Online security doesn't have to be complicated. With a few simple habits, you can protect your bank account, email, and personal information from the scammers who target everyone — but who specifically target older adults. This guide uses plain language and no jargon.
Why online security matters for older adults
Seniors are disproportionately targeted by online fraud for a few reasons: they often hold more savings, may be less familiar with common scam tactics, and are more likely to be home and available to answer fraudulent calls or emails. The FBI reports that Americans over 60 lose more money to internet crime than any other age group.
The good news: the most effective protections are simple habits, not technical knowledge. You don't need to understand how computers work to stay safe — you just need a few key practices.
The 3 most important rules
- 1.Never use the same password twice. If criminals steal your password from one website, they'll immediately try it on your bank, your email, and everywhere else. Using a different password for each account stops this cold.
- 2.Make passwords long, not complicated. A password like "SunflowerGardenBlue2026" is much stronger than "P@ss1!" — and easier to remember. Length is the key factor. Aim for at least 12 characters.
- 3.Never give your password to anyone. Your bank will never call and ask for your password, PIN, or security code. Neither will Microsoft, Apple, Amazon, or any government agency. Anyone asking for this information is attempting to scam you.
How to create a strong, memorable password
Here's a simple method that creates strong passwords without technical tools:
- Think of three words you'll remember — a color, an object, and a place. Example: blue, piano, Vermont
- Combine them:
BluePianoVermont - Add a number and symbol:
BluePianoVermont2026!
That's 22 characters — very strong. You've created a password only you would think of, that's long enough to resist automated attacks.
Alternatively, use our Memorable Password Generator to create one automatically.
Writing passwords down safely
It's perfectly acceptable to write passwords in a physical notebook kept at home — just follow these rules: don't label it "Passwords," don't include the site name next to the password (write the site name separately elsewhere), and keep it in a locked drawer or safe, not next to your computer.
Criminals who want your passwords are usually online, not in your home. A physical notebook is far safer than using the same password everywhere or storing passwords in plain digital files.
Recognizing password-stealing scams
Phishing emails: Fake emails that look like they're from your bank, Amazon, or the government. Signs of a fake: urgency ("your account will be closed today"), spelling errors, the email address doesn't match the company name, and links that go to odd-looking websites.
Tech support scams: A popup or phone call claims your computer has a virus and you need to call a number. Legitimate companies never contact you this way. Hang up, or close the popup and restart your browser.
Grandchild scams: A caller claims to be a grandchild in trouble, needing money sent immediately. Always call the grandchild back directly on a number you know before sending anything.
The simplest upgrade: a password manager for seniors
If you have a family member who can help set one up, a password manager is the biggest single security improvement available. It remembers all your passwords so you only need to know one — your master password. For seniors, Bitwarden (free) or 1Password are the most beginner-friendly. Once set up, logging into websites becomes easier, not harder.
Priority accounts to protect first
- ✓ Email account — criminals who access your email can reset all other passwords
- ✓ Bank and investment accounts — direct financial loss if compromised
- ✓ Medicare/Social Security online accounts — can be used for identity theft
- ✓ Shopping accounts (Amazon, etc.) — may have saved payment cards
- ✓ Social media — can be used to scam your contacts