Mike Harrington, special agent in charge of the FBI Seattle Field Office, released a public information video outlining three cybersecurity practices for individual users as part of the agency's Operation Winter Shield series.
Harrington said individuals should manage third-party risk by routinely reviewing account sign-in permissions and revoking access for apps or websites they no longer use. "If a game you played 3 years ago gets hacked, it shouldn't still have a backdoor to your data," he said, urging viewers to delete unused apps.
He advised tracking and retiring end-of-life technology, recommending that people replace routers and smartphones that no longer receive security patches. For both organizations and individuals, he said removing unsupported software and devices reduces vulnerabilities.
Finally, Harrington discussed maintaining offline immutable backups to guard against ransomware. He described the 3-2-1 rule: keep three copies of data on two media types with one copy unplugged on an external drive that is periodically updated.
The video directs viewers to fbi.gov/wintershield for the full 10-step guide and additional resources. Harrington said the series will continue with further guidance for individual users.