H.R. 2154 — American Cybersecurity Literacy Act

This section directs the Assistant Secretary of Commerce for Communications and Information to develop and conduct a cybersecurity literacy campaign—in multiple languages and formats if practicable—to increase public awareness of best practices to reduce cybersecurity risks. The campaign must (1) educate on preventing and mitigating cyberattacks by instructing on identifying phishing emails/messages and secure websites; changing default passwords; using multi-factor authentication, complex passwords, anti-virus software, software patches/updates, and virtual private networks; reviewing mobile application permissions, declining unnecessary privileges, and downloading apps only from trusted sources; considering product lifecycles and security update commitments; identifying cybersecurity risks from devices such as personal computers, smartphones, tablets, Wi-Fi routers, smart home appliances, webcams, internet-connected monitors, and other internet-connected devices; and addressing public Wi-Fi risks and mitigations; and (2) encourage use of resources to mitigate these risks.