Key Takeaways
Summary
22 items · 30–60 minutes
Why an Online Safety Audit Matters
Most people set up accounts, install apps, and connect devices over months or years — and rarely look back. Over time, that accumulation creates real risk: old accounts with weak passwords, apps with broad permissions you forgot you granted, and software running versions with known security flaws. An online safety audit is a structured way to close those gaps before someone else finds them.
This checklist walks through the core areas that security professionals consistently flag as most vulnerable for everyday consumers: credentials, two-factor authentication, app permissions, device software, and network habits. You don't need technical expertise — just time and the willingness to act on what you find.
If you're new to thinking about your digital footprint, our introduction to online privacy covers the foundational concepts before you dive in. For a broader look at your financial exposure online, pairing this audit with an annual credit report checkup is also worth considering.
Passwords & Credentials
Two-Factor Authentication (2FA)
App & Account Permissions
Software & Device Updates
Network & Browsing Habits
Tools You'll Need to Complete This Audit
You don't need specialist software to complete most of this checklist, but a few tools will make it significantly faster and more thorough. Gather these before you start.
Password Manager
Generates and securely stores unique, complex passwords so you don't have to remember or reuse them.
Authenticator App
Provides time-based one-time codes for two-factor authentication, replacing less secure SMS codes.
Breach-Checking Service (e.g., haveibeenpwned.com)
Checks whether your email address appears in publicly known data breach databases.
Router Admin Interface
Accessed via a browser to review and update your home router's firmware and network security settings.
VPN (Virtual Private Network)
Encrypts your internet connection when using public Wi-Fi networks to reduce interception risk.
Once you've completed your security audit, you may also find value in auditing your digital spending habits — our subscription app audit checklist helps you identify apps you're paying for but no longer using, which often carry their own permission and privacy risks.
Don't Overlook Your Email Account
Your primary email address is the recovery key for almost every other account you own. If an attacker gains access to it, they can reset passwords across banking, shopping, and social platforms. Treat your email account as the single highest-priority item in this entire audit — enable a strong unique password and 2FA there before anything else.
Free 'Security Scan' Tools Can Be Risky
Be cautious of unfamiliar browser extensions or websites advertising free security scans — some are designed to harvest your credentials rather than protect them. Stick to well-documented tools with transparent privacy policies and use breach-checking services directly in your browser rather than through third-party redirects.
What to Do After the Audit
Completing this checklist gives you a clear picture of where you stand — but the value comes from acting on it. Prioritize the must items first: update every reused or weak password, enable 2FA on your most critical accounts (email and banking especially), and install any pending software updates before moving on to lower-priority items.
Set a calendar reminder to repeat this audit every six to twelve months. Your digital footprint changes constantly — new accounts get created, apps get installed, and security vulnerabilities are discovered in software you already use. A regular review habit is more effective than any one-time fix.
Your Email Is the Master Key to Everything
If you only complete one step from this entire checklist, secure your primary email account first. A compromised email address gives an attacker the ability to reset passwords on virtually every service linked to it — including financial accounts. Use a unique, strong password and enable two-factor authentication before doing anything else.
If you want to extend your financial security review beyond online accounts, a structured spending audit checklist can help you identify recurring charges tied to services you no longer use or recognize — a useful complement to your security work.