I sat down recently with a prospective client to review her portfolio.
We were going to talk about allocation. Risk tolerance. Long-term planning.
Instead, we talked about public Wi-Fi at Panera.
She casually mentioned wanting to connect her old iPad to the public network so we could pull up some account information.
“Do you have a VPN?” I asked.
She paused.
“What’s a VPN?”
And that’s when the meeting changed.
The Invisible Risk Most People Don’t See
What struck me wasn’t a lack of intelligence. She’s sharp.
What struck me was how unaware she was of the everyday cybersecurity risks most of us face.
As we talked, a few things surfaced:
- She kept passwords in a notebook
- She also stored them in her phone’s reminders app
- She didn’t use a password manager
- She had no antivirus protection installed
- She had never frozen her credit
- She didn’t have credit monitoring
When we opened her iPhone’s built-in password manager, there were multiple yellow warning symbols. Several of her passwords had already appeared in known data breaches.
She had no idea.
Why This Matters More Than Ever
You can build a perfectly diversified portfolio. You can reduce taxes. You can optimize Social Security. But if someone gains access to your identity or financial accounts?
The damage can be immediate and overwhelming.
Cybersecurity is no longer “tech stuff.”
It’s financial planning.
The Foundational Layers of Digital Protection
Let’s walk through the basics — not in fear, but in preparedness.
1. Don’t Use Public Wi-Fi Without Protection
Public Wi-Fi networks (coffee shops, airports, hotels) are common hunting grounds for bad actors.
If you’re accessing financial information:
- Use a VPN (Virtual Private Network)
- Or better yet — use your cellular hotspot instead
A VPN encrypts your internet connection so others on the network can’t intercept your data.
I personally use Bitdefender because it combines antivirus, firewall, and VPN tools in one ecosystem. That doesn’t mean it’s the only option — but having something reputable matters.
2. Use a Real Password Manager
Writing passwords in a notebook or storing them in Notes/Reminders apps feels safe.
It’s not.
A password manager like 1Password:
- Generates long, random passwords
- Stores them in encrypted form
- Alerts you to known data breaches
- Syncs across devices securely
The goal is simple:
- No reused passwords.
- No guessable passwords.
- No memory-based systems.
Every account gets a different, randomized login.
3. Turn On Two-Factor Authentication (2FA)
If available, always enable two-factor authentication.
That means:
Even if someone gets your password, they can’t log in without a second verification step (usually a code sent to your phone or authentication app).
This single step blocks a massive percentage of account takeover attempts.
4. Freeze Your Credit (Yes, Even If You “Don’t Need It”)
One of the most underutilized tools available to consumers is a credit freeze.
You can freeze your credit for free at:
- Experian
- Equifax
- TransUnion
When your credit is frozen:
- No one can open new credit in your name unless you temporarily lift the freeze.
- It does not impact your credit score.
- It simply blocks unauthorized activity.
In today’s environment, this should be standard practice.
5. Use Credit Monitoring
Freezing credit prevents new accounts from being opened. Monitoring alerts you if something suspicious happens.
Services like Aura (and others) provide:
- Credit alerts
- Identity monitoring
- Dark web scanning
- Fraud support if something occurs
Again — it’s about layers.
The Bigger Lesson
The woman I met with yesterday is not irresponsible. She’s normal.
Most people are managing retirement accounts, Medicare decisions, estate planning — all while unknowingly leaving digital doors wide open.
We talk a lot about diversification in investments.
We should also talk about diversification in protection.
Firewall.
Password manager.
Two-factor authentication.
Credit freeze.
Monitoring.
Layers.
This Is Now Part of Financial Planning
If you’re a client of ours — or considering becoming one — understand this:
Protecting your financial life includes protecting your digital life.
If you’re unsure where you stand, ask.
Sometimes the most important meeting isn’t about returns.
Sometimes it’s about making sure no one else gets them.