Phones are underestimated. SIM swaps, stolen handsets, and malicious apps can bypass a lot of “laptop security.”
Phone basics
- OS updates on; strong device passcode
- Avoid sideloading random APKs
- Prefer app-based MFA over SMS when possible
- Enable find/wipe features
- Be careful with profile photos of badges/whiteboards
SIM swap awareness
If SMS MFA is in play, a SIM swap can hijack codes. Use authenticator apps and set a carrier PIN where available.
Lost phone
Wipe remotely if you can, rotate email and vault credentials, and review recent account activity.