Most people know they should care about online privacy. Fewer actually do the basic things that make a real difference.
Here’s a straightforward look at five habits that still matter.
1. Stop Reusing Passwords
This remains the single biggest vulnerability for most people. If one site gets breached and you’re using the same password elsewhere, attackers will try those credentials on other accounts.
Use a password manager. Let it generate long, random passwords and store them. Turn on two-factor authentication (preferably an authenticator app or passkey) on important accounts — email, banking, and social media first.
Passkeys are becoming more common in 2026 and are worth using where available. They’re harder to phish than traditional passwords.
2. Keep Your Devices Updated
Outdated software is still one of the easiest ways for malware to get in. This applies to your phone, computer, and browser.
Turn on automatic updates wherever possible. On Windows, make sure Windows Security (the built-in antivirus) is active. On Mac and iPhone, the system protections are solid if you stay current. Avoid installing random “optimizer” or “cleaner” apps — many of them create more problems than they solve.
3. Treat Unexpected Messages with Suspicion
Phishing hasn’t gone away. It’s just gotten better. Messages that look like they come from your bank, delivery company, or a colleague can be convincing.
Pause before clicking links or downloading attachments. If something feels urgent or asks for personal information, go directly to the official website or app instead of using the link in the message. Hovering over links (on desktop) or long-pressing them (on mobile) can sometimes reveal the real destination.
4. Lock Down Your Social Media
Most people overshare without realizing it. Birthdays, pet names, hometowns, and vacation photos can all be used to answer security questions or build a profile on you.
Review the privacy settings on Facebook, Instagram, LinkedIn, and any other platforms you use. Limit who can see your posts and personal information. Be selective about friend and connection requests. And think twice before posting anything that reveals your location in real time.
5. Be More Careful with Your Browser
Cookies and trackers still follow you around the web. While they’re not always malicious, they build detailed profiles that companies (and sometimes worse actors) can use.
Use a browser with strong tracking protection — Firefox, Brave, or Safari are better defaults than Chrome for privacy. Consider a reputable VPN if you regularly use public Wi-Fi or want to reduce how easily websites can tie activity to your real location. Just know that a VPN is not a complete privacy solution on its own.
Also check that shopping and banking sites use HTTPS (the padlock icon). Avoid entering payment details on sites that don’t.
You don’t need to become a privacy extremist. The biggest gains come from a few consistent habits: unique passwords, timely updates, skepticism toward unexpected messages, tighter social media settings, and a more careful browser setup.
These steps won’t make you invisible online, but they will make you a much harder target.
