Assume a shared computer is not private
A computer at a cyber café, library, hotel or office reception may record what you type or keep copies of files. Avoid mobile money, banking or anything highly sensitive on one where you can. When you have no choice, take extra care and change your password from a trusted device afterwards.
Before you sign in
Use a private or incognito browser window so history, passwords and cookies are not saved.
Never let the browser "remember" your password or stay signed in on a shared machine.
Prefer a passkey on your own phone, or an authenticator app, rather than typing a reusable password.
Be aware of people watching the screen and keyboard when you enter a PIN or password.
Before you walk away
Sign out of every service, then close the browser completely.
Delete any files you downloaded or documents you opened, and empty the recycle bin or trash.
Remove any USB drive, and collect every printout.
Afterwards, from a device you trust
Change the password for anything you signed into, starting with your main email. Review recent security activity and sign out other sessions. If you must enter a one-time code on a shared computer, treat the account as exposed until you have secured it again.
Safer alternatives
Where you can, use your own phone on mobile data instead of a shared computer for anything involving money or identity. If you regularly rely on a cyber café, keep those accounts protected with a passkey or authenticator app and a recovery method that does not depend on that location.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.