Setting up a new laptop and phone securely

A new laptop or phone for university is exciting, and the first hour you spend with it decides how safe it will be for years. Doing a few security steps on day one is far easier than recovering a stolen or hacked device later.

Before you even open the box

• Check whether the model is still supported with security updates: the NCSC points to the Which? device support checker for this.
• If the device is second-hand, the NCSC advises doing a factory reset as soon as you receive it, to remove the previous owner's data and settings.
• Plan to set it up at home on your own Wi-Fi, not in a café, so you are not typing passwords on a public network or in view of strangers.
• Have your main email password and your phone nearby, because you will need them for sign-in and 2-step verification codes.

Updates first, everything else second

• Run all available updates before installing your apps: the NCSC says updates often include security patches that fix flaws attackers could use.
• Turn on automatic updates for the operating system, web browser, office apps, document readers and antivirus (NCSC).
• Updates may need Wi-Fi, power, free storage or a restart, so keep the laptop plugged in and let the update finish.
• Automatic updates can sometimes stop working, for example when storage is low, so check the update screen now and then (NCSC).
• When a device stops receiving updates, the NCSC advises replacing it as soon as you reasonably can.

Lock the screen and encrypt the storage

• Set a screen lock (PIN, password, fingerprint or face) on every device; the NCSC lists this among the first things to do on a new or second-hand device.
• On Windows 11, go to Settings, then Privacy and security, then Device encryption, and switch it on if it is off. If you sign in with a Microsoft account it usually turns on automatically and the recovery key is saved to that account (Microsoft).
• Device encryption works on many Windows Home devices; full BitLocker is in Windows Pro, Enterprise and Education (Microsoft).
• On a Mac, go to System Settings, then Privacy and Security, then FileVault. Apple says Macs with Apple silicon or a T2 chip already encrypt data, and FileVault adds another layer.
• Store any recovery key somewhere other than the device itself: Apple warns that if you forget both your password and the recovery key, your files are lost permanently.

Turn on Find My before you need it

• iPhone, iPad and Mac: sign in with your Apple Account and make sure Find My is on, so you can locate, lock or erase the device later (Apple).
• Android: your phone must be signed in to a Google Account with Find Hub turned on to be found remotely (Google).
• Windows: go to Settings, then Privacy and security, then Find my device. You need a Microsoft account (not a work or school account), administrator rights and location turned on (Microsoft).
• Test it once: open the finder service on another device or in a browser and check your new device appears on the map.

Accounts, passwords and backups

• Use a strong, separate password for your email, because criminals can use your email to reset your other accounts (NCSC).
• The NCSC suggests three random words for a memorable strong password, and a password manager to keep track of the rest.
• Turn on 2-step verification for your main accounts (NCSC). The AI and Digital Skills module lesson on files, backups and passwords goes into more detail.
• Switch on automatic backups straight away, to cloud storage or an external drive, so your photos and key documents are safe from day one (NCSC).