Cybersecurity Basics Every Young Kenyan Professional Must Know

In 2023, Kenya experienced over 860 million cybersecurity threat events — one of the highest rates on the continent. From M-Pesa fraud to phishing emails, cybercriminals are actively targeting Kenyan individuals and organisations. If you're working online, basic cybersecurity knowledge is no longer optional.

The Most Common Cybersecurity Threats in Kenya

Phishing Attacks

Fraudulent emails, messages, or websites designed to trick you into revealing sensitive information — like your M-Pesa PIN or bank details. These messages often appear to come from legitimate organisations (banks, KRA, Safaricom) and create urgency to pressure quick action.

How to spot phishing: Check the sender's email address carefully. Look for spelling errors and urgent language. Never click links in unsolicited messages — go directly to the official website.

Weak Passwords

Passwords like "123456," "password," or your name and birthdate are compromised within seconds using automated tools. Yet these remain among the most common passwords used by Kenyans.

Unsecured Public Wi-Fi

Public Wi-Fi in cafes and hotels is often unencrypted. Anyone on the same network can potentially intercept your data. Using public Wi-Fi without a VPN to log into sensitive accounts is a significant risk.

5 Essential Cybersecurity Habits

1. Use Strong, Unique Passwords

A strong password is at least 12 characters combining uppercase and lowercase letters, numbers, and symbols. Use a different password for every account. Use a password manager (LastPass, Bitwarden) to manage them.

2. Enable Two-Factor Authentication (2FA)

2FA requires a second form of verification in addition to your password. Enable it on every account that offers it — especially email, social media, and banking apps.

3. Keep Software Updated

Software updates often contain critical security patches. Enable automatic updates on your phone and computer. Using outdated software is one of the most common ways systems get compromised.

4. Use a VPN on Public Wi-Fi

A VPN encrypts your internet traffic, making it unreadable to anyone who might be intercepting it. ProtonVPN offers a free tier sufficient for most users.

5. Back Up Your Data

Ransomware attacks encrypt your files and demand payment to restore access. Regular backups — to an external drive and Google Drive — mean you can restore your data without paying criminals.

Our ICT & Digital Skills program includes a dedicated cybersecurity module. Enroll in ICT Training →