Operational hygiene is the set of routine habits that reduce avoidable security mistakes. It includes simple practices such as locking screens, updating software, using strong authentication, checking links and QR codes before opening them, and keeping sensitive materials out of public view. The idea is not to make systems perfect; it is to reduce the number of easy mistakes an attacker can exploit.
In cyber security, poor operational hygiene often creates the opening for phishing, credential theft, device compromise, and accidental data exposure. Attackers look for unlocked laptops, reused passwords, unattended sessions, overshared files, and careless use of unfamiliar USB devices or Wi-Fi networks. Defenders use operational hygiene as a baseline control because it is low cost and highly effective: if people and systems follow consistent habits, many common attacks become harder to execute and less likely to succeed.