Online Safety Checklist | HeroRetirement.com

1) Week Overview

Tip: Choose 1–2 priorities. Progress beats perfection.

2) Master Checklist

3) Strong Passwords & Manager

Use unique passphrases for each account and store them in a password manager.

I use a password manager (e.g., 1Password, Bitwarden, Dashlane) Email, bank, and shopping accounts have unique passphrases (12+ chars) I’ve removed sticky notes / unencrypted docs with passwords

Passphrase Helper

Use 3–4 random words + a symbol/number (example only—store your final passphrase in your manager).

4) Phishing Pause

Pause before clicking links or attachments from emails/texts/calls—verify from the official source.

I wait 10–20 seconds before acting on urgent messages I verify sender address/number and domain spelling I never share passwords, SSN, or codes via email/text I call the company using a number from their official site

URL Padlock & Domain Check

Look for https:// and a padlock. Beware of misspellings (e.g., amaz0n vs amazon).

5) Two-Factor Authentication (2FA)

2FA enabled on email 2FA enabled on banking & brokerage 2FA enabled on social media I use an authenticator app (preferred over SMS)

If you receive a code you didn’t request, don’t enter it — change your password.

6) Automatic Updates & Security

Auto-updates ON for phone & computer Antivirus/anti-malware enabled and updating Weekly restart to apply updates Browser updated; extensions reviewed

7) Safe Shopping & Banking

I only enter payment info on HTTPS sites with a padlock I use credit cards (not debit) for better fraud protection Transaction alerts enabled on my bank/credit card I review statements weekly for suspicious charges

8) Social Media Privacy

Accounts set to private where possible I removed birthdate/travel/school details from public view I declined unknown friend requests I avoid posting travel in real time

Think of posts as postcards — anyone might read them. Share highlights after you return.

9) Public Wi-Fi Safety

I avoid banking/shopping on public Wi-Fi I use a VPN or my phone’s hotspot for sensitive tasks I log out of accounts after using shared networks

Risk Reminder

If the network is open or you didn’t enter a password, treat it as public. Prefer your hotspot.

10) Recognize & Report Scams

I know red flags: urgency, gift cards, wire transfers, remote access I hang up/delete and never engage with suspicious messages I’ve saved reporting links: reportfraud.ftc.gov I saved AARP Fraud Watch Network: 877-908-3360

11) Personal Data & Paper Trail

Sensitive papers shredded (bills, EOBs, statements) SSN & Medicare cards stored securely (not in wallet) Privacy settings reviewed on key apps/websites

12) Ongoing Learning & Quarterly Review

Subscribed to FTC or consumer safety alerts Library/senior center class bookmarked Quarterly “digital checkup” on my calendar

Quarter	Focus	Next date
Q1
Q2
Q3
Q4

13) Weekly Security Review

Task	Status	Notes
Email tidy (spam, unsub, suspicious)
Bank/card statement scan
Software/app updates applied
Password manager health check

Set a 10-minute weekly reminder (e.g., Sundays) to keep your defenses strong.

Online Safety Checklist for Seniors