Blog › Quick security recommendations for your devices

Quick security recommendations for your devices

By Security in a Box
Đã đăng 2024.11.28

Quick security recommendations for your devices

People often ask us where they can start, what are minimum steps they should consider taking in an effort to better protect their devices. In this post we share what we are recommending as the first, often most effective and most important items.

General

  1. Use unique and strong passwords for each account, using a password manager to safely store them.
  2. Use two-factor authentication (2FA) on supported accounts. As a first choice, consider using hardware devices (also called security keys). Otherwise you can also use apps or programs that generate time-based one-time passwords (TOTP). Avoid using SMS for 2FA if you can.
  3. Avoid using biometrics (face ID, fingerprint scan) as an authentication method. We explain why in the guide on passwords.
  4. Delete old files, documents, pictures, screenshots and chat history that you do not need on your device. Securely back up as necessary before removal.
  5. If you can, avoid installing social media apps: you can use them by accessing their website with your browser instead.
  6. Restart your device frequently. This ensures updates are applied properly and reduces the risk for cases of non-persistent malware.

Further reading:

Android

  1. Check that your Android is up to date and that both your version of Android and your device are still supported (check Samsung, Google Pixel, Nokia or Motorola. For other models, see C. Scott Brown's article on the phone update policies from every major Android manufacturer).
  2. Automatically update your apps.
  3. Enable Play protect.
  4. Review the permissions your apps have access to.
  5. Review installed apps and uninstall any unneeded/unknown ones.
  6. Ensure apps can only be installed from trusted sources.
  7. Set a longer password (not a PIN or a pattern) to protect access to your device.
  8. Consider enrolling in Google's Advanced Protection program.

Further reading:

iOS/iPhone

  1. Check that your iOS version and device are still supported and up-to-date.
  2. Automatically update your apps.
  3. Review the permissions your apps have access to.
  4. Review installed apps and uninstall any unneeded ones.
  5. Switch on the lockdown mode, which will also make it harder to compromise your device.
  6. Set a long passcode to protect access to your device.

Further reading:

Windows

  1. Ensure you are using a supported version of Windows with automatic updates enabled.
  2. Make sure that any software installed via the Microsoft store is set to automatically update.
  3. Ensure Windows Defender is turned on. Activate Microsoft Defender rather than using a third-party antivirus.
  4. Consider using Hardentools to disable some often abused features.
  5. Consider using Simplewall to monitor where you computer is connecting to.
  6. Ensure Bitlocker - or Device Encryption - is turned on.
  7. Ensure your computer requires a strong password to log in.
  8. Review installed programs and remove any that are no longer needed.

Further reading:

macOS

  1. Ensure macOS automatic updates are enabled and that you use a supported version of macOS.
  2. Consider using LuLu to monitor where you computer is connecting to.
  3. Make sure FileVault is enabled.
  4. Ensure your computer requires a strong password to log in.
  5. Review installed programs and uninstall any that are not needed.

Further reading:

Ubuntu Linux

  1. Ensure that your version of Ubuntu is still supported and that you are keeping it and the installed software up-to-date.
  2. Enable the Firewall or consider using OpenSnitch to monitor where you computer is connecting to.
  3. Ensure LUKS encryption is enabled when you install the operating system.
  4. Ensure automatic login is disabled and your account is set up with a strong password.

Further reading: