Keep your phone and laptop secure
Your devices are the keys to your accounts. A few habits — a strong lock, automatic updates, careful app permissions, and knowing what to do if one is lost — cover most of the risk.
The short version
Lock every device with a strong passcode and biometrics, turn on automatic updates, install apps only from official stores, review the permissions apps ask for, and set up Find My / remote wipe now — before you need it. Keep work and personal data separate where you can.
Your phone and laptop hold your email, your password manager, your MFA codes, and your saved logins. That makes them the master keys to your digital life — and worth protecting accordingly. The good news is that a handful of settings, most of which you configure once, cover the large majority of real-world risk.
Lock it properly
- Use a **six-digit-or-longer passcode**, not a four-digit PIN, and turn on fingerprint or face unlock for convenience.
- Set the screen to **lock automatically** after a short idle time.
- Enable the **erase-after-too-many-failed-attempts** option if your device offers it.
- Don't leave devices unlocked and unattended, even at your desk.
Keep it updated
The updates you're tempted to postpone are largely security fixes for holes attackers already know about. Turn on automatic updates for your operating system and your apps, and restart when prompted so the fixes actually take effect. An up-to-date device closes off the most common attacks by itself.
Be careful what you install and allow
- Install apps only from the **official app store**; avoid sideloading or "free" versions of paid apps.
- When an app asks for **location, microphone, camera, contacts, or photos**, ask whether it truly needs that to do its job — and say no if not.
- Review app permissions occasionally and revoke anything that looks excessive.
- Be wary of public **USB charging ports** and unknown cables; use your own charger or a power-only adapter.
Public Wi-Fi isn't the boogeyman — but do use HTTPS
Modern sites and apps encrypt traffic, so public Wi-Fi is far less risky than it used to be. Still, avoid doing sensitive work on networks you don't trust, make sure sites show a padlock, and use your employer's VPN for work.
Set up lost-device recovery before you lose it
Turn on Find My iPhone / Find My Device now. It lets you locate, lock, or remotely erase a lost device — but only if it's enabled beforehand. For a work device, know how to reach IT immediately: fast reporting lets them wipe it and cut its access before anyone can use it.
If it's lost or stolen
- Use Find My to **lock or erase** the device remotely.
- **Change the passwords** for the most important accounts it was signed into, starting with email.
- **Report it** to your IT or security team right away if it held any work data or access.
- If your phone number could be used for SMS codes, contact your carrier about protecting the line.