1. Start Here

• 1.1 Overview
• 1.2 Core Concepts
• 1.3 How to Use This Guide

1.1 Overview

This is a plain‑English, step‑by‑step runbook introducing general security and privacy concepts and providing guidance on how to protect your computers, phones, and yourself from common threats such as scams, stolen passwords, malware, and lost devices. The focus is on a safe default mindset and simple choices without requiring any advanced knowledge.

This guide is for anyone who wants practical protection without having to become a cybersecurity expert, install large amounts of additional software, or make complicated configuration tweaks.

The scope is on Windows, macOS, and Linux operating systems, iPhone and Android mobile devices, and identity safety processes for US citizens.

All abbreviations are spelled out the first time you encounter them, with full definitions provided in the appendix. This runbook also contains a set of checklists to get started and playbooks if you find your security or privacy has been compromised.

1.2 Core Concepts

Everything in this guide flows from these four concepts. Keep them in mind and most day‑to‑day decisions get simpler.

Protect Yourself

• Be a skeptic. Treat unexpected links, attachments, and “urgent” requests as suspicious; verify using a separate channel you trust.

• Use strong, unique passwords for each site and application.

• Use a password manager with a long master passphrase, and use it to generate unique passwords everywhere.

• Turn on security alerts for new logins and password changes.

• Turn on multi‑factor authentication (MFA) wherever possible and store recovery codes safely.

• Prefer passkeys where offered (a phishing‑resistant sign‑in method).

• Use a virtual private network (VPN) on public or untrusted WiFi networks.

Protect Your Data

• Keep everything updated; your operating system (OS), software, and mobile applications.
• Only install software from trusted sources such as official app stores and directly from software vendor websites.
• Lock your screen when you step away.
• Use encryption. Every modern, major OS has this built-in. Include external drives if they hold sensitive files.
• Configure data backups automatically and test restores so you know recovery works.
• Secure your home Wi‑Fi with WPA2/WPA3 protocols, using a strong admin password, and segregate less trustworthy devices.

Minimize Your Exposure

• Install less software and keep your browser lean with only a few, trusted extensions. Uninstall unused apps and remove extensions you don’t recognize. Fewer apps = fewer problems.

• Don’t overshare. Review application and website permissions, turn off ad and diagnostic sharing you don’t need.

• Use standard (non‑administrator) accounts for daily use; approve admin prompts intentionally when making system changes.

Have a Recovery Plan

• Find, lock, and wipe; know how to locate and remotely erase your laptops and mobile devices. Test “Find My Device” features.

• Keep an emergency kit with backup codes, recovery emails and phone numbers, know where backups live, and who to call if you need help such as bank fraud reporting numbers.

• This runbook provides some printable guides on how to respond and recover from some common incidents in the Incident Playbooks section. Feel free to print them out and keep them in your kit.

1.3 How to Use This Guide

There is a lot of information in this runbook, and at first glance, it might be intimidating. Take it piece-by-piece. This runbook is laid out in a series of topics dealing with a specific security and privacy area, prioritized based on risk, and tiered into:

• The Basics - the minimum everyone should do

• Better Protection - closes more gaps but requires a little more customization

• Extra Credit - more advanced but still user-friendly

Plan to dedicate some time each week; it doesn’t have to be much, just 30 minutes will go a long way. I recommend that you go topic-by-topic on your first pass, read the general topic information and apply The Basics. Then go back through and apply Better Protection wherever possible. Finally, take a final pass and apply any Extra Credit you are comfortable with. Don’t worry if you aren’t able to apply everything, every little bit counts. You can always reach out to me if you have any questions. If you’re holding this runbook then you know how to get hold of me.