Start With the Basics
You do not need to be a computer expert to make safer decisions.
Computer security can sound intimidating because people hear words such as malware, ransomware, phishing, antivirus, firewall, identity theft, and data breach.
But many common security problems can be reduced by learning a few practical habits and recognizing when something does not look right.
The central idea
Stop. Think. Verify.
Do not let someone else's urgency make the decision for you.
Before opening the door, ask
- Who are you?
- Why are you here?
- Did I expect you?
- Can I verify this another way?
Think of Your Computer Like Your Home
You would not give your house key to every stranger who knocks.
Computer security works much the same way.
Unexpected calls, pop-ups, emails, links, attachments, and requests for access deserve the same kind of caution you would use at your front door.
One Important Question
Did I initiate this?
An unexpected request should make you more cautious, especially if it asks for money, passwords, remote access, or immediate action.
If someone claims to be Microsoft, your bank, or another company but you did not contact them first, pause before doing anything.
Unexpected urgency may sound like
- Your account will be closed today
- Your computer is infected
- Your payment failed
- Your package cannot be delivered
- Someone accessed your account
A caller may claim to be from
- Microsoft
- Windows
- Apple
- Your internet provider
- A security company
- Your bank or fraud department
Unexpected Tech-Support Calls
Never give remote access to someone simply because they called you.
Remote-access software can allow another person to operate your computer almost as though they were sitting in front of it.
If you believe there may really be a problem, end the call and contact a trusted technician or the company using contact information you find independently.
Fake Virus Pop-Ups
A webpage can display a frightening warning without Windows actually detecting a virus.
Fake warnings may flash, make noises, display warning symbols, claim your files are at risk, or tell you to call a phone number immediately.
The warning itself may be the scam.
Safer response
- Do not call the displayed number.
- Do not click buttons inside the warning.
- Try closing the browser tab.
- Close the browser or restart if necessary.
- Run a trusted security scan if you are concerned.
A suspicious email may imitate
- Your bank
- Amazon
- Microsoft
- PayPal
- UPS or FedEx
- Your employer
- A friend or church
- A government agency
Suspicious Emails
A familiar logo or company name does not prove an email is real.
Scammers can copy logos, colors, and wording very convincingly.
Look carefully at the actual sender address, especially when an email asks you to click a link, sign in, open an attachment, or provide information.
Be Careful With Links
A link can say one thing and lead somewhere completely different.
If an email claims there is a problem with an important account, a safer approach is often to avoid the email link.
Open your browser yourself, go to the company's website the way you normally do, sign in there, and see whether the warning is actually present.
A safer pattern
- Do not click the email link.
- Open your browser yourself.
- Go to the real website directly.
- Sign in normally.
- Verify whether the problem is real.
Before opening an attachment, ask
- Was I expecting this?
- Do I know the sender?
- Does the message make sense?
- Can I verify with the sender another way?
Unexpected Attachments
Even an attachment from someone you know deserves caution if it is unexpected.
An email account can be compromised, so a familiar sender name does not guarantee the attachment is safe.
When in doubt, verify with the sender before opening the file.
Passwords
Strong, unique passwords limit the damage if one account is compromised.
Avoid simple passwords based only on obvious information such as names, birthdays, pets, streets, or favorite teams.
Longer passwords or passphrases are generally harder to guess.
Most importantly, do not use the same password for every important account.
Protect your email especially well
Email is often used to reset passwords for other accounts, so access to your email can become a master key to much of your online life.
A password manager can help you use
- Longer passwords
- Unique passwords
- Different passwords for different accounts
- Fewer passwords you must memorize yourself
Password Managers
A password manager can make safer password habits much easier.
Instead of memorizing dozens of passwords or reusing one password everywhere, a password manager stores them securely for you.
Two-Factor Authentication
Add another layer beyond the password.
Two-factor authentication may also be called 2FA, multi-factor authentication, or MFA.
After entering your password, the service may require another confirmation, such as a code or approval on your phone.
That can help protect the account even if someone obtains the password.
Especially useful for
- Banking
- Financial accounts
- Cloud storage
- Social media
- Business accounts
Important rule
Do not give a sign-in verification code to someone who contacted you unexpectedly.
Verification Codes
That code may be the last thing stopping someone from entering your account.
A scammer may already know your username and password and then try to convince you to provide the verification code sent to your phone.
Never assume the person asking for the code is legitimate simply because they sound professional.
Keep Software Updated
Updates often fix known security weaknesses.
Windows updates can include important security fixes, and other programs such as web browsers, Microsoft Office, and Adobe software receive security updates too.
Keeping trusted software reasonably current helps close known vulnerabilities.
Keep reasonably current
- Windows
- Web browsers
- Microsoft Office
- Adobe software
- Communication tools
- Other frequently used applications
Built-in protection can include
- Microsoft Defender Antivirus
- Windows Firewall
- Security updates
- Browser protections
Antivirus and Firewall
Security software matters, but it cannot protect you from every decision.
Modern Windows computers include built-in protections through Windows Security.
For many typical home users, built-in protection combined with good habits provides a strong baseline.
But antivirus cannot necessarily stop you from voluntarily giving someone your password, sending money, or granting remote access.
Public Wi-Fi
Verify the network before joining when the connection matters.
Airports, hotels, coffee shops, restaurants, and other public places often provide Wi-Fi, but you may not know who created every network name you see.
If you are unsure which Wi-Fi network belongs to the business, ask for the correct network name.
Be more cautious on public Wi-Fi with
- Banking
- Financial accounts
- Highly sensitive information
- Unexpected login prompts
Safer software sources
- The official developer website
- Microsoft Store
- Another trusted source you recognize
Downloading Software
Do not install a program simply because a pop-up says you need it.
Questionable download sites and aggressive advertisements may bundle unwanted programs or scare you into installing unnecessary utilities.
Be especially cautious with programs that claim they can instantly fix hundreds or thousands of mysterious computer errors.
Money Scams
Never let a stranger pressure you into moving money immediately.
Scammers may pretend to be your bank, Microsoft, law enforcement, a government agency, or a fraud department.
They may tell you to move money to a “safe account,” buy gift cards, purchase cryptocurrency, or scan a QR code.
Stop and contact the institution independently.
Major warning signs
- Gift card payment
- Cryptocurrency payment
- “Safe account” transfer
- Pressure to stay on the phone
- Threats if you do not act immediately
Verify another way
- Call the person directly
- Use a phone number you already know
- Visit the official website yourself
- Ask a trusted person before sending money
Social Media Messages
A message from a friend's account may not actually be from your friend.
If someone suddenly asks for money, gift cards, or unusual help, verify through another communication method.
Their account may have been compromised.
Protect Personal Information
Public information can make scams more believable.
Think carefully before sharing information that could be used to impersonate you or answer common security questions.
Be thoughtful about sharing
- Full birth date
- Home address
- Phone number
- Travel plans
- Financial details
- Security-question answers
Backups help with recovery from
- Hardware failure
- Accidental deletion
- Corruption
- Malicious software
- Ransomware
Backups Are Part of Security
Security is not only about preventing problems. It is also about recovery.
Lesson 5 explained why important files should not exist in only one place.
A verified backup may help you recover if files are damaged, encrypted, deleted, or lost.
If You Clicked Something Suspicious
What to do depends on what actually happened.
Simply opening a suspicious page is different from entering a password, installing remote-access software, providing banking information, or sending money.
Act based on what information or access may have been exposed.
Ask what happened
- Did I enter a password?
- Did I provide a credit card?
- Did I install software?
- Did I allow remote access?
- Did I expose banking information?
- Did I send money?
If a password may be compromised
- Go directly to the real website.
- Change the password immediately.
- Use a new, unique password.
- Enable two-factor authentication.
- Review recent account activity.
- Change the password anywhere else it was reused.
Protect the Account Quickly
Your email account should be one of the first accounts you secure.
Because email is often used to reset other passwords, protecting it quickly can help prevent a larger problem.
If Someone Had Remote Access
Treat unexpected remote access seriously.
A person with remote access may have been able to view files, install software, observe passwords, or see financial information.
Disconnecting the computer from the internet can help stop an active remote session. Then seek trusted technical help to determine what may have been installed or accessed.
If financial information may be exposed
Contact the bank, credit-card company, or financial institution independently using trusted contact information.
Before You Click
Ask four simple questions.
Who sent this?
Was I expecting it?
Why do they need me to do this?
Can I verify it another way?
If the answers do not make sense, do not proceed.
Five Security Habits
You do not need to memorize everything in this lesson.
These five habits can prevent many common security mistakes.
- Be suspicious of unexpected urgency.
- Do not give strangers remote access.
- Use strong, unique passwords.
- Use two-factor authentication.
- Verify independently.
Computer 101
Security does not mean being afraid.
It means developing habits that help you recognize when something is unusual.
Our Computer 101 model continues to grow:
Windows = the office
Processor = the worker
RAM = the desk
Storage = the filing cabinet
Programs = the tools
Files = the documents
Backup = another safe copy
Computer security = protecting the office, the tools, the documents, and the people using them
The most useful security habit may be just three words:
Stop. Think. Verify.
Security Cheat Sheet
Safer responses to common situations.
- Unexpected tech-support call — Hang up and verify independently
- Browser says your computer is infected — Do not call the displayed number
- Suspicious email link — Visit the real website yourself
- Unexpected attachment — Verify with the sender before opening
- Someone asks for remote access — Do not allow it unless you initiated trusted support
- Account sends a login code — Never give the code to an unexpected caller
- Request for gift cards or cryptocurrency — Stop and verify
- Password may be compromised — Change it immediately and enable 2FA
- Trusted software has updates — Keep it reasonably current
- Important files — Maintain verified backups
Need Help With a Security Concern?
Get help understanding what happened before making the situation worse.
Beach Solutions LLC provides practical, on-site computer assistance throughout the Mid-Cities. We can help evaluate suspicious warnings, check Windows security, remove unwanted software, review a computer after unexpected remote access, and explain what you are seeing in plain English.
The goal is not to frighten you with technical language. It is to help you understand what is happening and make a safe, sensible decision.
$99 On-Site Diagnostic & First Hour