7 Digital Habits to Bury This Cybersecurity Awareness Month

Happy Cybersecurity Awareness Month!

Since it also happens to be October, we would like to formally lay a few bad digital habits to rest.

Grab yourself a shovel. Here are seven digital habits that deserve to be buried.

1. Using the Same Password Everywhere

Some passwords simply refuse to die.

You created one in 2013, stitched on an exclamation point when a website forced you to, and have been dragging your creation from one account to another ever since.

Listen, we understand why people reuse passwords. The average person has dozens of online accounts, and remembering a completely different password for every single one can feel more and more like an elaborate memory test that no one really agreed to take.

From a convenience standpoint, reusing the same password is great. But for cybersecurity?

Not so much.

If you reuse passwords, one exposed account suddenly becomes several exposed accounts. When one site is breached, attackers try those same credentials everywhere else.

The better habit: Use a unique password for every account and let a password manager do the remembering for you.

2. Clicking “Remind Me Later”

 Software updates are kind of like ghosts. You can ignore them all you want, but they will come back to haunt you. Usually when it’s the end of the day, and you’re trying to shut down your computer, or you have a meeting in three minutes.

Naturally you’d click, “Remind Me Later.”

But eventually “Remind Me Later” becomes “Remind Me Never.”

Unfortunately, software vulnerabilities don’t become less spooky just because you refuse to acknowledge them. Once a vulnerability is discovered, continuing to use outdated software leaves an unnecessary opening for attackers.  

And if the history of technology failures has taught us anything, it's that ignoring a problem rarely makes it disappear.

Think of it like the open window in a horror movie.

Someone really should close that.

The better habit: Turn on automatic updates where appropriate and install updates when they’re available.

3. Treating MFA Like an Unnecessary Extra

Nobody has ever entered their password and thought: “You know what would make this experience better? Another step.”

MFA does add a few seconds to the login process.

But think of it as the person who locks the door after everyone enters the creepy cabin.

An extra step? Yeah. But still a very good idea.

Without MFA, someone who steals your password has everything they need to access your account. But with MFA, the password is only one piece of the puzzle.

The better habit: Turn on MFA wherever it's available, particularly for important accounts like email, banking, and anything containing sensitive information.

4. Clicking First and Asking Questions Later

Every horror movie has that one person. You know the one. They hear a strange noise coming from the basement. The lights flicker. Someone says, “Whatever you do, don’t go down there.” And down they go.

Clicking a suspicious link without stopping to check is the digital version of walking into the basement alone.

Phishing emails, malicious QR codes, and fake login pages are all designed to get you to react before you have time to think. And unfortunately, they’re getting harder to spot. That means “I’d know a scam if I saw one” isn’t much of a security strategy.

Instead, pay attention to what the message is trying to make you do.

Is it creating a sense of urgency? Trying to scare you? Offering something that seems a little too good to be true?

Those are all good reasons to stop at the top of the stairs.

The better habit: Pause. Question. Verify. If something involves sensitive information, verify it through a trusted channel before taking action.

5. Keeping Accounts Forever

Old accounts don’t die quietly.

They become zombies.

Abandoned apps, social media profiles, subscription services, and other accounts you haven’t touched in years will continue shambling around the internet long after you’ve forgotten they exist. And just because you stopped using an account doesn’t mean the information inside disappeared with you.

Old accounts still contain personal information, saved payment details, passwords, addresses, messages, or connections to other services.

The even bigger problem?

An account you don’t remember having is also an account you won’t notice if someone compromises it.

For businesses, the zombie problem multiplies: think former team members, old vendor logins, and unused admin accounts. These aren’t just a cybersecurity concern. They also create challenges for IT compliance, particularly when it comes to managing access to sensitive information.

The better habit: Periodically review your old accounts and close the ones you genuinely don’t need anymore.

6. Assuming Everything Is Automatically Backed Up

A backup plan shouldn’t turn into a jump scare when you finally need it.

Cloud storage and automatic syncing have made backing up our information feel almost invisible. You save a document, take a picture, or make a change, and everything seems to happen automatically.

But syncing and backing up aren’t the same thing.

Syncing keeps files consistent across devices or locations. If something is accidentally deleted, overwritten, corrupted, or compromised, that change may sync too.

A backup, on the other hand, gives you a separate copy you can restore.

So, ask yourself: If this device disappeared tomorrow, what would I lose?

Photos? Documents? Financial records? Important business files?

The better habit: Know what’s backed up, where it’s stored, and whether you could actually restore it if something went wrong.

7. Thinking Cybersecurity Is Someone Else’s Job

In every horror movie, the person who makes it to the credits is the one who notices something’s wrong and doesn’t wait for someone else to deal with it. Cybersecurity works the same way.

It’s easy to think your IT department, cybersecurity team, or software has everything covered. And they do a lot. Security tools can block malicious websites, filter suspicious emails, protect devices, and detect unusual activity.

But technology can’t make every decision for you.

The better habit: If something seems unusual, say something. Don’t assume someone else will notice it or deal with it.

Final Thoughts on These 7 Digital Habits

Sometimes, improving your cybersecurity is as simple as getting rid of a few digital habits that have overstayed their welcome. And Cybersecurity Awareness Month is the perfect excuse to finally bury the ones we already know aren’t helping us.

—

Danielle Mundy is the Marketing Coordinator for Tier 3 Technology. Her fiction has appeared in Sketch Literary Journal. She creates engaging multichannel marketing content—from social media posts to white papers.