Cybersecurity for Mere Mortals

Cybersecurity sounds like a job title, but for a home operator it's a set of habits: strong unique passwords, two-factor auth on the accounts that matter, updates installed without drama, backups that actually restore, and a clear head when something goes wrong. This guide teaches practical security for someone who runs their own machines and SSHes into them — no fear-mongering, no jargon walls, no pretending you can be perfectly safe. You can't. You can be hard enough to bother with that the automated attacks move on — and for a home setup, that's the whole game.

What this guide covers

Thinking in threat models — deciding what actually needs defending
Passwords and passphrases — managers, and why reuse is the real enemy
Passkeys and two-factor auth — the single biggest upgrade you can make
Phishing and social engineering — how manipulation works, and how to spot it
Keeping everything updated — patching without drama
Backups that actually restore — 3-2-1, tested
Your home network — router settings that matter
Hardening SSH — keys, fail2ban, and closing the internet's favorite door
Exposing a service safely — port forwarding, tunnels, and what the scanners will teach you
Scams that target regular people — the hook, the tell, the one-line response
I think I've been hacked — the ordered checklist, done calmly

What it doesn't cover

Enterprise compliance (SOC 2, PCI, HIPAA checklists), pentesting as a career, or the crypto/security-policy wars. Those are real subjects with their own books — this guide is about keeping your machines and accounts safe at home.

How to use this guide

Every command is real and meant to be run on your own machines. Check: blocks show verified output so you know what success looks like. Callouts note Windows, Mac, and Linux differences — pick yours and ignore the rest. Work the chapters in order the first time; after that, use it as a reference.

Chapters

Written to the nine-point writing standard shared by every guide in this series.