Every fall, as kids go back to school and families settle into new routines, cybercriminals get to work. Phishing emails, tech support scams, and fake login pages spike in September and October — and they're getting harder to spot.

The good news? You don't need to be a tech expert to protect yourself and your family. You just need a few solid habits in place. Here's what matters most.

This is the single most impactful thing you can do for your online security. If you're using the same password on multiple accounts, a breach at one site puts all of your accounts at risk.

What to do:

• Use a password manager like Bitwarden (free), 1Password, or the one built into your browser
• Let it generate long, random passwords for each account
• You only need to remember one master password

If setting up a password manager feels like too much, at minimum make sure your email account and bank account have unique, strong passwords that you don't use anywhere else.

Two-factor authentication (2FA) adds a second step to your login — usually a code sent to your phone or generated by an app. Even if someone steals your password, they can't get in without that second factor.

Enable 2FA on:

• Your email account (Gmail, Outlook, Yahoo)
• Your bank and financial accounts
• Social media accounts
• Any account tied to a credit card

The authenticator app method (Google Authenticator, Authy) is more secure than SMS text codes, but either is far better than nothing.

Phishing emails are fake messages designed to trick you into clicking a link or giving up your login credentials. They often look like they're from Amazon, your bank, the IRS, or even your own email provider.

Red flags to watch for:

• Urgent language: "Your account will be suspended in 24 hours"
• Generic greetings: "Dear Customer" instead of your name
• Mismatched sender addresses: the name says "Amazon" but the email is from a random domain
• Links that don't match the company's real website (hover over them before clicking)
• Requests for your password, Social Security number, or payment info

When in doubt, don't click. Go directly to the website by typing the address in your browser, or call the company using a number from their official website.

Tech support scams are especially common in the fall, and they disproportionately target seniors and people who aren't deeply familiar with how computers work.

Here's how they typically go: a pop-up appears on your screen warning that your computer is infected with a virus. It tells you to call a phone number immediately. When you call, someone pretending to be from Microsoft, Apple, or your internet provider asks for remote access to your computer — and then either installs malware, steals your data, or charges you hundreds of dollars for fake "repairs."

What you need to know:

• Microsoft, Apple, and your internet provider will never call you unsolicited or display a pop-up asking you to call them
• Legitimate security warnings do not include phone numbers
• If you see a scary pop-up, close the browser tab (or force-quit the browser if it won't close)
• Never give remote access to someone who contacted you first

If you're unsure whether a warning is real, call a trusted local tech professional — not the number in the pop-up.

Software updates aren't just about new features — they patch security vulnerabilities that hackers actively exploit. Running outdated software is one of the easiest ways to become a target.

Make it automatic:

• Enable automatic updates on Windows, macOS, iOS, and Android
• Keep your web browser updated
• Update your router's firmware at least once a year (check the manufacturer's website)

If your device is too old to receive security updates — for example, a Windows 10 PC after Microsoft ends support — it's time to consider an upgrade or at least limit what you do on that device.

Your home Wi-Fi is the gateway to every device in your house. A poorly secured network can be exploited by neighbors or anyone within range.

Quick security checklist:

• Change the default router username and password (the one printed on the router)
• Use WPA3 or WPA2 encryption (check your router settings)
• Create a separate guest network for visitors and smart home devices
• Don't share your main Wi-Fi password broadly

Cybersecurity isn't just an individual issue — it's a household one. One family member clicking a phishing link can compromise everyone's accounts and devices.

Have a simple conversation with your kids, parents, or grandparents about:

• Not clicking unexpected links in emails or texts
• Never sharing passwords with anyone, including friends
• Coming to you (or a trusted tech person) if something seems off

You don't need to make it scary — just make it normal to talk about.

If you're not sure whether your devices and accounts are properly protected, we can help. My Neighbor Tech offers in-home and remote security checkups — we'll review your passwords, update your software, check your router settings, and make sure your family is protected before the busy fall season hits.

Staying safe online doesn't have to be complicated. A few good habits make all the difference.