Key Takeaways

Don’t Make It Easy for Them: Simple Ways to Stay Safer Online

October is Cybersecurity Awareness Month, and learning a few simple habits can help protect your personal information, finances, and online accounts.

• Use stronger passwords: Create long, unique passwords for every account and consider using a password manager.
• Turn on multifactor authentication: Add an extra layer of biometric protection to your email, financial accounts, and other online services.
• Keep your software updated: Install security updates on your phone, computer, apps, and other devices.
• Recognize and report scams: Pause before clicking unexpected links, sharing personal information, or sending money.

What Would You Do If You Received This Text?

Here’s a typical scenario:

You’re scrolling through your phone when a text pops up.

ACHIEVA ALERT: Did you spend $450.00 at Best Buy? Reply YES or NO, or click [suspicious-link.com] to dispute.

Your heart skips a beat. You tap the link, ready to fix the problem.

But wait.

This is exactly the kind of situation cybercriminals count on. They want you to take shortcuts, reuse passwords, skip updates, and click before you stop to ask, “Is this real?”

The good news? You don’t have to be a cybersecurity expert to make their jobs harder.

The National Cybersecurity Alliance’s 2026 campaign, “Don’t Make It Easy for Them,” encourages people to build simple habits that make life more difficult for cybercriminals. We’re sharing a few easy ways to help you stay safer online.

Make Your Passwords Less Predictable

Let’s be honest. Remembering passwords isn’t exactly anyone’s favorite thing.

So, you might use your dog’s name. Your birthday. Your birth year and maybe the same password you’ve had since you created your first email account but with a numerical sequence at the end.

Unfortunately, those are a few of the shortcuts cybercriminals love.

Criminals use tools that can test password combinations quickly. And when you reuse a password across multiple accounts, one compromised password could put more than one account at risk.

It’s time to make your passwords work a little harder for you.

How to create stronger passwords

• Go long. Create passwords that are at least 16 characters long.
• Keep them unique. Every account should have its own unique password.
• Mix it up. Use a random combination of letters, numbers, and symbols, or even a phrase that does not make sense mixed with numbers and symbols.
• Let a password manager do the remembering. Password managers can help you create and securely store strong passwords.
• Consider passkeys. Use them when they’re available.

Think of a password manager as a secure place to keep track of all those passwords you don’t want to memorize. Many offer free options, too.

Give Your Accounts a Backup Plan With MFA

Imagine someone gets your password. Not ideal, right?

That’s where multifactor authentication, or MFA, is beneficial. MFA adds another layer of security by requiring something beyond your password when you sign in. Depending on the account, that might be a code from an authenticator app or a biometric like Face ID.

It may take a few extra seconds to sign in, but those seconds can be valuable.

• Turn on MFA for every account that offers it.
• Use an authenticator app or biometrics whenever possible.
• Never share your MFA verification codes.
• Avoid reusing passwords or making small changes to the same password.

Don’t share sensitive account information just because someone says they’re calling from your financial institution.

Your next step: Check your email, social media, and financial accounts to see whether MFA is enabled.

A quick Achieva reminder: If someone contacts you claiming to be from Achieva and asks for your password or verification code, stop and verify the request using a trusted phone number.

Don’t Skip “Remind Me Later” on Security Updates

You know that notification:

“Software update available.” You see it. You dismiss it.

“Remind Me Later.” And then you do it again tomorrow.

We get it. You’re busy. You have places to be, things to do, and possibly 50+ other notifications waiting for your attention.

But those updates aren’t just about new features or making your phone look slightly different. They can also include security patches that help address known vulnerabilities.

Cybercriminals may look for devices and software that haven’t been updated. So, the longer you put off an update, the longer you may leave a known security issue unaddressed.

Security updates make life difficult for cybercriminals

• Turn on automatic updates for your operating system, browsers, and apps whenever possible.
• Check regularly that your devices are up to date.
• Restart your device when an update requires it.
• Don’t keep postponing important security updates.

Whether you’re using a smartphone, tablet, or computer, taking a few minutes to install updates can help keep your information better protected.

That five-minute update? It could be one of the easiest cybersecurity habits you build this month.

Go ahead. Let your phone take a little break.

Your next step: Check your device settings today and turn on automatic updates if available.

Don’t Take the Scammer Bait

This is where things get interesting.

Cybercriminals don’t always need complicated technology to trick someone. Sometimes, they just need to send a convincing message at the right moment.

• A text saying your package is delayed.
• An email claiming your account has been compromised.
• A phone call from someone pretending to be your financial institution.
• A message from a friend asking you to send money.
• The goal is often the same: Get you to act before you have time to think.

And with artificial intelligence helping scammers create more convincing messages, spotting a scam isn’t always as easy as looking for bad spelling or obvious mistakes.

Try the 3 R’s: Recognize, Resist, and Report

Recognize

Pay attention to unexpected messages, especially those that:

• Create a sense of urgency or fear.
• Ask for personal or financial information.
• Request payment or money transfers.
• Include unfamiliar or shortened links.
• Use a website address that looks almost correct.

For example, a message might look like it’s from a company you know, but the link could lead somewhere completely different.

And remember: Perfect spelling doesn’t mean a message is legitimate.

Resist

Take a few seconds before you click, respond, or answer.

Ask yourself:

• “Was I expecting this message?”
• “Is this really from the company or person it claims to be?”
• “Why are they asking me to act so quickly?”

If you’re unsure, don’t click the link. Instead, contact the company directly using a trusted phone number or official website. You don’t have to answer the phone, respond to the text, or click. It’s not rude. It’s a smart way to protect yourself.

Report

If you suspect a phishing message or scam, report it when possible and delete it.

If you receive a suspicious communication claiming to be from Achieva, visit our Security Awareness page for information on protecting yourself and reporting fraudulent communications.

Your next step: The next time you receive an unexpected message, pause before acting. A few seconds of skepticism can help protect your information.

A Little Skepticism Can Go a Long Way

You don’t need to know everything about cybersecurity to make a difference.

You just need a few good habits.

This Cybersecurity Awareness Month, take a moment to:

• Create stronger, unique passwords.
• Turn on multifactor authentication.
• Install those software updates.
• Pause before responding to unexpected messages.

These small steps can help protect your personal information and make life more difficult for cybercriminals.

At Achieva Credit Union, we’re here to help you stay informed and protect what matters.

Don’t make it easy for them. Make your online security a little stronger today.

For more information and helpful security tips, visit Achieva’s Security Awareness page.

Cybersecurity Awareness Month FAQs