As artificial intelligence becomes more powerful, so do the threats it enables. Now, the very people building these tools at OpenAI and Anthropic are sharing their personal security advice, offering a rare glimpse into how experts protect themselves.
A New Breed of Digital Threats
The security concerns of today are rapidly evolving beyond the poorly-worded phishing emails of the past. Generative AI has supercharged the ability of malicious actors to create highly convincing and personalized scams. These aren't just generic messages; they can be emails that reference your recent projects, social media activity, or even mimic the writing style of your boss or a family member. The rise of sophisticated AI voice cloning means a scammer can call you sounding exactly like a loved one in distress. This new reality is what's prompting the people closest to the technology—the employees at the world’s leading AI labs—to speak out about the importance of heightened digital vigilance.
Adopt a 'Zero Trust' Mindset
The foundational piece of advice from many AI insiders is to cultivate a 'zero trust' approach to all unsolicited digital communications. This means treating every unexpected email, text message, or direct message with inherent skepticism, regardless of how legitimate it appears. Because AI can perfectly tailor a message to you, traditional red flags are no longer reliable. The experts advise verifying any unusual request through a separate, secure channel. If you get an urgent email from a colleague asking for a file, for instance, message them on a different platform or call them on a trusted number to confirm. This deliberate friction is now a necessary layer of personal security.
Fortify Your Digital Logins
Passwords alone are no longer enough. The consensus among security-conscious tech employees is that multi-factor authentication (MFA) is non-negotiable. However, they increasingly recommend moving away from SMS-based two-factor authentication. Text messages can be intercepted, and phones are vulnerable to 'SIM-swapping' attacks, where a scammer tricks a mobile carrier into transferring your phone number to their own device. Instead, the advice is to use authenticator apps or, even better, physical security keys. These small hardware devices, which plug into your computer or connect via NFC, provide a much stronger layer of protection that cannot be easily phished or remotely compromised.
The Analogue Defense: A Family 'Safe Word'
To counter the alarming threat of AI-powered voice cloning scams, a surprisingly low-tech solution is gaining traction: the family safe word. The idea is simple. You and your close family members agree on a secret word or phrase that would never be shared publicly. If you ever receive a frantic call from someone claiming to be a loved one asking for money or sensitive information, you ask them for the safe word. If they can't provide it, you know it's a scam. This tactic is specifically designed to short_circuit emotionally manipulative attacks that rely on creating a sense of urgency. It's a simple, free, and highly effective defense mechanism in an age of deepfakes.
Conduct Regular Digital Audits
Many people grant thirdrdparty apps and services access to their Google, Microsoft, or Apple accounts without a second thought. Tech employees advise making a habit of regularly auditing these permissions. Each connected app is a potential doorway into your digital life. If a service you no longer use suffers a data breach, your information could be exposed. Take ten minutes every few months to review your account settings and revoke access for any app or service you don't recognise or actively use. This digital housekeeping minimises your attack surface and reduces the amount of personal data floating around in the ecosystem, making you a harder target for AI driven profiling and attacks.
