MFA and Password Manager Setup for Melbourne Families: Close the Door on Phishing Before Someone Clicks
Your mum forwards you a text from “Australia Post” about a missed parcel. Your teenager reuses the same password across their school login, their gaming account, and the email they signed up to a sketchy app with. Your partner has the family banking password on a sticky note next to the monitor. You have meant to fix all of this for two years. Then one of those phishing messages lands on a tired Tuesday night, someone taps the link, types the password, and suddenly the bank is calling about a transfer to an account you have never heard of. MFA and Password Manager Setup from Cyber by Exegesis is the engagement designed to close that door for a Melbourne family — across every generation under your roof — before the click happens.
The problem
Phishing and scam messages are the top reported scam category to ACCC Scamwatch, and the messages do not look like the obvious “Nigerian prince” emails of a decade ago. They impersonate Australia Post, myGov, the ATO, Linkt, your bank, and increasingly your own family members. The ACSC guidance for individuals and families is consistent on what actually stops these attacks from turning into financial loss or account takeover: multi-factor authentication on the accounts that matter, and unique strong passwords stored in a password manager so people stop reusing the same one.
The problem is not awareness. Most Australian families know they should be doing this. The problem is that setting up MFA across a dozen accounts, generating and storing recovery codes properly, choosing a password manager, and getting it onto everyone’s devices — including a teenager who does not want help and a parent who does not trust apps — is a full Saturday of fiddly work that nobody actually does. So it does not get done, and the phishing message lands on an account protected by a password from 2017.
What MFA and Password Manager Setup does
Cyber by Exegesis runs a hands-on, fixed-scope engagement for a single Melbourne household:
- Multi-factor authentication enabled across your most important accounts — primary email, banking, superannuation, myGov, work logins, and the accounts your kids or older relatives actually use.
- A password manager chosen with you, installed on every device in the household, and seeded with the credentials that matter most.
- Recovery codes generated and stored somewhere you will actually find them in two years — not in the same mailbox an attacker would compromise.
- A walk-through with each family member at their comfort level: the teenager gets the quick version, an older parent gets a slower one with written notes.
- A short written summary of what is now protected, what is not yet, and what to do if a phishing message gets through anyway.
Cyber by Exegesis is the cyber consultancy line of Exegesis — the same company behind the DRMO live product. This engagement is preventive: we set the controls up properly, with the household in the room, and then step back.
How it works
- We run a 20-minute intake call to list the accounts and devices in scope and identify who in the household needs which level of help.
- We come to your home (or run a guided remote session) for a two to three hour working block with the family.
- We enable MFA account by account, choosing the right second factor for each person — authenticator app where it fits, SMS where it does not — and we test each one.
- We install and seed the password manager across devices, then sit with each family member while they change the passwords on their highest-risk accounts.
- We store recovery codes safely, hand over a short written summary, and leave you with a 60-day check-in window for the questions that always come up later.
Why this matters in Melbourne
Melbourne households sit at the top end of Australia’s reporting volume to ACCC Scamwatch, and the cross-generational risk surface is real: a Melbourne family commonly has school-age kids on shared devices, working-age adults using personal email for banking and myGov, and grandparents in an adjacent suburb who answer the phone to anyone. The phishing message only has to land once on the least-protected account in that surface to cause a problem for the whole family. Setting MFA and a password manager up properly — across everyone, not just the technically confident adult — is the single highest-value defensive change a Melbourne household can make against the threat the ACSC and ACCC both identify as the most common.
Sources
- ACSC guidance for individuals and families: https://www.cyber.gov.au/protect-yourself
- ACCC Scamwatch (National Anti-Scam Centre): https://www.scamwatch.gov.au/
- eSafety Commissioner (for family members affected by online harm beyond financial scams): https://www.esafety.gov.au/
- OAIC Notifiable Data Breaches scheme (context for when a breached service notifies you): https://www.oaic.gov.au/privacy/notifiable-data-breaches
- Cyber by Exegesis — MFA and Password Manager Setup (waitlist)
Join the waitlist
We are sequencing household engagements by suburb cluster and by device mix (iOS-majority households first, mixed-platform second). Join the waitlist with your suburb and a rough count of accounts and people in scope — we will tell you when we are ready to book your session.