The National Security Agency recommends powering off mobile devices weekly to disrupt persistent malware and thwart zero-click exploits. This low-tech defense complements nine other critical practices for mobile security in an increasingly hostile digital landscape.