
Create a one‑page checklist: auto‑updates on, HTTPS‑only enabled, secure DNS set, third‑party cookies blocked, permission prompts at Ask, content blocker installed, password manager configured, and default search locked. Save the file in cloud notes, print a copy, and reuse it. Consistency across devices removes guesswork and ensures behavior stays safe even when routines are rushed.

Use managed browser policies where possible to enforce settings like extension allow‑lists, download restrictions, and safe browsing levels. Provide a brief explainer video and a Slack channel for questions. Celebrate reports of suspicious pages. When settings are explained as productivity boosters—not obstacles—people cooperate, ask sooner, and the whole group benefits from fewer incidents and simpler support.

Swap jargon for outcomes: “This button forces secure pages,” “This toggle stops creepy tracking,” “This key makes phishing fail.” Demonstrate with a real login and a decoy site so the contrast sticks. Invite questions, collect stories, and refine your guide. Empowerment beats fear, and browsers become friendly allies rather than mysterious gatekeepers that people work around.