Key Takeaways
Summary
18 items · 45–90 minutes
Why Setup Day Matters More Than You Think
Unboxing a new computer is exciting — but those first few hours of configuration quietly determine how exposed your machine will be for years to come. Manufacturers ship devices with settings tuned for a broad audience, which often means security features are turned off, default passwords are trivially guessable, and unnecessary software is already running in the background.
Most security incidents on personal computers don't happen because of sophisticated hacking. They happen because basic protections were never switched on. Working through this checklist before you start browsing, downloading, or logging into accounts gives you a foundation that's far harder to compromise. Think of it as putting the locks on the doors before you move in.
For ongoing habits once you're up and running, see our guide to keeping a computer healthy over time.
Password Manager App
Generates and securely stores unique, complex passwords for every account you create on this machine.
External Hard Drive
Serves as your primary local backup destination for the operating system's built-in backup tool.
Cloud Backup or Sync Service
Provides an off-site copy of your files in case of physical damage, theft, or drive failure.
Router Admin Access
Lets you verify Wi-Fi encryption settings and change default router credentials during network setup.
Manufacturer Support Page
Source for model-specific firmware, driver updates, and security advisories not covered by the OS update tool.
The Setup Checklist
Work through these groups in order. Some steps take seconds; others require a few minutes of reading through menus. The tools section above lists everything you'll need before you start.
System Updates
Account and Login Security
Built-in Security Features
Network Connection
Backup Configuration
Don't Skip Updates to Start Browsing Sooner
It's tempting to jump straight into using a new computer, but connecting to the internet before running updates leaves your system exposed to vulnerabilities that may already have public exploits. The factory operating system image can be months old by the time your device reaches you. Give updates 15–30 minutes to complete before logging into any accounts or visiting websites.
Accounts, Passwords, and Access
The weakest link in most people's digital security isn't their antivirus — it's reused, simple passwords. A new computer is the perfect opportunity to start clean. Set up a dedicated local account with a strong password separate from your Microsoft or Apple ID, and use a password manager to generate and store unique credentials for every service you sign into. If you've never used one before, our first-timer's walkthrough for password managers explains how they work in plain English.
Enable two-factor authentication (2FA) on your primary email account first — that address is the recovery key to almost everything else you own online. Then extend 2FA to any financial, health, or social accounts you access from this machine.
Network and Backup Before You Finish
Your computer's security is only as strong as the network it connects to. Before logging into anything sensitive, confirm your home Wi-Fi is using WPA2 or WPA3 encryption and that you've changed the router's default admin password. Our article on securing your home Wi-Fi network walks through those router settings in detail, and home network security habits that are easy to overlook covers the gaps most people miss entirely.
Finally, set up your backup on day one — not after something goes wrong. Use at least two destinations: an external drive and a cloud service. People commonly make mistakes here that leave them falsely confident; things people get wrong when backing up their files is worth a read before you assume you're covered.
Test Your Backup Before You Need It
A backup that has never been tested is not a backup — it's a hope. After setting up your backup destination, restore at least one file to confirm the process actually works end to end. Many people discover their backup was silently failing only when they urgently need to recover data. Build this verification into your setup checklist and repeat it every few months.