🛡️
EmailBreachGuard
Cybersecurity made simple
✅ Checklist · 5-Minute Cyber Safety

✅ The 5-Minute Cyber Safety Checklist

A calm, plain-English checklist you can run through in just a few minutes to keep your accounts, devices, and everyday online life safer. Start with the quick version, then use the detailed guide below when you have time.

⏱️ Quick version: 2–3 minutes · Full version: 10–15 minutes 👨‍👩‍👧 For individuals, families, and small teams
💡
How to use this page: Use the first card as a 1-page “habit checklist.” When you’re ready, scroll down to the detailed sections to strengthen each area step by step.

Quick 5-Minute Checklist (one-page version)

Run through these 10 items as a regular habit — weekly, monthly, or whenever you’re feeling unsure about your online safety.

Daily / Weekly habits
  • 1️⃣ I use different passwords for my most important accounts (email, banking, major shopping).
  • 2️⃣ My passwords are longer than 12 characters or I’m slowly upgrading them as I log in.
  • 3️⃣ I have multi-factor authentication (MFA/2FA) turned on for key accounts like email and banking.
  • 4️⃣ I pause and run a quick check before clicking links in emails or texts, especially if they feel urgent or scary.
  • 5️⃣ My phone and laptop are set to lock automatically with a PIN, password, or biometrics.
  • 6️⃣ I install updates for my phone, computer, and browser instead of ignoring them forever.
  • 7️⃣ I avoid entering passwords or payment info on public or unknown Wi-Fi whenever possible.
  • 8️⃣ I regularly glance at my bank and card transactions to catch anything weird early.
  • 9️⃣ My browser or password manager can warn me about known data breaches or unsafe sites.
  • 🔟 I have a simple plan: if something looks wrong, I know to contact my bank or provider directly using their official website or app.
🖨️ To make a 1-page PDF: open this page, print, and choose “Save as PDF” — you can keep just this first page.

Detailed checklist (by area)

When you have 10–15 minutes, walk through each area below. You don’t have to fix everything in one day — start with the accounts and devices that matter most.

1. Passwords & accounts

Your passwords are the keys to almost everything else. Improving them is one of the highest-impact steps you can take.

Password safety checklist
  • ✅ I have a different password for email, banking, and my main cloud accounts.
  • ✅ My newest passwords are 12+ characters and not just single words with “123” added.
  • ✅ I avoid obvious patterns like Summer2025! or CityName123.
  • ✅ I’m slowly replacing older, weaker passwords whenever I log into a site anyway (no need to do everything in one night).
  • ✅ I’ve tried a password manager or I’m considering one to help me keep passwords long and unique.

If you’re unsure about password strength, try the Password Strength Helper tool on the EmailBreachGuard homepage using sample patterns (not real passwords).

2. Multi-factor authentication (MFA / 2FA)

MFA adds a second step — like a code from an app — on top of your password. It’s one of the best defenses against account takeovers.

MFA checklist
  • ✅ MFA is turned on for my main email account.
  • ✅ MFA is turned on for my banking / financial accounts where available.
  • ✅ MFA is on for any account that stores important documents or photos.
  • ✅ I know how to use my backup codes or recovery options in case I change phones.

3. Email & phishing defense

Your email is often the gateway to resetting other accounts. It’s also where many scams arrive first.

“Sketchy email” defense checklist
  • ✅ I pause for a moment before clicking any link in a surprising email or text.
  • ✅ If a message feels urgent or threatening, I verify it by going to the official website or app, not by using the link in the message.
  • ✅ I’m careful with attachments, especially if I wasn’t expecting them.
  • ✅ I know basic red flags: strange sender address, bad spelling, weird links, and pressure to act quickly.

For a deeper walk-through, check the “Is This Email Sketchy?” guide on EmailBreachGuard.

4. Devices (phone, laptop, tablet)

If someone gets into your device, they can often access your email, apps, and saved passwords in one place.

Device safety checklist
  • ✅ My phone and computer have a screen lock (PIN, password, or biometrics).
  • ✅ They are set to lock automatically after a short period of inactivity.
  • ✅ I install system and app updates regularly instead of delaying them forever.
  • ✅ I’m cautious about installing apps or software from unknown sources.
  • ✅ I have a simple way to back up important files or photos (cloud or external drive).

5. Browsing, Wi-Fi, and where you log in

Some attacks rely on intercepting passwords or data over insecure connections, or tricking you into entering details on fake sites.

Browser & Wi-Fi checklist
  • ✅ I’m extra careful when using public Wi-Fi (cafés, airports, hotels) and avoid logging into sensitive accounts there when possible.
  • ✅ I look for https:// and the padlock icon before entering sensitive info on websites.
  • ✅ My home Wi-Fi has a non-default password and isn’t something obvious like my street address.
  • ✅ I close browser tabs and log out from sensitive sites on shared computers.

6. Money, credit, and fraud watching

You don’t need to obsess over statements daily, but a light monitoring habit can catch fraud early before it snowballs.

Money & fraud checklist
  • ✅ I glance at my bank and card transactions regularly for anything I don’t recognize.
  • ✅ I know how to quickly contact my bank or card issuer if I see suspicious charges.
  • ✅ Where available, I’ve turned on transaction or login alerts from my bank or card provider.
  • ✅ I’m aware of options like fraud alerts or credit freezes if serious identity theft is suspected.

7. Monthly or quarterly “tune-up”

A few times a year, it’s worth doing a slightly deeper check-in. You can make this a calendar reminder for yourself or your family.

Occasional deeper checks
  • ✅ I review which devices and apps are logged into my main accounts and sign out of anything I don’t recognize.
  • ✅ I remove old apps or browser extensions I no longer use.
  • ✅ I check if any of my accounts have appeared in a known data breach and update passwords if needed.
  • ✅ I talk through basic safety tips with family members or coworkers so everyone is on the same page.

8. If something already went wrong

If you’ve already clicked a bad link, entered details on a fake site, or noticed suspicious activity, don’t beat yourself up — it happens to many people. Focus on:

  • Changing passwords on affected accounts right away.
  • Turning on MFA where it wasn’t enabled before.
  • Contacting your bank or card issuer if payment details were involved.
  • Reviewing recent activity on important accounts for anything unusual.

For a deeper walk-through, see the “What to do after a data breach” guide on EmailBreachGuard.

🖨️ To create a full multi-page PDF, open this page, choose Print → Save as PDF, and keep all pages.

Optional tools that can help

These are optional tools that make the checklist easier to follow. Some links are affiliate links, which means EmailBreachGuard may earn a small commission if you choose to sign up, at no extra cost to you.

← Back to checklists & PDFs on EmailBreachGuard