10 simple ways to stay a step ahead of scams.
A few useful changes. A moment to double-check. Pick one step today, or work through this guide with someone you trust.
“You don’t have to work it all out at once. Start with one thing.”
Your guide from Bernie
1Keep your devices up to date
- Open your device's Settings and install available updates.
- Turn on automatic system updates where offered.
- Turn on automatic app updates, too.
Android menus vary by phone maker. Most Android system updates install automatically; restart when prompted.
Phone and computer update settings
- iPhone system
- Settings > General > Software Update > Automatic Updates. Turn on Automatically Install.
- Android system
- Settings > System > Software updates. Follow the prompts. If this path differs, search Settings for 'update'.
- iPhone apps
- Settings > Apps > App Store > App Updates: On.
- Android apps
- Play Store > profile picture > Settings > Network preferences > Auto-update apps. Choose Update over Wi-Fi only, or a data option you prefer.
- Computer
- Open your computer's Settings and search for 'update'. Install available updates and enable automatic updates where offered.
2Replace weak or reused passwords
- Start with your email. Open the official app or website yourself.
- Find Account or Security, then Change password.
- Create a long, unique password and save it in your password manager.
Change weak, reused or exposed passwords. You don't need to change a strong password just because it is old.
3Use a password manager
- Choose LastPass or 1Password. Follow its setup guide, then save or import your current logins.
- Use its built-in security check to find weak, reused or exposed passwords, where supported.
- Change flagged passwords on each account’s actual website or app. Use a unique generated password, then save the new password in your manager.
Editing a saved password alone does not change the account password. Features vary by plan and device. Keep your manager’s recovery instructions secure.
4Turn on two-factor authentication
- When prompted, turn on two-factor authentication (2FA), also called multi-factor authentication (MFA). It is like double-locking your doors. Follow the setup instructions.
- No prompt? Open the account or app’s settings. Look under Security or Privacy and Security. Labels vary by service.
Save recovery codes securely. If text codes are the only option, use them. Approve sign-in prompts only when you are signing in.
5Don't just click on any link.
- Pause before opening an unexpected link or attachment.
- Open the company's official app, or type a web address you already know.
- Check for the message there. Still unsure? Call a trusted number.
Use a saved bookmark or an address from a statement. Don't use contact details in the suspicious message.
6Hang up and call a number you trust
- Say, 'I'll call you back,' and end the call.
- Find the number in saved contacts, on your bank card or on a statement.
- Call that number yourself and check the request before acting.
Use a number you already trust, even if the caller gives you a number to call back.
7Choose a private family safe word
- Privately agree on a word or phrase for your family to use as a password.
- Don’t share it or post it on social media.
- Ask for it whenever a request or someone’s identity is in question.
Call back on a number you already trust as an additional check. A safe word alone does not prove who is calling.
8Keep sign-in codes to yourself
- Never read or send a login code to an unexpected caller or message.
- Enter it only in the official app or website where you started signing in.
- Didn't request a code? Don't share it or approve a sign-in prompt.
If you're worried, open the official app yourself and check your account's security settings.
9Don’t give unexpected callers remote access
- If an unexpected caller asks, don’t install remote-control software or share your screen.
- Don’t give them access to your phone or computer. End the call.
- If you need help, contact a support provider you already know and trust.
Already gave access? Disconnect from the internet and get help from trusted support. Contact your bank if you shared financial details.
10Sign up for Bernie for extra protection.
Text Bernie anytime something suspicious or unfamiliar comes in.
Bernie flags suspicious requests and advises. No service prevents every scam.
Sign up for Bernie
A practical guide from Bernie, a product of AI for the People LLC. These steps reduce risk; no checklist or service prevents every scam. Updated October 30, 2026.