Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Four familiar security rules no longer match current guidance: changing every password on a calendar, forcing arbitrary mixtures of letters and symbols, treating antivirus as obsolete, and assuming public Wi‑Fi is either always dangerous or completely safe behind a VPN. Better protection comes from long, unique credentials; compromise-triggered password changes; phishing-resistant multifactor authentication; patched, supported devices with antimalware; and cautious use of third-party networks.
The four corrections below are a fact-checked selection, not a claim about one original list. They draw on the National Institute of Standards and Technology (NIST) SP 800-63B-4 and recent Cybersecurity and Infrastructure Security Agency (CISA) guidance, while noting where federal or organizational advice needs adapting for personal devices.
At a glance: replace the rule, not the security goal
| Outdated advice | What current guidance changes | Use this habit instead |
|---|---|---|
| Change every password every 30, 60 or 90 days. | NIST says verifiers must not require periodic changes; a forced change is appropriate when there is evidence of compromise. | Use a long, unique password for every account, store it in a password manager and change it promptly after exposure. |
| A strong password must contain a prescribed mix of uppercase letters, numbers and symbols. | NIST prohibits mandatory composition rules. CISA emphasizes length, randomness and uniqueness. | Generate a long random password or passphrase and let the manager handle complexity. |
| Antivirus is obsolete if you are careful online. | CISA’s 2025 guidance still calls for antivirus or antimalware coverage and updates, alongside patching and other controls. | Keep antimalware enabled and current, but treat it as one layer in a maintained security stack. |
| Never use public Wi‑Fi, or a VPN makes any public network safe. | CISA recommends an authorized VPN or secure-access solution for sensitive work on third-party networks, while warning that risks can remain. | Prefer trusted networks, use approved secure access for work, and assume a VPN reduces rather than eliminates risk. |
1. “Change every password on a schedule” is no longer a default
What the current standard says
NIST SP 800-63B-4, which sets requirements for digital identity services and credential service providers, states: “Verifiers and CSPs SHALL NOT require subscribers to change passwords periodically.” The rule is deliberately specific: a service should not make you replace a password merely because 60 or 90 days have passed.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
NIST does require a change when there is evidence that the authenticator has been compromised. CISA’s 2023 red-team advisory reaches the same practical conclusion: routine changes to memorized passwords can create predictable patterns, such as adding a new month or incrementing a number. Those patterns are easier to guess than a genuinely new credential.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
What to do instead
- Make every password unique. A password reused on two sites turns one stolen database into a potential takeover of both accounts.
- Use a password manager. Have it generate and fill random credentials so you do not need to memorize dozens of strings.
- Change a password after a credible exposure. Act when a service reports a breach, you see an unfamiliar sign-in, a recovery address changes without your permission, or the password was shared or stored insecurely.
- Secure the manager itself. Use a long master passphrase and multifactor authentication where the manager offers it. Keep recovery information available offline or in another protected location.
- Revoke active sessions after compromise. Changing the password alone may not end an attacker’s existing session. Use the account’s “sign out of all devices” or session-management control, then review recovery methods and forwarding rules.
A scheduled review can still be useful for inventory: you can check which accounts lack unique passwords or multifactor authentication. The trigger for replacing a password, however, should be risk or evidence of compromise rather than an arbitrary date.
2. “Require uppercase, lowercase, numbers and symbols” is a poor strength test
Why composition checklists mislead
NIST SP 800-63B-4 prohibits verifiers from imposing additional composition rules such as mandatory mixtures of character types. A password containing one capital letter, one number and one exclamation mark may satisfy a form while remaining short, reused or built from a predictable word.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
CISA describes stronger passwords as long, random and unique, and recommends a password manager. Length gives a randomly generated credential a much larger search space; uniqueness prevents a compromise at one service from becoming a compromise everywhere else. A composition checklist does not provide either guarantee.
Length requirements depend on how the password is used
| Use of the password | NIST SP 800-63B-4 minimum | How to interpret it |
|---|---|---|
| Password is the single authentication factor | At least 15 characters | This is a requirement for the digital identity services covered by the standard, not a promise that every website has implemented it. |
| Password is used only as part of multifactor authentication | At least 8 characters | The second factor changes the assurance context, but a longer unique password is still preferable when the service permits it. |
A practical password recipe
- For accounts that support generated credentials, let the manager create a long random string.
- For a password you must type, use a long passphrase made from unrelated words rather than a familiar quotation, name or predictable substitution.
- Do not shorten a password just to satisfy a site’s composition box, and do not append the same symbol or year to every account.
- Check the service’s password-length limit and truncation behavior. If a site rejects a manager-generated password, use the longest unique value it accepts and enable multifactor authentication.
Passwords are not phishing-resistant. A convincing fake sign-in page can capture a perfectly long password, which is why the next upgrade is an authentication factor that proves possession of a device or key rather than merely typing a secret.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
3. “Antivirus is obsolete” ignores layered defense
What CISA still recommends
CISA’s August 2025 fact sheet for state, local, tribal and territorial governments tells organizations to confirm that their networks are protected by antivirus or antimalware software and to prioritize updates for those tools. That is organizational guidance, not a mandate for one consumer product, but it directly contradicts the claim that antivirus has no value.
Antimalware can detect, block or contain malicious files and behavior. It cannot correct an unpatched operating system, stop a stolen password from being used on a legitimate login page, or restore data after an attacker encrypts it. Its role is therefore complementary rather than complete.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Build the surrounding layers
- Patch promptly. Turn on automatic updates for the operating system, browsers, applications and security tools. CISA’s exposure guidance emphasizes current patches and replacing unsupported software and devices.
- Prioritize exploited flaws. Organizations can use CISA’s Known Exploited Vulnerabilities Catalog to identify updates that deserve urgent attention. Home users should apply vendor security fixes quickly, especially for internet-facing routers, browsers and remote-access software.
- Replace unsupported technology. A device that no longer receives security updates cannot be made fully current by installing a newer scanner.
- Protect accounts. Use multifactor authentication wherever it is available, with a phishing-resistant option for high-value accounts.
- Monitor and recover. Review security alerts, keep tested backups and know how to isolate a device if malware is suspected.
What to check on a personal computer
- Open the operating system’s security dashboard and confirm that real-time protection is enabled.
- Verify that antivirus definitions and the scanning engine update automatically.
- Remove or disable duplicate security suites that conflict with the built-in protection, unless an administrator has specified otherwise.
- Install pending operating-system and browser updates, then restart when required.
- Investigate repeated detections, disabled protection or unexplained exclusions instead of dismissing them as routine warnings.
The useful correction is not “buy more security software.” It is “do not remove a functioning defensive layer, and do not mistake it for the whole defense.”
4. “Public Wi‑Fi is always unsafe” and “a VPN makes it safe” are both too absolute
The federal-workplace context
CISA’s 2024 federal mobile workplace guide advises users on third-party networks to connect through an agency-authorized VPN or another approved secure-access solution and to activate that protection after joining the network. The same guidance warns that vulnerabilities such as masquerading and network sniffing can remain even when a VPN is in use.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
This is guidance for authorized devices and sensitive work. It does not mean every consumer must avoid every café or hotel network, and it does not certify an unknown VPN. A VPN can encrypt traffic between your device and its service endpoint, but it cannot make a phishing site trustworthy, repair an infected device or protect an account after its credentials are stolen.
Use a third-party network more safely
- Prefer a trusted connection. Use your own mobile hotspot or a known, password-protected network for sensitive administration when practical.
- Verify the network name. Ask staff for the exact name and sign-in method; similarly named networks can be deliberate masquerades.
- Use authorized secure access. For work, start the organization’s VPN or secure-access client after connecting and confirm that it reports an active session.
- Limit high-impact actions. Delay banking, password changes and administrative work until you have a trusted connection unless the task is urgent and protected by approved access controls.
- Disable automatic joining. Turn off auto-connect for open networks and remove saved networks you no longer use.
- Forget the network afterward. This reduces the chance that your device silently reconnects on a later visit.
- Keep the device patched. Network protection cannot compensate for vulnerable software or an outdated operating system.
Think of a VPN as a risk-reduction control for a particular connection, not a safety certificate for the entire internet session.
Modern authentication: make phishing resistance the upgrade
NIST says passwords are not phishing-resistant. Under SP 800-63B-4, an AAL2 verifier must offer at least one phishing-resistant authentication option, and AAL3 requires phishing-resistant authentication. CISA also recommends phishing-resistant multifactor authentication and identifies hardware-based FIDO tokens as a strong option.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →| Option | Phishing resistance | Compatibility | Lost-device recovery | Daily use |
|---|---|---|---|---|
| Password only | Not phishing-resistant | Works almost everywhere | Usually account recovery, with risk if recovery is weak | Familiar, but requires careful unique-password management |
| App-generated or push MFA | Varies by implementation; not every method resists phishing | Common, but support differs by service | Requires backup codes or a replacement-device process | Usually convenient |
| FIDO2/WebAuthn hardware key | Designed for phishing resistance | Only where the account supports the standard | Requires a spare key or another enrolled recovery method | Quick after initial enrollment |
Start with email, password-manager, financial and administrator accounts. Open each account’s security settings, look for passkey, security-key or phishing-resistant MFA options, enroll a primary method and set up recovery before signing out. A hardware key is optional, not a universal requirement: verify compatibility and keep a documented backup plan if the key is lost.
A 30-minute security reset
- List your email, financial, work and social accounts in order of impact.
- Replace reused or exposed passwords with unique manager-generated credentials; do not rotate clean passwords merely because of their age.
- Enable multifactor authentication, choosing a phishing-resistant method when the service supports one.
- Update your operating system, browser, router firmware and security software; remove unsupported applications.
- Confirm that antimalware protection and automatic updates are active.
- Review active sessions, recovery addresses, phone numbers and forwarding rules for high-value accounts.
- Write down recovery codes or store them in a protected offline location, and test that you can access them.
- For travel or public work, decide in advance which networks and authorized secure-access tools you will use.
These steps preserve the purpose behind the old tips—reducing account theft and malware exposure—without relying on calendar-based changes, superficial character tests, obsolete software assumptions or absolute Wi‑Fi claims.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
