I Gave My Family a Password. It Took Five Minutes.

Two weekends ago I sat my whole family down at the kitchen table and we picked a password. Not for a bank account or a Wi-Fi router. For each other.

The FBI put out a warning in June about a scam that used to sound like science fiction and now sounds exactly like your kid on the phone. Someone calls, panicked, saying they got in a wreck or got arrested, and they need money sent right now. The voice is right. The panic is right. The only thing wrong is that it isn't your kid at all. It's a clone, built from a few seconds of audio pulled off a video someone in your family posted months ago and forgot about.

I already wrote about a mother who got a call from her own son last year, except it wasn't her son at all. Scams like hers have cost Americans hundreds of millions of dollars, and the number keeps climbing every time the numbers get updated. What changed for me this month wasn't the scam itself. It was a research report that finally explained why so many of us know the danger and still haven't done anything about it.

Malwarebytes surveyed fifteen hundred adults across the US, UK, and Germany this spring, and the gap in their Face Value research stopped me cold. Eighty one percent of people said they're afraid of someone stealing a family member's voice or likeness. Thirteen percent had actually done anything about it, like agreeing on a password. Sixty seven percent worry about voice cloning specifically, and only nineteen percent had turned off the voicemail greeting that hands cloners a clean sample of their own voice to copy. We're a country that's scared and unprepared in almost equal measure, and I include myself in that until a few weeks ago.

The fix is almost embarrassingly simple, and it's the same one the FTC has been recommending since family emergency scams first started showing up as texts and panicked robocalls. Pick a phrase your family would never say out loud in front of anyone else and never post anywhere online. If someone calls claiming to be your spouse, your kid, or your parent and asking for money or bank details, you ask for the word before you do anything else. A cloned voice can nail your daughter's laugh. It cannot know an answer that was never said in public.

Choosing the phrase is the part people overthink. Keep it specific and a little boring: the name of a childhood pet nobody else remembers, a made up word from an old family joke, the answer to a question only your family would bother asking each other. Skip anything a stranger could piece together from a wedding hashtag, a school Facebook group, or a group chat screenshot that got shared further than you meant it to. Say it out loud to everyone once, have each person repeat it back, and don't write it down anywhere someone else could find it. My family did this in about five minutes standing in the kitchen, and it felt more useful than any password we've ever set up for an actual bank account.

None of this requires you to become suspicious of every phone call from someone you love. It just gives you one clean question to ask when a call doesn't feel right, the kind of gut check that used to come from hearing a stumble or a pause in someone's voice. Those old tells are fading fast as cloning tools get better, which is part of why I've also covered what it actually sounds like when this happens to someone, and why our complete guide to voice cloning defense goes further than a single password if you want the fuller picture. If you're newer to this topic altogether, our piece on what a deepfake actually is is a good place to start.

My family's password took less time to set up than the phone call would take to fool us. If you haven't done this yet, do it this weekend, at dinner, while everyone's already at the table. And if you want a broader sense of where the rest of your digital footprint stands, take our free two minute Deepfake Risk Assessment and see what else is worth locking down before you need to.