Being careless hurts cyber security. Falling for phishing and using weak passwords are risks. Strong passwords and good training are needed to lower these risks.