Stop Hackers Before They Start: What I Learned After My Email Got Hacked

Add a second verification step (like a code from your phone) when logging in, so even if your password is stolen, hackers can't get in.

1. 1
   Identify your most important accounts — Start with email, banking, social media, and any work-related logins. These are prime targets.
2. 2
   Go to the security settings — For each account, look for 'Two-Factor Authentication' or '2FA' in the settings menu. It's often under 'Security' or 'Privacy'.
3. 3
   Choose an authentication method — Use an app like Google Authenticator or Authy instead of SMS codes—SMS can be intercepted. Scan the QR code with the app.
4. 4
   Save backup codes — Each site will give you backup codes. Write these down or save them in a secure note (not in your email).
5. 5
   Test it — Log out and log back in to make sure it works. You'll enter your password, then the code from the app.

Enable automatic updates on all your devices to patch security vulnerabilities before hackers can exploit them.

1. 1
   Check your operating system — On Windows, go to Settings > Update & Security > Windows Update and turn on 'Automatic updates'. On Mac, go to System Settings > General > Software Update and enable automatic updates.
2. 2
   Update your apps — For browsers like Chrome or Firefox, they usually update automatically. For other apps, check settings or enable updates in your app store.
3. 3
   Don't forget your router — Log into your router's admin page (often 192.168.1.1) and check for firmware updates. Do this every few months.

Train yourself to recognize the subtle signs of fake emails that try to trick you into giving up login details.

1. 1
   Check the sender's email address — Look closely—a fake might use 'support@amaz0n.com' instead of 'support@amazon.com'. Hover over links to see the real URL before clicking.
2. 2
   Watch for urgency or threats — Phishing emails often say things like 'Your account will be locked in 24 hours!' to pressure you into acting quickly.
3. 3
   Verify independently — If an email asks you to log in, don't click the link. Instead, go directly to the website by typing the URL yourself.
4. 4
   Use email filters — Set up rules in your email client to flag messages with suspicious keywords like 'urgent' or 'verify your account'.
5. 5
   Report phishing attempts — Most email services have a 'report phishing' button. Use it—it helps train their filters to catch similar emails.
6. 6
   Practice with examples — Sites like Google's Phishing Quiz show real-world examples. Spend a few minutes going through them to sharpen your eye.

Lock down your Wi-Fi to prevent hackers from accessing your devices through an unsecured connection.

1. 1
   Change the default router password — Log into your router's admin page and change the password from the default (like 'admin') to something strong. Use your password manager to generate one.
2. 2
   Enable WPA3 encryption — In the Wi-Fi settings, switch from WPA2 to WPA3 if your router supports it—it's more secure. If not, use WPA2.
3. 3
   Hide your network name (SSID) — Turn off SSID broadcasting so your Wi-Fi doesn't show up in public lists. You'll need to manually enter the name to connect new devices.
4. 4
   Set up a guest network — Create a separate network for visitors. This keeps them off your main network where your personal devices are connected.
5. 5
   Disable remote management — Turn off features that let you manage the router from outside your home—hackers can exploit these.