Many of us rely on online accounts every day. We use them for banking, email, shopping, social media, healthcare, and staying in touch with family and friends.
When news breaks about another company experiencing a data breach, it’s easy to feel concerned or overwhelmed. But protecting yourself doesn’t have to be complicated. A few simple habits can go a long way towards keeping your information safe.
Think of it like securing your home. You lock your front door, you might have an alarm, and you take sensible precautions. Protecting your online accounts works in much the same way.
Choosing passwords
Why using different passwords for each account matters
One of the most important things you can do is use a different password for each main account.
Many people reuse the same password because it’s easier to remember. The problem is that if one company experiences a data breach and your password is exposed, criminals may try using that same password on your email, banking, shopping, or social media accounts.
It’s called “password reuse”, and it’s one of the easiest ways for cybercriminals to gain access to multiple accounts.
Imagine you used the same key for your house, car, shed, and letterbox. If someone copied that key, they could access everything. Using different passwords is like having a different key for each door.
Make it easier with a password manager
If remembering multiple passwords sounds difficult, consider using a password manager. These tools securely store your passwords and can generate long, strong, unique passwords for you.
That means you only need to remember one strong master password.
A real-life example: Margaret’s shopping account
Margaret enjoys buying books online
Several years ago, Margaret created one password and used it everywhere because it was easy to remember.
After hearing about a recent data breach, Margaret decided to change her approach. She created unique passwords for her email, online shopping, and bank accounts. A few months later, one retailer announced that customer account details had been exposed. Because Margaret’s password for that retailer wasn’t used anywhere else, her other accounts remained protected.
Good decision: Using a different password for each important account limited the impact of the breach.
Extra layer of protection
Add an extra layer of protection with two-factor authentication
Even strong passwords can be stolen. That’s why many organisations now offer two-factor authentication (often called 2FA).
With 2FA turned on, logging in requires:
- Your password, and
- A second step to prove it’s really you.
This second step might be:
- A code sent to your phone
- A notification in an authentication app
- A security key or device
Think of it as having both a key and a security alarm. Even if someone gets a hold of your password, they still need that second factor to access your account.
Where should you turn it on?
Prioritise:
- Email accounts
- Online banking
- Government services
- Social media accounts
- Cloud storage and photo services
If a criminal gains access to your email account, they may be able to reset passwords for many of your other accounts. That’s why protecting your email is especially important.
A real-life example: Peter’s email account
Peter uses his email to communicate with family overseas.
After attending a community digital safety session, he enabled two-factor authentication on his email account. A few weeks later, Peter received a notification that someone had tried to log into his account from another country. Although they knew his password, they couldn’t complete the second authentication step. Peter changed his password immediately and kept control of his account.
Good decision: Two-factor authentication stopped an unauthorised login attempt.
Check your email
Check whether your email address has appeared in a known data
breach
Sometimes companies and organisations experience data breaches that expose customer information. You may not always know that your details have been affected.
That’s why it’s a good idea to check regularly whether your email address has appeared in a known breach.
The “How Exposed Am I?” tool by New Zealand’s National Cyber Security Centre allows you to search your email address and see whether it has been included in reported breaches.
If your email appears in the results, don’t panic. It doesn’t necessarily mean someone has accessed your accounts. It does mean it’s worth taking some simple precautions:
- Change passwords for affected accounts
- Ensure passwords are long, strong and unique
- Turn on two-factor authentication
- Stay alert for phishing emails or suspicious messages
Knowing about a potential exposure gives you the opportunity to act before problems occur.
A real-life example: June takes action early
June heard about the “How Exposed Am I?” tool from a friend
When she checked her email address, she discovered it had been involved in an older data breach she hadn’t known about. June immediately changed the password on that account and enabled two-factor authentication. Although she had experienced no problems, taking action helped reduce her risk and gave her peace of mind.
Good decision: Checking for exposure helped June take preventative action before any harm occurred.
Remember, online security is about progress, not perfection
You don’t need to become a technology expert to keep yourself secure online.
Every step you take, whether it’s changing a password, enabling two-factor authentication, or checking whether your email address has been exposed, makes it harder for criminals to access your accounts.
By taking a few practical precautions today, you can continue enjoying the benefits of being online with greater confidence and peace of mind.
Three simple actions now
If you only do three things this week:
- Change your email password to a strong, unique password
- Turn on two-factor-authentication (2FA) for your email account
- Check your email address using the “How Exposed Am I?” tool
Small actions today can help prevent much bigger problems tomorrow.
The examples shared in this article are derived from real-world scenarios that demonstrate the benefits of positive cyber security behaviours.
Useful links
Information on the Own Your Online website about changing your email password to a strong, unique password
Information on how to turn on two-factor authentication for your email account
Check your email address using the “How Exposed Am I?” tool for the National Cyber Security Centre
Safeguarding against scams and fraud
Age Concern New Zealand’s webpage provides information and trusted links
