🔒️ ’Twas the week before Christmas - a cyber-safe checklist for your home


“Security is not a product, but a process.”
- Bruce Schneier

It’s the week before Christmas, and if your house is anything like mine, the calendar is chaos, the shopping list is getting longer, and someone is asking when we can finally sit down.

So today’s email is short, practical, and a little festive.


A cyber twist on a Christmas classic

’Twas the week before Christmas, when all through the house,
Not a creature was stirring, not even a mouse.
The new gadgets were wrapped and tucked under the tree,
With hopes they would work straight away, happily.

But the Wi-Fi was groaning, the passwords were weak,
The updates were pending for most of the week.
A parcel arrived with a “too good” price tag,
And somewhere, a scammer was ready to snag.

A QR code appeared in a “missed delivery” text,
“Just pay a small fee” - and you know what comes next.
So here is a checklist, simple and clear,
To keep your Christmas safer this time of year.


A cyber-safe Christmas checklist (20 quick wins)

1) Update everything - phones, laptops, tablets, consoles, smart TVs, routers.
2) Restart devices after updates so patches actually apply.
3) Charge new devices fully before the big setup session.
4) Use a password manager (even the built-in one is better than reusing passwords).
5) Turn on MFA for email first - then banking, socials, and shopping accounts.
6) Check delivery texts carefully - don’t pay “small fees” from random links.
7) Don’t scan random QR codes in emails, flyers, or street posters unless you trust the source.
8) Set up a separate kids profile on tablets and TVs (no shared adult account).
9) Review app permissions - especially camera, microphone, contacts, location.
10) Disable “remember my card” on shared family devices.
11) Use tap-to-pay or virtual cards where possible for safer spending.
12) Avoid public Wi-Fi for shopping/banking - use mobile data or a trusted network.
13) Lock screens - PIN/biometrics on phones, and a passcode on tablets.
14) Turn on “Find My” / device tracking on new phones and tablets.
15) Back up family photos now (and test that you can actually restore them).
16) Change the default router admin password if you never have.
17) Create a guest Wi-Fi for visitors and smart home gadgets if your router supports it.
18) Unsubscribe from junk - fewer emails means fewer chances to get fooled.
19) Watch for “too perfect” deals - fake stores spike hard around Christmas.
20) Give yourself permission to slow down - most scams rely on urgency and distraction.

If you do only two things:
- Secure your email with a strong password + MFA.
- Update everything.


I’ll likely send the next one on Christmas Day, but between now and then, I hope you get a real break. Eat the good food. Enjoy the people you love. Rest properly.

Stay safe out there!
Mat

P.S. If you get a message that says “Your parcel is waiting, click here” - it’s probably not your parcel. It’s your money.

Mathew Clark

Learn something new every Thursday. Join security and privacy conscious people, and satisfy your curiousity 1 question at a time, with topics including, IT Security, Internet Privacy, Effective Productivity tips and more.

Read more from Mathew Clark

"The most dangerous apps aren't the ones you download. They're the ones you forgot about." The family tablet had been getting worse for weeks. Not "a bit slow" worse. Painful. Every tap took seconds to register. Scrolling stuttered like a slideshow. Apps crashed mid-use. And the ads - they were relentless. Full-screen popups appearing out of nowhere, covering whatever you were doing, sometimes impossible to close without accidentally tapping through to whatever rubbish they were pushing. At...

"Just because it can connect to the internet doesn't mean it should." My dishwasher died last week. Mid-cycle, no warning - just a puddle on the kitchen floor and a error code nobody could decipher without Googling. No drama. Appliances break. You clean up, you go shopping, you move on. I figured I'd have a new one ordered within an hour. Instead, I spent an entire evening down a rabbit hole that genuinely rattled me. I started where most people start - filtering by price, brand, and energy...

“Automation doesn’t remove responsibility. It concentrates it.” Ben decided to let the AI “handle things” overnight. Inbox triage. Calendar cleanup. Draft a few polite replies. Nothing risky. He even joked that it felt like having a junior assistant working the night shift while he slept. By morning, the inbox was spotless. A little too spotless. Threads had been archived he didn’t remember reading. A meeting had been rescheduled. A service he vaguely recognised was suddenly on a more...