Why a Digital Safety Audit Matters
Most people lock their front door before leaving home without a second thought. But online, the equivalent habits — strong passwords, updated software, reviewed permissions — are skipped far more often. A digital safety audit is a structured way to find and close those gaps before someone with bad intentions finds them first.
You don't need technical expertise to complete this audit. Each step is designed to be straightforward and actionable, whether you're protecting a single personal device or a whole household. If you're helping an older family member stay safer online, pair this audit with our guide on online safety for older adults.
Work through the checklist below at your own pace. You can complete everything in one sitting or break it across a few sessions.
Password Manager
Generates and securely stores unique passwords for every account so you never need to reuse one.
Authenticator App
Provides time-based one-time codes for two-factor authentication, which are more secure than SMS messages.
Breach Notification Service
Checks whether your email address appears in known data breaches so you can act quickly.
VPN (Virtual Private Network)
Encrypts your internet connection when using public Wi-Fi, reducing exposure to eavesdropping.
How to Use This Checklist
Start at the top and work your way down. Items marked must are non-negotiable basics that every internet user should have in place. Items marked should are strongly recommended and close meaningful gaps. Nice-to-have items add extra layers of protection for those who want them.
Keep a notepad or open a simple document to record anything you flag for follow-up — particularly accounts where you spot old passwords or unfamiliar app permissions. Think of this the same way you'd approach a thorough pre-trip planning checklist: methodical, one item at a time.
Prioritize Email Account Security First
Your primary email account is the master key to nearly everything else — it controls password resets, account recovery, and identity verification. If an attacker gains access to your inbox, they can methodically take over every linked account. Secure your email with a strong unique password and 2FA before anything else on this list.
Passwords & Authentication
Device & Software Security
Account Access & Activity
Privacy Settings & Data Sharing
After the Audit: Keeping Your Digital Safety Current
Completing this checklist once is a strong start, but digital safety isn't a one-time event. Threats evolve, new accounts accumulate, and app permissions change with updates. Plan to revisit this audit every six months, or immediately after a major life event such as changing jobs, switching devices, or receiving a notice that a service you use was breached.
If you encounter an unfamiliar error or device behavior while working through these steps, our device troubleshooting checklist can help you rule out common problems before escalating.
Don't Ignore Breach Notification Emails
If you receive a legitimate email from a service stating your data may have been exposed in a breach, act on it — change the affected password immediately and enable 2FA if you haven't already. Be cautious, however: phishing emails frequently impersonate breach notices. Navigate directly to the service's website by typing the address yourself rather than clicking links in the email.
Small, consistent habits — locking screens, logging out of shared devices, thinking twice before clicking a link — compound over time into meaningful protection. This checklist gives you the foundation; staying alert keeps it strong.
