official form. AI tools are not secure vaults — treat them like a public conversation.
Never paste in card numbers, bank account details, sort codes, or login credentials — even if you're asking for help with something finance-related. Describe the situation without including the actual numbers.
Be careful sharing detailed medical information, legal situations, or anything about other people without their knowledge. You can ask general questions without sharing private specifics — "what are common symptoms of X" rather than "I have X and here is my full medical history."
If you use AI at work, be cautious about pasting in internal documents, client data, contracts, or anything confidential. Many employers have policies about this. When in doubt, keep company information out of public AI tools.
Never type a password, PIN, or one-time code into an AI chat. There is no situation where an AI tool genuinely needs this information to help you.
Avoid sharing children's full names, schools, ages, or photos in AI tools. General parenting questions are fine — just keep the details vague and avoid anything that could identify a specific child.
The more clearly you explain what you need, the better the answer. Instead of "help me with my email," try "help me write a polite reply to a landlord asking about a repair." You get a better result without needing to paste in anything private.
If you want help with something personal, describe it as a general situation rather than your specific one. "What should someone do if they receive an unexpected tax letter?" works just as well as sharing your actual letter — and keeps your details private.
AI tools can be wrong — confidently wrong. For anything important like medical, legal, or financial questions, treat the AI answer as a starting point and verify it with an official source or a qualified professional. Never make a big decision based solely on what an AI told you.
AI tools remember everything within a conversation. If you're switching to a different topic — especially a more sensitive one — starting a new chat means there's no risk of earlier details being mixed in. It's a simple habit worth forming.
Scam emails used to be easy to spot because they were badly written. AI has changed that. Criminals now use AI to write convincing, well-spelled, professional-sounding emails pretending to be from your bank, HMRC, or a delivery company. The rule still applies: go directly to the website instead of clicking any link.
AI can now clone someone's voice from just a few seconds of audio. There have been cases of people receiving calls that sound exactly like a family member claiming to be in trouble and needing money urgently. If you receive an unexpected call like this, hang up and call that person back on their real number to check.
AI can create realistic fake photos and videos of real people — including public figures and even people you know. If you see something shocking or surprising involving someone online, take a moment before sharing it. Look for unnatural edges, blurry hands, or inconsistent lighting — and check a trusted news source to see if the story is real.
Not every chatbot you encounter online is trustworthy. Some are set up to look like helpful AI assistants but are designed to collect your personal information. Stick to well-known AI tools from reputable companies — and be wary of any chatbot that asks for personal details, payment information, or login credentials.
A good rule of thumb: if you wouldn't say it out loud in a coffee shop, don't type it into an AI tool. These tools are genuinely useful — just treat them like a helpful stranger rather than a trusted friend who knows your secrets.