Build your security stack
Choosing security tools that actually protect you
Choose a small, dependable security stack—and configure each layer so it actually reduces risk.
The big picture
Protection works in layers.
More security software does not automatically mean more security. A useful stack covers authentication, updates, recovery, network exposure, and detection without creating alerts you will ignore.
Choose tools around the identities and business processes they must protect, not as an isolated shopping list. Explore Identity theft protection, Business cybersecurity basics, and Security tools, checklists & protection kits.
- 01
Use a password manager and phishing-resistant MFA
- 02
Patch operating systems and browsers
- 03
Back up irreplaceable data
- 04
Prefer reputable, supported products
Private, in-browser check
Local password pattern check
Answer four quick prompts. The result stays in this tab and points you to a relevant guide.
Hub & spoke library
Follow the full pathway.
Start with the guide closest to your situation. Each spoke returns here so you can move from immediate action to long-term protection.
VPN overview
Understand what a VPN protects between your device and its provider, and what it cannot hide from accounts or endpoints.
Password managers
Choose, set up, and recover an encrypted vault that makes unique credentials practical.
Two-factor authentication guide
Compare passkeys, security keys, authenticator apps, push prompts, and SMS for different account risks.
Encrypted cloud storage
Evaluate encryption boundaries, key ownership, sharing controls, recovery, and data portability.
Malware protection
Layer updates, built-in defenses, safer execution, backups, and detection against malicious software.
Firewall basics
Understand device and network firewalls, inbound exposure, outbound control, and where a firewall fits.
Secure email providers
Compare transport security, end-to-end encryption, metadata, recovery, aliases, and account protection.
At a glance
A working model
Use this table to connect the control to the result and the moment it needs attention.
| Layer | What it changes | When to use it |
|---|---|---|
| Password manager | Unique credentials | Everyone |
| Authenticator or passkey | Account takeover | Priority accounts |
| Endpoint protection | Malicious files and behavior | All computers |
| Encrypted backup | Loss and ransomware | Irreplaceable data |