Free self-checks: verify instead of assuming

The security market is full of products promising all-round protection. In practice, the improvements that matter most cost nothing: they are checks and habits, not subscriptions.

The checks

These six cost nothing, need no installation, and between them uncover the most common gaps:

• Check for a data breach – does your email show up in a known leak?
• Check active sessions – who is currently logged into your accounts, and how to throw them out.
• Check a link before you click – read a web address correctly in ten seconds.
• Check app permissions – which app can see your location, microphone and contacts?
• Check your home network – what is actually on your Wi-Fi?
• Test your backup – will your files really come back?

More checks

• Test your tracking protection – how unique and recognizable is your browser?
• 15-minute security check – the essentials in one sitting.
• Two-factor authentication – is the second lock active on your important accounts?

How to spot a questionable security tool

“Security apps” are a popular vehicle for bad deals. Be skeptical when a tool:

• advertises with fear (“Your device is infected!”) or shows constant warnings,
• asks for permissions or data it does not need for its stated purpose,
• only works by subscription and makes cancelling difficult,
• promises all-round protection or 100% security – which does not exist.

When in doubt: a free check plus good habits protects more than a purchased suite.

What actually moves the needle

Only a few categories of paid tool are genuinely worth it, and none of them are the first step. In order of effect:

1. A password manager – the single most effective thing most people can do, and the free tiers are good enough for the majority. See password managers explained .
2. A second factor on your email account and anything holding money: two-factor authentication .
3. A tested backup – not a backup you assume works, one you have actually restored a file from.

Everything beyond that is refinement. If a product promises to replace those three, treat the promise as the warning sign.