Practical guidance for everyone.
THE FEW THINGS THAT MATTER
Use unique passwords, through a password manager Enable the second step where offered Do not click links in messages about accounts Verify anything involving money or access Lock your device Report anything that seems wrong
WHAT NOT TO WORRY ABOUT
Understanding the technology.
None of the above requires it.
THE PASSWORD MANAGER POINT
Provide one. Without it, people reuse passwords, and no instruction changes that.
THE VERIFICATION CODE POINT
Never give a code to anyone, however they identify themselves.
THE LINK POINT
Go to sites the way you normally do.
WHAT TO DO IF YOU MAKE A MISTAKE
Say so immediately.
Speed of reporting determines how bad it becomes.
WHAT TO ASK ABOUT
Anything you are unsure of.
WHAT NOT TO DO
Work around a control because it is inconvenient Share your credentials with a colleague
WHAT THAT LAST ONE CAUSES
Actions nobody can attribute.
