Australians lost over $3 billion to scams in 2023, according to the ACCC. While not all of that involved laptops directly, your computer is often the gateway through which criminals access your personal information, financial accounts, and identity.
The good news is that protecting yourself doesn't require technical expertise or expensive software. These practical security measures will significantly reduce your risk of becoming a victim.
The Basics: Your Security Foundation
1. Keep Your Operating System Updated
Those update notifications you keep dismissing? They often contain critical security patches. When vulnerabilities are discovered in Windows or macOS, criminals rush to exploit them before people update.
Action: Enable automatic updates. On Windows, go to Settings > Windows Update > Advanced Options and ensure "Receive updates for other Microsoft products" is enabled. On Mac, System Preferences > Software Update > Automatically keep my Mac up to date.
2. Use Strong, Unique Passwords
If you use the same password for multiple accounts, a breach at one service exposes all your accounts. The 2024 credential stuffing attacks in Australia affected thousands who reused passwords.
Strong passwords are:
- At least 12 characters long
- A mix of letters, numbers, and symbols
- Unique for every account
- Not based on personal information (birthdays, pet names, addresses)
Password Manager Recommendation
Use a password manager like Bitwarden (free) or 1Password to generate and store unique passwords. You only need to remember one master password. The built-in password managers in Chrome, Safari, and Edge also work well.
3. Enable Two-Factor Authentication (2FA)
Two-factor authentication means that even if someone steals your password, they can't access your account without a second verification—usually a code from your phone.
Enable 2FA on:
- Your email (most important—email is the recovery point for other accounts)
- Banking and financial services
- Social media accounts
- myGov and ATO
- Any account containing sensitive information
Prefer authenticator apps (like Microsoft Authenticator or Google Authenticator) over SMS codes when possible. SMS can be intercepted; authenticator apps cannot.
Protecting Your Laptop
4. Set a Strong Login Password or PIN
Your laptop login is your first line of defence. If your laptop is lost or stolen, a strong password prevents immediate access to your files.
Avoid:
- Simple PINs like 1234, 0000, or your birth year
- Passwords that are obvious to anyone who knows you
- The same password you use for online accounts
If your laptop has a fingerprint reader or Windows Hello facial recognition, use it. Biometrics are both convenient and secure.
5. Enable Full Disk Encryption
Encryption scrambles your data so it's unreadable without your password. If someone removes your hard drive and connects it to another computer, they still can't read your files.
Windows: Device encryption is enabled by default on most modern Windows laptops. Check Settings > Privacy & Security > Device encryption. For older systems, use BitLocker (Windows Pro) or VeraCrypt (free alternative).
Mac: FileVault encryption is built in. Go to System Preferences > Security & Privacy > FileVault and turn it on.
6. Set Up "Find My Device"
If your laptop is lost or stolen, tracking software can help locate it—or at least let you remotely wipe your data.
Windows: Settings > Privacy & Security > Find my device. Ensure it's turned on and your Microsoft account is connected.
Mac: System Preferences > Apple ID > iCloud > Find My Mac.
Important
If your laptop is stolen, report it to police and use the remote wipe feature. Do not attempt to confront thieves yourself—no laptop is worth your safety.
Online Safety
7. Recognise Phishing Attempts
Phishing emails and websites trick you into entering your credentials on fake pages. They're increasingly sophisticated—criminals now mimic Australian banks, Australia Post, and government agencies convincingly.
Warning signs:
- Urgency: "Your account will be suspended in 24 hours!"
- Generic greetings: "Dear Customer" instead of your name
- Suspicious links: Hover over links to see the actual URL before clicking
- Requests for sensitive information via email
- Poor grammar and spelling (though this is becoming less common)
When in doubt, don't click links in emails. Instead, go directly to the organisation's website by typing the address manually or using a bookmarked link.
8. Use Secure Connections
Look for "https://" and a padlock icon in your browser's address bar before entering sensitive information. This indicates the connection is encrypted.
For online banking, shopping, or accessing government services, always verify you're on the legitimate website. Criminals create convincing copies of bank login pages.
9. Be Careful with Public WiFi
Public WiFi at cafes, airports, and hotels can be monitored by others on the network. Avoid accessing banking or entering passwords on unsecured public networks.
For safer public WiFi use, see our dedicated guide: Using Public WiFi Safely.
Software Security
10. Use Built-in Security Software
Good news: you probably don't need to pay for antivirus software. Windows Defender (built into Windows 10 and 11) provides excellent protection for most users and is free.
Keep Windows Defender enabled and updated. For Mac users, the built-in XProtect and Gatekeeper provide solid baseline protection.
What actually helps more than paid antivirus:
- Keeping your operating system updated
- Not downloading software from untrusted sources
- Being cautious with email attachments
- Using a password manager
11. Only Download from Trusted Sources
Malware often disguises itself as legitimate software. Only download applications from:
- Official app stores (Microsoft Store, Apple App Store)
- The developer's official website
- Reputable download sites you trust
Be especially wary of "free" versions of paid software, cracked games, or random download links in forums. If it seems too good to be true, it probably is.
12. Keep Your Browser Updated
Your web browser is your main interface with the internet, making it a prime target for attacks. Chrome, Firefox, Edge, and Safari all release frequent security updates.
Enable automatic updates for your browser, and consider using these security-enhancing extensions:
- uBlock Origin: Blocks ads and malicious scripts
- HTTPS Everywhere: Forces secure connections where available
Backup and Recovery
13. Maintain Regular Backups
Ransomware attacks encrypt your files and demand payment for the decryption key. Regular backups let you recover without paying criminals.
Follow the 3-2-1 backup rule:
- 3 copies of your data
- 2 different storage types (e.g., external drive and cloud)
- 1 copy offsite (cloud backup counts)
Windows: Use the built-in File History feature. Mac: Use Time Machine with an external drive. Additionally, consider cloud backup services like Backblaze or iCloud.
Quick Backup Check
When did you last verify your backups work? Occasionally test by restoring a file to make sure your backup system is actually functioning.
Physical Security
14. Don't Leave Your Laptop Unattended
In libraries, cafes, and coworking spaces, laptop theft is common. Never leave your laptop unattended, even "just for a minute."
If you must step away briefly:
- Lock your screen (Windows key + L on Windows, Control + Command + Q on Mac)
- Ask a trusted person to watch it
- Take it with you
15. Be Aware of Shoulder Surfing
In public places, people can watch you enter passwords. Use a privacy screen filter if you frequently work in public, and be mindful of who can see your screen when entering sensitive information.
What to Do If You're Compromised
Despite best efforts, breaches happen. If you suspect your security is compromised:
- Change passwords immediately—starting with your email and banking
- Check for unauthorised access in your account security settings
- Enable 2FA if you haven't already
- Scan for malware using Windows Defender or Malwarebytes
- Monitor your accounts for unusual activity
- Report to ScamWatch (scamwatch.gov.au) if you've been targeted by scammers
- Contact IDCARE (idcare.org) for identity theft support—they're a free service for Australians
For serious financial fraud, contact your bank immediately and file a police report.
Security Doesn't Have to Be Hard
You don't need to be a cybersecurity expert to stay safe. Focus on the fundamentals:
- Keep everything updated
- Use strong, unique passwords with a password manager
- Enable two-factor authentication
- Think before you click
- Back up your data regularly
These five habits will protect you from the vast majority of threats. Perfect security doesn't exist, but making yourself a harder target means criminals will move on to easier victims.
Stay safe online!