Essential cybersecurity tips for 2025

We interviewed Frank Post, our Corporate Information Security Officer, to share his expert advice on online safety.

What are some top tips to be aware of to help protect yourself online?

My best advice to anyone, retired or not, is to avoid overcomplicating things. Some individuals may vary in their comfort with technology, from being highly adept to needing support from family members. Here are some key tips:

1. Use a Passphrase, Not Just a Password
   Passwords should be unique and at least 12-15 characters long. Many people use familiar things like birthdays or pet names. Modern security guidelines recommend long and simple passwords over complicated ones. For example, instead of creating a complicated password you might forget and end up writing down, use a memorable phrase. Take a favourite line from a book, remove spaces, and transform it into a passphrase. This is both easy to remember and difficult for attackers to crack.
2. Be Present When Receiving Family Support
   If a family member is helping you navigate an online portal or call, always try to be physically present. That way, you can answer any questions yourself, making it easier to verify your identity and ensuring that only the actions you intend are carried out.
3. Create a Secret Code with Family to Identify Scammers
   Grandparent scams are common. Scammers often impersonate grandchildren in distress, urgently asking for money. A simple solution is to set up a secret code word with your family that only you all know. This way, you can quickly verify if the caller is truly your family member or a scammer.
4. If you receive a QR code either by email or via postal mail, first confirm it’s legitimate before scanning it
   Some scammers may send you a text message, flyer or a piece of mail that includes a QR code, a two-dimensional barcode printed as a square pattern of black and white squares that encodes data. When you scan the code with your phone’s camera, it opens a link to a website where you’re prompted to enter your personal information or login credentials that scammers may try to steal. In other cases, the scammer may use QR codes to launch payment apps or ask you to follow a malicious social media account.
   
   If someone you know sends you a QR code to scan, contact them first before clicking on it to verify it’s safe. If you receive a message from an unknown source, don’t scan the code, even if it seems enticing. If the code comes from what appears to be a reputable source, contact the organization first to verify if it’s legitimate. Some antivirus companies also offer a QR scanner app that can check the safety of a link before you open it.
   
   Below is an example of what a QR code looks like - if you scan it, it will take you to OPB’s secure e-services home page:

Are there any new apps or technologies seniors can use for extra protection and support?

Keeping your device up to date is one of the simplest yet most important steps. Install updates as soon as they become available. Holding on to an outdated device, even if it still functions, can expose you to security risks. After a certain point, manufacturers stop providing security patches, and that leaves older devices vulnerable.

I would also recommend using password managers rather than writing down passwords. While password managers can also be breached, they are generally far more secure than trying to remember passwords or leaving them written on paper.

What’s the most important piece of advice you can offer when going online?

Be suspicious of anything unexpected or unusual. If something doesn’t feel right, it probably isn’t. Develop a relationship with someone tech-savvy who you trust to help guide you and confirm any suspicions you may have. Cybercriminals make scams as seamless as possible to exploit any weakness. Safety tips are timeless and apply to everyone—no matter what your age is. The key is sticking to fundamental practices to prevent yourself from being compromised or hacked.

Staying informed is the best way to protect yourself from online threats. For more information on current scams and fraud, as well as recovery, you can visit the Government of Canada’s Get Cyber Safe(opens in a new tab), Canadian Anti-Fraud Centre(opens in a new tab) and the Province of Ontario(opens in a new tab) website.

Additional source: Better Business Bureau(opens in a new tab)