A few weeks ago I received a text from my father that said: “Should I use a password manager?“
This was my parents (and family in general) last resort for help with cybersecurity. The most recent call before that was from my mom asking why “tech support” was showing up on her computer. took over the screen.
I’m always happy to help solve the mysteries of the digital world when I can, and I must emphasize that my parents are not Luddites. They just don’t live fully in the digital world like most of us.
To help them get active, I thought maybe a cybersecurity best practices document they can refer to when considering what is important and what is not.
This is that listrefined and easy to read for anyone quietly managing their family’s IT support via group chat.
Fix these security flaws TODAY
Here is a list of security vulnerabilities that need to be patched ASAP. All of these are fairly low-effort and should be followed on almost any computer you or your family uses.
Enable Windows Hello
Windows Hello It is one of the best security features from Microsoft. It can be used as a PIN, fingerprint or face scan, and it effectively protects your Windows 11 PC from external physical threats.
Windows Hello can be set up via navigation Settings > Accounts > Sign-in options Partition in Windows 11.
Make sure Windows Update is actually running
Windows Update regularly provides security patches. If this is not enabled, the computer becomes less secure over time.
you can navigate Settings > Windows Update to find out if updates are live or paused. It’s never a bad idea to check for updates while you’re at it.
Make sure Windows Defender is enabled
Windows Defender is a built-in Windows 11 antivirus that is surprisingly effective at preventing malware and other threats. Although third-party antivirus software can sometimes interfere and cause a confusing and semi-disabled state, Defender is usually enabled by default.
go to Settings > Privacy & security > Windows Security > Virus & threat protection confirming that everything (especially real-time protection) is active and no action is needed.
Turn on Find My Device
When a Windows 11 laptop is misplaced, forgotten, or worse, stolen Find my device active function often means the difference between “gone forever” and “I can fix this”.
With Find My Device enabled, you can see where your computer is and remotely lock it to prevent intrusion.
go to Settings > Privacy & security > Find my device to enable and disable the setting, as well as see all the computers associated with your account.
Take these safety precautions once and for all
These security measures only need to be implemented once, and they can make a big difference in how security and privacy are managed.
Switch from a local account to a Microsoft account with 2FA
This is a fix that can make a big difference when something goes wrong with your computer, as it provides a convenient recovery path. A Microsoft account allows you to facilitate device synchronization and backups; it lets you change your computer’s password online, and it secures digital licenses to your email.
Signing in with a Microsoft account two-factor authentication (2FA) can be enabled, which provides additional security in the event of a password leak.
go to Settings > Accounts > Your info To change how you sign in to your Windows 11 PC.
Enable device encryption
Device encryption it’s actually the only thing standing between a stolen laptop and stolen data.
If the drive is not encrypted, it can simply be removed from the locked computer, plugged into another computer, and read in the open.
Windows 11 has a built-in encryption feature that handles this pretty neatly. In home versions, it is simply recognized Device encryption; It is known as this in the Pro versions BitLocker.
Either way, you can go Settings > Privacy & security > Device encryption and activate it.
Switch from Windows 11 Administrator account to Standard account
Windows 11 computers are usually the first account created by default Administratorthis means that any application running gets full permissions on the system.
As this may include malware, it is best to manage daily calculations in a Standard account.
go to Settings > Accounts > Family to add or change accounts. You can use the Standard account as a daily driver and switch to the admin account only when you need to install something (legitimate).
Use a password manager
The tip that triggers this safety cheat sheet is a password managersomething I feel is absolutely mandatory for all netizens in 2026. I’m not sure how many people are still recycling passwords they’ve used for decades, but I’m sure I’d be shocked to find out.
Instead of asking my parents to come up with new passwords, I set them up with a password manager that takes all the effort and memorization.
This particular tool is a must for banking, shopping, email and more. should store the most important passwords for and be allowed to create the most secure passwords possible.
NordPass My dad finally decided on NordVPN (I already used his VPN), but there are great options 1 Password, Bitwardenand Proton. Heck, even the Edge browser can handle passwords in a pinch.
The best cyber security habits to learn
Although the above methods are complete, the fight against bad actors online is not over yet. There are some habit-level best practices that I try to teach that should go a long way in keeping our computers secure.
Learn how to spot phishing scams
Phishing scams can come from practically anywhere. This can be an email. Maybe it’s a compromised web page. It could be a phone call.
If you suspect something is wrong, stop what you’re doing and investigate further. Is the email address from which the message was sent really legitimate? Does the URL of the web page you are viewing look familiar? Do you know the person on the phone?
Learning to recognize phishing attempts and other scams isn’t always easy, but it’s something we should all practice.
Never trust someone to call you about your computer
Never in my life have I received a legitimate phone call about my computer.
Whether it’s “Microsoft tech support,” a bank’s fraud department, or some other unusual entity calling you about your computer, there’s a good chance it’s a scam.
The same goes for pop-ups. If you see a phone number on your screen asking you to call for support immediately, it’s a scam.
Bonus: Under no circumstances should you share your passwords online, over the phone or anywhere else.
Never install unwanted software on your computer
A classic scam involves a user installing remote access software on a computer, which gives bad actors control over the computer.
If someone on the phone tells you to install something like AnyDesk or TeamViewer (or any software in general) to fix the problem, just hang up.
I want to know your cyber security tips!
The cybersecurity cheat sheet I’ve created here certainly has some useful tips and tricks, and I’d love it if you shared them in the comments section below.
Although I created this guide for those who frequently do IT support in groups of family and friends, it should serve as a solid reference for anyone looking to make their computer more secure.
Join us Reddit at r/WindowsCentral to share your thoughts and discuss our latest news, reviews and more.
