Quick answer
Small businesses are attacked through weak passwords, phishing messages, out-of-date software and unprotected networks. The basics work: strong unique passwords with a password manager, two-step login, regular updates, tested backups, staff awareness of phishing and fake payment messages, a firewall, separate guest Wi-Fi and limited admin access.
Real products, live prices, in stock now
See the actual productsLive prices from the Qyvea store
Shop all camera products →Key takeaways
- Use strong, unique passwords and two-step login.
- Update devices and software.
- Keep tested backups, including offline.
- Train staff to spot phishing and fake payment messages.
- Separate guest Wi-Fi from business systems.
01Ten basics
- Strong, unique passwords stored in a password manager.
- Two-step login on email, banking and cloud tools.
- Automatic updates on computers and phones.
- Antivirus or endpoint protection on every computer.
- Daily backups with one copy offline or off-site.
- A firewall and separate guest Wi-Fi.
- Limit admin rights to those who need them.
- Staff training on phishing and fake M-Pesa messages.
- Remove access when staff leave.
- Know who to call if something goes wrong.
02Common scams to teach staff
| Scam | What to do |
|---|---|
| Fake payment confirmation SMS | Check your M-Pesa balance, not the message |
| Phishing email asking to log in | Do not click; open the site yourself |
| WhatsApp message from 'the boss' asking for money | Call to confirm |
| Fake supplier bank change | Verify by phone using a known number |
| Unknown USB or attachment | Do not open it |
03Get help
When to call a professionalWe review your setup and fix the basics under a support plan. Call 0113 301 244 or WhatsApp us.
04Frequently asked questions
Do small businesses really get attacked?
Yes; attackers use automated tools that target weak passwords and unpatched systems regardless of size.
Is antivirus enough?
No; it is one layer among passwords, updates, backups and awareness.
What about data protection law?
If you hold personal data you have duties; confirm them with an adviser.
