10 online privacy habits that protect you everywhere
25 September 2026 · 4 min read
You don’t need to be a tech expert to be much harder to scam, track or hack. A few everyday habits protect you almost everywhere online, from chat apps to banking to social media. Here are ten that make the biggest difference, roughly in order of importance.
1. Turn on two-factor authentication
Two-factor authentication (2FA) means that logging in needs something besides your password, usually a code from an app or SMS. Turn it on for your email first, because your email can reset every other password. Then do the same for WhatsApp (“two-step verification” in settings), Instagram, Facebook and your UPI and banking apps.
2. Never share OTPs or your UPI PIN
An OTP is a key to your account, and a UPI PIN is a key to your money. No bank, company, courier or government office will ever ask you for either. You also never need your PIN to receive money, only to send it. Our guide to spotting UPI and OTP scams explains the common tricks.
3. Use different passwords for important accounts
If one website leaks your password, attackers try the same email and password everywhere else. A password manager (many phones have one built in) makes unique passwords painless. At the very least, your email and banking passwords should be used nowhere else.
4. Keep your phone and apps updated
Updates fix security holes that attackers already know about. Turn on automatic updates for your phone’s system and apps, and don’t ignore the “update available” notice for weeks.
5. Only install apps from the official store
APK files shared on WhatsApp or Telegram (“wedding invitation.apk”, “electricity bill.apk”, “traffic challan.apk”) are a common way to steal OTPs and bank details. If a message asks you to install an app from a link, don’t.
6. Check app permissions
Does a torch app really need your contacts and SMS? In your phone’s settings, review which apps can see your location, contacts, camera, microphone and SMS, and remove anything that doesn’t make sense.
7. Think before you post
Your city, your college, your office, your children’s school uniform, your vehicle number plate, the view from your balcony: each detail seems harmless on its own, but together they tell a stranger exactly where to find you. Keep your friends and followers lists private too; blackmailers use them.
8. Be careful on public Wi-Fi
Most websites are encrypted today, but free Wi-Fi at stations, cafés and airports is still a favourite place for fake login pages. Avoid banking on public Wi-Fi, and never enter passwords on a page that opened by itself after you joined a network.
9. Slow down when you feel rushed
Almost every scam creates urgency: your account will be blocked, the offer ends today, the police are coming, your friend needs money right now. When a message makes your heart race, that’s the moment to stop, close the app, and check independently, for example by calling the official number yourself.
10. Share less with strangers
In anonymous chats, social apps and games, keep your full name, phone number, address, workplace and social media handles to yourself. A good conversation doesn’t need any of them. On Chatavi, phone numbers, email addresses, UPI IDs and links are blocked automatically, but the habit matters everywhere else too.
If something goes wrong
Report cyber crime and online fraud by calling 1930 or at cybercrime.gov.in. If you think an account has been taken over, reset the password from a device you trust and sign out of all other sessions.
None of these habits take more than a few minutes. Pick two today, two next week, and you’ll be safer than most people online.