How to: devices 💻📱

How to: devices 💻📱

These step-by-step guides will help you complete each item on the  IT security checklist for employees .

Check if your operating system is (still) supported

An unsupported OS no longer receives security patches, leaving your device vulnerable to attacks that have already been fixed for everyone else.
Mac:
  • Step 1: Find out which operating system (OS) you're running:
  • Click the Apple logo → About This Mac
  • Step 2: Check if it's still supported  here .
Windows:
  • Step 1: Find out which operating system (OS) you're running:
  • Press Windows key + R, type winver, press Enter
  • Step 2: Check if it's still supported on  Microsoft's official page . Also  this page  with full Windows lifecycle/support date can be useful.


Lock your device with a password, PIN, or bio metric data

Without a lock screen, anyone who picks up your device has instant access to your accounts, files, and messages.
Mac:
  • Apple menu → System Settings → Touch ID & Password
  •  Set a unique device passcode or password 
Windows:
  • Settings → Accounts → Sign-in options
  •  Configure Windows Hello 
iPhone / iPad:
  • Settings → Face ID & Passcode (or Touch ID & Passcode) → Turn Passcode On
  •  Set a passcode on iPhone 
Android:
  • Settings → Security → Screen lock
  •  Set screen lock on an Android device 


Set automatic screen lock

A device left unattended but unlocked is just as exposed as one with no password at all. Auto-lock ensures the protection actually kicks in.
Mac:
  • Apple menu → System Settings → Lock Screen, then set "Start Screen Saver when inactive" and enable "Require password after screen saver begins or display is turned off."
  •  Change Lock Screen settings on Mac 
Windows (Set screen/sleep timeout + screensaver with lock-on-resume):
  • Step 1: Sleep/screen off timeout:
  • Settings → System → Power & battery → Screen, sleep & hibernate timeouts
  •  Power settings in Windows 
  • Step 2: Lock on screensaver (requires password on resume):
  • Settings → Personalization → Lock screen → Screen saver settings
  •  Configure a screen saver in Windows 
iPhone / iPad:
  • Display & Brightness → Auto-Lock, then choose a length of time.
  •  Set when iPhone locks automatically 
Android:
  • Settings → Display → Screen timeout (exact path varies slightly by manufacturer)
  •  Set screen lock on an Android device 


Check & install security software

Malware and ransomware can silently steal data or lock you out of your own files. Security software catches threats before they cause damage.
Mac: XProtect (built-in, automatic)
  • MacOS includes built-in antivirus technology called XProtect for signature-based detection and removal of malware. Apple issues updates automatically — by default, macOS checks for these daily. No action needed; it runs silently in the background.
  •  For more info - Apple support page 
Windows: Microsoft Defender (built-in, free)
  • Microsoft Defender is already built into Windows 10 and 11.
  • To check if it's enabled: Start → Settings → Update & Security → Windows Security → Virus & threat protection. Under "Virus & threat protection settings", select Manage settings and check that Real-time protection is set to On.
  •  Microsoft support official guide 
iPhone / Android
  • Both platforms have strong built-in security. Apple's App Store and Google Play both vet apps for malware, and neither platform officially recommends or supports third-party antivirus apps. No action needed.
Want extra protection? (optional)
If your organisation requires additional security software beyond the built-in tools, here are 2 install guides:
  •  How to Install and set up Bitdefender App on macOS 
  •  How to install your Bitdefender security solution on Windows 
  •  Malwarebites quick start guide (Mac & Windows) 


Enable disk encryption

If your device is lost or stolen, encryption makes your files completely unreadable to anyone who doesn't have your password.
Mac (FileVault):
  • Check if it's already on: Apple menu → System Settings → Privacy & Security → scroll down to FileVault.
  •  Protect data on your Mac with FileVault 
Windows (BitLocker / Device Encription):
  • Windows Pro, Enterprise, and Education:  BitLocker 
  • Important: once enabled Bitlocker, make sure to  back up your recovery key  — without it you can lose access to your data.
  • Windows Home:  Device Encryption 
  • Check if it's already on: Go to Settings → Privacy & Security → Device encryption. If Device Encryption is turned off, turn it On.



Check that all security updates are installed

Most cyberattacks exploit known vulnerabilities that updates have already fixed. Staying current is one of the simplest and most effective things you can do.
  •  Check for Mac updates 
  •  Check for Windows updates 
  •  Check for iPhone/iPad updates 
  •  Check for Android updates 



Set your device's recycle bin to delete files automatically after 30 days

Automatic deletion ensures sensitive data doesn't linger there indefinitely.
  • Mac:  Automatically remove items from the Bin after 30 days 
  • Windows:  Delete files automatically on Windows (recycle bin + downloads folder) 


Set your OS and apps to automatically update

Unless a particular workflow makes this problematic.
  • Mac:
  • System Settings > Software Update > Automatically keep my Mac up to date
  • App Store > Preferences > Automatic Updates
  •  Keep your Mac up to date 
  • Windows:
  • Settings > Update & security > Windows Update > Advanced options > Choose how updates are installed > Automatic (recommended)
  • Microsoft Store > Account > Settings > App updates > Update apps automatically
  •  Turn on automatic app updates