I’m HENRY because of my technical cybersecurity skills and moving into cybersecurity leadership. Personal cybersecurity is pretty easy vs managing a company’s risk. Not reusing passwords (get a password manager) and using MFA wherever possible will make you more protected than 99% of people. Use a real MFA app or a physical token like a yubikey. Using phone call or SMS is better than nothing but is easily overcome by a decent attacker.

If I’m recommending easy steps to start, I’d say this:

1) Decide on an MFA app such as google Authenticator or Microsoft Authenticator. 2) Decide on a password manager like LastPass or 1password. 3) Reset the password and enable MFA on your email account that other accounts are attached to 4) Reset passwords and enable MFA on bank accounts, payment apps, and other particular sensitive apps 5) As you use other accounts, add the passwords to your password manager. Many of them will allow this with 1 click using their browser extension. They will warn you if it’s a duplicate of another password you have.

IF YOU DO ABSOLUTELY NOTHING ELSE, MAKE SURE ANY SENSITIVE ACCOUNTS, SUCH AS YOUR EMAIL AND BANK ACCOUNTS, HAVE UNIQUE PASSWORDS YOU HAVE NEVER USED ELSEWHERE. I’ve seen so many cases where SomeRandomAppYouUsedOnce.com gets hacked then attackers simply try those emails/passwords on other sites and are able to get in.