I Studied Cybersecurity. Here Are 10 Things I Stopped Doing Online

If you read Part 1, you already know that learning cybersecurity changed some very ordinary habits for me.

• I stopped reusing passwords.
• I stopped clicking links without checking them.
• I became more careful about where I download software.
• I started thinking twice before sharing personal information.
• And I stopped ignoring security updates.

None of these changes were complicated.

They were mostly small decisions.

But the more I learned about cybersecurity, the more I started noticing other things I was doing without thinking.

• Things like connecting to Wi-Fi just because it was available.
• Giving apps permissions without reading them.
• Plugging in a USB drive because someone handed it to me.
• Sharing verification codes when someone sounded convincing.
• And assuming that my important files would somehow always be there when I needed them.

So here are the other five things I stopped doing.

6. I Stopped Connecting to Random Wi-Fi Networks Without Thinking

Free Wi-Fi is convenient.

• You're at a café.
• At the airport.
• At college.
• At a hotel.

You see a network with a familiar-looking name and connect.

I used to do this without giving it much thought.

Then I started learning more about network security.

I realized that connecting to a network isn't just about getting internet access.

You're trusting that network with your connection.

That doesn't mean every public Wi-Fi network is dangerous.

It means I stopped treating every available network as automatically trustworthy.

There can also be fake networks designed to look like legitimate ones.

For example, imagine you're sitting in a café called "Coffee House."

You see:

CoffeeHouse_WiFi

You connect.

But what if someone nearby created:

CoffeeHouse_Free_WiFi

just to attract people?

The name alone doesn't tell you who actually operates the network.

What I do now

I try to use trusted networks whenever possible.

If I need to use public Wi-Fi, I avoid doing sensitive things unless necessary, especially accessing important accounts or handling sensitive information.

I also make sure HTTPS is being used when I visit websites and keep my device's security settings enabled.

And if I don't need Wi-Fi anymore, I disconnect.

My rule now

Free Wi-Fi isn't automatically safe Wi-Fi.

Convenience is nice.

But I don't want convenience to become my security strategy.

7. I Stopped Plugging in Unknown USB Drives

This one sounds almost too simple.

Someone gives you a USB drive.

Maybe they say:

"Just check this file."

You plug it in.

Done.

Except you don't actually know what's on that drive.

USB devices can carry malicious files or programs. In some situations, even a device itself can be designed to behave maliciously.

The problem is that a USB drive doesn't look dangerous.

There isn't usually a giant warning saying:

"Congratulations, you are about to make a bad cybersecurity decision."

It just looks like a normal USB drive.

That made me rethink how casually I used them.

Imagine finding a USB drive lying outside your college. You might be curious.

• Maybe it contains someone's assignments.
• Maybe photos.
• Maybe nothing important at all.

But you don't know.

And curiosity isn't a good reason to connect an unknown device to your computer.

What I do now

If I don't know where a USB drive came from, I don't connect it to my main computer just to see what's inside.

If I need to transfer files, I prefer trusted devices and known sources.

I also keep security software enabled and avoid opening suspicious files simply because I'm curious.

The lesson

Not every unknown device needs to be investigated.

Sometimes the safest thing you can do is simply leave it alone.

8. I Stopped Giving Every App Every Permission

This is something almost everyone has done.

You install an app.

• Then it asks: Allow access to your location?

You tap: Allow.

• Then: Allow access to contacts? Allow.
• Allow access to microphone? Allow.
• Allow access to photos and videos? Allow.

At some point, you realize you've given an app access to half your phone.

And you may not even remember why.

I started paying much more attention to permissions after learning about privacy and data collection.

Because the question isn't only:

"Is this app safe?"

It's also:

"Does this app actually need this permission?"

• Why would a simple calculator need access to your contacts?
• Why would a basic flashlight app need your location?
• Why would a game need access to your microphone when there's no voice feature?
• Sometimes there may be a legitimate reason.
• Sometimes there isn't.

What I do now

Before installing an unfamiliar app, I think about what permissions it is asking for.

I also review permissions for apps I already have installed.

If an app doesn't need access to something, I don't give it access.

And if an app suddenly asks for a permission that doesn't make sense, I stop and investigate.

My simple rule

The less unnecessary information an app can access, the better.

You don't have to distrust every app.

Just don't give every app the keys to everything.

9. I Stopped Sharing OTPs and Verification Codes

This is probably one of the most important changes I made.

I became much more careful with OTPs and verification codes.

Because scammers don't always need to "hack" an account technically.

Sometimes they just need you to give them the code.

Imagine you receive a call:

"Hello, I'm calling from your bank. We noticed a suspicious transaction."

• They sound professional.
• They know your name.
• They explain the situation confidently.
• Then they say:

"You'll receive an OTP. Please tell me the code so we can cancel the transaction."

This is where I stop. The person might sound convincing. The story might sound believable.

But the request itself is the warning sign.

An OTP or verification code is often intended to prove that you are authorizing something.

Giving it to someone else can defeat that protection.

The same applies to verification codes for email accounts, social media, messaging apps, shopping accounts and other services.

What I do now

I never share OTPs or authentication codes with someone who contacts me unexpectedly.

If someone claims to be from a company, I don't rely on the phone number or message they provide.

I go through the company's official app or website instead.

And if someone creates urgency around a verification code, that makes me even more cautious.

One sentence I remember

If someone asks me for a code that was sent to my phone, I don't give it to them.

It's that simple.

10. I Stopped Assuming My Files Were Automatically Safe

This one took me a while to understand.

I used to think: "My files are on my laptop, so they're safe."

But what happens if the laptop stops working?

• What if the storage fails?
• What if ransomware encrypts the files?
• What if I accidentally delete something important?
• What if the device is lost or stolen?

Suddenly, having only one copy doesn't look very safe.

That's when I started thinking about backups differently.

A backup isn't just something companies should worry about.

Students have important data too.

• College assignments.
• Projects.
• Certificates.
• Photos.
• Notes.
• Code.
• Documents.
• Personal files.

Losing those can be incredibly frustrating.

Especially after spending months working on something.

What I do now

For important files, I try not to keep only one copy.

Depending on the type of file, I may keep another copy on trusted cloud storage or another storage device.

For projects, I also use version control when it makes sense.

And occasionally, I check whether the backup actually exists instead of simply assuming it does.

Because there's an important difference between:

"I think I have a backup."

and

"I know I have a backup, and I can restore it."

My rule now

If losing a file would hurt, I should probably have another copy.

What Part 2 Taught Me

The interesting thing about cybersecurity is that the lessons don't always feel technical.

I haven't suddenly become someone who checks every packet on my network before opening Instagram.

• That's not realistic.
• Instead, cybersecurity taught me to pause.
• Before connecting.
• Before clicking.
• Before installing.
• Before sharing.
• Before trusting.

And that small pause can make a big difference.

The five habits from Part 2 are simple:

• Don't connect to random Wi-Fi networks without thinking.
• Don't plug unknown USB devices into your computer.
• Don't give apps permissions they don't actually need.
• Never share OTPs or verification codes with someone who asks for them.
• Don't rely on a single copy of important files.

None of these habits will make you completely safe online.

Nothing can guarantee that.

But cybersecurity isn't really about becoming impossible to attack.

It's about reducing unnecessary risk.

The Bigger Lesson

When I first started studying cybersecurity, I thought I would mostly learn about hackers, malware, networks, vulnerabilities and security tools.

And yes, I am learning those things.

But the bigger lesson has been something much simpler.

Security is often about everyday decisions.

The most sophisticated security system in the world can't help much if someone willingly gives away their password.

• A strong antivirus can't help if you install every random program you find.
• A secure account isn't very secure if you hand someone your verification code.
• And a computer with excellent security can't recover a file that was never backed up.

One Final Question

Before doing something online, I sometimes ask myself:

"What could go wrong if I do this?"

It takes only a few seconds.

Sometimes the answer is: "Probably nothing."

And that's fine.

But sometimes that question makes me notice something I would have completely ignored before.

• A strange Wi-Fi network.
• An unnecessary permission.
• An unknown USB drive.
• A person asking for an OTP.
• A file that exists in only one place.

Those few seconds of thinking can be worth a lot more than the few seconds I save by acting without checking.

🔐 Cybersecurity Awareness Month

October is Cybersecurity Awareness Month.

You don't need to make huge changes to stay safer online. Start with small things.

• Check your passwords.
• Turn on MFA.
• Review your app permissions.
• Keep your devices updated.
• Back up important files.
• Be careful when using public Wi-Fi.
• Think twice before clicking on something suspicious.

Cybersecurity isn't just about technology.

It's also about the habits we build every day.

Sometimes, the simplest security step is to stop and think before you click.

Stay curious. Stay careful. Stay secure. 🔐

📖 Read Part 1

Haven't read Part 1 yet? Check it out here:

I Studied Cybersecurity. Here Are 10 Things I Stopped Doing Online

In Part 1, I covered the first five things I changed: passwords, phishing links, unsafe downloads, oversharing personal information, and ignoring security updates.