5 Simple Habits To Keep Your Data Safe (and Hackers Out of Your Life)

🔐 Ever had that sinking feeling when you realize you might have just clicked a shady link? Or worried that your passwords are floating around in some hacker’s underground vault?

I have.

In fact, my Social Security Number recently showed up on the dark web. That’s right—I, someone who nerds out on security and privacy, discovered that my sensitive data was out there for who knows who to see.

I wasn’t careless. I wasn’t reckless. But I also wasn’t as locked down as I could be.

So I did what any self-respecting tech geek would do: I doubled down on security, reinforced my digital walls, and refined the five simple security habits that every person should be using—including you.

And here’s the best part: These aren’t complicated. You don’t need a computer science degree, an IT department, or a tinfoil hat. Just a few small tweaks to your habits can keep your data (and your sanity) safe from prying eyes.

Let’s dive in.

🔑 1. Use a Password Manager (Because “Fluffy123” Won’t Cut It Anymore)

The Problem:
Be honest—are you using the same password for multiple sites? Do you have a list of logins in a Google Doc or Notes app? If so, congratulations! You’re an all-you-can-eat buffet for hackers.

The reality? Reusing passwords is like using the same key for your house, car, and office. If one gets stolen, everything is compromised.

The Fix: Get a Password Manager
A password manager creates strong, unique passwords for every account and stores them securely—so you only have to remember one master password.

✅ Choose a trusted password manager (like 1Password, Bitwarden, or Dashlane).
✅ Generate unique passwords—at least 16 characters, mix of letters, numbers, and symbols. (Remember, you don’t have to remember strong passwords with your password manager, so use a strong password.)
✅ Enable two-factor authentication (2FA) for extra protection. (Yes, it can be a pain, but you’ll get used to it; I promise).
✅ Use the built-in secure sharing feature, and separate login accounts for team members when you can. (Never share a password when a separate account can be created, and never email or text passwords).
✅ Check for password leaks. Many password managers have this built in. You can also use. Have I Been Pwned.

🔴 DON’T: Write your passwords down on sticky notes. Or in a spreadsheet. Or (please, no) in a Google Doc.

💡 Pro Tip: Let your password manager auto-fill passwords so you never have to type them (or remember them).

🗑 2. Delete Sensitive Data Securely (Because “Delete” Isn’t Enough)

The Problem:
Deleting a file doesn’t actually delete it. It’s still recoverable—like writing your secrets in pencil and just erasing them. Someone with the right tools can restore those files, and you’d never know.

The Fix: Use Secure Deletion Tools – If you ever store sensitive files—think financial info, business data, scanned IDs—you need to make sure they’re really gone when you delete them.

✅ Use a secure deletion tool (BleachBit, File Shredder, or ).
✅ Empty your recycle bin/trash regularly.
✅ Don’t keep sensitive files on USB drives or unencrypted cloud storage.
✅ Encrypt sensitive documents before storing or sharing them.
✅ Before selling an old computer/phone, wipe it properly (factory reset alone isn’t enough).

🔴 DON’T: Assume that dragging a file to the trash makes it disappear forever. Hackers know better.

💡 Pro Tip: If you must store something sensitive, encrypt it with VeraCrypt or BitLocker first.

📂 3. Limit Where You Keep Business Data (So You Can Find & Delete It Easily)

The Problem:

If your business or personal data is scattered across emails, random folders, and multiple cloud accounts, you can’t secure it properly. And worse? You won’t remember where it all is when you need to delete it.

The Fix: Consolidate & Control Where You Store Data

Fewer storage locations = less risk, less stress.

✅ Store business data only in designated, secure locations (encrypted cloud storage or a CRM).
✅ Regularly audit where data is kept and delete anything unnecessary.
✅ Use secure file-sharing services (not email attachments).
✅ If you no longer need business data, delete it properly (see Step 2).
✅ Encrypt before storing or sharing sensitive information.

🔴 DON’T: Let sensitive business information and files live forever in your email, downloads folder, or random cloud storage accounts.

💡 Pro Tip: Set a recurring reminder to check and clean up your stored data every quarter.

🔎 4. Audit & Limit App & Device Access (Because Not Every App Deserves Your Data)

The Problem:

Every app you’ve ever signed into might still have access to your data. Same with old devices you don’t even use anymore.

That old fitness app? Still tracking your location.
That weather app? Reading your contacts.
That old laptop? Still logged into your cloud storage.

The Fix: Review & Restrict Access

✅ Check what devices have access to your accounts (Google, Apple ID, social media).
✅ Remove third-party apps you no longer use from Google, Facebook, LinkedIn, etc.
✅ Set up login alerts for suspicious activity.
✅ Turn off unnecessary permissions (e.g., does your calculator app need your location? No.).
✅ Log out of old devices and browsers that don’t need access anymore.

🔴 DON’T: Assume apps will be responsible with your data. They won’t.

💡 Pro Tip: Check Google and Apple’s “Third-Party App Permissions” page right now—you’ll be shocked at what’s still connected.

📨 5. Use Encrypted Communication for Sensitive Info (Because Email is a Postcard, Not a Vault)

The Problem:
Standard email and SMS are not secure for sensitive information. They’re easily intercepted—like sending an important letter on a postcard for the world to see.

The Fix: Use Encrypted Messaging & Email
✅ Use Signal or Telegram for secure messaging.
✅ Switch to a privacy-focused email (ProtonMail, Tutanota).
✅ If you must email sensitive files, encrypt them first (password-protected ZIP files).
✅ Avoid public Wi-Fi for sensitive conversations (or use a VPN).
✅ Use end-to-end encrypted cloud storage (like Tresorit) for sharing sensitive files.

🔴 DON’T: Send passwords, contracts, or personal data via standard email or text.

💡 Pro Tip: Set up automatic email encryption if you handle a lot of sensitive info.

🔍 Vet Your Vendors: 5 Security Questions You Should Ask

Before you sign that next contract or start using a new service, take a moment to ask: Is this vendor protecting my data as seriously as I am? Too often, small businesses assume their vendors have airtight security, but many don’t—even well-known companies have had massive data breaches.

Here are five critical questions every small business should ask before trusting a vendor with their data:

🔹 How do you store and protect client’s data? (Is it encrypted? Where is it stored?)
🔹 Who has access to my data, and how is it restricted? (Do team members or third parties have unnecessary access?)
🔹 What happens to my data if I stop using your service? (Will it be deleted? Can I request removal?)
🔹 Have you ever had a data breach? (And if so, how did you handle it?)
🔹 What security compliance measures do you follow? (Look for adherence to GDPR, CCPA, and strong security practices such as those listed above.)

🚨 Red Flag: If a vendor can’t answer these questions—or gives vague responses—it’s time to reconsider working with them. Your data security is only as strong as the weakest link in your supply chain!

🚀 Small Changes, Big Security Wins

You don’t need to be a cybersecurity expert to stay safe—you just need smart habits.

Start with one or two of these today, and you’ll be way ahead of the average person when it comes to security.