Keeping Devices Updated and Locked

Some of the strongest protection you can have costs nothing, needs no expertise, and runs entirely in the background. Keeping your devices updated and locked stops a surprising share of real-world compromises — and once you set them up, they protect you without another thought.

Why updates matter more than they seem

Every app and operating system has flaws, and when one is discovered, the maker releases a fix. But a fix only protects you once it's installed. Attackers pay close attention to newly announced flaws and rush to exploit devices that haven't caught up yet — because those holes are now public knowledge and easy to walk through.

That's the whole game: a device that's months behind on updates is running locks that are known to be pickable. Staying current closes that window. This is one of the three core habits for exactly this reason.

Turn on automatic updates — everywhere

• Your phone and computer. Enable automatic operating-system updates so security patches install themselves, ideally overnight.
• Your apps. Let your app store update apps automatically; outdated apps are a common way in.
• Your browser. It's your most exposed piece of software — keep it set to update on its own.

Set these once and the highest-value security habit becomes something you never have to think about again.

Why screen locks matter

Not every threat is remote. A lost or stolen phone or laptop is a direct route to your email, photos, messages, and saved logins — unless it's locked. A screen lock is the difference between "I lost a device" and "I lost everything on it."

• Set a strong PIN or passphrase — six digits or more, not 1234 or your birth year.
• Add fingerprint or face unlock for the convenience, backed by that PIN.
• Lock automatically after a short idle time, so an unattended device secures itself.

Encryption: the quiet backstop

Device encryption scrambles everything stored on your phone or computer so that a thief who pulls out the drive still can't read your files. On modern phones it's on by default; on computers it may need a quick switch (BitLocker on Windows, FileVault on a Mac). Turning it on means a locked device is genuinely protected, not just showing a lock screen someone can bypass.

A note on old devices

Eventually a phone or computer stops receiving security updates. Once that happens, it's permanently exposed to newly discovered flaws with no fix coming. If a device you use for anything sensitive has aged out of support, it's time to retire it from banking and email at least. When you do get rid of it, wipe it fully first — the backups lesson covers moving your data safely before you do.

Set up "find my device" before you lose it

A screen lock protects a lost device, but you can go one better by turning on the "find my device" feature built into every modern phone and computer — before you ever need it. It's the difference between helpless and in control the moment something goes missing.

• Locate the device on a map to tell "left at a friend's" from "genuinely gone."
• Lock it remotely and show a message with a contact number for an honest finder.
• Erase it remotely as a last resort, so a thief gets a blank device and none of your data — which your backups let you do without losing anything.

Enable it now, while the device is in your hand, because you can't turn it on after it's lost. If the worst happens, the lost or stolen phone guide walks you through using it.

A free habit: restart occasionally

Rebooting your phone and computer every so often is a small, underrated habit. Restarts install pending updates that were waiting, and they clear out certain kinds of temporary malware that don't survive a power cycle. It costs a minute and asks nothing of you technically — a quiet bit of hygiene that keeps the automatic protections you've set up actually running.

None of this asks for technical skill or ongoing effort — it's a handful of one-time switches that then protect you silently in the background. Spend twenty minutes today across your phone and computer, and you've quietly closed off some of the most common ways people lose their data entirely.