Films show hackers breaking through firewalls. Real attacks are usually much simpler. Someone clicks a link in a convincing email, types their password into a fake sign-in page, or reuses a password that was leaked from another website.

Attackers rely on people being busy and trusting. That means the most useful security skill is a habit: pause before you click, pay or share.

• Unexpected messages asking you to act quickly
• Requests to change bank details or buy gift cards
• Sign-in pages reached from a link instead of your bookmark

If something feels off, check it another way, for example by phoning the person on a number you already have.