Don’t trust links or emails
Whether or not someone is targeting you, be extra careful with links in emails and messages. Do not click on links in emails or in text messages ever, just go directly to the website in your browser’s address bar or using a search engine you trust. Phishing campaigns often send an email or message, usually one that says bad things are happening to create a false sense of urgency. Remember, don’t click the links or any buttons, go to the site yourself the normal way and sign in, resetting your password if necessary, but making sure you are on the correct website domain in the address bar first. Attackers often register a look-alike domain to pretend to be a site you trust and steal your password. In an email or on a web page, crooks can use HTML and JavaScript to trick you into thinking a link goes one place when it is really directing you to a site they control and have copied the look of to fool you. Also people can fake an email to look like it is coming from your work, boss, family, friends, or other trusted sources. This is called email spoofing, and Google has a specific help page for Gmail about spoofing.
Protect your accounts and devices
Security checkup
Run a security checkup on your Google accounts.
Passkeys
Passkeys are a simple and secure alternative to passwords. With a passkey, you can sign in to your Google Account with your fingerprint, face scan, or device screen lock, like a PIN. Passkeys provide the strongest protection against threats like phishing. Once you create a passkey, you can use it to easily sign in to your Google Account and to verify it’s you when you make sensitive changes.
Advanced Protection Program
Google’s Advanced Protection Program safeguards users with high visibility and sensitive information from targeted online attacks.
Android
Android security features
Device scan for malware
Check if your device is Play Protect certified and make sure Scan apps with Play Protect and Improve harmful app detection are both on.
Apple
Built-in privacy and security protections
To take maximum advantage of the privacy and security features built into iPhone, follow these best practices.
Safety Check
If your personal safety is at risk, you can use Safety Check on iPhone to quickly stop sharing your information, or to review and update sharing with individual people and apps.
Passkeys
Passkeys are a replacement for passwords. They are faster to sign in with, easier to use, and much more secure. Passkeys are a replacement for passwords that are designed to provide websites and apps a passwordless sign-in experience that is both more convenient and more secure. Passkeys are a standard-based technology that, unlike passwords, are resistant to phishing, are always strong, and are designed so that there are no shared secrets. They simplify account registration for apps and websites, are easy to use, and work across all of your Apple devices, and even non-Apple devices within physical proximity.
Lockdown Mode for iPhone, iPad, and Mac
Learn how Lockdown Mode helps protect devices against sophisticated cyber attacks.
Advanced Data Protection
Advanced Data Protection for iCloud is an optional setting that offers Apple’s highest level of cloud data security. When a user turns on Advanced Data Protection, their trusted devices retain sole access to the encryption keys for the majority of their iCloud data, thereby protecting it with end-to-end encryption. For users who turn on Advanced Data Protection, the total number of data categories protected using end-to-end encryption rises from 14 to 23 and includes iCloud Backup, Photos, Notes and more.