Security & Viruses

Recover from a hacked iCloud or Apple ID account, including acting quickly if locked out or seeing unfamiliar sign-ins, changing the Apple Account password from Settings or appleid.apple.com, enabling two-factor authentication, removing unknown devices, checking trusted phone numbers, reviewing Mail iCloud forwarding and linked addresses, using iforgot.apple.com and Account Recovery when locked out, checking Payment and Shipping App Store purchases and reportaproblem.apple.com, reviewing Find My and Family Sharing, considering Apple Recovery Key tradeoffs, and checking other accounts that use the Apple ID email for recovery.

Recognize and stop IRS scam calls texts voicemails and emails, including threats of arrest lawsuits deportation license loss and immediate payment, knowing the IRS usually contacts by mail first, avoiding gift cards wire transfer cryptocurrency prepaid debit cards and phone payments, understanding spoofed caller ID, refusing to give Social Security numbers credit card numbers or sensitive data on unsolicited calls, hanging up without pressing numbers, checking real IRS account status at irs.gov, calling 1-800-829-1040, reporting to TIGTA IRS phishing channels and the FTC, recognizing refund verification text and email scams, seasonal tax scam spikes, and helping older adults avoid IRS impersonation fraud.

Turn on Stolen Device Protection on iPhone, including requirements for iOS 17.3 or later Face ID or Touch ID passcode and Apple Account two-factor authentication, checking Settings Face ID and Passcode Stolen Device Protection, understanding newer iOS versions may enable it by default, fixing missing or grayed-out options by enabling two-factor authentication Significant Locations and Find My iPhone, understanding biometric-only protection for saved passwords and credit cards, one-hour security delay for Apple Account password changes Find My changes Face ID changes and disabling protection, familiar locations, stronger passcodes, and avoiding shoulder surfing.

Use a VPN safely on iPhone Android Windows and Mac, including understanding what a VPN hides from internet providers and public Wi-Fi operators, choosing trustworthy providers, avoiding unknown free VPN apps, checking audited no-logs policies ownership jurisdiction WireGuard and OpenVPN support, reading security-focused reviews, avoiding bundled VPNs in unrelated apps, installing official apps only, enabling kill switch and DNS leak protection, choosing sensible server locations, using VPN before sensitive activity, and knowing VPNs do not stop phishing malware cookies fingerprinting or account-based tracking.

Understand HTTPS versus HTTP and what the browser padlock actually means, including encryption in transit, TLS certificates, why HTTP sends data in plain text, why HTTPS does not prove a site is trustworthy, how scammers get free certificates, modern browser Not Secure warnings, checking domain names instead of only padlocks, avoiding phishing links described as secure, typing addresses directly for banking email and shopping, treating HTTPS as a minimum requirement, understanding older padlock advice is outdated, and avoiding sensitive entry on HTTP sites especially on public Wi-Fi.

Know what to do after clicking a phishing link on iPhone Android Windows or Mac, including closing the page without entering information, disconnecting from the internet after downloads or on work devices, remembering whether anything was entered downloaded or opened, reporting work-device incidents to IT, running Windows Security or reputable scans, changing passwords from the real site after credential entry, enabling two-factor authentication, contacting banks after payment details, watching for unknown apps popups battery drain password reset emails and sign-in alerts, previewing links before tapping, and reporting phishing through Gmail Outlook providers or impersonated organizations.

Tell whether an IRS letter or mailed tax notice is real or a scam, including checking notice numbers like CP2000 or LTR 2802C on irs.gov, avoiding QR codes and fake payment pages, recognizing gift card wire crypto and payment app demands, comparing return addresses and phone numbers with official IRS information, watching for arrest deportation and same-day legal threats, calling the IRS from irs.gov, reporting fake letters to TIGTA the FTC and IRS phishing channels, protecting bank accounts and credit after sharing information, and verifying real tax balances through IRS Online Account or a tax professional.

Turn on Google Find Hub formerly Find My Device on Android, including enabling location for Android 9 and later, finding the setting under Google All services Find Hub or Security, confirming the device can be located at google.com/android/find, troubleshooting old Last seen timestamps and wrong Google accounts, using Play Sound Secure Device and Erase Device, showing lock-screen contact information, understanding erase removes tracking, using a strong screen lock, contacting the carrier to suspend the SIM or blacklist IMEI after theft, and keeping a backup way to access the Google account.

Tell whether a website is a scam before buying or entering information, including checking the exact domain name, understanding HTTPS padlock limits, finding real contact information and return policies, searching store names with scam or reviews, recognizing unrealistic prices countdowns and stock-pressure tactics, reverse image searching product photos, checking domain age with WHOIS, reviewing payment methods, avoiding wire crypto and personal payment app requests, checking BBB Scam Tracker, disputing charges, changing reused passwords, taking screenshots, and reporting to the FTC and BBB.

Stop browser notification spam in Chrome Safari and Microsoft Edge on Windows Mac Chromebook Android iPhone and iPad, including removing allowed sites from notification permissions, blocking future notification prompts, understanding Chrome Site Settings Notifications, Safari Websites Notifications and iOS web app notifications, Edge Cookies and site permissions Notifications, recognizing fake Allow to continue prompts, distinguishing website notifications from viruses or app notifications, clearing multiple unwanted sites, and preventing future spam from streaming download gaming and clickbait sites.