Personal cyber security handbook

Many devices in your home connect to each other and to the internet, including your: 

• smartphone
• laptop or computer
• smart TV 
• speakers 
• cameras
• smart appliances
• internet router. 

Being more connected also brings more exposure to online threats. If cybercriminals hack your device, they can access your personal data and accounts. Follow these tips to keep your devices and personal information secure.

Lock your device when not in use

If you can lock your devices, you should do so when you’re not using them even if it’s only for a short time. Make sure they are set to automatically lock (less than 5 minutes – the shorter the better).

Consider using biometrics such as a fingerprint or face scan. Pair this with a strong password to help protect your device from unwanted access.

Avoid unknown devices and cables

Only use external devices and cables, such as a USB drive or memory card, from trusted sources. If you have obtained an external device or removable media that is second-hand or was given to you for free, it could potentially contain malware.

Prepare for a lost or stolen device

Keep your devices in a safe place and know where they are. Do not leave them unattended, especially when you’re travelling.

Turn on ‘find my device’ and device encryption features. This helps protect your data if your device is lost or stolen.

Secure your smart devices

Smart devices, also known as The Internet of Things (IoT), refers to a network of devices, vehicles, appliances, and other objects. These objects are embedded with sensors, software and network connectivity. This allows them to collect and share data.

Secure your smart devices to help prevent hackers gaining access to them. Imagine someone being able to control your smart speaker or camera.

Protect your smart devices by:

• using strong passwords
• keeping software updated
• using secure connections. The level of protection also depends on the security built into the device itself. Research devices before making a purchase, as manufacturers provide different levels of security. Choose products from trusted manufacturers. Compare similar devices made by different manufacturers. 

To improve the security of the digital products used by Australians every day, the Cyber Security (Security Standards for Smart Devices) Rules 2025 commenced on 4 March 2026. These rules introduce mandatory cyber security standards for most smart devices.

Things to consider when buying smart devices:

• Is the device made by a trusted company and sold by a well-known, reputable store?
• Is it possible to change the password?
• Does the manufacturer provide security updates?
• What data will the device collect and who will the data be shared with?
• Does the device do only what you want it to do?
• If you bought the device on or after 4 March 2026, does it meet the Cyber Security (Security Standards for Smart Devices) Rules 2025? These rules require no default passwords, a clear way to report security issues and a defined period for security updates.

Smart devices use the internet to provide features such as remote access, apps and automation. Being a smart device means they can collect, store and share personal data. When choosing a smart device, select established manufacturers and service providers that have a clear approach to security, privacy and ongoing software support.

Consider what data is collected and where your data is stored

Smart devices can collect information such as location data, usage patterns and details from linked accounts or devices. This data may be stored by manufacturers or third‑party service providers, sometimes overseas. Check your device privacy settings and disable data sharing or features you don’t need.

Keep devices secure over time

Security is ongoing for all smart devices. Manufacturers release updates to fix security issues and reduce cyber risks. To help reduce the risks:

• install software and firmware updates as soon as they’re available
• keep linked apps and your device’s operating system up to date
• regularly review and remove apps, services or users that no longer need access.

Dispose of smart devices safely

When selling, trading in or disposing of a smart device, take steps to protect your personal information.

• Restore it to factory settings.
• Unlink accounts and connected services.
• Remove saved devices, profiles and personal data.

When buying a second‑hand smart device, perform a factory reset before use to ensure previous owners no longer have access to your data or your device.

Ransomware

Ransomware is a type of malicious software that can lock you out of your device or make your files inaccessible. Cybercriminals then demand payment, often in cryptocurrency, to restore access or prevent stolen information from being shared online. A ransomware attack can have a serious impact, including the loss of important documents, financial records or personal photos. Following good cyber security practices can greatly reduce the likelihood and impact of an attack.

To help protect yourself from ransomware:

• Keep your devices, applications and operating systems up to date.
• Regularly back up important files to an external drive or trusted cloud service.
• Ensure your backups can be successfully restored if needed.
• Use reputable antivirus software and keep it updated.
• Enable ransomware protection features where available.
• Turn on MFA for important accounts such as email.
• Use a standard user account for everyday activities instead of an administrator account.
• Create a strong, unique password for each account and never reuse them.
• Be cautious when opening email attachments, downloading files or clicking links from unknown sources.

What to do if you are affected

• Disconnect the affected device from the internet and other devices.
• Do not pay the ransom, as there is no guarantee your files will be recovered.
• Run a security scan using trusted antivirus software.
• Restore your files from a clean backup if available.
• Seek professional IT or cyber security assistance.

Use antivirus software

Antivirus software helps protect your devices as well as your personal information from malicious software or ‘malware’.

Malware can stop your device from working and steal, delete or corrupt your files. It can also allow someone to access your device and the data on it. Malware can infect your device if you open, download or interact with infected content, such as:

• links
• attachments in emails
• websites
• apps or files you download from the internet.

A malware infection can cause serious harm, such as damage to important files, identity theft and financial loss. 

How to get antivirus software

Your device may have built-in antivirus software. Most modern Microsoft and Apple computers include it for free. There are also third-party companies that sell antivirus software. They tend to come with more features than the free software.

Some new computers come with a free trial of third-party antivirus software. If you have this option, find out how the software works, what it costs and whether the company has a good reputation.

Third-party antivirus software may also include unrelated services such as a Virtual Private Network (VPN) or password manager. Consider the quality and reputation of these separate features before you buy.

Be aware that antivirus software doesn’t protect against all threats. It works best when you also have good security habits and practices.

Get the most from your antivirus software

Follow these steps to help keep your device secure, whether you use built-in antivirus or a third-party product.

Depending on your device and antivirus software, some steps may happen automatically.

Turn on automatic updates

For antivirus software to work well, it needs regular updates along with your device.

Check both your device and software are set to install updates automatically. Also check this setting is still on when you make system updates or changes.

Check your antivirus software is also getting 'signature updates', which help detect new threats. If you use third-party antivirus software and your subscription has expired, you may need to renew it or switch to a free option to keep getting the latest signature updates.

Make sure your antivirus software is on

Built-in antivirus software should be on by default. Check your device settings for more information. If you’re using a third-party product, check it’s installed and working properly by opening it on your device.

Run a full scan

If you’ve just set up a new device or turned on antivirus software for the first time, run a full scan to check for malware.

Schedule automatic scans

After your first scan, set your antivirus software to scan automatically at regular intervals.

Depending on the type of device, it may do this in the background or at set times, such as once per week.

Turn on ransomware protection

Ransomware is a type of malware. Cybercriminals use it to block access to your device or data until you pay a ransom.  Some antivirus products include ransomware protection. Make sure you use it if you have the option.

Be aware of fake antivirus products

When searching for antivirus software online, be aware that malware may pose as a real antivirus product. Some forms of malware try to trick you into clicking on fake alerts by making them look like alerts from your antivirus software.

If buying antivirus software, make sure you get it from the provider’s official website or an authorised app marketplace, such as Apple App Store, Google Play Store or Microsoft Store. Avoid following links in ads, pop-ups or emails, as they can lead to fake sites.

Make regular backups

Your devices hold your important personal information and data. If your device is lost, damaged or stolen, your data may be lost too. Getting your data back can be costly or even impossible. That’s why it’s important to back up your data regularly.

Making regular backups means you’ll have a safe and recent copy of your files and settings. You might back up every hour, every day, once a week, or even once a month. How often you back up depends on how often your files change and how important they are to you. If available, turn on automatic backups so they run without you needing to do anything.

Decide what to back up

Choose what data to back up based on how important it is to you. For example, your back up may include:

• financial, medical and legal records
• photos and videos
• text messages.

Decide how to back up

There are several ways to back up your data. You can use a secure cloud service, an external storage device, or both.

Back up to the cloud

When you back up to the cloud, a copy of your data is sent over the internet and saved on remote storage servers. Common cloud services include Apple iCloud, Google Drive, and Microsoft OneDrive.

Back up to an external storage device

Another way to back up your data is to use an external storage device, such as a USB drive or external hard drive. This means storing your backup somewhere other than your main device. Keep your backup device in a safe and secure place so you can find it when you need it.

Hybrid backup

You could combine cloud and external storage to get the benefits of both. For example, use cloud backup for important files you need often, and use an external hard drive to back up your entire system (known as a system image).

Secure your backups

Your backup may contain sensitive information, so protect it like you would any important files. Follow these tips to keep your backups secure. 

• Disconnect your backup when not in use.
• Keep an offline backup and ensure your backup device is updated.
• Store your backup in a different location to your device.

Review your apps and permissions

Checking app permissions helps protect your information and keep your device safe.  Follow these key steps to manage app permissions:

• Check app permissions often:  See which apps can use your location, contacts, camera, microphone, and other features that could impact your privacy.
• Manage location permissions: Stop apps from using your location if they don’t need it.
• Limit app data access: Only let apps use the data they need, like contacts or photos, to reduce risks.
• Be careful when installing apps: Only download apps you need. Check reviews to see what they do and what permissions they ask for.
• Remove unused apps: Uninstall and delete apps you no longer use to free space and stop them from accessing your information.

Encrypt your data

Encryption is a way of scrambling information so only people with the right key can read it. When data is encrypted, it looks like unreadable text to anyone who doesn’t have permission.

 Encryption is used in many places to keep information safe, including:

• sending messages in secure apps
• shopping or banking online
• storing files on computers and phones.

Encryption helps protect your privacy. It also reduces the risk of criminals stealing or changing your data.

Check for encryption

Without encryption, criminals could steal your passwords, money or private messages. Encryption makes it much harder for anyone else to read or change your data.

Here’s a simple checklist for spotting encryption in everyday internet use:

• Look for https:// in the website address.
• Use messaging apps that say they have end-to-end encryption.
• Make sure online banking and shopping pages show secure connections by checking if there is a small padlock icon in the top left of the browser URL bar.
• Check your Wi-Fi is locked with a password and set to WPA2 or WPA3.

Dispose, trade or sell your device securely 

Take the following steps to protect your information before selling, trading or throwing your device away.

Before disposing of your device:

• make a backup copy of your data
• take out any removable media, such as a SIM or SD card
• remove any identifying marks
• erase your data by doing a factory reset.

If you don’t dispose of your device securely, someone could access the information on it. This includes your:

• account logins
• credit card details
• files, photos and videos
• personal messages.

End of support

If your device no longer supports the latest operating system or software upgrade and there are no issues with power, internet or storage, it may have reached 'end of support'. This means your device, software or system no longer gets updates or technical support. Your device might still work, but it will be less reliable and more at risk of cyber attack.

The best way to stay protected is to upgrade to a newer device. If that’s not an option, follow these tips:

• Disconnect it from internet, Wi-Fi, Bluetooth.
• Don’t use it to store important data or log into accounts.
• Don’t open unknown links or attachments.
• Remove apps you don’t use and avoid installing new ones.
• Keep it secure so others can’t access it.