Skip to main content
tech.org.au home

Guide hub

Online safety tips

Most account break-ins start with one weak password or one convincing scam message, not a Hollywood hacker.

These online safety tips are written for people who just want to use their devices without getting scammed, hacked or locked out. You do not need to be technical. The handful of habits on this page, strong unique passwords, two-factor authentication, prompt updates and a healthy pause before you click, stop the overwhelming majority of real-world attacks.

We keep the advice specific and Australian. Where it helps, we point you to the free official services worth knowing about: the eSafety Commissioner for online abuse, and Scamwatch for reporting scams. Everything here is plain language and free to do today.

What this hub helps you do

Lock your accounts properly

A password manager plus two-factor authentication turns your most important accounts, email, banking and Apple or Google ID, from an easy target into a hard one. We show you the exact settings to change and the order to do them in.

Spot scams before they cost you

Modern scams copy real logos and use urgency to rush you. Learn the tells that give them away, a wrong sender address, an unexpected link, a request for a code, and the one rule that defeats almost all of them: never act on a message, go to the app or site yourself.

Recover fast if something goes wrong

If an account is compromised, speed matters. We walk through changing passwords, signing out other devices, checking recovery details and reporting to the right Australian service so you limit the damage and get back in control.

Step-by-step guides in this hub

Work through whichever one matches your problem. Each is written so you can follow along on your own device.

8 min read

How to stay safe online

Learn how to stay safe online with seven simple habits, from passkeys and two-factor to spotting scams. Plain-language security for everyday Australians.

Read article
8 min read

Is my phone hacked? How to tell and what to do

Is my phone hacked? Learn the real warning signs, how to check, and the exact steps to lock a compromised phone down and get back in control, calmly.

Read article
8 min read

What to do if you've been scammed in Australia

Scammed in Australia? Do these things now: call your bank, secure your accounts, ring IDCARE on 1800 595 160, and report it to Scamwatch. A calm step-by-step.

Read article
8 min read

How to check who has access to your accounts

Worried someone can see your email or accounts? Check active sessions, connected apps, mail forwarding and recovery details step by step, then lock things down.

Read article
8 min read

How to share account access without losing control

Give family, staff or your IT person the access they need without handing over your identity. Use roles and sharing features, and keep recovery in your hands.

Read article
7 min read

Is this website legit? How to check before you pay

A quick, practical way to check if a website or online store is legit: verify the ABN, read the domain carefully, test the contact details and check reviews.

Read article
6 min read

Is this message a scam? Check it in 60 seconds

A text or email feels off? Run this 60 second checklist: the pressure test, the link test, the sender test, and how to check with the real organisation.

Read article
6 min read

The Hi Mum scam text: what it is and how to beat it

A text from a new number saying Hi Mum, lost my phone? It is a known scam. How it works, the one phone call that defeats it, and what to do if money was sent.

Read article
8 min read

Recovering after a scam: the weeks that follow

The first hour is covered elsewhere. This is the weeks after: chasing the money properly, rebuilding identity safety with IDCARE, and looking after yourself.

Read article
7 min read

Remote access scams: when the caller wants into your computer

A caller says your computer is infected and asks to connect to fix it. How the remote access scam unfolds, the tells, and exactly what to do if they got in.

Read article

Why this advice is safe to follow

Every step here is reversible and uses the settings already on your device. We never recommend registry cleaners, paid tune-up apps, or anything that could make things worse. If a fix carries any risk, we say so plainly. Still stuck? Email us and a real person will help.

Frequently asked questions

What is the single most important online safety tip?

Turn on two-factor authentication for your email first. Your email is the master key that can reset every other account, so protecting it protects everything else. A password manager to create long, unique passwords is a close second.

Are passkeys safer than passwords?

Yes. A passkey is tied to your device and cannot be phished or guessed the way a password can, because there is no secret to type into a fake website. Where a service offers passkeys, such as Google, Apple and Microsoft, they are the safer choice.

Where do I report a scam in Australia?

Report scams to Scamwatch, run by the National Anti-Scam Centre. If money has left your account, phone your bank straight away, and if you have been threatened or abused online, the eSafety Commissioner can help.

Get one useful tech tip a week

Plain-language guides and the occasional scam warning, sent when it matters. No spam, unsubscribe anytime.

Prefer to just ask? [email protected] or use the contact form.

Join the newsletter