Cybersecurity Basics for Seniors: A No-Jargon Setup Guide for Adult Children

Most cybersecurity advice written for seniors is either too vague ("be careful online!") or too technical ("enable MFA on all TOTP-compatible services"). Neither helps the adult child sitting next to their parent at a kitchen table trying to actually get something set up before Sunday dinner ends.

This guide covers exactly four things — the four cybersecurity setup tasks with the highest impact for an elderly parent's safety — and explains them in the sequence that makes them easiest to complete in a single 45-minute session.

Why This Matters More Than It Used To

The threat model for seniors has changed dramatically in the last five years. What used to be phone-based scams have migrated online: tech support fraud now arrives as a browser pop-up, romance scammers communicate through apps, phishing emails impersonate Medicare and Social Security, and malicious ads on legitimate websites serve as entry points for malware.

Technical defenses do not replace teaching good judgment, but they create a layered environment where scammers have to work harder to reach your parent. Each of these four steps eliminates an entire category of attack vector.

Step 1: Set Up a Password Manager (30 Minutes)

Why the notebook method fails

Many seniors keep passwords in a physical notebook. This creates three problems: the notebook can be stolen by visitors or caregivers, passwords written down are rarely updated when they should be, and seniors tend to reuse the same simple password across every account. One breach of any account leads to compromise of all accounts.

A password manager solves all three problems. It stores passwords in an encrypted vault accessible only with a master password, generates strong unique passwords automatically, and can be set up so you (the adult child) can help recover access if the master password is forgotten.

Which password manager to choose

For most families: 1Password Families ($4.99/month for up to 5 people)

1Password's family plan includes an "Account Recovery" feature that allows you to designate a trusted family member who can help restore access if your parent forgets their master password. This is the feature that makes it worth the subscription cost for elder care contexts. The interface is clean and large, and 1Password has a well-documented setup process.

If cost is a concern: Bitwarden (free for personal use)

Bitwarden is open-source, free, and highly secure. It lacks the same family recovery feature, but you can set up an account and retain the email address for recovery purposes. Slightly more technical interface than 1Password, but manageable.

How to set it up in one sitting

1. Install the app on your parent's phone and the browser extension on their computer
2. Create the account using an email address you both have access to
3. Set the master password to something memorable but strong — a 4-word phrase works well ("SunriseCoffeeBlueJay2024")
4. Import or manually enter the 10-15 most important accounts (email, banking, Medicare, social media)
5. Show your parent how to copy a password from the app when prompted — you are only asking them to learn one new habit

From that point forward, the password manager auto-fills credentials. Your parent does not need to remember passwords beyond the master one.

Step 2: Enable Two-Factor Authentication on Critical Accounts (15 Minutes)

Two-factor authentication (2FA) means that even if a scammer steals your parent's password, they still cannot access the account without a second piece of verification — typically a code sent to the phone.

Which accounts need 2FA first

Prioritize in this order:

1. Email account (this controls password resets for everything else)
2. Online banking and investment accounts
3. Social Security My Account (ssa.gov)
4. Medicare.gov account

The safest 2FA method for seniors

For most seniors, SMS text message 2FA is the practical choice. It is not the most secure option (SIM swapping attacks exist), but it is dramatically more secure than no 2FA at all, and seniors can manage it reliably. The text simply says "Your code is 847291" and they type it in.

If your parent has a smartphone and is willing to learn one more app, Authy is a better authenticator than SMS. It backs up codes across devices and is more resistant to SIM swapping. But do not let the perfect be the enemy of the good — SMS 2FA today is far better than waiting for your parent to be comfortable with Authy.

How to enable it

For Gmail: Settings → Security → 2-Step Verification → Get Started → choose Text message For a bank account: Security settings vary; call the bank's customer service line and ask "How do I turn on two-step verification for my online banking?"

Step 3: Install Browser Protection (10 Minutes)

Tech support scams most commonly reach seniors through the browser — specifically through malicious advertisements on otherwise legitimate websites. A senior searching for a recipe, clicking a news link, or visiting a coupon site can encounter an ad that redirects to a fake "Your computer is infected" page with a blaring alert.

Two browser extensions eliminate most of this risk entirely.

uBlock Origin (Free, Chrome / Firefox / Edge)

Install from the Chrome Web Store or Firefox Add-ons. No configuration needed — turn it on and it immediately blocks malicious advertising that serves as the vector for tech support scam pop-ups. This single extension eliminates the majority of the "your computer has a virus" pop-up problem.

Malwarebytes Browser Guard (Free)

This extension specifically targets tech support scam pages and known phishing domains. It catches things that slip past uBlock Origin and displays a clear warning page before your parent lands on the malicious site. Install alongside uBlock Origin.

After installing both, show your parent what the block page looks like — a clear warning from the extension — so they know what it means and do not panic if they see it.

Step 4: Configure Phone Settings to Silence Unknown Callers (5 Minutes)

This step alone eliminates the vast majority of phone-based scam attempts.

For iPhone

Settings → Phone → Silence Unknown Callers → toggle ON

This sends any call from a number not already in your parent's contacts to voicemail automatically. Legitimate callers leave voicemails; scammers almost never do. Your parent sees a voicemail notification and can listen at their convenience without ever being pressured in real time.

Ensure all important numbers are saved in your parent's contacts first — their doctor's office, pharmacy, Medicare's number (1-800-MEDICARE), the bank's number.

For Android (Samsung)

Phone app → Settings (three dots) → Caller ID and Spam Protection → toggle ON

For Google Pixel phones: Phone app → Settings → Spam and Call Screen → Call Screen → Automatically Screen

Adding a third-party call blocker for landlines

If your parent has a landline and receives scam calls there, install Nomorobo ($1.99/month). It connects to the landline phone account through your carrier's settings and blocks known robocall numbers before they ring. See our detailed guide on stopping robocalls on a landline for the full setup process.

A Note on Framing These Conversations

Many seniors resist what they perceive as their adult child taking over their technology. The most effective framing positions these as things you are doing on your own accounts too — which is true.

"Dad, I've been doing a security audit on my own accounts this week because there's been so much fraud news lately. I updated everything to a password manager and turned on two-factor authentication. I'd really appreciate it if we could do the same for yours — not because you're doing anything wrong, but because these are things everyone should have now. It took me about an hour. Can we do it together Sunday?"

This frames the session as collaborative security hygiene, not remediation of a perceived vulnerability.

Cybersecurity setup is one of seven layers of protection in the Elder Scam Shield guide. The guide also covers financial monitoring, the Trusted Contact Person system, legal protections, and step-by-step recovery procedures for when a scam has already occurred. Download the complete guide here.