Most PCs ship with bare-minimum security. This guide fixes that whether you are in Epping, Wollert, Doreen, South Morang or anywhere across Melbourne’s northern suburbs. Use the interactive checklist to track your progress.
💸 What This Guide Saves You
What Full PC Security Costs — Done Properly
On-site Melbourne IT rates ($135–$255/hr) vs doing it yourself with this free guide.
△ Typical On-Site Technician
$770–
$1,449
potential cost if hiring out everything (year 1)
| New PC setup | $150–$220 |
| Custom build security | $170–$330 |
| Password & accounts | $65–$165 |
| Antivirus setup (yearly) | $50–$149 |
| Network & browser | $135–$165 |
| Backup + restore test | $130–$220 |
| Ongoing support | $120–$200/yr |
✓ This Guide + Your IT & Tech Mates
$0*
software cost using this free guide
| New PC setup | Flat rate quoted |
| Custom build security | Flat rate quoted |
| Password & accounts | Included in visit |
| Antivirus (yearly) | $0 (Defender) |
| Network & browser | Flat rate quoted |
| Backup + restore test | Included in visit |
| Ongoing support | $0 (use checklist) |
*All tools in this guide are free. Local support available if you need a hand.
Part One — The Threat Landscape
// 01 — What You’re Actually Up Against
The threats targeting Melbourne home PCs
| Threat |
How it enters your PC |
Risk |
| Ransomware | Email attachments, pirated software, drive-by downloads | Critical |
| Spyware / Keyloggers | Bundled freeware, fake browser extensions | High |
| Phishing | Fake emails, SMS, spoofed bank & government sites | High |
| Man-in-the-Middle | Unsecured public Wi-Fi (cafes, airports) | Medium |
| Credential Stuffing | Reused passwords from old data breaches | Medium |
| Physical Drive Access | Unencrypted drive + stolen or borrowed laptop | Lower |
! Security AlertNew PC owners: Don’t enter passwords, connect accounts, or download anything until you have run Windows Update at least twice. Out-of-box Windows may be months behind on patches.
Part Two — New PC Setup
// 02 — New PC · First 30 Minutes
Do these immediately on a new computer
01
Run All Windows Updates — Twice
Go to Settings → Windows Update → Check for Updates. Install everything including optional updates. Restart then run it again — first-round updates often unlock further patches.
⚡ Enable automatic updates permanently. Set active hours so restarts happen overnight.
02
Confirm Windows Firewall is Active
Open Windows Security → Firewall & network protection → confirm all three profiles (Domain, Private, Public) show as On. On macOS: System Settings → Network → Firewall.
⚡ Never disable the firewall for any app unless you fully understand the risk.
03
Set a Strong Account Password
Use a passphrase of 4+ random words (e.g. coral-ladder-mango-38). Avoid names, birthdays, or anything in your email. Never leave a blank password on a Windows account.
⚡ Enable Windows Hello PIN or fingerprint for fast day-to-day unlocking.
04
Enable BitLocker Drive Encryption
Search BitLocker → Manage BitLocker → Turn on for C: drive. Without this anyone with physical access can read every file in minutes with a live USB.
⚡ Save your recovery key to your Microsoft account AND print a physical copy.
05
Remove Pre-Installed Bloatware
Settings → Apps → Installed Apps. Remove McAfee and Norton trials, random gaming apps, and PC optimiser tools. Check Task Manager → Startup tab and disable unnecessary launch items.
⚡ Use “Should I Remove It?” (shouldiremoveit.com) if unsure about any app.
Run Windows Update twice, restart between each run
Confirm Windows Firewall is On for all 3 profiles
Set a strong passphrase account password
Enable BitLocker — save recovery key to Microsoft account AND print a copy
Remove McAfee/Norton trials, bloatware and startup junk
// Related services — Epping & Northern Melbourne
Part Three — Custom PC Build Security
// 03 — Custom PC Build Security
Built your own PC? Don’t skip the BIOS
Custom PC builders across Epping, Wollert, and Melbourne’s northern suburbs often nail the hardware but overlook firmware-level security. This layer sits below Windows — if an attacker gets in here, Windows security tools cannot even see it.
🖥️BIOS SecuritySet a BIOS/UEFI Password
Prevent physical-access attackers from booting from USB or changing security settings. Do this before installing Windows.
🔐Secure BootEnable Secure Boot
Verifies only trusted signed bootloaders run at startup. Blocks rootkits and bootkits that load before Windows even starts.
🔑TPM 2.0Enable TPM 2.0
Required for Windows 11 and full BitLocker. Stores encryption keys in hardware — far more secure than software-only storage.
🚫Boot DevicesDisable Unused Boot Devices
Disable USB and optical drive boot in BIOS unless needed. Stops cold-boot attacks using a rogue USB stick to bypass Windows login.
⬇️FirmwareUpdate Firmware First
Check your motherboard manufacturer’s site for the latest BIOS/UEFI firmware before installing Windows. Older firmware has known vulnerabilities.
🛡️SubsystemsDisable Unused Subsystems
Intel ME and AMD PSP are powerful subsystems. If you don’t use remote management, consider disabling them in BIOS to reduce attack surface.
! Custom Build ChecklistAfter BIOS setup: (1) Install Windows fresh from official Microsoft media only. (2) Run Windows Update before installing any drivers. (3) Download drivers only from the manufacturer’s official website. (4) Enable BitLocker immediately — TPM 2.0 must be active first.
Set BIOS/UEFI password before installing Windows
Enable Secure Boot in BIOS settings
Enable TPM 2.0 in BIOS settings
Disable boot from USB and optical drive
Download and flash latest motherboard firmware before OS install
Install Windows from official Microsoft media only
Enable BitLocker after Windows install with TPM 2.0 active
// Repair & upgrade services for your build
Part Four — Passwords & Accounts
// 04 — Password & Account Security
The password problem nobody talks about
Reusing passwords is the single biggest account-level security mistake home users make. When a site you used in 2019 gets breached — and thousands have — those credentials get tested automatically against Gmail, banking apps, and PayPal within hours.
🔒Password ManagerUse a Password Manager
Bitwarden (free, open-source) or 1Password. Generate and store unique passwords for every account. You remember one master password — everything else is handled.
📲2FATurn On 2FA Everywhere
Two-factor authentication blocks 99.9% of automated attacks even when your password is stolen. Use an authenticator app — not SMS where possible.
⚠️Data BreachesCheck for Breached Accounts
Visit
haveibeenpwned.com right now. If your email appears, change those passwords immediately.
📧Email SecurityLock Down Your Email Account
Your email is the master key to every other account. Strongest password, 2FA on, recovery code stored offline. Treat it like your banking login.
Install Bitwarden (free) and generate unique passwords for all accounts
Enable 2FA on email, banking, Apple ID and Google account
Check haveibeenpwned.com — change passwords for any breached accounts
Set email account to strongest password + 2FA + offline recovery code
Remove saved passwords from browser — use password manager instead
Part Five — Antivirus
// 05 — Antivirus & Malware Protection
What you actually need — and what you don’t
Windows Defender — built into Windows 10 and 11 — is genuinely excellent. Independent testing labs (AV-TEST, AV-Comparatives) consistently rank it in the top tier. For most Melbourne home users you don’t need to pay for third-party antivirus.
Antivirus Setup Progress
0 of 7 steps complete
Confirm Windows Security is active: Start → Windows Security → Virus & threat protection → On
Run a full scan on any new PC before installing other software
Enable Tamper Protection so malware can’t silently switch Defender off
Add Malwarebytes Free for periodic second-opinion scans — not as real-time AV
Never run two real-time antivirus tools simultaneously — they conflict and create gaps
If you do pay for AV — Bitdefender and ESET are top-ranked by independent labs
Avoid all “PC Cleaner”, “Registry Fixer” and “Speed Booster” tools — most are malware bait
Part Six — Network & Browser
// 06 — Network & Browser Security
Your connection is your first line of defence
📡Home RouterSecure Your Home Router
Log into your router admin panel (192.168.1.1). Change the default admin password. Use WPA3 if available, otherwise WPA2. Disable WPS — it has known exploits.
⛔Public Wi-FiNever Trust Public Wi-Fi
Public networks are a hunting ground. Don’t access banking or email without a VPN. Use your phone hotspot in cafes and waiting rooms across Melbourne’s north.
🌐Secure DNSSet Up Secure DNS
Switch to Cloudflare’s 1.1.1.1 for Families — it blocks malware domains at DNS level before your browser loads the page. Free, fast, works on all routers.
🔍BrowserHarden Your Browser
Install uBlock Origin (best ad/script blocker, free). Enable HTTPS-Only mode. Audit browser extensions quarterly — each unused one is a potential attack vector.
Log into router admin panel and change default admin password
Switch Wi-Fi to WPA3 (or WPA2 if WPA3 unavailable) and disable WPS
Set DNS to 1.1.1.1 (Cloudflare for Families) on router
Install uBlock Origin browser extension
Enable HTTPS-Only mode in browser settings
Audit and remove unused browser extensions
// Network & Wi-Fi services — Epping
Part Seven — Backups
// 07 — The 3-2-1 Backup Strategy
Backups are your ultimate safety net
Security is not just keeping threats out — it’s recovering completely when something goes wrong. The 3-2-1 rule: 3 copies of your data, on 2 different storage types, with 1 stored offsite or in the cloud. See our full guide to robust data backup strategies for a deeper breakdown.
01
Windows File History — Built-In & Free
Plug in an external drive → Settings → Update & Security → Backup → Add a drive. Windows backs up your files hourly automatically.
⚡ Plug in a USB drive and you’re done. Windows handles the rest.
02
Cloud Backup — Your Offsite Copy
OneDrive (built into Windows), Google Drive, or Backblaze Personal Backup (~$9 AUD/month, unlimited storage). Backblaze is outstanding value for large photo and video collections.
⚡ Enable OneDrive “Known Folder Move” to auto-sync Desktop, Documents & Pictures.
03
Full System Image — Ransomware Protection
Use Macrium Reflect Free to create a complete disk image on an external drive — then disconnect it. Ransomware cannot encrypt what is not connected. Test your restore at least once a year.
⚡ A backup you have never tested is a backup you cannot trust.
Plug in external drive and enable Windows File History
Enable OneDrive Known Folder Move (Desktop, Documents, Pictures)
Create Macrium Reflect disk image on external drive
Disconnect external image drive and store safely offline
Test restore from backup image (do this once a year minimum)
Part Eight — Ongoing Security Habits
// 08 — Ongoing Security Habits
Security is a habit, not a one-time setup
Habits Progress
0 of 7 habits locked in
Update everything: OS, apps, browser, and extensions. Set apps to auto-update.
Think before you click: Hover links before clicking. Urgency in emails is a manipulation tactic.
Lock your screen: Win+L locks instantly. Set auto-lock after 5–10 minutes.
Official sources only: Microsoft Store, the developer’s own site. Avoid download aggregators.
Verify unexpected attachments: Even from people you know — attackers compromise email accounts.
Quarterly app audit: Remove anything unused in the last 3 months.
Standard User account for daily use: Keep Administrator separate. Most malware needs admin rights to do real damage.
! Red Flags — Get Your PC Checked NowCall 0452 323 571 if any of these happen: Sudden unexplained slowdowns · New browser toolbars you didn’t install · Desktop pop-ups outside the browser · Antivirus disabled without your knowledge · Unknown programs in your startup list · Files renamed with strange extensions.
// Emergency & repair services
Refer & Earn Program
Earn Up To 4% Commission by Referring Tech Jobs via TheFixers.app
Turn those recommendations into real income. Join TheFixers.app as a Primary Referrer and earn up to 4% on every job your referral completes — for up to 24 months or their first 20 jobs, whichever comes first.
🛡️
Step 1 — Start HereTech Health Score
10 questions, score out of 100, fault list and repair cost estimate. Free.
Check Your Device Score →
🧮
Step 2 — DecideRepair or Replace Calculator
Enter repair quote and device age. Instant 50% rule recommendation.
Run the Calculator →
🔍
Free DiagnosticsFree Tech Diagnostics Epping
Not sure what's wrong? Free diagnostic assessment before committing to any repair.
Book Free Diagnostics →
🔋
Battery Health GuideLaptop Battery Health Checker
DIY Windows Battery Report and macOS cycle count guide. Free.
Check Battery Health →
⚡
Speed ToolSSD Performance Upgrade Estimator
Select startup speed and see estimated improvement with SSD upgrade.
Estimate Speed Boost →
🪫
Battery Cost ToolBattery Replacement Cost Estimator
Instant battery replacement price for iPhone, Samsung, MacBook, Windows laptop and iPad.
Get Battery Price →
💻
Maintenance GuideLaptop Maintenance Guide Epping
Monthly, quarterly and yearly checklists to prevent overheating.
View Maintenance Guide →
📱
Phone GuideRepair or Replace Phone Guide
iPhone, Samsung and Android pricing tables and embedded calculator.
Read the Phone Guide →
💰
Trade-In ToolPhone Trade-In Value Estimator
Model plus condition — resale value vs repair cost comparison.
Compare Repair vs Sell →
📵
Crack CheckerPhone Screen Crack Severity Checker
Select your crack pattern for instant repair urgency rating.
Check Crack Severity →
📟
iPad TooliPad Generation Identifier Epping
Identify your iPad model, Apple service status and repair options.
Identify My iPad →
📡
WiFi GuideWiFi and Internet Troubleshooting Epping
Free speed test plus NBN/OptiComm diagnosis.
Run Free Speed Test →
🍎
MacBook RepairMacBook Repair Epping & Wollert
All MacBook models, all faults — screen, battery, keyboard, logic board.
MacBook Repair Options →
🚨
Emergency RepairEmergency Laptop Repairs Epping
Liquid spill? No power? Same-day emergency repair.
Get Emergency Help →
♿
NDIS SupportNDIS Tech Support Assessment
Registered NDIS provider — assistive tech, devices and support.
NDIS Tech Support →
👵
Senior SupportSenior Tech Support Assessment
Patient, plain-English tech help for older Australians in Epping and Wollert.
Senior Tech Support →
🔧
Repair HubLaptop and Phone Repair Hub
All repairs, free tools, pricing guides — central hub.
View All Services →
🖥️
Melbourne NorthComputer Repairs Melbourne North
Desktop, laptop and phone repairs across Epping, Wollert, Mill Park, Bundoora and surrounds.
View Coverage Area →
🛡️
Cyber SecurityEssential Eight Checklist — Small Business
Free ACSC Essential Eight checklist. Assess your cyber security maturity across all 8 strategies.
Check My Cyber Security →
All tools free · No sign-up · Epping 3076 · Wollert 3750 · Melbourne North
