Personal Security and Digital Wellbeing

Use long, unique passphrases
Protect each important account with a long passphrase that is not used anywhere else. A passphrase is a combination of words that is easy for you to remember but difficult for someone else to guess.

An example might be The wind is blew, not yellow 2! – spaces count as characters too.

Using a different passphrase for every account helps prevent a stolen password from being used to access your other services. Prioritise accounts containing sensitive personal, health or financial information, including your email and online banking.

Visit haveibeenpwned.com and enter your email address, password or phone number to see if it’s been stolen or hacked. Once a password has been breached, cyber criminals know that that there is a high chance of this being re-used across other accounts. So beat them to it and change it before they get the chance to try!

Keep your passwords safe
Use a reputable password manager to securely store your login details in one place and generate strong, unique passwords or passphrases for you. Cybernews have provided an in-depth analysis of the 10 Best Password Managers in Australia to help you find a password manager that best suits your needs.

Turn on multi-factor authentication
Multi-factor authentication, or MFA, adds another security check when you sign in. This might be a code from an authenticator app, a notification on your device or another way of confirming your identity.

Turn on MFA wherever it is available, particularly for your email, banking, social media and other accounts containing personal information. This extra step makes it harder for someone to access your account, even if they obtain your password.

Apply updates promptly
Software updates often address known security risks. Keep your phones, computers, tablets, operating systems and apps updated and install updates when prompted.

Where possible, turn on automatic updates so important security improvements are installed without you needing to remember. Only download apps from reputable app stores or trusted providers and remove apps you no longer use.

Back up important information
Regular backups help protect important files, photos and other information if your device is lost, damaged or affected by a cyber incident.
Choose a secure backup option that suits your needs and back up your information regularly. Make sure your backups include anything that would be difficult or impossible to replace.

Scammers may impersonate trusted organisations or people to pressure you into sharing information, sending money, opening an attachment or clicking a link. They often create a sense of urgency or use emotions such as fear, curiosity or excitement to encourage a quick response.

Before responding to an unexpected message, pause and ask:

- Do I know who sent it? Check the sender’s address carefully for misspellings or unusual details.
- Is the request unexpected? Be cautious if you are asked for passwords, personal information, payment or urgent action.
- Am I being pressured? A strong emotional reaction or demand to act immediately can be a warning sign.
- Can I verify it another way? Contact the person or organisation using a phone number, app or website you already trust, rather than the details provided in the message.

Do not interact with a suspicious message until you have checked that it is genuine. Report suspected scams to the organisation being impersonated or through the appropriate reporting service. Reporting can help protect you and others from similar attempts.

Understanding common cyber threats can help you recognise when something is not right and respond appropriately. These threats may appear through email, text messages, social media, phone calls, websites or online advertisements.

Be cautious of:
- unexpected requests for personal or financial information
- links or attachments you were not expecting
- offers that appear too good to be true
- warnings that demand immediate action
- requests to move a conversation or payment to an unfamiliar platform
- login pages reached through unsolicited messages

If you are unsure, stop and check before acting. Access an account through its official app or by entering the trusted website address yourself.