A couple of weeks ago, I received a text message from my dad that read: "Should I be using a password manager?"
It was the latest appeal from my parents (and family in general) asking for cybersecurity help. The most recent call before this one had come from my mom, asking why "tech support" had appeared on her PC and seemed to have taken over her screen.
I'm always happy to help solve the mysteries of the digital world when I can, and I should stress that my parents aren't Luddites. They just don't live completely in the digital world as many of us do.
To best help them be proactive, I figured I should probably set up a cybersecurity best practices document they could refer to when considering what's important and what's not.
This is that list, cleaned up and easy to read for anyone else who's quietly running their family's IT support through the group chat.
Fix these security flaws TODAY
Here's a list of security loopholes that should be cleaned up ASAP. These are all fairly low-effort and should be followed on practically any PC you or your family is using.
Enable Windows Hello
Windows Hello is one of Microsoft's best security features. It can be used as a PIN, a fingerprint, or a facial scan, and it effectively protects a Windows 11 PC from outside physical threats.
Windows Hello can be set up by navigating to the Settings > Accounts > Sign-in options section in Windows 11.
Ensure Windows Update is actually running
Windows Update provides security patches on the regular. Without it enabled, a PC becomes less secure over time.
You can navigate to Settings > Windows Update to find whether or not updates are live or paused. It's never a bad idea to check for updates while you're there.
Ensure Windows Defender is turned on
Windows Defender is the built-in Windows 11 antivirus, and it's surprisingly effective at blocking malware and other threats. Defender is usually turned on by default, though third-party antivirus software can sometimes interfere and cause a confusing and half-disabled state.
Navigate to Settings > Privacy & security > Windows Security > Virus & threat protection to confirm that everything (especially real-time protection) is active and that no actions are needed.
Turn on the 'Find my Device' feature
When a laptop is misplaced, forgotten, or worse, stolen, having Windows 11's Find my Device feature enabled often means the difference between "gone forever" and "I can solve this."
With Find My Device enabled, you can see where your PC is, and you can lock it remotely to prevent intrusion.
Navigate to Settings > Privacy & security > Find my device to enable and disable the setting, as well as to see all PCs linked to your account.
Perform these security measures once and for all
These security measures only need to be performed once, and they can make a huge difference in how security and privacy are handled.
Switch from a local account to a Microsoft account with 2FA
This is a fix that can make a huge difference when something goes wrong with a PC, as it provides a convenient recovery path. A Microsoft account allows for easy device syncing and backups; it allows you to change your PC's password online, and it secures digital licenses to your email.
By signing in with a Microsoft account, two-factor authentication (2FA) can be enabled, which adds additional security should a password leak.
Navigate to Settings > Accounts > Your info to change how you log into your Windows 11 PC.
Enable device encryption
Device encryption is essentially the only thing standing in between a stolen laptop and stolen data.
If a drive isn't encrypted, it can simply be removed from an otherwise locked PC, connected to a different PC, and read openly.
Windows 11 has a built-in encryption feature that handles this stuff quite tidily. In Home versions, it's simply known as Device encryption; in Pro versions, it's known as BitLocker.
Either way, you can navigate to Settings > Privacy & security > Device encryption and enable it.
Switch from a Windows 11 Administrator account to a Standard account
Windows 11 PCs usually default the first account created to be an Administrator, which means that any software that runs gets full permissions on the system.
Since that can include malware, it's much better for day-to-day computing to be handled on a Standard account.
Navigate to Settings > Accounts > Family in order to add or change accounts. You can use the Standard account as a daily driver and only switch to the admin account when something (legitimate) needs installing.
Use a password manager
The advice that kicked off this security cheat sheet involved a password manager, something I feel is absolutely mandatory for any netizens in 2026. I don't know exactly how many people are still recycling passwords they've used for decades, but I'm sure I'd be shocked to find out.
Rather than asking my parents to come up with new passwords, I got them set up with a password manager that takes all the effort and memorization out of the equation.
This specialized tool should absolutely hold the most important passwords for banking, shopping, email, etc., and it should be allowed to create the most secure passwords possible.
NordPass from NordVPN is what my dad eventually settled on (I already had him using a VPN), but there are great options from 1Password, Bitwarden, and Proton. Heck, even the Edge browser can manage passwords in a pinch.
Best cybersecurity habits to get accustomed to
Even with the above methods completed, the fight against bad actors online is far from over. There's some habit-level best practice stuff that I've tried to instill that should go a long way in keeping our PCs safe.
Learn to spot phishing scams
Phishing scams can come from practically anywhere. It might be an email. It might be a compromised webpage. It might be a phone call.
If you suspect that something is awry, stop what you're doing and investigate further. Is the email address from which the message was sent actually legit? Is the URL for the webpage you're viewing familiar? Do you know the person on the phone?
Learning to recognize phishing attempts and other scams isn't always easy, but it's something we all need to practice.
Never believe someone calling you about your PC
I've never in my life received a legitimate phone call asking me about my computer.
Whether it's "Microsoft tech support," a bank's fraud department, or some other odd institution calling you about your PC, there's a very good chance that it's a scam.
The same goes for pop-ups. If you're seeing a phone number on your screen requesting that you call it immediately for support, it's a scam.
Bonus: Under no circumstances should you ever share your passwords online, on the phone, or anywhere else.
Never install unsolicited software on your PC
A classic scam involves having a user install remote-access software on a PC, which gives the bad actors control over the computer.
If someone on the phone tells you to install something like AnyDesk or TeamViewer (or really any software at all) in order to fix the problem, just hang up.
I want to know your cybersecurity tips!
The cybersecurity cheat sheet I've created here is undoubtedly missing some worthwhile tips and tricks, and I'd love it if you shared them in the comments section below.
And while I originally created this guide for those who often deal with IT support in their family and friend groups, it should serve as a solid reference for anyone looking to make their PC more secure.
Join us on Reddit at r/WindowsCentral to share your insights and discuss our latest news, reviews, and more.
