I just got a new device and I’m worried I’ll miss important setup steps or security settings. The instructions that came with it are really basic and skip a lot of details. Can someone walk me through how to properly set it up from scratch, including any must‑do configurations or common mistakes to avoid?
Short checklist that covers 90% of what people miss. I’ll assume phone, tablet, or laptop, but most steps apply to all.
- Network and updates
- Connect to your most trusted Wi‑Fi.
- Change router default admin password if you never did. Huge one.
- Run system update until there are no more updates. Do this before installing apps.
- Turn on automatic updates for system and apps.
- Account and recovery
- Sign in with your main account (Apple ID, Google, Microsoft, etc).
- Add a recovery email and phone number.
- Set up account recovery codes if the service supports it. Store them in a password manager or written in a safe place.
- Turn on sync only for things you need, like contacts, calendar, passwords.
- Security and privacy basics
- Screen lock: PIN or strong password, not 1234 or birthdate. Avoid simple patterns.
- Turn on biometric unlock (fingerprint or face) if you trust it. Faster, so you will not disable security out of annoyance.
- Enable “Find my device” and remote wipe. Test that your device shows up on the service site.
- Check app permission settings. Deny location, mic, camera for apps that do not need them.
- Turn off ad ID or personalized ads in privacy settings if you care about tracking.
- Passwords and sign‑in
- Install a password manager. Use one strong master password.
- Turn on 2FA for your main accounts. Prefer an authenticator app, not SMS when possible.
- Store backup codes. People lose access here a lot.
- Avoid saving important passwords in notes or photos.
- Backup
- Turn on cloud backup or set up local backup.
- iOS: iCloud Backup.
- Android: Google backup plus photos backup.
- Windows / Mac: system backup or Time Machine.
- Run one manual backup once so you know it works.
- Check backup includes photos, contacts, and app data you care about.
- Apps and bloat
- Uninstall or disable apps you do not use, especially ones from the manufacturer or carrier. Less clutter, fewer updates, smaller attack surface.
- Install apps only from official stores.
- For each new app, check permissions once. If you see location or contacts on a calculator app, hard no.
- Browser and tracking
- Set your default browser.
- Turn on “Do Not Track” and some tracking protection if offered. Not perfect, but it helps a bit.
- Log in to your main sites and check you use 2FA there as well.
- Notifications and focus
- Turn off notifications for junk apps. Helps battery and attention.
- Set quiet hours so the device does not buzz all night.
- Device specific stuff people miss
Phone
- Set emergency contacts and medical info in lock screen settings.
- Turn on Wi‑Fi calling if your carrier supports it and your coverage is bad.
Laptop / desktop
- Install antivirus if your OS does not include strong built‑in protection. Keep it simple.
- Turn on full disk encryption.
- Create a separate non‑admin account for daily use.
- Quick “am I done” sanity check
- Screen lock works and needs a PIN/password or biometrics.
- Find my device is on and shows the device.
- Updates are fully done.
- Backup is on and you tested at least once.
- 2FA on your main email and cloud account.
If you share what device and OS you have, people here will throw in some more specific tweaks.
@voyageurdubois covered the “universal checklist” side really well. I’ll hit stuff people only notice after something breaks, and I’ll push back on a couple of their points.
I’ll assume phone or laptop, but most of this crosses over.
- Actually read the scary screens
When the OS pops up stuff like “share diagnostics,” “improve product,” “allow vendor to personalize content,” don’t just tap Next.
- If you care about privacy, decline anything that sounds like “help us improve” or “personalized ads.”
- On Apple / Google / Microsoft, dig into “Advanced” or “More options” on the setup wizard. A bunch of tracking defaults hide in there.
- Decide who gets your data, not just what
Instead of just flipping permissions randomly, decide up front:
- What lives only on this device (journal, local docs, photos of IDs).
- What you are okay syncing to cloud (contacts, calendar, notes).
I slightly disagree with auto sync “for convenience” everywhere. Convenience is great until you delete contacts on your phone and it wipes them from every device in 2 seconds.
- Tame manufacturer “extras” before they tame you
Bloatware is not just annoying, it eats battery and data.
- On Android or Windows, look for: “Device care,” “Optimizer,” “Cleaner,” “Security center.” Often they are ad platforms with a utility costume. Disable most of them.
- Turn off “lock screen news” or “lock screen stories.” That’s basically an ad billboard glued to your device.
- Notifications: set rules like you mean it
Instead of turning things off randomly, create tiers:
- Tier 1: Messaging, calls, calendar, authenticator. Always allowed.
- Tier 2: Work stuff, banking, deliveries. Allowed, but no sound at night.
- Tier 3: Social media, shopping, random apps. No banners, no sound, badges only or totally off.
Do this right away. If you wait a week, you’ll already be numb to the noise.
- Profiles and boundaries
If the device might be shared:
- Phones: Enable “guest mode” / multiple users if your OS supports it. Great when someone “just needs to make a call” and you don’t want them in your photos and chats.
- Laptops: Create separate accounts for kids / family instead of letting everyone use your main login.
I’d actually put this as high priority as “install a password manager.” Access control matters more than most people think.
- Real-world recovery, not just theoretical
@voyageurdubois mentioned backup and recovery codes. The part people skip is testing in real life.
Do this once:
- Log in to your main account from another device or a browser you never used. Pretend your new device was stolen.
- Confirm you can:
- Receive 2FA (auth app / key / SMS if you must).
- Use recovery email or codes.
- On the new device, actually try “Find my device” to make it ring and see its location. Do it before you need it.
- Basic “oh crap” plan
Write this somewhere offline or in your password manager notes:
- IMEI or serial number of the device.
- How to contact your carrier / vendor fast to suspend service.
- Where to go to remotely wipe it (URL or app name).
Takes 5 minutes, saves hours of panic later.
- App store hygiene
Instead of just “install only from official stores”:
- Check the developer name. There are tons of fake clones with nearly identical icons.
- Read the recent reviews, filtered by “Most recent,” not just top ones. Watch for people complaining about sudden ads or permission creep after updates.
- If an app suddenly wants extra permissions after an update without a clear reason, uninstall and find an alternative.
- Performance and battery from day one
Most folks only worry after things feel slow:
- Turn off “auto playing videos” in app stores, socials, and browser. It saves data and battery.
- Disable “background app refresh” / “run in background” for anything that doesn’t need live updates.
- On laptops, configure “power & sleep” so the thing actually sleeps quickly when unused. Lots of people roast their battery by letting it sit half-awake in a bag.
- Decide your sign-in “philosophy”
Bit of a disagreement with the idea of always turning on every biometric option:
- Biometric unlock is great, but remember: it’s designed for quick access, not maximum legal security. In some countries, you can be compelled to unlock with fingerprint or face more easily than with a memorized password.
If you’re at all concerned about that: - Use a strong PIN / password.
- Turn off biometric for especially sensitive apps (banking, password manager) if they let you, or require an extra step inside the app.
- Do a 30-day tune-up
Put a reminder in your calendar for 3–4 weeks from now to:
- Remove any apps you haven’t used once.
- Revisit notification settings based on what actually annoyed you.
- Check storage and see what’s eating space early.
This prevents the slow creep into chaos that everyone blames on “old devices.”
If you share exact device + OS (e.g., “Samsung Android 14” or “Windows 11 laptop”), you can get much more targetted steps like which exact toggles to flip and which manufacturer junk is safe to kill.