Design decisions that decide how bad an incident gets.
Fake apps ride official stores' trust — check the developer, reviews, download counts, and permissions before installing, and treat search results and ads as hostile delivery routes.
DNS filtering blocks whole categories of bad domains before anything loads — malware hosts, phishing pages, adult content — and configuring it takes one setting on your router or devices.
A compromised email account is a master key — recover it first, then evict the intruder's persistence, then survey what else it unlocks, in exactly this sequence.
Putting IoT gadgets on a separate Wi-Fi network means a compromised camera can't reach your laptop — and every modern router already has the feature, labeled guest network.
A firewall filters network traffic by rules — allowing expected connections and blocking unsolicited ones — and the one built into your OS and router already covers home users if left alone.
Most breaches exploit flaws fixed months earlier — a simple patch routine of automatic updates plus a short monthly checklist closes the gap for homes and small offices.