Most of us set up our accounts once and never look back. Meanwhile passwords age, old devices stay logged in, and apps quietly collect permissions we forgot we granted. A personal security checkup in Singapore is simply a scheduled hour, once or twice a year, to walk through your digital life and tidy up the loose ends before someone else finds them. Think of it like servicing a car: nothing may be wrong today, but a little maintenance prevents an expensive breakdown later.
This guide gives you a clear, ordered checklist you can work through in a single sitting.
Step One: Passwords and 2FA
Start where the risk is highest, your login credentials.
Go through your most important accounts first: email, banking, Singpass, social media, and any account tied to your payment cards. Your email deserves special attention, because whoever controls your email can reset the password on almost everything else.
For each one, ask three questions:
- Is this password unique? Reusing a password means one leak unlocks many accounts. If you are reusing, change it. A password manager makes unique passwords painless.
- Is it strong? Long is more important than complicated. A passphrase of several unrelated words beats a short string of symbols.
- Is two-factor authentication on? This is the biggest single upgrade you can make. Turn on 2FA everywhere it is offered, favouring an authenticator app or passkeys over SMS codes. Our two-factor authentication guide shows how.
While you are here, check that your recovery options (backup email, phone number) are current. Nothing is worse than being locked out during an emergency because your recovery number belongs to an old SIM.
Step Two: Review Devices and Connected Apps
Every major account keeps a list of devices and third-party apps that have access. Over the years this list grows: an old phone you sold, a laptop at a previous job, a game that once asked to use your Facebook login.
Open the security settings of your Google, Apple, and social accounts and look for a section named something like “Your devices”, “Where you’re logged in”, or “Connected apps”. Remove anything you do not recognise or no longer use. If a device you sold is still signed in, that is exactly the kind of gap this checkup exists to close.
Do the same for app permissions on your phone. Which apps can see your location, microphone, camera, contacts, and photos? Revoke anything that does not need the access to do its job. A torch app has no business reading your contacts. Reviewing this regularly is a core part of protecting your privacy settings on your phone.
Step Three: Check for Breaches and Scam Exposure
Data leaks happen to companies large and small, and your details may be caught up in one without any fault of your own. Many browsers and password managers now flag passwords that have appeared in known breaches. If yours does, act on those warnings and change the flagged passwords.
This is also a good moment to reflect on scam habits. Remind yourself of the golden rule: never share OTPs, passwords, banking logins, or Singpass details with anyone. Banks and government agencies never ask for these, and no genuine caller will ask you to install an app so they can “verify” you or remotely access your device. If you ever get caught out, report it to ScamShield and the Police. Taking a moment to refresh your cybersecurity basics and general scam awareness is worth the effort.
Step Four: Backups and Recovery
Security is not only about keeping people out, it is also about being able to recover when something goes wrong, whether that is a hack, a lost phone, or a failed hard drive.
Confirm that your important data is backed up. Your phone should be backing up automatically to the cloud, and your computer should have a backup you could actually restore from. If you have never tested a restore, you do not really have a backup, you have a hope. Our guides on how to back up your phone properly and cloud storage cover the specifics.
Finally, make sure you know the recovery process for your key accounts before you need it. Save your backup codes somewhere safe and offline.
Making It a Habit
A security checkup is most useful when it is regular, not a one-off panic after a scary news story. Put a recurring reminder in your calendar, perhaps aligned with a memorable date like the start of the year or your birthday, and run through this same checklist each time. It rarely takes more than an hour.
The reassuring truth is that good security is mostly a handful of boring habits done consistently: unique passwords, 2FA on, old access removed, permissions trimmed, backups working. Do the checkup, tick the boxes, and you can get on with your digital life knowing the doors are locked.
Further reading: Understanding Biometric Security