Stay safe without thinking about it
Security isn’t a project you finish - it’s a few small habits on a loop. The trick is to hang each one on something you already do, so it costs you minutes a year, not willpower every day. Here’s the whole rhythm: four clocks, not four alarms. Keep only the daily and weekly and you’re already ahead of most people.
Every day - a reflex, not a task
Lock your phone. Glance at a bank or delivery alert if one genuinely arrives, and ignore the rest. The one that catches people is a “parcel held” text or an “account will close” email, opened on the way out the door. The whole rule: never tap a link or approve a login because a message made you feel rushed.
Every week - an update
Five minutes, say a Sunday. Install the updates that have been sitting there - phone, laptop, browser. If somewhere you use has been in the news for a breach, change that one password and move on. That’s the whole of it.
Every month - ten minutes in the vault
Open your password manager and fix two weak or reused passwords - just two; it adds up fast. Check Have I Been Pwned for your main email address. Skim your Google or Apple account for devices you don’t recognise and sign them out. New sign-ups go through an email alias, not your real inbox.
Have I Been Pwned · free breach check →Once a year - the half-hour that saves you
The big one, once: make sure your recovery codes are printed and kept somewhere safe (with the passport, not on the phone). Check a backup actually restores - try pulling back one photo. Make sure the email address on anything that matters (your bank, your domain if you have one) is still one you control. Close the old accounts you never use. This is what turns “I’ve lost my phone” from a disaster into an inconvenience.
One clock, not four alarms
Don’t turn this into a chore chart. The point is the rhythm, not the ritual. Most people need the daily reflex, the weekly update, and a light monthly - the yearly is the one worth a calendar reminder, because it’s the one that saves you. And if you can’t keep the monthly, don’t pile the yearly paperwork on top: do the daily and weekly well and you’ve closed most of the gap.
Last reviewed: 11 October 2026.