What We Can Do
This is a living list of what a CS² visit can cover, from the basics to things most people don't even know to ask about.
Don't see something you need? Ask us. If we can't help, we'll point you to someone who can.
Things people tell me on the first call
“Is this email really from my bank?”
“I use the same password for everything.”
“I don’t know what my kids are seeing.”
“Someone from ‘Microsoft’ called me.”
The foundation of everything. Most people are more exposed here than they realize.
What we do
We install and configure Bitwarden or 1Password on every device in your home, import your existing passwords, and show you how to use it day-to-day.
Why it matters
Reusing passwords is one of the most common ways accounts get taken over. When one site is breached, attackers try that same password everywhere else.
What I recommend and why
For most families I set up Bitwarden. It's free, open source, and independently audited. If everyone in the house is on Apple devices, Apple's built-in Passwords app is a simpler option that works well. Either one beats a notebook or one password for everything.
See it on Trusted Tools →What we do
We enable 2FA on your email, bank, social media, and any other critical accounts using an authenticator app, not just SMS.
Why it matters
Even if someone steals your password, they still can't get in without the second step.
What I recommend and why
I prefer an authenticator app or a passkey over text-message codes. Texts can be stolen in a SIM-swap scam, where someone convinces your phone carrier to move your number to their phone. Text codes are still far better than nothing.
What we do
We check your recovery options (backup emails, phone numbers, security questions) and make sure a scammer can't use them to lock you out of your own accounts.
Why it matters
Many account takeovers happen through “forgot password,” not the password itself.
What I recommend and why
Treat security questions like passwords. Instead of real answers anyone could look up, I store made-up answers in your password manager. I'll also help you add a PIN to your mobile carrier account.
What we do
We run your email addresses through Have I Been Pwned and other databases to see if your credentials have already been exposed in a data breach.
Why it matters
Your email and old passwords may already be circulating from past breaches without you knowing.
What I recommend and why
Have I Been Pwned is my go-to. It's run by a well-known security researcher and has been trusted for years. A breach result isn't a reason to panic; it tells us which passwords to change first.
See it on Trusted Tools →Every phone, laptop, and tablet in your home updated and secured.
What we do
We make sure every device is running the latest OS and app versions, and set up automatic updates so it stays that way.
Why it matters
Many attacks target known flaws that an update has already fixed.
What I recommend and why
Turn on automatic updates everywhere and leave them on. The occasional restart is worth it. If a device no longer gets updates at all, I'll tell you honestly whether it's time to replace it.
What we do
We audit what's currently installed, remove junk or dangerous software, and recommend a lightweight security solution if needed.
Why it matters
Many people have no protection, or worse, a fake “antivirus” that's itself malware.
What I recommend and why
For most people, the protection built into Windows and macOS is enough when it's paired with updates and good habits. I'm skeptical of paid security suites that push constant pop-ups and renewal fees.
What we do
We review what apps have access to your camera, microphone, location, and contacts.
Why it matters
Apps routinely ask for more access than they need.
What I recommend and why
If the reason an app wants a permission isn't obvious, turn it off. You can always turn it back on later. A flashlight app doesn't need your contacts.
What we do
Got a new phone, laptop, or tablet? We set it up securely from day one. right accounts, right settings, right protections. Instead of leaving defaults in place.
Why it matters
Factory defaults are rarely the most secure option.
What I recommend and why
Call me before you set up a new device, not after. It's much easier to start right than to fix things later, and we can move your data over safely.
Your router is the front door to everything in your home. Most people have never changed the lock.
What we do
We log into your router, change default credentials, enable the right encryption (WPA3/WPA2), check for firmware updates, and disable remote management if it's on.
Why it matters
An unsecured router can give attackers a way into every device on your network.
What I recommend and why
If your router no longer receives security updates, I'll recommend replacing it. Rental routers from your internet provider usually work fine once they're configured properly.
What we do
We set up a separate guest Wi-Fi network and move your smart home devices (TVs, doorbells, thermostats) onto it. Isolating them from your personal computers and phones.
Why it matters
Smart devices are often poorly secured and shouldn't share a network with the laptop you bank on.
What I recommend and why
Put anything “smart” on the guest network: TVs, doorbells, thermostats, speakers. Keep phones and computers on the main one, and give visitors the guest password too.
What we do
We scan your network and show you everything connected to it, including devices you may have forgotten about or didn't know were there.
Why it matters
Old or forgotten devices left connected are easy entry points for attackers.
What I recommend and why
Anything we can't identify gets a closer look. Devices you no longer use should be disconnected, not just forgotten.
What we do
We configure a DNS filter (like NextDNS or Cloudflare) on your router to block known malicious sites and adult content network-wide, before it even reaches your devices.
Why it matters
It blocks known threats before they load, on every device in the house.
What I recommend and why
NextDNS and Cloudflare's family filter are both good, low-cost options. For the effort involved, this is one of the most valuable changes a household can make.
Teaching your household to recognize scams before they click, in plain English, without the fear tactics.
What we do
We walk through real examples of phishing emails, fake texts, and scam calls. Showing everyone in the household what to look for before they click.
Why it matters
Phishing is one of the most common ways people get hacked, and recognizing it is the best defense.
What I recommend and why
My rule of thumb: never act on the message itself. If an email or text asks you to click, pay, or log in, go to the company's website or app yourself, or call the number on your card.
What we do
IRS calls, Social Security suspension threats, Medicare scams, fake tech support. We train your household on every common script and what to do when it happens.
Why it matters
Phone scams often target older adults, and the losses can be devastating.
What I recommend and why
Hang up, then call back using a number you already trust. No real government agency or bank will demand payment by gift card, wire transfer, or cryptocurrency. I also help families set up a “safe word” for calls claiming a relative is in trouble.
What we do
Facebook Marketplace, Craigslist, Venmo, Zelle overpayments. We cover the most common buying and selling scams hitting Long Island right now.
Why it matters
These scams are designed to look completely legitimate until it's too late.
What I recommend and why
Never accept an overpayment, and meet in a public place. Many police stations have safe exchange spots. Treat Zelle and Venmo like cash: once it's sent, it's usually gone.
What we do
We leave every household with a printed, plain-English reference card covering the most common scam red flags and exactly what to do (and who to call) when something looks off.
Why it matters
A card on the fridge is more useful than a website when you're in the moment.
What I recommend and why
Keep it somewhere visible, like the fridge or next to the computer. In a stressful moment, a checklist beats memory.
Keep kids safer online without turning the house into a surveillance state.
What we do
We configure Screen Time (iPhone), Digital Wellbeing (Android), and Family Safety (Windows/Mac) on every device your kids use. Content filters, app limits, and downtime schedules anything that is necessary.
Why it matters
Default settings let kids reach almost anything.
What I recommend and why
Start stricter than you think you need and loosen up as your kids show responsibility. That's easier than clamping down later. The free tools from Apple, Google, and Microsoft are usually enough.
What we do
We set up network-wide content filtering that blocks adult content, gambling, and other categories on every device in the house.
Why it matters
Settings on a single device can be changed or skipped. A network filter covers everything on your Wi-Fi, including game consoles and TVs.
What I recommend and why
I use it as a backstop, not the only layer. It only covers your home Wi-Fi, so a phone on mobile data isn't protected by it. That's why I pair it with controls on the devices themselves.
What we do
We review your kids' social media privacy settings, lock down what strangers can see, disable location sharing, and walk parents through what to monitor and what to leave alone.
Why it matters
Default social media settings share far more than most parents realize.
What I recommend and why
Private accounts, location sharing off, and no full name or school in the profile. Go through the settings together with your kids so they understand why.
What we do
We facilitate a plain-English conversation with the whole family, kids included, about what's safe to share online, what to do if something feels wrong, and how to come to a parent without fear of getting in trouble.
Why it matters
Kids who feel safe reporting are your best early warning system.
What I recommend and why
The goal is for your kids to come to you when something goes wrong. Promise them they won't lose their devices for telling you, and keep that promise.
Reducing how much of your personal information is floating around the internet.
What we do
We submit removal requests to Whitepages, Spokeo, BeenVerified, and other data broker sites that publish your name, address, and phone number publicly. Or we set you up with a service like DeleteMe that does it automatically.
Why it matters
Scammers use these sites to find targets.
What I recommend and why
You can opt out yourself for free, but brokers often relist you within months. A service like DeleteMe or Optery keeps doing it for you. I'll help you decide whether it's worth the cost.
See it on Trusted Tools →What we do
We walk you through placing a credit freeze at all three bureaus (Equifax, Experian, TransUnion). The most effective thing you can do to prevent identity theft. Free and reversible.
Why it matters
A freeze stops anyone from opening new credit in your name.
What I recommend and why
I recommend this for everyone, including kids and older relatives. It's free, it doesn't affect your credit score, and you can lift it for a few days when you need to apply for credit.
What we do
We configure privacy-respecting browser settings, install an ad/tracker blocker, and optionally switch your default search engine to something that doesn't build a profile on you.
Why it matters
Most browsers, out of the box, share your activity with advertisers.
What I recommend and why
A reputable content blocker also stops many malicious ads, so it's a security tool, not just a convenience. I set up what fits how you actually browse.
What we do
We set up SimpleLogin or Apple's Hide My Email so you can give websites a unique, disposable address instead of your real one. Keeping your inbox cleaner and your identity more private.
Why it matters
If one site gets breached, only that alias is exposed, not your real email.
What I recommend and why
Start with new sign-ups; there's no need to change every account at once. If you're on Apple devices, Hide My Email is already built into iCloud+.
See it on Trusted Tools →This list grows constantly. If you have a specific concern reach out and ask. No judgment, ever.