Mobile phones and the internet have become part of daily life for almost everyone, including members of the armed forces. They help soldiers stay in touch with their families, read news and complete official work quickly. At the same time, careless use of these tools can put a person, a family and even a unit at risk. For this reason every member of the forces is expected to follow simple rules of cyber safety, both on duty and at home. The first rule is to protect passwords. A strong password is long, uses a mix of letters, numbers and symbols, and is not based on a name or date of birth that others can guess. The same password should not be used for many accounts, because if one account is broken, all the others become open. Passwords must never be shared with friends, written on paper near the computer or given to anyone who calls and claims to be from a bank or an office. Where it is available, a second step of verification, such as a code sent to the phone, adds another layer of protection. The second rule is to be careful with messages and links. Many frauds begin with a message offering a prize, a job or a refund, or warning that an account will be closed. Such messages often contain a link that leads to a false website or installs harmful software. A careful user does not click on unknown links, does not download files from strangers and checks with the real organisation before taking any action. Calls asking for a one time password should always be treated as a fraud. The third rule concerns social media. Photographs and posts may seem harmless, but they can reveal a great deal. A picture taken inside a unit area, a post about travel plans or a uniform shown with a name badge can give information to people who should not have it. Service members are therefore advised not to post anything about their duties, their location or their work, and to keep their personal profiles private. Friend requests from unknown people, especially those who quickly become very friendly and ask personal questions, should be refused. In the office, official computers are used only for official work. Personal pen drives, games and unapproved software are not connected to them, and screens are locked whenever the user leaves the desk. Any unusual message, lost device or suspected misuse is reported at once to the proper authority, because quick reporting limits the damage. Families should also be taught these simple rules, since a careless post by a relative can cause the same harm. Cyber safety is not a matter of advanced technical knowledge; it is a matter of daily habits, common sense and a clear understanding that information, once shared, cannot easily be taken back.