protect your devices
The Retiree's Cybersecurity Checklist: Do These 10 Things This Weekend
You do not need to become a computer expert to stay safe online. You just need a weekend and this checklist. These 10 items are the exact steps that cybersecurity professionals take to protect their own families — simplified so anyone can do them.
Print this list. Pour yourself a coffee. Work through it one item at a time. By Sunday evening, you will be more secure than 95% of people on the internet.
1. Change Your Email Password (And Make It Strong)
Your email is the master key to your entire digital life. If someone gets into your email, they can reset the password on every other account you own — your bank, your investment accounts, your social media, everything.
Make your email password:
- At least 14 characters long
- A phrase you can remember: "MyDogBuster$Loves2Swim" is better than "P@ssw0rd123"
- Completely unique — not used anywhere else
Time needed: 5 minutes
2. Turn on Two-Factor Authentication for Your Email
Two-factor authentication (2FA) means that even if someone steals your password, they still cannot get in without a second code — usually sent to your phone.
Go to your email settings (Gmail: Security settings → 2-Step Verification. Yahoo: Account Security → Two-step verification) and turn it on. Choose the text message option if you are not sure which to pick.
Time needed: 5 minutes
3. Install a Password Manager
A password manager remembers every password for you and creates strong, unique passwords for each account. You only need to remember one master password.
The easiest password manager for non-tech people
1Password has the clearest interface of any password manager we have tested. It auto-fills your passwords, warns you if any have been leaked, and even has a family plan so you can help manage your spouse's or parent's passwords too.
Start by saving your 5 most important passwords (email, bank, investments, health portal, social media). Then add the rest over the next week as you visit each site.
Time needed: 15 minutes to set up, 1 week to fully populate
4. Update Every Device You Own
Software updates are not just about new features — they patch security holes that hackers actively exploit. Every device you own should be running the latest software.
Check and update:
- Your phone (Settings → General → Software Update on iPhone; Settings → System → Software Update on Android)
- Your computer (System Preferences → Software Update on Mac; Settings → Windows Update on PC)
- Your tablet
- Your router firmware (check the manufacturer's website for instructions)
Turn on automatic updates everywhere so you never fall behind again.
Time needed: 15 minutes (updates may download in the background)
5. Install a VPN
A VPN encrypts your entire internet connection so that nobody — not hackers, not your internet provider, not anyone on public Wi-Fi — can see what you are doing online.
One-tap protection for every device
NordVPN is the simplest VPN we have tested. Download the app, tap 'Quick Connect,' and you are protected. It works on your phone, tablet, and computer — and their Threat Protection feature automatically blocks malicious websites.
Once installed, leave it connected all the time — especially when using public Wi-Fi at coffee shops, libraries, airports, or hotels.
Time needed: 5 minutes
6. Run an Antivirus Scan
Even if you think your computer is clean, run a full scan. Malware can hide for months without obvious symptoms, quietly collecting your passwords and personal information.
Download a reputable antivirus program, run a full scan, and remove anything it finds. Then leave real-time protection turned on.
Time needed: 10 minutes to start (scan runs in background)
7. Check If Your Information Has Been Leaked
Visit haveibeenpwned.com — a free, safe website run by a security researcher. Enter your email address and it will tell you if your information appeared in any known data breaches.
If your email shows up in breaches (most people's do), change the passwords for those affected accounts immediately. This is where your new password manager pays for itself — it can generate unique passwords for every compromised account in seconds.
Time needed: 5 minutes
8. Remove Your Personal Info From Data Broker Sites
Data brokers like Spokeo, Whitepages, and BeenVerified collect and sell your personal information — your address, phone number, age, relatives' names, even your estimated income. Scammers use this information to make their attacks more convincing.
You can remove yourself manually (it takes hours and requires repeat visits every few months) or use a service that does it automatically.
Time needed: 5 minutes with a removal service, or several hours manually
9. Set Up Automatic Backups
Ransomware — malware that locks your files and demands payment — is one of the fastest-growing threats to home computers. The best defense is having a recent backup so you can simply restore your files without paying.
- iPhone: Settings → [Your Name] → iCloud → iCloud Backup → Turn on
- Android: Settings → Google → Backup → Turn on
- Computer: Use your operating system's built-in backup (Time Machine on Mac, File History on Windows) to an external drive
If your photos and documents are backed up, ransomware loses its power over you entirely.
Time needed: 10 minutes
10. Review Your Bank and Credit Card Statements
Set a recurring calendar reminder to review your bank and credit card statements every two weeks. Look for charges you do not recognize — even small ones. Thieves often test stolen card numbers with tiny charges ($1-5) before making large ones.
Also set up transaction alerts with your bank so you get a notification for every purchase. Most banks offer this for free through their app.
Time needed: 10 minutes every two weeks (ongoing)
Ongoing device protection
Malwarebytes runs quietly in the background, scanning for threats in real time. It catches malware, blocks phishing sites, and cleans up anything suspicious — so you don't have to think about it after this weekend.
Your Weekend Security Summary
| Item | Time | Done? |
|------|------|-------|
| 1. Change email password | 5 min | ☐ |
| 2. Turn on 2FA for email | 5 min | ☐ |
| 3. Install password manager | 15 min | ☐ |
| 4. Update all devices | 15 min | ☐ |
| 5. Install and connect VPN | 5 min | ☐ |
| 6. Run antivirus scan | 10 min | ☐ |
| 7. Check for data breaches | 5 min | ☐ |
| 8. Remove info from data brokers | 5 min | ☐ |
| 9. Set up automatic backups | 10 min | ☐ |
| 10. Review recent statements | 10 min | ☐ |
| Total | ~85 min | |
Eighty-five minutes. That is all it takes to go from vulnerable to protected. Print this checklist, work through it this weekend, and share it with someone you care about. The best security upgrade is the one you actually do.
Get our free weekly security tips
One simple thing to do each week to stay safe online. No jargon, no fear — just practical advice. Join 3,000+ readers.
Affiliate Disclosure: This article may contain affiliate links. If you make a purchase through these links, we may earn a small commission at no extra cost to you. We only recommend products we genuinely believe in. This helps support our work and allows us to continue providing free content.