Cyber Tips

Eighteen things worth doing, explained plainly.

Free to read, free to share, no signup and no email capture. Written for people who would rather handle this themselves — which most of it you can.

At home

For you, your household and your own devices.

Passwords, and why a manager beats a memory Reusing one password means one key opens every door you own.
Multi-factor authentication: the four kinds, ranked A key and a combination, not just a key — but the kinds are not equal.
Spotting a scam: pressure, shock, and the verification call Thieves work on urgency. Slowing down is most of the defence.
Public Wi-Fi, spoofed networks, and “Forget This Network” Your phone shouts the name of every network it has ever joined.
Smart home devices: every one is a door The camera, the doorbell and the thermostat are computers on your network.
Who holds your data, and how to make them delete it You are the guardian of your data. Ask how long they intend to keep it.
Cookies, tracking, and what a VPN does not do A VPN hides where you are connecting from. It does not make you anonymous.
Virtual currency without getting robbed Irreversible payments are the point of the technology and the whole problem.
Backups: the “what if this laptop died today” test A backup you have never restored from is a hope, not a backup.
Selling, donating, or binning an old device A factory reset is the difference between a used phone and a full confession.

At work

For small businesses — roughly five to fifty people.

Offboarding: the control everyone skips The badge came back. The logins did not.
Admin accounts are not daily accounts If your everyday login can delete the company, so can anyone who phishes you.
Vendor management: how much should they know? Their breach becomes your breach, on their timetable.
Rolling out MFA without a staff revolt The technology is easy. The rollout is where these projects die.
Auditing and logging, in plain English Logging records what happened. Auditing is someone actually looking.
The first hour after something looks wrong What you do before you know what happened decides how bad it gets.
Cyber insurance forms: what they're really asking The questionnaire is a controls checklist, and the answers are binding.
Picking a password manager for a ten-person shop The shared spreadsheet is not the problem. Not replacing it is.

Every page here is reviewed at least once a year and carries the date it was last checked. Nothing in this library expires quickly, but it does drift.