DEV Community: Ephraim Ngwatje

Backing Up Important Files Securely: Simple Steps to Prevent Data Loss

Ephraim Ngwatje — Wed, 04 Feb 2026 14:14:21 +0000

Data loss from hardware failure, ransomware, or accidental deletion happens more often than we think. In my role at Chief Luthuli Primary School, I performed regular system backups and maintained IT asset registers to ensure quick recovery of digital documentation, payroll, and compliance reports.
Following the trusted 3-2-1 backup rule (3 copies, 2 different media types, 1 off-site) is straightforward and effective—even for small teams or individuals handling sensitive learner/job-seeker data.
What to Back Up

Critical files: Documents, spreadsheets (Excel/Google Sheets with learner/employee info), photos, emails, databases.
Prioritize: Anything irreplaceable or confidential (e.g., MERSETA registration data, COIDA reports).

Follow the 3-2-1 Rule

3 copies: Original + 2 backups.
2 different types: E.g., external hard drive + cloud storage.
1 off-site: Cloud or stored away from your location (protects against theft/fire/flood).

Practical Steps for Small Teams/Organizations

Choose Tools:
External hard drive/USB (for local copy).
Cloud: Microsoft OneDrive (built into 365), Google Drive (free tier), or free options like pCloud.

Set Up Automatic Backups:
On Windows: Use File History or OneDrive sync.
Schedule daily/weekly: In my school role, automated backups saved hours during issues.

Encrypt for Security:
Password-protect cloud folders or use BitLocker on drives.
Avoid emailing backups—use secure share links.

Test Recovery:
Monthly: Restore a test file to confirm it works.
Keep backup logs (simple Excel sheet).

Extra Tips:
Version history: Microsoft 365/Google keep old file versions.
Off-site rotation: Store one drive at home or trusted location.
For sensitive data: Delete unneeded copies securely.

Why This Protects Vulnerable Info
In education or community projects, lost records can delay services or expose privacy. Regular, secure backups build resilience without fancy tools.
Implement 3-2-1 today—it's one of the easiest ways to safeguard your work and the people you serve

Creating Strong Passwords and Using Two-Factor Authentication: Simple Steps for Everyday Protection

Ephraim Ngwatje — Wed, 04 Feb 2026 14:10:46 +0000

Passwords are the first line of defense for your online accounts, but weak or reused ones are easy targets for attackers. In my work supporting staff with Microsoft 365 logins and handling confidential data like payroll and learner records, I've seen how simple habits prevent big problems.
From my IBM "Identify and Investigate Cybersecurity Threats" certification, I learned that strong passwords combined with two-factor authentication (2FA) stop most unauthorized access. This guide shares practical tips for non-technical users in schools, small organizations, or community projects.
Why Passwords Matter

Weak passwords (like "password123" or your name+birth year) get cracked quickly via guessing or data breaches.
Reusing the same password across email, work accounts, or apps means one leak compromises everything.
In education or government settings, a compromised account can expose sensitive personal info.

How to Create Strong, Easy-to-Remember Passwords

Make them long: Aim for 12–16+ characters. Longer is stronger—use passphrases like "BlueSkyGauteng2026!Coffee".
Mix characters: Include uppercase, lowercase, numbers, and symbols (e.g., "Johannesburg@ITSupport2026").
Avoid personal info: Skip names, birthdays, phone numbers, or common words.
Use a passphrase method: Turn a sentence into a password: "I love secure backups in Johannesburg!" → "Il0ve$ecureBackup$InJHB!".
Don't reuse: Unique passwords per account.

Use a Password Manager (Free & Simple Options)

Tools like Bitwarden (free) or built-in ones in browsers/Microsoft 365 store and autofill strong passwords securely.
In my IT support role, I recommended these to staff to avoid writing passwords on paper.

Enable Two-Factor Authentication (2FA) Everywhere Possible

2FA adds a second step: After your password, enter a code from an app (e.g., Google Authenticator, Microsoft Authenticator) or SMS.
Steps:
Go to account settings (e.g., Microsoft account → Security).
Turn on 2FA.
Set up an authenticator app (preferred over SMS for better security).

In my experience onboarding users, enabling 2FA took minutes but blocked unauthorized logins.

Quick Tips for Daily Use

Test recovery: Set up backup codes or alternate methods.
Update old accounts: Change weak passwords and add 2FA.
Educate your team: Share these basics in short sessions.

Strong passwords + 2FA are low-effort, high-impact ways to protect data in any setting. Start today—your accounts (and the people whose info you handle) will thank you.

Spotting and Handling Common Cybersecurity Threats in Everyday IT Work – A Practical Guide from an IT Technician

Ephraim Ngwatje — Wed, 04 Feb 2026 14:05:04 +0000

In my role as a Junior IT Technician with over three years of experience supporting staff in education and public sector environments, I've seen firsthand how common digital threats can disrupt operations and put sensitive information at risk. From troubleshooting PCs and networks at Chief Luthuli Primary School (where I supported over 60 staff members) to managing backups and confidential data like payroll records, learner information, and job-seeker details in government projects, one thing is clear: basic awareness and quick action make a big difference.
I completed IBM's "Identify and Investigate Cybersecurity Threats" certification in 2021, which gave me structured knowledge of threat types and investigation steps. This guide shares practical ways to spot and handle everyday threats—especially useful for small teams, schools, NGOs, or anyone handling personal or confidential data.

Common Threats You Might Encounter Daily

Phishing Emails and Fake Messages
Attackers send emails or messages pretending to be trusted sources (e.g., your bank, Microsoft, or a colleague) to trick you into clicking links or sharing login details. In my school role, suspicious emails sometimes targeted staff during busy periods.
Malware from Downloads or USB Drives
Opening infected files or plugging in unknown USBs can install ransomware, spyware, or viruses that steal data or lock systems. I've dealt with slow PCs caused by hidden malware.
Weak Passwords and Unsecured Wi-Fi
Reusing simple passwords or connecting to public/open Wi-Fi exposes accounts and data. Domain environments I worked in highlighted how one weak link affects the whole network.
Unpatched Software and Outdated Systems
Not updating Windows, browsers, or apps leaves known vulnerabilities open. I've resolved issues by forcing updates during maintenance.

2.** How to Spot These Threats Early**

Unusual system behavior: Slow performance, unexpected pop-ups, or programs opening/closing on their own (common signs from my troubleshooting experience).
Suspicious emails: Check sender address carefully (e.g., "support@microsoft.com" vs. "support@micr0soft.com"), hover over links without clicking, avoid urgent demands for info.
Login alerts or failed attempts: If you get notifications of logins from unknown locations, act immediately.
Data changes or missing files: Regular backups helped me notice anomalies quickly in asset registers and documentation.

Practical Steps to Handle and Mitigate Threats

Verify Before Acting
Don't click links in unexpected emails—go directly to the official site (e.g., type office.com yourself). For attachments, scan with antivirus first.
Use Strong, Unique Passwords + 2FA
Enable two-factor authentication (2FA) wherever possible, especially on Microsoft 365 accounts. Use a password manager if managing many logins.
Keep Everything Updated
Set Windows and apps to auto-update. In my roles, regular patching prevented many issues.
Secure Backups and Access Controls
Perform regular system backups (as I did for IT assets and digital docs). Limit access to sensitive data—only give permissions needed (e.g., payroll files restricted to admin).
Run Antivirus and Scans
Use built-in Windows Defender or free tools; schedule weekly scans. Report anything suspicious to your IT team right away.
Basic Incident Response
If you suspect a breach: Disconnect from the network, don't shut down (preserves evidence), change passwords from a clean device, and notify responsible parties.

**Why This Matters for Everyday Users
**In environments like schools or community projects, a single breach can expose personal data of students, staff, or job-seekers—leading to identity theft or privacy violations. Simple habits reduce risks dramatically, protecting both individuals and organizations.
By applying these basics from my daily IT support work and IBM training, you can build stronger defenses without advanced tools. Stay vigilant—cyber threats evolve, but awareness is your first line of defense.