Document a list of your important digital accounts and who can access them if something happens to you — account chaos after death compounds grief.

For your most critical accounts (main email, bank), move from vulnerable SMS codes to a physical hardware security key (YubiKey or similar).

Identify 3 accounts you follow that trigger negative comparison — unfollow for 30 days.

Replace one reused password across 30 accounts with unique long ones, stored in an encrypted manager.

Understand precisely when a VPN actually protects you (public wifi, geo-blocking) versus when it's a security illusion changing nothing (regular browsing while logged into accounts).

Check all your emails on haveibeenpwned.com to know which breaches exposed your data.

Enable 2FA on email, bank, social, cloud. TOTP not SMS. Backup codes saved.