Being online is not dangerous. But being online without a few simple habits is a lot like leaving your front door unlocked. Most people never have a problem — until they do. And when they do, it is rarely random. It is usually because one small thing was easy to exploit.

The good news: protecting yourself online does not require being a tech expert. It requires knowing four things — strong passwords, safe Wi-Fi habits, how to recognize a secure website, and what to do if something goes wrong. That is all this guide covers. No jargon, no scare tactics, no long lists of software to install.

If you are an adult child reading this for a parent: this is a great article to read together. The habits here are ones you can set up in a single afternoon and be confident they will stick.

Why Seniors Are Targeted Online (And Why It Is Not Your Fault)

Let us get something out of the way first. When a senior gets hacked or scammed online, the immediate instinct is to think they did something foolish. That is wrong — and it is exactly what makes seniors more vulnerable.

Cybercriminals do not target seniors because they are less intelligent. They target seniors because:

None of this is a personal failing. It is a targeting strategy that criminals have deliberately developed. The solution is not to feel bad about being targeted — it is to make yourself a harder target. That starts with passwords.

Creating Passwords You Can Actually Remember

Most password advice is useless in practice. “Use 12 characters, one uppercase, one symbol, one number” creates passwords no human can remember — so people write them on sticky notes or reuse the same one everywhere. Both are exactly what attackers count on.

The better approach is called a passphrase: three or four ordinary, unrelated words strung together, with a number or symbol added. Here is why it works: length beats complexity. A passphrase like the examples below is both easier to remember and much harder to crack than a jumbled short password.

Passphrase examples
BlueSky!Morning42
Garden.Chair.Tuesday9
Sunset&Coffee&Radio7

Pick words that mean something to you, but are not in your wallet. Avoid names, birthdays, pet names, or your address.

The rules that actually matter

A note on writing passwords down

It is fine to write your passphrases down — on paper, in a notebook, stored somewhere secure in your home (not a sticky note on your monitor). A written-down password in your locked desk is far safer than a weak password you use everywhere. If you want a digital solution, a password manager app like 1Password or Bitwarden stores and fills passwords for you automatically. Ask someone you trust to help set one up — or book a session with TechKNOWphobia and we will walk through it together.

Safe Wi-Fi Habits: Home vs. Public

Not all Wi-Fi is equal. Your home network is a private, password-protected connection that you control. Public Wi-Fi at a coffee shop, library, doctor’s office, or airport is a shared network that anyone nearby can join — including people you do not know.

Your home Wi-Fi

Treat it like your home. Keep it locked.

Your home Wi-Fi has a password. Make sure it is not the default password printed on the back of your router — those are often guessable. Set a strong passphrase for your network name and password. Most internet providers can walk you through this on the phone, or a family member can help. Once set, your home network is generally safe for banking, email, and anything else you do online.

Public Wi-Fi

Use it only for things you would do in public anyway.

Reading the news, checking sports scores, looking up a restaurant menu — fine on public Wi-Fi. Logging in to your bank, checking your email, paying a bill, or entering your Social Security number — wait until you are home, or use your phone’s cellular data (the signal bars in the top corner of your phone) instead. When you are on cellular, you are not on the public network.

Watch out for fake networks
Free Airport WiFi, Free Coffee Shop WiFi, Guest Network — anyone can create a Wi-Fi hotspot with any name. Before joining a public network, confirm the correct name with a staff member. A network named “Starbucks” could be set up by a stranger at the next table.
If your phone or laptop connects automatically to a network you do not recognize, disconnect and turn off the Wi-Fi until you are somewhere you trust. Automatic connections can happen to networks you joined years ago — it is worth reviewing them occasionally.

A word on VPNs

You may have heard of VPNs (Virtual Private Networks). A VPN encrypts your internet connection even on public Wi-Fi, making it harder for others to see what you are doing. They are a good extra layer of protection if you travel frequently or regularly use public networks. That said, they are optional — if you simply avoid logging in to sensitive accounts on public Wi-Fi, you get most of the protection without needing any additional software. If you are curious about setting one up, TechKNOWphobia can walk you through which options are simplest.

Browser Safety: Recognizing Secure Sites and Avoiding Pop-Ups

Your browser is the window you use to look at the internet. Knowing what a safe website looks like — and what a dangerous one looks like — takes less than five minutes to learn and will serve you for the rest of your life online.

Signs a website is safe to use
🔒
A padlock icon in the address bar. Look at the very top of your browser window. A small padlock icon next to the web address means the connection is encrypted. Your information travels safely between your computer and the website. If you do not see a padlock — or if you see a warning triangle instead — do not enter any personal information.
🔒
The address starts with https:// (not http://). The “s” stands for secure. Most modern websites use https automatically. If you are on a site that still uses plain http://, especially for a login page or payment form, leave.
The domain name is spelled correctly. Fake websites often use slight misspellings: paypa1.com instead of paypal.com, amaz0n.com instead of amazon.com. Read the address carefully, especially before entering a password or payment information.

What to do when a pop-up alarm appears

You are browsing normally and suddenly a pop-up covers your screen: “YOUR COMPUTER HAS A VIRUS! CALL NOW!” or “YOUR SYSTEM IS INFECTED — DO NOT CLOSE THIS WINDOW!” The pop-up may play an alarm sound or claim your data is being stolen in real time.

This is a scam. No real antivirus program or computer company communicates this way. Real security software shows small, quiet notifications — it does not cover your screen with a phone number and demand you call immediately.

Here is what to do:

  1. 1
    Do not call the phone number. The person on the other end is a scammer waiting to take remote access of your computer or charge you money.
  2. 2
    Try to close the browser tab. Press the X on the tab at the top of your browser. If the pop-up will not let you, close the entire browser by clicking the X in the top right corner of the window.
  3. 3
    If the screen is completely locked, press and hold the power button on your computer until it turns off. Wait 10 seconds. Turn it back on. If the warning was fake (it almost certainly was), it will not be there when your computer restarts.
  4. 4
    If you are unsure whether something is real, call a family member or a trusted tech person before doing anything else. TechKNOWphobia offers same-week sessions for exactly these situations.

What to Do If You Think You Have Been Hacked

Being hacked does not necessarily mean someone broke into your computer dramatically. More often it means a password was stolen, an account was accessed without your knowledge, or a scammer got information they should not have. Here is what to do, in order.

1. Change your email password first

Your email is the master key to every other account. If someone has access to your email, they can reset your bank password, your social media, everything. Change it immediately using a strong passphrase you have not used before. Do this before anything else.

2. Change passwords on other important accounts

After your email: your bank or credit union, any investment or retirement accounts, your Apple ID or Google account (if you have one), and any accounts you believe may have been accessed. Change them one at a time, starting with the most sensitive.

3. Call your bank

If there is any chance financial information was exposed — a bank account number, credit card number, or Social Security number — call your bank directly (use the number on the back of your card, not a number from any email or website). Tell them what happened. They can flag your account, dispute charges, and issue a new card if needed. Act fast — the sooner you call, the more options you have.

4. Report it

Go to ReportFraud.ftc.gov to file a report with the Federal Trade Commission. This costs you nothing, takes about 10 minutes, and contributes to a national database that helps law enforcement track and shut down cybercriminals. You do not need to have lost money to file — attempted fraud is worth reporting too.

5. Tell someone you trust

Do not stay silent out of embarrassment. Cybercriminals count on shame keeping people from reporting or getting help. Telling a family member or trusted friend means you have support, and it helps them stay alert to the same threats. Most people who have been targeted online — including people who work in technology — have had something go wrong at some point. It is not a reflection of your intelligence.

Prevention habit worth starting today

Turn on two-factor authentication (also called 2FA or two-step verification) on your email account. When it is enabled, even if someone gets your password, they cannot log in without also entering a code sent to your phone. It takes about five minutes to set up. If you would like help doing this, TechKNOWphobia can walk through it with you in a session.

Internet safety is not about fear — it is about confidence. When you know what to look for and what to do, the internet becomes exactly what it should be: a useful, connected place where you can talk to family, find information, and manage your life. You deserve to use it without worry.

If you want hands-on help reviewing your passwords, securing your accounts, or building the habits in this guide — TechKNOWphobia offers 1-on-1 sessions in Fort Lauderdale and over video call. Book a session here.

Ready to feel confident online?

TechKNOWphobia offers patient, judgment-free 1-on-1 sessions in Fort Lauderdale and over video call. We will walk through your passwords, secure your accounts, and make sure you know exactly what to do if something ever feels wrong.

Book a Safety Session
← Back to Resources