Cybersecurity starts with the everyday choices you make online. Your passwords, financial information, tax records, and other personal data can all be targets for scammers and identity thieves. Fortunately, simple preventative habits can significantly reduce your risk.

1. Use Strong, Unique Passwords

Use a different, strong password for each important account. Reusing passwords can allow criminals to access multiple accounts if one is compromised. A password manager can help securely store and manage your passwords.

2. Turn On Multifactor Authentication

Multifactor authentication (MFA) adds another layer of protection by requiring additional verification when you sign in. Enable MFA whenever possible, especially for email, banking, financial, and tax-related accounts.

3. Keep Devices and Software Updated

Regular updates can fix security vulnerabilities that attackers may exploit. Keep your computers, phones, browsers, applications, and security software updated, and enable automatic updates when available.

4. Think Before You Click

Scammers often use emails, texts, calls, and social media messages to impersonate trusted organizations and create a sense of urgency. Before clicking a link or sharing information, ask: Was I expecting this message?

When in doubt, contact the organization directly using a trusted website or phone number rather than information provided in the message.

5. Protect Tax and Financial Information

Tax and financial records contain sensitive information and should be stored securely. Consider encrypting sensitive files and regularly backing up important records. Businesses should also independently verify unexpected requests to change payment or financial information.

6. Avoid Sensitive Activities on Public Wi-Fi

Avoid accessing bank accounts, tax records, financial services, or other sensitive accounts over public Wi-Fi. Use a trusted network whenever possible.

7. Recognize and Verify Scams

Be cautious of unexpected requests for personal information, payments, account changes, or immediate action. Scammers may impersonate government agencies, businesses, or other trusted organizations.

When in doubt, slow down and verify the request through a trusted channel.

8. Take Preventative Action

Don’t wait until an account is compromised to improve your security. Review your account settings, enable MFA, replace reused passwords, update your devices, and back up important files.

Taxpayers can also use an IRS Identity Protection PIN, a six-digit number that helps prevent someone else from filing a federal tax return using their Social Security number or ITIN.

Make Cybersecurity Part of Your Routine

Good cybersecurity doesn’t have to be complicated. Use unique passwords, enable MFA, keep your devices updated, protect sensitive files, avoid sensitive activity on public Wi-Fi, and verify suspicious requests before taking action.

Making these practices part of your routine can help protect your personal, financial, and tax information year-round.