Keeping Devices Updated and Locked

Two of the most effective security measures are also the most boring, which is exactly why people skip them. Updating your software and locking your screens are quiet habits that prevent a large share of real-world compromises.

Updates matter because they patch the security holes attackers rely on. When a flaw is discovered, the maker releases a fix, but a fix only protects you once it is installed. Attackers actively target devices that have not updated, because those known holes are easy to exploit. Turn on automatic updates for your operating system, your apps, and your browser, and let them install promptly. This single setting closes the door on a whole category of attacks with no ongoing effort.

Screen locks matter because not every threat is remote. A lost or stolen phone or laptop is a direct route to everything on it. Set a strong PIN or passphrase, enable fingerprint or face unlock for convenience, and set the device to lock automatically after a short idle time. Make sure device encryption is on, which is the default on modern phones and available on every computer, so that a thief who removes the drive still cannot read your files.

Neither habit is exciting, and that is the point. They run in the background and protect you precisely when you are not thinking about security.