TechBlog

Treat your passwords with as much care as you treat the information that they protect. Use strong passwords to log on to your computer and to any site where you enter your credit card number, or any financial or personal information — including social networking sites. A password manager (Bitwarden, 1Password, KeePass, or similar) makes it practical to use a unique, strong password for every account. 1. Never provide your password over e-mail Internet “phishing” scams use fraudulent e-mail messages to entice you to reveal your user names and passwords, steal your identity, and more. Learn more about phishing scams. ...

Communicating by using an instant messaging (IM) program has some of the same security and privacy risks as e-mail, but there are a few dangers that are unique to IM. The original 2009 version of this guide was written for desktop IM clients like AIM and MSN Messenger. The same principles apply to modern apps — WhatsApp, Telegram, Signal, Discord, Slack, and iMessage. 1. Never open files or links from strangers Never open pictures, download files, or click links in messages from people you don’t know. If they come from someone you do know, confirm with the sender that the message (and its attachments) is trustworthy. If it’s not, close the conversation. ...

Social networking Web sites like Facebook, Instagram, X (Twitter), LinkedIn, TikTok, and Threads are services people can use to connect with others to share information like photos, videos, and personal messages. As the popularity of these social sites grows, so do the risks of using them. Hackers, spammers, virus writers, identity thieves, and other criminals follow the traffic. Read these tips to help protect yourself when you use social networks. ...

TFC (Temp File Cleaner) was a small utility that cleared out temp folders for all user accounts — temp, browser caches, Java, and system temp directories — across every profile on a Windows machine. It showed the amount removed for each location and required a reboot afterward. The original 2009 version of this page recommended TFC for routine maintenance. TFC is no longer maintained and is not suitable for Windows 8.1, 10, or 11. On modern systems it can destabilize things by force-stopping Explorer and other running apps. ...

Strong passwords are important protections to help you have safer online transactions. The best approach today is a password manager that generates and stores unique passwords for every site, combined with two-factor authentication (2FA) wherever it is offered. Keys to password strength: length and complexity An ideal password is long and has letters, punctuation, symbols, and numbers. Even better: use a passphrase — a sequence of random words that is easy to remember but hard to guess. ...

Three basic types of firewalls are available for you to choose from: Software firewalls (built into your OS) Hardware routers Wireless routers To determine which type of firewall is best for you, answer these questions: How many computers will use the firewall? What operating system do you use? (Windows, macOS, or Linux.) That’s it. You are now ready to think about what type of firewall you want to use. There are several options, each with its own pros and cons. ...

Three steps to keep Windows fast, stable, and secure. The original 2009 version of this guide recommended FileHippo Update Checker (later renamed AppManager) and the Secunia Online Scanner. Both are gone — FileHippo retired its updater, and Secunia’s consumer tools shut down years ago. Here is what still works. 1. Patch Windows and Microsoft products Turn on automatic updates and verify nothing is pending. Reboot when prompted — pending restarts leave patches half-applied. ...

The original 2009 version of this checklist recommended Symantec Brightmail and the Symantec State of Spam site. Brightmail is now part of Broadcom’s enterprise portfolio and is not a practical choice for home users. The do/don’t advice below is still sound. Do Unsubscribe from legitimate mailings that you no longer want to receive. When signing up to receive mail, verify what additional items you are opting into at the same time. De-select items you do not want to receive. Be selective about the Web sites where you register your email address. Avoid publishing your email address on the Internet. Consider alternate options — for example, use a separate address when signing up for mailing lists, get multiple addresses for multiple purposes, or look into disposable address services. Using directions provided by your mail administrators, report missed spam if you have an option to do so. Delete all spam. Avoid clicking on suspicious links in email or IM messages as these may be links to spoofed websites. We suggest typing web addresses directly in to the browser rather than relying upon links within your messages. Always be sure that your operating system is up-to-date with the latest updates, and employ a comprehensive security suite. For organizations, use a reputable e-mail security gateway (Microsoft Defender for Office 365, Google Workspace spam filtering, or a dedicated provider such as Proofpoint or Mimecast) to filter spam before it reaches inboxes. Keep up to date on recent spam trends — the Anti-Phishing Working Group publishes quarterly reports on phishing and spam activity. Do not Open unknown email attachments. These attachments could infect your computer. Reply to spam. Typically the sender’s email address is forged, and replying may only result in more spam. Fill out forms in messages that ask for personal or financial information or passwords. A reputable company is unlikely to ask for your personal details via email. When in doubt, contact the company in question via an independent, trusted mechanism, such as a verified telephone number, or a known Internet address that you type into a new browser window (do not click or cut and paste from a link in the message). Buy products or services from spam messages. Open spam messages. Forward any virus warnings that you receive through email. These are often hoaxes.

Freeing up disk space keeps Windows responsive and gives updates room to install. The original 2009 version of this guide recommended Auslogics BoostSpeed and CCleaner for the job. Today you rarely need either — Windows 10 and 11 ship with cleanup tools that are safer than third-party “boosters” and registry cleaners. Here is the modern workflow. Why cleanup Over time Windows accumulates files you can safely remove: Temporary files from apps and the system Browser caches and downloaded program files Windows Update leftovers, WinSxS component-store bloat, and orphaned installer patches The Recycle Bin Delivery Optimization cache and old restore points Apps and games you no longer use Tip: On modern browsers the cache is capped and self-managing, so the biggest wins are usually Windows Update leftovers (especially WinSxS and the Installer folder), the Downloads folder, and unused applications — not the browser cache. ...

A firewall is an application which controls network traffic to and from a computer, permitting or denying communications based on a security policy. A personal firewall differs from a conventional firewall in terms of scale. Personal firewalls are typically designed for use by end-users. As a result, a personal firewall will usually protect only the computer on which it is installed. Many personal firewalls are able to control network traffic by prompting the user each time a connection is attempted and adapting security policy accordingly. Personal firewalls may also provide some level of intrusion detection, allowing the software to terminate or block connectivity where it suspects an intrusion is being attempted. ...