Why digital devices and online accounts need spring cleaning
Carrying out the digital equivalent of spring cleaning a home isn’t just an opportunity to tidy up our online lives. Eliminating dust bunnies like dormant accounts and forgotten files can help protect personal data, according to cybersecurity experts.
“Clutter is fuel for scammers. Old accounts, exposed data and forgotten apps give them more ways in,” Michael Sherwood, a product vice president at cybersecurity firm Malwarebytes, said. “Cleaning up your digital life is one of the simplest ways to shrink your attack surface in a threat landscape that’s getting smarter, faster, and more automated.”
Here is a digital spring cleaning checklist:
Free up storage space
Running out of internal storage can slow down devices or prevent them from downloading essential operating system updates. Personal gadgets usually come with built-in tools that instruct users on how to free up space.
Archive important files by copying them to an external drive, cloud storage or both, and then delete them from the device.
Declutter your inbox
Culling the clutter can help boost productivity and focus, and there are tricks to make the process less tedious and time-consuming.
Sort or filter your inbox by size to float the biggest messages—usually those with oversized file attachments—to the top for deletion. Do the same by sender or date so you can delete old and unneeded emails, or big batches from prolific senders.
Now might also be a good time to unsubscribe from any mailing lists or newsletters you don’t read anymore.
App check
Another way to free up space is to go through the apps on your phone and delete the ones you no longer use.
But don’t stop there. If any of those apps required you to sign up for an account, don’t forget to log in and delete the account as well. Otherwise, any details you provided will remain on file and vulnerable to hackers.
“Every dormant account is an open door. Scammers actively target abandoned logins because no one’s watching,” Sherwood said.
Update apps and software
Make sure the apps you’re keeping are the latest version by checking for app store updates. Same goes for the operating systems on your phone and computer. Check for the latest software updates and patches for the best performance and security.
Social media review
Cybersecurity experts advise taking the time to audit your digital footprint to see how exposed you are on Facebook, Instagram, TikTok, LinkedIn, and other social media platforms.
The idea is to “review what personal info is out there and limit what apps and services can access,” Sherwood said.
“Limiting what personal information is publicly available helps to reduce the risk of falling victim to cyberattacks such as phishing and identity theft,” said Chad Thunberg, chief information security officer at cybersecurity company Yubico.
Third parties
Has a website ever suggested logging in with your Facebook or Apple account? Did your smart thermostat or doorbell camera request access to your Google account?
It’s worth checking which third-party apps and services have access to your accounts. Removing unneeded ones is another way to tighten up your online privacy.
Get a better key
Tighten up security with review of your password practices. Make sure you’ve got multi-factor authentication turned on for your accounts, if you haven’t done it already.
Better yet, get a passkey. It’s a “modern login standard” that offers much better security than a traditional password, Thunberg said. Passkeys are two parts of a code that only make sense when combined, kind of like a digital key and padlock. A growing number of online services and platforms now support passkeys, including Google, Amazon, Facebook and eBay.
Passkeys need to be authenticated with your fingerprint, face scan or PIN, which means “they cannot be faked, intercepted or replicated by AI-based attacks,” Thunberg said.
You’ll need a password manager to store your passkeys if you’re not already using one. Apple, Google, and Samsung include their own password manager apps on phones, but there are third-party options from 1Password, BitWarden, Nordpass, and many others.
