Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To reduce the risk of a data breach, secure accounts with phishing-resistant multifactor authentication (MFA) and unique passwords, patch software promptly, and limit and protect the sensitive data you keep. These measures lower exposure but cannot guarantee that a breach will never happen. Keep tested backups as well: they support recovery after data loss or ransomware, but do not prevent an intruder from gaining access in the first place.

1. Strengthen account security

Stolen or reused passwords can give attackers access to business email, file storage, remote access tools and administrator accounts. Add MFA to these services wherever it is available, prioritizing accounts that can expose sensitive information or control other systems. MFA requires an additional verification step beyond a password, so a stolen password alone may not be enough to sign in.

Choose the strongest practical MFA method

Prefer phishing-resistant MFA, such as a supported FIDO security key, for high-impact accounts. The service must support the method you choose. CISA identifies app-based authentication as a usable alternative and recommends treating SMS codes as a last resort. See CISA’s four cybersecurity goals for guidance on MFA and account security.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Start with business email, administrator accounts, remote access and services that store sensitive data.
  • Use a password manager to help create and store strong, unique passwords.
  • Never reuse a password across services; a password exposed in one breach should not unlock another account.
  • Remove inactive accounts and separate everyday user access from privileged administration where practical.

MFA adds a layer of protection if a password is stolen; it does not replace software updates or limits on what each account can access.

#1 Best Overall
Yubico - Security Key C NFC - Basic Compatibility - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

2. Patch and maintain systems promptly

Updates fix known weaknesses in operating systems, applications, browsers and security tools. Establish a process to apply them regularly, and enable automatic updates where feasible. If some systems require managed deployment, track them so updates are not silently missed.

Prioritize the systems and flaws with the greatest exposure

Address urgent vulnerabilities first, especially on internet-facing or business-critical systems and when a flaw is known to be exploited. Include older or less visible devices in the update process; an unmaintained system can remain an entry point even when newer computers are current.

Rank #2
Yubico - YubiKey 5C NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-C or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

For an organization, patching is a cycle: identify affected systems, prioritize the risk, obtain and install the update, then verify that it worked. NIST describes this enterprise process in SP 800-40 Rev. 4, published April 6, 2022. Keep an inventory of systems and assign responsibility for updates so exceptions can be followed up.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

3. Minimize and protect sensitive data

You cannot expose data you do not keep. Identify what sensitive information your organization collects, where it is stored, and which people or services can reach it. Keep only what has a legitimate business or legal purpose, and securely dispose of information and storage devices when they are no longer needed.

Rank #3
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts
  • POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
  • WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
  • FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
  • MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
  • PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts

Limit access and use encryption

Give employees access to the information and systems required for their jobs, rather than broad access by default. Review accounts and privileges when someone changes roles or leaves, and periodically check who can reach sensitive files. Encrypt sensitive information at rest and in transit where appropriate; encryption is also useful for computers, phones and removable media that could be lost or stolen. CISA’s device-protection guidance covers encryption and data stored on devices.

For additional practical steps on small-business security, see the FTC’s Cybersecurity for Small Business guidance. Legal obligations depend on the business, the information involved and the applicable jurisdiction. The FTC Safeguards Rule covers certain financial institutions and has defined requirements and exceptions; it is not a universal rule for every business. Consult the FTC’s Safeguards Rule overview to assess its scope.

Rank #4
Yubico - Security Key NFC - Basic Compatibility - Multi-Factor Authentication (MFA) Key, Connect via USB-A or NFC, FIDO Certified
  • POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
  • WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
  • FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
  • TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
  • BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.

Back up data so you can recover

Back up important information on a regular schedule and test that you can restore it. Options include a secure external drive or a properly vetted cloud service. Disconnect a removable drive when a backup is not in progress: if it stays connected, ransomware or an intruder may be able to affect it too. CISA’s device guidance explains backup precautions. Backups help restore data and reduce disruption; they are a recovery control, not a way to block unauthorized access.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

If you suspect a breach has already happened

Prevention steps alone are not enough once data may have been exposed. Move quickly to secure systems, address the vulnerability or access path, and mobilize your incident-response team. The FTC’s business data-breach response guide outlines steps for responding and limiting further data loss.

Best Value
FIDO2 U2F Security Key Passkey Two-Factor Authentication (2FA) USB Key PIN+Touch (Non-Biometric) USB-A Type TrustKey T110
  • Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
  • Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
  • Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
  • Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
  • For the driver download and user guide, please visit TrustKey Solutions Home support page.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.