In partnership with
Smart starts here.
You don't have to read everything — just the right thing. 1440's daily newsletter distills the day's biggest stories from 100+ sources into one quick, 5-minute read. It's the fastest way to stay sharp, sound informed, and actually understand what's happening in the world. Join 4.5 million readers who start their day the smart way.
FROM THE DESK
Someone tried to log into my email from another country last month(and again this month). I got the alert, changed my password, and moved on. But it made me realize that digital security is just another form of preparedness. The threats are different, but the principle is the same: build defenses before you need them.
Here's what I've got this week.
THE BRIEF
Digital Security: Protecting What You Can't Put in a Safe
We've talked about physical preparedness for 41 issues. But most of your life, your money, your medical records, your communication, runs through digital systems. If someone compromises your email, they can reset your bank password, access your medical records, and impersonate you to everyone you know. Digital security is preparedness.
Start with passwords. If you use the same password for multiple accounts, a breach at one site compromises everything. A password manager (Bitwarden is free, 1Password is excellent for families) generates unique, strong passwords for every account and stores them securely. You only need to remember one master password. This single step eliminates the most common attack vector.
Two-factor authentication (2FA) is the second layer. It means that even if someone gets your password, they need a second piece of evidence to log in, usually a code from your phone or a physical security key. Enable 2FA on your email, bank, and any account that matters. Use an authenticator app (Google Authenticator, Authy) rather than text message codes, because SIM-swapping attacks can intercept texts.
For the most critical accounts, a hardware security key like YubiKey is the gold standard. It's a small USB device you plug into your computer or tap against your phone. No code to type, nothing to intercept. It costs $25 to $55 and makes your accounts essentially immune to remote takeover.
Email is your biggest vulnerability. Almost every account uses email for password resets. If someone controls your email, they control everything. Secure your email account with a unique, strong password and a hardware key or authenticator app. Consider ProtonMail for sensitive communications. It's end-to-end encrypted and based in Switzerland.
VPNs help on public Wi-Fi. When you're on a coffee shop or hotel network, a VPN encrypts your traffic so others on the same network can't intercept it. Mullvad and ProtonVPN are reliable, privacy-focused options.
You don't need to be a cybersecurity expert. You need four things: a password manager, 2FA on important accounts, awareness of phishing emails, and the habit of keeping software updated. That covers 95% of the risk regular people face.
ONE THING THIS WEEK
Enable two-factor authentication on your email account.
Go to your email settings, find security, and turn on 2FA. Use an authenticator app, not text messages. This takes five minutes and is the single most impactful digital security step you can take.
ON THE RADAR
Americans Lost $20.9 Billion to Cybercrime in 2025 — Up 26% in One Year
The FBI's Internet Crime Complaint Center (IC3) released its 2025 annual report in April 2026, recording more than 1 million complaints and $20.87 billion in total losses — both all-time records. Losses jumped 26% from 2024. Investment fraud led at $8.6 billion, followed by business email compromise at $3 billion and cryptocurrency scams at $11 billion. Adults over 60 accounted for $7.7 billion of the total, the most of any age group.
For preparedness: cybercrime losses now exceed the GDP of many small countries. The FBI's top recommendation mirrors physical security: layers. A password manager, 2FA, and skepticism of unsolicited contact cover the vast majority of attack vectors regular people face.
LESSON FROM: CLINT EMERSON
Clint Emerson's 100 Deadly Skills includes a section on digital tradecraft that was adapted from intelligence operations. His framework is practical: think of your digital life as a perimeter to defend, just like your home. You have entry points (accounts), valuables (financial and personal data), and potential attackers (hackers, identity thieves, data brokers).
Emerson's approach mirrors physical security: layers. A strong password is a locked door. 2FA is a deadbolt. A security key is an alarm system. No single measure is perfect, but stacking them makes you a harder target than 99% of the population. And attackers, like burglars, move to easier targets.
WHAT'S HAPPENING
Tornado Outbreak Hammers Midwest — 20+ Twisters, Homes Leveled Across Five States
More than 20 confirmed tornadoes struck Wisconsin, Illinois, Minnesota, Missouri, and Iowa on April 17, battering a region already worn down by a week of relentless severe weather. In Ringle, Wisconsin, roughly 75 homes sustained damage after a twister moved through the small town. Marion, Minnesota, reported approximately 30 homes damaged. An EF-3 tornado tore through Buffalo County, Wisconsin, leveling structures. No fatalities were reported, though several minor injuries were confirmed in Missouri.
For preparedness: severe weather windows of 20-to-30 minutes from warning to impact are common in these outbreaks. A weather radio, a charged phone with alerts enabled, and a known shelter location are the basics. Review yours before the next outbreak hits.
WHAT I'M TESTING
YubiKey 5 NFC
I've been using this hardware security key for about six months on my email, bank accounts, and password manager. It's a small USB-A device (also works via NFC tap on phones) that serves as a physical second factor for authentication.
Setup is straightforward. You register the key with each service (Google, Microsoft, most banks, Bitwarden, 1Password). When logging in, you plug it in and tap the button. No codes to type, no app to open, no text messages to wait for.
What I appreciate most is the peace of mind. Even if my password leaked tomorrow, nobody can access my accounts without physically having this key. It's waterproof, crushproof, and has no battery to die. I keep one on my keychain and a backup in my fireproof bag.
About $50 for the NFC version. Buy two, one for daily use and one as backup.
Budget alternative: Google Authenticator or Authy (free apps). Not as secure as a hardware key, but dramatically better than no 2FA at all.
OVERRATED / UNDERRATED
Overrated: Antivirus software subscriptions. Modern operating systems (Windows Defender, macOS built-in security) handle most threats. The bigger risk is your behavior: clicking phishing links and reusing passwords. Fix the behavior before buying more software.
Underrated: Checking HaveIBeenPwned.com. Enter your email address and it tells you which data breaches have exposed your information. It's free, it's sobering, and it's the fastest way to find out which passwords you need to change immediately.
THE LINK DUMP
Bitwarden.com — Free, open-source password manager. Works on every platform.
HaveIBeenPwned.com — Check if your email or passwords have been exposed in data breaches.
ProtonMail.com — End-to-end encrypted email. Free tier available.
EFF: Surveillance Self-Defense — Electronic Frontier Foundation's guide to digital security basics.
Grokipedia: Two-Factor Authentication — Background on how 2FA works and why it matters.
NEXT ISSUE
Canning and preserving at home. The skills your grandparents used to fill a pantry for winter. Simpler than you think, and still one of the best ways to store food long-term.
PS: I checked HaveIBeenPwned when I set up my security key. My email had been in seven data breaches. Seven. Changed every compromised password that afternoon.
Tired of news that feels like noise?
Every day, 4.5 million readers turn to 1440 for their factual news fix. We sift through 100+ sources to bring you a complete summary of politics, global events, business, and culture — all in a brief 5-minute email. No spin. No slant. Just clarity.