Cyber Security Awareness Month: Cyber tune-up checklist

by Nicole Beaudoin | October 1, 2025 | Threat Lab

Reading Time: 4mins

October is the month for pumpkin spice and all things spooky. But protecting your personal information online doesn’t need to be scary. For more than 20 years now, October has also been recognized as Cybersecurity Awareness Month.

In our digitally connected world, apps and online accounts can make our lives much more convenient. Sadly, they can also make our personal data more vulnerable to cyber threats. Each year, a shocking number of people become victims of sophisticated cyberattacks. In one recent data breach, TransUnion announced  4.4 million consumers' data compromised in a hack involving a third party.

Created by the National Security Division within the Department of Homeland Security and the National Cyber Security Alliance, Cyber Security Awareness Month promotes online safety and security for both individuals and small businesses. Its theme is Secure Our World, and its mission is to raise awareness about the importance of cybersecurity and showcase some of the easy ways we can all protect our identities, devices, and data

Password best practices

One of the best ways to keep your personal data out of the hands of hackers is also one of the simplest. Create strong passwords. Here are some tips for creating unbreakable passwords.

• Keep it complicated
  We juggle so many passwords; it’s tempting to use something easy to remember. Unfortunately, using “12345” or “Password” just doesn’t cut it anymore. Each of your passwords needs to incorporate numbers, symbols and capital letters, use at least 16 characters. Do not use your pet’s name!
• Use a password manager
  Keeping track of complex passwords for each of your accounts can seem overwhelming, but a password manager offers a simple and safe solution. Quality password managers like the one included with Webroot Total Protection will generate, store and encrypt all your passwords, requiring you to only remember one password.
• Turn on multi-factor authentication
  Using multi-factor authentication adds a layer of security to your passwords by having you prove your identity in multiple ways. This means getting a text or email with a security code or answering a security question.

Identifying phishing scams

Phishing scams appear in our email inboxes, text messages and even voicemails on a daily basis. Designed to trick you into giving up your personal and financial information, knowledge is power when identifying what is real and what is in fact, fake.

According to Pew Research a  majority of U.S. adults report getting scam phone calls (68%), emails (63%) or text messages (61%) at least weekly.

• Urgent requests
  Beware of messages that demand immediate action and threaten consequences if you don’t respond.
• Suspicious email domains
  If an email is really from your bank, the address should contain the official domain name (e.g., noreply@yourbank.com.) Authentic company emails do not usually come from addresses like @gmail.com.
• Poor grammar
  If an email contains awkward phrases, misspellings, and grammatical errors, it probably didn’t come from a legitimate company.
• Generic greetings
  Your bank is probably never going to address you as “Dear Customer”. They know your name, and if they’re really trying to contact you, they’re going to use it.

If you think you’ve been a target of phishing, you can report it at reportphishing@apwg.org. For added safety, products such as  Webroot Total Protection will protect you from identity theft, safeguard your devices, and keep your personal and financial data out of the hands of cyber thieves.

Keeping technology up to date

Another simple weapon in the war on cybercrime – keeping your devices, software and apps up to date. When you install the latest updates, you receive all the newest features, as well as the latest security upgrades. Here are some easy tips to stay continuously up-to-date.

• Enable automatic updates
  Adjust the settings on your apps, software and devices to automatically update. You can schedule updates to happen overnight, so they never interrupt your screen time.
• Verify your sources
  Download software from known sources and only download apps from your device’s official app store. Pirated or unlicensed software can spread dangerous malware and viruses to your devices.
• Avoid software updates in pop-up windows
  Pop-up windows that demand a software update may be phishing scams. Close your browser and don’t take the bait.

Because we’re all connected to multiple software services, apps and devices, it’s easy to forget all the updates you need to make on a regular basis. Don’t forget to add your smart TVs, streaming services, routers and gaming devices to your update checklist. If you’re using products like Apple Watch, Google Nest or a Ring doorbell, you need to keep them updated as well.

Identity protection

Cybercriminals relentlessly scour the internet in search of leaked personal data. Guarding your personal data, especially financial details, is crucial. Here are some more steps you can take to protect your online identity.

• Invest in the latest antivirus protection
  Reliable antivirus software acts like an anti-missile shield, safeguarding your devices from viruses, malware, and phishing attempts.
• Beware of public Wi-Fi
  Using public Wi-Fi networks is convenient, but not necessarily safe. Always confirm your connection is encrypted when you’re out and about, and don’t make any financial transactions unless you’re on a private Wi-Fi network.
• Use a VPN
  A virtual private network (VPN) protects your online privacy and helps keep your information safe. A trusted VPN encrypts your internet connection, which masks your IP address and keeps hackers away.
• Keep data private when using AI
  With AI so prevalent it’s important to understand how it works, be aware of how vendors handle your data, and avoid entering private data into AI apps.
• Don’t let your browser store your login details
  It certainly makes life easier when you let your browser remember your passwords for you, but that can backfire if your devices fall into the wrong hands. It’s always safest to enter your passwords each time you log in. Or use solutions that include password manager software to keep your information safe.
• Use automatic backup
  Individuals and businesses alike can keep digital information secure by enabling automatic cloud backup.

Webroot Total Protection is a comprehensive solution that Includes multi-device protection, unlimited cloud backup, password manager, VPN, identity protection, parental controls, and more.

The 2025 Verizon DBIR report found that about 60% of confirmed data breaches involve human error, making it more important than ever to take steps to protect yourself online and build more cyber resilience. So, grab a pumpkin spice latte and let’s work together to create a safer online environment. October is the perfect time to make sure you don’t get spooked by cybercrime.

Looking for more information and solutions?

• Cyber Security Awareness Month Info from CISA
• 2025 Cyber Security Awareness Month Guide
• Webroot Total Protection all-in-one protection for your digital life
• Carbonite, continuous and unlimited cloud backup

Webroot is a proud subsidiary of OpenText, a leading Cloud and AI company. Explore the OpenText Resources Hub to discover how to protect yourself and your business – from enterprise-grade security to everyday consumer tips.

Play fun cybersecurity games, learn how to stay safe online, and check on a wide range of security products and social activities.