Personal cybersecurity is not a set-it-and-forget-it responsibility. Even when your digital devices and accounts appear secure, regularly reviewing a few basic protections can help reduce the risk of fraud, identity theft and unauthorized account access.

For a simple gauge of your cybersecurity status, how would you answer these questions?

• Do you use long, unique passwords and multifactor authentication for important accounts?
• Do you change your passwords several times a year?
• Are your computer, mobile devices, apps and home Wi-Fi router receiving current security updates?
• Would you recognize a suspicious email, text message, phone call or payment request?
• Do you regularly review your financial and digital payment accounts for unfamiliar activity?

If you are not completely comfortable with your answers to the questions above—or it has been a while since you checked some of these settings and information—consider using this personal cybersecurity checklist.

Always use long, unique passwords

Every important account should have its own unique password. Reusing a password creates additional risk because a criminal who obtains it may try using it to access your other accounts. Create long, difficult-to-guess passwords or passphrases. Avoid easily discovered information such as birthdays, relatives’ names, pet names, addresses or favorite sports teams.

Because remembering many unique passwords can be difficult, consider using a reputable password manager to create, store and organize them. Do not rely only on frequent password changes. Change a password promptly if it is weak, reused, you have been informed that it has been exposed in a data breach or connected to suspicious activity.

Turn on multifactor authentication

Enable multifactor authentication—sometimes called two-factor authentication—for every important account that offers it.

Multifactor authentication requires another form of verification in addition to a password. Depending on the service, that second step may involve using an authenticator app on your cellphone, a security key device, fingerprint, facial scan or one-time code.

Turn multifactor authentication on for email, financial, digital payment, social media, shopping, cloud storage and other confidential accounts whenever possible. This additional protection may help prevent access even if a criminal obtains your password.

Keep software and connected devices updated

Software updates often contain security patches that fix weaknesses cybercriminals could exploit. Install updates for operating systems, web browsers, antivirus software, mobile apps and other frequently used programs as soon as practical.

Turn on automatic updates when available, but periodically confirm that they are downloading and installing correctly.

Do not forget connected home devices that also have updatable software. Wi-Fi routers, printers, smart televisions, security cameras, video doorbells and other equipment may also depend on software or firmware updates.

Your internet/wi-fi router is especially important because it serves as a hub to connect many devices to the internet. Change its default administrator password, review its settings periodically and confirm that the manufacturer still provides security updates. If the router is no longer supported, consider whether it should be replaced.

Treat unexpected emails, links and attachments cautiously

Phishing emails, text messages and social media messages may try to persuade you to click a harmful link, download malware or provide confidential information.

Do not open an unexpected email, email attachment or click an unfamiliar link—even if the message appears to come from someone you know. The sender’s account could have been compromised, or a criminal may be impersonating the person or company.

Before responding, ask yourself:

• Was I expecting this message?
• Do I recognize the complete email address or phone number?
• Is the message pressuring me to act immediately?
• Is it asking me to take an unusual financial action, such as buying gift cards as a form of payment?
• Does it ask for a password, account number or one-time passcode?
• Does it contain unusual wording, spelling mistakes or a suspicious link?

If a message seems questionable, contact the apparent sender through a phone number, email address or website you already know is legitimate. Do not use contact information included in the suspicious message.

Do not reply to spam emails or text messages. Report them through your email or messaging service when possible, then delete and block them.

Consider using reputable third-party security software and look for free versions

Modern operating systems generally include security protections, but you may also want to consider reputable third-party antivirus software or a broader security suite that consists of a collection of different security tools. Depending on the product, security software may include features such as antivirus and malware detection, firewall tools, ransomware protection and suspicious website warnings, along with scanning of downloads, email and email attachments. Several well-known cybersecurity software companies offer free, feature-limited versions of their products that should be researched to determine if they are appropriate for your needs.

Whether you use security built into the device’s operating system, or additional third-party protection, confirm that the software is active, updating properly and configured to scan your computer’s files, folders, drives and downloads. Schedule regular system scans if they are not handled automatically.

Security software cannot prevent or counter every attack, but it can provide another useful layer of protection.

Verify unexpected calls and payment requests

Be extremely cautious when someone unexpectedly asks you to send money electronically, purchase gift cards, transfer cryptocurrency or provide financial information.

Do not assume a request is legitimate because it appears to come from a friend, relative, employer or familiar company. Scammers may impersonate people you know or use artificial intelligence to imitate a familiar voice.

If a caller claims there is an emergency and urgently requests money, end the call. Contact the person directly using a phone number you already know is correct. Families may also want to establish a private word or phrase to verify a genuine emergency.

Before sending an unexpected payment, independently confirm who is requesting the money, why it is needed and whether the payment destination is correct. Money sent to a scammer may be difficult or impossible to recover, especially if it is sent electronically through a website or a payment app.

Monitor financial and payment accounts

Review your checking, savings, credit card, investment and digital payment accounts regularly. Look for unfamiliar purchases, withdrawals, transfers, changes to contact information or small test transactions that could indicate fraud.

Do not rely only on monthly statements to know your accounts’ status. Where available, turn on transaction, balance and security alerts so the provider can notify you promptly about payments, deposits, transfers, password changes and other activity.

If you notice something suspicious, contact the financial institution or service provider immediately using the company’s verified phone number or its official website.

Would identity and credit monitoring provide additional peace of mind?

If online security and identity theft is a significant concern, you may want to consider an identity and credit-monitoring plan.

Delta Community Credit Union's wholly owned subsidiary, Members Insurance Advisors¹, offers some peace of mind knowing you are taking proactive steps to help protect yourself with plans from PrivacyGuard², owned and operated by Trilegiant.

Additional important benefit restrictions and benefit descriptions can be found in our Feature Benefits Guide.

Want more ways to protect yourself online?

Delta Community’s blog and security posts have more information on passwords, phishing, electronic payments, identity theft, mobile device security and home networks.

Free guidance on money- and security-related topics is also available from the Delta Community Financial Education Center. Please visit its Events & Seminars page to register for no-cost, on-demand webinars and in-person workshops.

Cybersecurity does not have to be complicated. A few consistent habits—strong passwords, multifactor authentication, up-to-date software, caution with links and attachments, verified payment requests and regular account monitoring—are some of the activities that can help make your digital life more secure.

¹Members Insurance Advisors is a wholly owned subsidiary of Delta Community Credit Union. Insurance products are not deposits of Delta Community Credit Union and are not protected by the NCUA. They are not an obligation of or guaranteed by Delta Community Credit Union and may be subject to risk. Any insurance required as a condition of an extension of credit by Delta Community Credit Union need not be purchased from Members Insurance Advisors and may be purchased from an agent or an insurance company of the Member's choice. Business conducted with Members Insurance Advisors is separate and distinct from any business conducted with Delta Community Credit Union.

²PrivacyGuard is a service of Trilegiant Corporation in conjunction with Trilegiant Insurance Services, Inc. and Alliance Marketing Association. Trilegiant Insurance Services, Inc. does not receive any compensation from the sale of the identity theft insurance benefit included as part of the PrivacyGuard service. Any part of the service may be modified or improved at any time and without prior notice. PrivacyGuard is not available to residents of Iowa, Rhode Island and Vermont. PrivacyGuard and Credit Alert are registered service marks of Affinion Publishing, LLC.

The benefits in PrivacyGuard are provided by Trilegiant Corporation, P.O. Box 6100 Westerville, OH 43086-6100. www.privacyguard.com. 1-800-374-8273

Trilegiant Corporation, Trilegiant Insurance Services, Inc., and Alliance Marketing Association and their credit information subcontractors shall not have any liability for the accuracy of the information contained in the credit reports, credit scores, Credit Alert^® reports or other reports which you receive in connection with the PrivacyGuard service, including any liability for damages, direct or indirect, consequential or incidental.