How to secure digital accounts and assets

To keep your business safe, you must stop reusing passwords immediately and enable Two-Factor Authentication (2FA) on all your accounts. By using a dedicated password manager and following a strict backup routine for your creative files, you ensure that a single hack or a broken hard drive won't result in the permanent loss of your content and income.

Step 1: Use a professional password manager

Relying on your memory or a physical notebook for passwords is a major security risk. A password manager like Bitwarden, 1Password, or Dashlane generates unique, complex passwords for every site you use and stores them in an encrypted vault. This means you only ever have to remember one password: the master key.

• Create a strong master password: Use a long phrase that is memorable to you but impossible for a computer to guess.
• Sync your devices: Install the manager on your phone and computer browsers so you are never locked out.
• Audit your accounts: Use the "security health" features in these apps to identify and change any weak or leaked passwords from your past.

Step 2: Enable Two-Factor Authentication (2FA)

2FA adds a second layer of protection. Even if a hacker correctly guesses your password, they cannot access your account without a secondary, time-sensitive code. You should prioritise enabling this on your email, banking, and primary content platforms (like YouTube, Instagram, or TikTok).

Avoid using SMS-based 2FA if possible, as phone numbers can be hijacked via "SIM-swapping." Instead, use an authenticator app like Google Authenticator or Microsoft Authenticator. For high-value accounts, consider a physical security key like a YubiKey, which requires a physical "tap" to log in.

Step 3: Establish a "3-2-1" backup routine

As a content creator, your raw footage and creative files are your most valuable business assets. If your laptop or external drive failed today, would your business survive? Follow the industry-standard 3-2-1 rule to ensure your data is resilient:

Requirement	Action
3 Copies of Data	Keep your original working file plus at least two backup copies.
2 Different Media	Store your backups on different types of hardware (e.g., one on an external SSD and one in the Cloud).
1 Offsite Copy	Ensure at least one copy is kept in a different physical location (Cloud storage services like Dropbox, Google Drive, or Backblaze count as offsite).

Hardware and physical security best practices

In the UK, if you handle any customer data (even just an email list), you have a legal responsibility under UK GDPR to keep that information secure. Physical security is the first line of defence.

• Encrypt your drives: Use 'FileVault' on a Mac or 'BitLocker' on Windows. This ensures that if your laptop is stolen, your files remain unreadable to the thief.
• Automate updates: Set your operating system and creative apps to update automatically. These updates often contain vital "patches" for newly discovered security flaws.
• Use a VPN: If you are working on your content in a public space, such as a coffee shop or library, use a Virtual Private Network (VPN) to stop others on the same Wi-Fi network from intercepting your data.

"In the digital economy, your files are your inventory. Protecting them isn't just a technical chore; it's an essential part of business insurance."