Family Cyber Shield Checklist — Cyber Secure Your Digital Life

🛡️ Three layers of protection: Verification Protocol, Account Monitoring, and Technical Controls.

🔐 Layer 1: Family Verification Protocol

Establish a code word that only your family knows to verify identity on unexpected calls.

Create a family passphrasePick a word only your family knows (not from social media, family history, or public info). Use "Blue Elephant" or similar, not names. Teach all family members the passphraseEveryone from teenagers to grandparents needs to know it and use it. If someone can't say the passphrase, hang up. Establish callback proceduresIf family calls asking for money, say: "I'll call you back at the number I have on file." Then hang up and call them directly. Change the passphrase every 6 monthsIf anyone gets compromised, change it immediately. Schedule reminders to rotate it regularly.

👁️ Layer 2: Account Monitoring

Monitor parents' and elderly relatives' accounts for suspicious activity.

Set up transaction alerts on parents' bank accountsAlert on any transaction over $100 or all transactions. You should be notified before they are if fraud happens. Monitor credit reports quarterlyCheck parents' credit at AnnualCreditReport.com every 3 months for unauthorized accounts. Early detection saves money. Set up fraud alerts on parents' creditRequest fraud alerts at all three bureaus. Renew annually. This adds a layer of verification before new accounts open. Review parents' email login activity monthlyIn Gmail/Outlook settings, check "Last account activity." Look for logins from unusual locations or devices.

🔒 Layer 3: Technical Controls

Implement technology controls to prevent unauthorized access to parents' accounts.

Enable MFA on parents' primary email accountUse an authenticator app, not SMS. Email is the master key—protect it first. Enable MFA on all banking and financial accountsEach bank and credit card should require MFA. This stops account takeovers. Set up backup contact informationEnsure recovery email and phone are current. Old phone numbers and abandoned emails are vulnerabilities. Help parents install a password manager1Password or Bitwarden. You can help them set it up, but they own the master password. Set up emergency access proceduresEnsure at least two trusted family members can access important accounts if parents become incapacitated.

This checklist is from Cyber Secure Your Digital Life by Corey White.

Take the Security Scorecard → Back to Master Checklist →