Verify URLs before clicking, check for HTTPS, and avoid public WiFi for sensitive tasks.
The padlock icon in your browser's address bar indicates an HTTPS connection. This means the data you send and receive — including passwords and payment details — is encrypted in transit. Without HTTPS, anyone on the same network can read your traffic in plain text.
Keep your browser updated. Browsers are heavily targeted by attackers and receive security patches frequently. Using an outdated browser is like leaving a known-broken window open. Enable automatic updates and apply them promptly — most take under a minute to install.
Browser extensions deserve serious scrutiny. A malicious or poorly built extension can read your banking passwords, intercept your sessions, and inject ads or tracking scripts into every page. Before installing any extension, check the developer, the number of users, recent reviews, and what permissions it requests.
Saving passwords in the browser is convenient but less secure than a dedicated password manager, especially if you share a device. If you do use browser-saved passwords, ensure the browser requires your system password before revealing them, and never on a shared or public computer.