Summary

22 items · 30–60 minutes

Why a Personal Security Audit Matters

Most security breaches don't happen through sophisticated hacking — they exploit small, preventable gaps: a reused password, an outdated recovery email, or an app with more access than it needs. A structured audit helps you find and close those gaps before someone else does.

This checklist is designed for everyday users, not IT professionals. You don't need technical expertise — just a willingness to spend 30 to 60 minutes reviewing the accounts, devices, and habits that make up your digital life. If you're newer to thinking about these concepts, the beginner's orientation to digital security is a solid starting point before diving in.

Work through each section at your own pace. Not every item will apply to every person, but addressing even a handful of gaps meaningfully reduces your exposure.

Passwords & Authentication

Audit your most important accounts (email, banking, social media) and confirm each uses a unique password not shared with any other account. Must
Replace any weak or reused passwords with strong, randomly generated ones — ideally via a password manager. Must
Enable two-factor authentication (2FA) on all accounts that support it, prioritizing email, banking, and social accounts. Must
Prefer an authenticator app over SMS text codes for 2FA where possible, as app-based codes are harder to intercept. Should
Review and update the master password for your password manager if it has not changed in more than a year. Should

Account Recovery Settings

Verify that recovery email addresses and phone numbers on all major accounts are current and still belong to you. Must
Check that backup codes for 2FA-protected accounts are saved somewhere secure (offline or in a password manager). Should
Review security questions on older accounts and replace guessable answers with randomized strings stored in your password manager. Should

App Permissions & Connected Access

Open your phone's settings and audit which apps have access to location, microphone, camera, and contacts — revoke any that don't need it. Must
Review third-party apps connected to your Google, Apple, or Microsoft accounts and remove any you no longer use. Must
Check social media platforms for connected apps and integrations, removing stale or unrecognized access. Should
Limit location sharing to 'While Using' rather than 'Always' for apps that don't require constant background access. Should

Device & Network Security

Ensure all devices — phone, laptop, tablet — have screen locks enabled using a strong PIN, passphrase, or biometric. Must
Confirm that operating systems and key apps are set to update automatically, or manually apply any pending updates now. Must
Review your home Wi-Fi router's admin password and ensure it is not the factory default. Must
Avoid accessing financial or sensitive accounts over public Wi-Fi; if necessary, use a VPN. For a fuller picture of the risks, see what you're actually risking on public Wi-Fi. Should
Check that Bluetooth is turned off when not in use on your mobile devices. Nice to have

Old Accounts & Devices

Identify accounts you no longer use — old email addresses, shopping sites, forums — and delete or deactivate them to reduce your exposure. Should
If you plan to sell, donate, or hand down an old device, follow a secure wipe process before transferring it. The checklist for selling or handing down your old phone walks through each step. Must
Sign out of your accounts on devices you no longer actively use or own. Must

Tools That Make the Audit Easier

You don't need specialized software to complete this audit, but a few tools make the process significantly more effective and sustainable going forward.

Required

Password Manager

Generates and securely stores unique passwords for every account, eliminating the need to remember or reuse credentials.

Required

Authenticator App

Provides time-based one-time codes for two-factor authentication that are more secure than SMS text messages.

Required

Device Settings App

Built into your phone or computer, used to review and revoke app permissions for location, camera, and microphone access.

Optional

VPN (Virtual Private Network)

Encrypts your internet traffic on public or untrusted networks, reducing the risk of data interception.

Once you've completed the audit, consider pairing your results with a broader review of your digital habits. The guide Online Safety From Every Angle covers the full landscape — from scam awareness to secure browsing — as a useful next step.

Free Tools Can Introduce Their Own Risks

Not all free security tools are equally trustworthy. Some free VPN and antivirus products have been documented collecting and selling user data — the opposite of what you want. Research any tool before installing it, and favor well-established options with transparent privacy policies. When in doubt, the built-in security features of your operating system are a reliable baseline.

If your household includes children, the framework for protecting children online covers app permissions and privacy settings in a family context.

Share

Technology Editorial Team · Contributor

Technology Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.