October is Cybersecurity Awareness Month, and it’s the perfect time to give your online habits a tune-up. Staying safe online comes down to small, everyday habits that make cybercriminals work harder.
Why it matters: Americans reported nearly $21 billion in internet crime losses in 2025, a 26% jump from the year before. And for the first time, the FBI tracked complaints involving AI, logging more than 22,000 complaints and $893 million in losses.
Here are four easy habits you can start today.
1. Think Twice Before Clicking That Top Search Result
Searching for your bank, a customer service number, or a software download? That first link might not be the real deal.
Cybercriminals buy search engine ads that impersonate trusted brands and send you to look-alike websites built to steal your login, grab your payment info, or install malware. The FBI has warned that these fake sites can look identical to the real thing.
The catch: Paid ads usually sit at the very top of your results, and they can be tough to tell apart from regular links.
Habits to build:
- Bookmark the sites you log into most (banking, email, utilities) and use those instead of searching.
- Type web addresses directly into your browser’s address bar.
- Look for a “Sponsored” or “Ad” label before you click.
- Double-check the URL for odd spellings or extra words (like “paypal-secure-login.com”).
- Get customer service numbers from a company’s official website or app, not a search result.
Be smart: The FBI even recommends using an ad blocker for an extra layer of protection while you search.
2. Swap Your Passwords for Passkeys
What if there was nothing for hackers to steal in the first place? That’s the idea behind passkeys.
A passkey lets you sign in with the same face scan, fingerprint, or PIN you use to unlock your phone. No password required.
The details: Passkeys are stored securely on your device or in your password manager and only work with the real website or app they were created for. That means they can’t be guessed, reused, or typed into a fake login page. The FIDO Alliance, which leads the passkey standard, notes that they are always strong and phishing-resistant.
Getting started is easy:
- Check the security settings on your email, banking, and shopping accounts for an option to “create a passkey.”
- Start with your email account, since it’s often the key to resetting everything else.
- Keep multi-factor authentication turned on for accounts that don’t support passkeys yet.
The best part: Fewer passwords to remember, and fewer ways for scammers to get in.
3. Give Your Home Wi-Fi a Checkup
Your router is the front door to every connected device in your home, from laptops and phones to smart TVs and doorbells. If it’s not secure, everything behind it is at risk.
The good news? A quick tune-up only takes a few minutes.
- Change the default admin password. This is the password for your router’s settings (not your Wi-Fi password), and the factory default is often easy to look up.
- Use strong encryption. Make sure your network uses WPA3 or WPA2 security.
- Keep it updated. Router software needs updates, too. If you rent equipment from your internet provider, it may update automatically.
- Set up a guest network. Give visitors and smart home gadgets their own network, separate from the devices that hold your personal info.
- Take inventory. Review the list of connected devices in your router or provider app, and remove anything you don’t recognize.
Be smart: Many internet providers offer apps that make these settings simple to manage, no tech degree required.
4. Do a Digital Declutter
Over the years, most of us pile up online accounts, apps, and browser add-ons we’ve forgotten about. Each one is another way in for hackers.
The details: Old accounts still hold your email address, password, and sometimes your payment info. If that company suffers a data breach, your information goes with it, even if you haven’t logged in for years.
Spend 20 minutes cleaning house:
- Delete accounts you no longer use (searching your inbox for “welcome” or “verify your account” can jog your memory).
- Review app permissions on your phone. Does that game really need your location, contacts, or microphone?
- Remove browser extensions you don’t recognize or use.
- Remove saved credit cards from shopping sites you rarely visit.
- Tighten your social media privacy settings and limit who can see your posts, birthday, and location.
The payoff: The less of your information floating around online, the less there is for cybercriminals to exploit.
Don’t Make It Easy for Them
Cybercriminals count on us being busy or distracted. Every small step, whether it’s a bookmarked login, a passkey, or a quick router checkup, makes their job a lot harder.
This month, pick one tip, try it today, and share it with a friend or family member.