Bitwarden
Creates and stores a unique password for every account. Open-source, audited, and the free tier covers everything most people need across all devices.
bitwarden.com ↗
Tools & resources
The toolkit for staying safe
A curated set of trustworthy, mostly-free tools. We don't earn anything from these picks — they're here because they work and they're beginner-friendly. Always download from the official site linked below.
Passwords & login
The foundation of account security.
Authy / Google / Microsoft Authenticator
Generates the 6-digit codes for two-factor authentication. Far safer than text-message codes, which can be hijacked by SIM-swapping.
authy.com ↗Passkeys
The newest, phishing-resistant way to log in — using your fingerprint, face, or PIN instead of a password. Built into Apple, Google, and Microsoft accounts.
Learn about passkeys ↗YubiKey
A physical security key for the strongest 2FA. Worth it if you protect high-value accounts (email, crypto, business admin). Optional for most beginners.
yubico.com ↗Check your exposure
Find out what's already out there.
Have I Been Pwned
Enter your email to see which known data breaches included it. The original, trusted breach-notification service.
haveibeenpwned.com ↗Freeze your credit
Stops criminals opening accounts in your name. Free at all three U.S. bureaus — Equifax, Experian, and TransUnion.
How to freeze ↗FTC — ReportFraud
Report scams and identity theft, and get a personalized recovery plan if your identity is stolen, at IdentityTheft.gov.
reportfraud.ftc.gov ↗Private communication & browsing
Reduce who can see what you do.
Signal
End-to-end encrypted texts and calls. Even Signal can't read your messages. The gold standard for private conversations.
signal.org ↗uBlock Origin
A lightweight browser extension that blocks ads and trackers — which also blocks many malicious ads ("malvertising").
ublockorigin.com ↗Firefox / Brave
Privacy-respecting browsers with strong tracker protection built in. Whatever you use, keep it updated automatically.
mozilla.org/firefox ↗A reputable VPN
Useful on untrusted public Wi-Fi to encrypt your traffic. Choose a paid, audited provider — avoid "free" VPNs that sell your data. Not a cure-all.
When a VPN helps ↗Devices & recovery
Protect the machines themselves.
Malwarebytes
A trusted on-demand scanner to clean up an infected Windows or Mac. The free version is great for occasional checks.
malwarebytes.com ↗FileVault & BitLocker
Full-disk encryption built into macOS (FileVault) and Windows (BitLocker). Turn it on so a lost or stolen device keeps your data safe.
How to enable ↗Cloud backup
Your best defense against ransomware. Turn on automatic backup (iCloud, Google, OneDrive, or Backblaze) for irreplaceable files.
StopRansomware.gov ↗?
Not sure where to start?
Begin with the beginner lessons — they walk you through setting up the first three tools on this page in order.