iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
To stay safer online, do five things consistently: handle suspicious messages carefully, use a different strong password for every account, turn on multifactor authentication (MFA), install software updates promptly, and protect your device and personal information. These steps reduce common risks; no single setting or habit can eliminate every threat.
How can you recognize and handle a phishing message?
Phishing messages try to persuade you to share personal information or download a harmful attachment. Unexpected urgency, alarming language, or an offer that seems too good to be true are reasons to pause, not proof on their own that a message is fraudulent. CISA describes these as examples, not a complete detection test.
- Do not click, download, or reply. Avoid using links or attachments in a message that you do not trust.
- Report it through the service when possible. Use the email or messaging service’s reporting option.
- Delete the message. If you are unsure whether a notice is genuine, open the organization’s app or type its known address yourself rather than following the message’s link.
CISA’s consumer guidance recommends not engaging with suspected phishing, then reporting and deleting it. CISA: Recognize and report phishing.
Free tools Windows power users keep installed
One-click scans. No signup required.
How should you create and manage passwords?
Use a separate password for every account. CISA’s consumer tip sheet recommends passwords that are at least 16 characters long, random, and unique. Reusing a password means that if one service is compromised, the same credentials may put other accounts at risk.
#1 Best Overall
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
A password manager can generate, store, and fill distinct passwords so you do not have to memorize each one. It is an optional tool, not a prerequisite: the essential practice is keeping passwords unique and difficult to guess. CISA’s guidance does not compare specific products. CISA: Use strong passwords.
How do you turn on multifactor authentication?
MFA adds a verification step beyond your password. If someone obtains only your password, that extra step can help prevent them from signing in, though MFA does not make an account invulnerable. CISA highlights email, banking, healthcare, shopping, and social accounts as places to enable it when available.
Rank #2
- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Universal Connectivity (USB-C, USB-A, & NFC): Designed for PCs, Macs, iPhones, and Android. For mobile use, simply unfold the key, align it with your phone’s NFC antenna, and hold for a few seconds to authenticate.
- Enhanced MFA (FIDO2 & TOTP/HOTP): Strengthen your security with flexible options. Use the Manager App to access TOTP/HOTP features for accounts that do not yet support FIDO2.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID. NFC is supported only through mobile authentication, Not MacOS/windows.
- Open the account’s settings or profile menu.
- Look for Security, Password and Security, or a similar section; labels differ by provider.
- Choose the MFA or two-step verification option and follow the service’s setup instructions.
- Select an offered method, such as a text or email code, an authenticator app, or biometrics.
Available methods vary by service, and CISA’s consumer guidance lists examples rather than ranking them. CISA: Turn on multifactor authentication.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Why should you install software updates promptly?
Software flaws can give criminals access to files or accounts. Install updates when they become available instead of putting them off. CISA’s Secure Our World guidance puts it plainly: “Don’t delay software updates.”
Rank #3
- USB-C or tap via NFC for easy authentication on any compatible device. No drivers needed; optional Kensington software available for advanced management features.
- Works across Windows, macOS, iOS, Android, ChromeOS, and supports Passkeys and Apple ID.
- Slim, keychain-ready form for easy carry and on-the-go authentication
- IP68-rated for dependable performance
- FIDO CTAP 2.1 for enhanced security features (e.g. resident credentials, Passkey support) and backwards compatibility with CTAP 2. FIDO2 L2 certified security for phishing resistant protection against identity theft and unauthorized access.
If your device or app offers automatic updates, enabling them can reduce the chance that you forget to install an important fix. The setting and availability depend on the product. CISA: Update software.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How can you protect your device and personal information?
Lock the device
Set a screen lock so someone who finds or steals your device has a barrier to its information. Depending on the device, that might be a passcode, fingerprint, or face unlock. CISA includes this advice in its guidance for older adults. CISA: Secure Our World for older adults.
Rank #4
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Review what you share
Check privacy and security defaults on social networks and new devices, and think carefully before sharing personal details publicly. CISA warns that information posted on social networks can help scammers steal identities, access data, or commit other crimes.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
