Everyday online safety.

What this means

An update is a newer version of the software already on your device. Automatic updates save you having to remember to install it yourself.

How to do it

1. Open your device’s settings and find Software Update or Windows Update.
2. Turn on automatic updates, and do the same in your app store.
3. Let updates finish and restart when asked. Keep the device charged and leave enough storage space.
4. If automatic updates are unavailable, check regularly in the device or app settings.

For cameras, alarms and other installed security equipment, follow the manufacturer’s instructions or ask West Protect before changing firmware. If an older device no longer receives updates, plan a suitable replacement.

What this means

This is called two-factor authentication, 2FA or multi-factor authentication (MFA). A password-based login may ask for a code from an authenticator app or a touch on a security key. A passkey can combine your device and its unlock check without asking for an account password.

How to do it

1. Start with your main email account, then your bank and other important accounts.
2. Find Security or Sign-in in the account’s settings.
3. Follow the service’s instructions to set up its supported sign-in option.
4. Keep recovery codes somewhere safe and check your recovery contact details. Transfer your authenticator app before resetting an old phone.

Approve the sign-in requests you start yourself. Your provider’s help page explains which options it supports.

What this means

A passkey is a digital sign-in method. A security key is a physical item: compatible FIDO2 keys can hold passkeys, or act as an extra check alongside a password. They are related, but they are not the same thing.

How to do it

1. Open your account’s Security or Sign-in settings and check for a passkey option.
2. Create it on your own phone or computer, or select a compatible security key if you use one.
3. Follow the prompts to save and use it with your device’s PIN or fingerprint.
4. Try signing in and set up the recovery options your provider offers.

For work accounts, follow your workplace IT instructions. Where passkeys are unavailable, use a unique password and the extra login check your account supports.

What this means

You can use an external drive or a cloud backup service. Choose a routine that suits how often your files change. An automatic backup can make this easier.

How to do it

1. Choose the photos, documents and other files that matter to you.
2. Set up a backup using your device’s help instructions or your chosen backup provider.
3. Back up regularly, especially after adding important files.
4. Open or restore a test file occasionally to check the backup works.

Cloud syncing and backup are not always the same thing. Check whether the service keeps older versions and lets you recover deleted files. Disconnect an external backup drive when you have finished using it.

What this means

A passphrase is a password made from several unrelated words. A password manager can create and remember different passwords for you.

How to do it

1. Start with your main email and banking accounts.
2. For a passphrase, choose four or more unrelated words and make it at least 15 characters long.
3. Avoid names, birthdays, well-known sayings and examples printed in guides.
4. Use a unique password for every account. Protect your password manager with a strong master password and an extra login check.

Keep your extra login check switched on even after improving your password. Follow any password rules the service requires.

What this means

Your phone can hold email, photos and access to important accounts. A screen lock helps keep those things private if someone else picks it up.

How to do it

1. Set a PIN or passcode that is hard to guess.
2. Set the screen to lock automatically when you are not using it.
3. Install apps from the official app store and check the permissions they request.
4. Set up your device’s supported find, remote-lock and backup features.

Before selling or giving away a phone, back it up and follow the manufacturer’s reset instructions to remove your personal information.

What this means

A message can look familiar without being from the person or business you expect. Checking through a contact method you already know helps you decide whether to go ahead. You can take your time.

How to do it

1. Check an unexpected link or attachment before opening it.
2. Open the organisation’s app or type its official website address yourself.
3. Call using a number from its official website or your own records, rather than the message.
4. If you think a payment or banking detail has gone to the wrong place, contact your bank for help.

ASD’s recovery guidance and Scamwatch have clear steps if you need further help.

Workplace VPN: access your work network

Think of this as an authorised connection back to the office. It can give you access to private work files, software or other systems that are not open to everyone on the internet. Some businesses also use a VPN to connect two office networks.

Use the VPN and sign-in instructions your workplace IT team gives you. A personal VPN subscription does not automatically give you access to your employer’s systems.

Personal VPN: change the IP location websites see

Examples include NordVPN, Proton VPN, Surfshark and ExpressVPN. You connect through the provider’s server instead of websites seeing your usual public IP address.

For example, you can be in Perth and choose a server in the United Kingdom. Websites that use your IP address to work out your location may then see a UK connection. Available country choices depend on the provider and plan.

Your computer stays where it is. A VPN does not change its GPS location, remove your account identity or guarantee anonymity.

What they have in common

Both create an encrypted connection between your device and the VPN server. The main difference is where that connection takes you: a workplace network, or a personal VPN provider’s server for internet browsing.

A personal VPN is optional. Keep the updates, passwords and other simple steps above in place.