Use a different password for each account
Choose long, unique passwords. Reusing a password means a compromise at one service can put other accounts at risk. A password manager can help create, store, and fill passwords.
CCS Online Safety Guide
Personal Cybersecurity & Online Safety
Practical ways to protect your accounts, devices, and personal information.
Staying safer online starts with understanding the settings you use and recognizing requests that deserve a second look. This guide covers practical habits for passwords, account security, devices, suspicious messages, and everyday online activity.
Choose a topic
What would you like to learn about?
Passwords & account security
Start with the accounts that matter most.
Your email account often receives password-reset messages for other services. Start there, then review financial, shopping, and social accounts that hold important information.
Add another layer of sign-in protection
Turn on multifactor authentication where available. It adds a verification step beyond your password. Keep verification and recovery codes private, and understand your recovery options before changing settings. Passkeys are another sign-in option on supported services.
Keep recovery information current
Check your recovery email and phone number, and review unfamiliar signed-in devices or sessions. Keep recovery information somewhere suitable and accessible to you.
Start with one important account. Review its password, sign-in protection, and recovery settings before moving to the next.
Recognizing suspicious requests
Pause before responding to an unexpected request.
Suspicious requests can arrive through phone calls, texts, email, social media, search results, and browser pop-ups. Familiar names, logos, caller ID, and polished writing do not establish authenticity.
Pressure to act immediately
A request tries to rush you with a threat, deadline, or sudden reward.
Requests for private codes
Someone asks you to share a password or sign-in verification code.
Unexpected remote access
An unsolicited caller or pop-up wants to connect to your computer.
Unusual payment instructions
Someone insists on gift cards, cryptocurrency, or another unusual way to pay.
A claimed account or device problem
A message says something is wrong and directs you to a link or phone number.
Pressure to keep it secret
The sender discourages you from checking with a trusted person or organization.
Unexpected QR codes
A QR code can lead to a fake payment or sign-in page. Check the destination before entering information, especially on parking meters and mailed notices.
AI impersonation
Cloned voices, altered video, and convincing messages can imitate someone you know. Verify an urgent request through a separate, trusted contact method.
Package delivery messages
Unexpected delivery texts may ask for an address update or small fee. Check tracking through the carrier’s official website or app instead of the message link.
Toll payment texts
Messages threatening overdue toll penalties may direct you to an imitation payment site. Check your account through the toll agency’s official website.
Pause. Verify. Then decide.
- Stop interacting with the unexpected request.
- Contact the person or organization using contact information you already trust or find independently.
- Decide what to do after confirming the request.
Computer & device protection
Keep your devices ready for everyday use.
Install updates
Keep your operating system, browser, and applications current. Automatic updates can help. Use the device or application’s own update settings rather than a link in an unexpected message.
Use device locks
Use an appropriate sign-in method on computers, phones, and tablets. Set the screen to lock automatically when you step away.
Review applications and extensions
Install software from trusted sources. Review unfamiliar browser extensions, remote-access tools, and applications, and seek help if you do not know why they are installed.
Back up important files
Keep another copy of important files so a device failure or inaccessible files do not leave you without options. Check that your backup works and that you know how to access it.
Security software is one part of protection. Updates, account settings, backups, and everyday choices also matter.
Browsing, downloads & online shopping
Check before you click, download, or pay.
Check the website
Look carefully at the address and be cautious with unfamiliar links and search advertisements. HTTPS encrypts the connection, but it does not establish that a seller or offer is legitimate.
Check the download
Use official developer websites or trusted app stores. Be cautious with unexpected attachments and software offered through pop-up warnings. Read installation prompts before accepting options.
Check the purchase
Review unfamiliar sellers and their policies. Treat unusually cheap offers and urgent payment demands cautiously. Verify unexpected invoices through a contact method you trust before paying.
Privacy & personal information
Be thoughtful about what you share.
Social profiles
Review who can see your posts and personal details. Think about what information you want available beyond friends and family.
Application permissions
Check access to location, camera, microphone, contacts, and files. Some permissions support useful features; decide whether that access fits how you use the app.
Account connections
Review third-party applications connected to important accounts. Remove access you no longer need through the account’s official settings.
Sensitive information
Verify who is receiving information and why it is needed before sharing it. Avoid sending sensitive details in response to an unexpected request.
Privacy settings can reduce exposure, but information can still be copied or shared. Consider the audience before posting.
Security Incident Assistance
Take the next step based on what happened.
You shared a password or verification code
Seek help securing the affected account and reviewing its recovery options.
Someone connected remotely to your computer
End the remote session and stop communicating with the caller. If you cannot end the session, disconnect the device from the internet. Contact CCS to assess the device and what access was allowed.
You see unfamiliar account activity
Use the provider’s official security and recovery tools. CCS can assist, but recovery depends on the provider.
Money or financial details were involved
Contact the relevant bank or payment provider promptly.
Online safety checklist
A few useful things to review.
- Important accounts use unique passwords.
- Available sign-in protections are enabled.
- Recovery information is current.
- Devices and applications receive updates.
- Important files have a backup.
- Unfamiliar applications and permissions have been reviewed.
- Unexpected requests are verified independently.
Common questions
Online safety FAQs
What should I secure first?
Start with your primary email account and other accounts that hold important personal or financial information. Review passwords, sign-in protections, and recovery information.
What is a password manager?
It is a tool that stores passwords and can help create and fill unique ones. Learn how to protect the manager itself and retain its recovery information.
What is multifactor authentication?
It adds another way to verify a sign-in beyond a password, such as an authenticator app or security key. Options vary by service.
What is a passkey?
A passkey lets you approve a supported account sign-in using a device unlock method, such as a fingerprint, face recognition, or PIN. Understand where it is stored and how to regain access if your device changes.
Does antivirus software protect against every scam?
No. Scams can persuade someone to share information or authorize a payment without installing malicious software. Independent verification still matters.
Does HTTPS mean a website is trustworthy?
No. It means the connection is encrypted. A fraudulent website can use HTTPS too.
What should I do if I shared a verification code?
Use the provider’s official website or app to review the affected account and seek assistance promptly. Tell CCS what happened without emailing the code.
Can CCS help me apply these settings?
Yes. CCS offers one-on-one assistance with supported account and device settings. Explore Personal Cybersecurity Services or contact CCS to discuss your needs.
Continue learning or get assistance
Choose your next step.
Personal Cybersecurity Services
Help applying account protections, reviewing device settings, and understanding suspicious activity.
Explore services
CCS Scam Watch
Explore scam information and online safety resources.
Visit Scam Watch
CCS Knowledge Base
Explore computer help and technology resources.
Visit the Knowledge BaseReturn to the Cybersecurity hub
Official resources
CISA Online Safety
Practical guidance for protecting accounts and devices.
Explore online safety
FTC Phishing Guidance
Learn to recognize suspicious messages and verify requests.
Learn about phishing
FTC Tech-Support Scams
Recognize fake computer warnings and unsolicited support offers.
Learn about support scams
FTC Online Shopping
Check sellers, payment requests, and online offers.
Explore shopping guidance
FIDO Alliance Passkeys
Understand passkeys and supported account sign-ins.
Learn about passkeys
Report Scams to the FTC
Report fraud, scams, and bad business practices through the FTC’s official reporting website.
Report to the FTC
Report Internet Crime to the FBI
Report internet-related fraud, financial scams, and other cyber-enabled crimes to the Internet Crime Complaint Center.
Visit FBI IC3National Do Not Call Registry
Register your phone number for free to reduce sales calls from companies that follow the law. Registration does not block scam callers.
Visit the Do Not Call RegistryIf money or financial details were involved, contact your bank or payment provider promptly. These reporting links take you directly to official websites.
Local help putting the guide into practice
Want help putting these steps into practice?
CCS can help you review your accounts and devices, understand the settings, and make practical improvements. Personal cybersecurity assistance is available in Canandaigua and surrounding Finger Lakes communities.
View Service Area