Rather than be caught unawares, surrendering bank account information and sexy selfies to nefarious, faceless internet criminals, follow these steps now to protect yourself. You know the old saying — an ounce of prevention is worth a pound of cure. Doubly so on the internet.

Use better passwords

That means no pet names, no birthdays, no kid names. Get creative with a complex string of upper and lowercase letters, numbers, and symbols. You might even think of this as an opportunity to give yourself a motivational phrase like, “Youarebrilliantin2019!” Set up passwords — and different ones! — on your voicemail, Wi-Fi, and individual apps for banking and email.

…and use a password manager

Password managers like 1Password and LastPass make logging into websites simple without leaving yourself vulnerable to problematic browser autofill. One master password gains access to all the others, so you want it to be long and complex with numbers and special characters so not even the most determined hacker can guess it. From there, the password manager takes care of all your other password.

Employ multi-factor authentication

Sheera Frenkel, who writes about cybersecurity for The New York Times, says that a password manager and multifactor authentication “are the bare minimum of what we should all be doing. And even with all that, I just assume I’m going to be hacked any day.” Here’s how to set up multi-factor authentication on Apple, Google, Instagram, and more.

Keep your operating systems up-to-date

Most successful hacks exploit vulnerabilities of out-of-date operating systems. When Apple or Android tells you an update is ready, download and install it. Ditto with apps. Keep them up-to-date to protect against data breaches, and be mindful which ones you download. No longer using Shazam or Tinder? Delete ’em.

Use “Find My Phone”

You can set your phone to automatically erase itself after a certain number of incorrect passcode attempts. You can also use Apple and Google’s “find my device” services, which can locate your phone on a map, remotely lock it, make it ring or the nuclear option — delete it entirely.

Beware open wifi

The danger isn’t in your local Intelligentsia — though you shouldn’t log into your bank accounts on any open networks — but if you’re ever unsure about a wireless network, stick with your phone’s mobile internet connection or use a VPN, which routes your activity through a private encrypted connection. Here’s a recent rating of VPN services by PC Mag to help you choose.

There’s no such thing as 100% security but following these steps will keep your digital data as safe as a citadel.