With a little knowledge, effort, and a few minutes of your time, you can keep your sensitive data and computer systems locked down tight. Cybersecurity doesn’t have to be intimidating, and it doesn’t require a large investment of time or money. You can secure your digital life with trusted free tools. Plus, many cybersecurity best practices can now be automated.
Just minutes of preparation can keep you safe. The benefits of a little research, education, and action far outweigh the potential costs of losing your unprotected data in a breach or having your identity stolen. Even if some of your data is compromised, you can ensure that the damage will be minimal if you follow some simple guidelines.
Here are our 10 top tips to stay safe online:
1. Keep your software updated
Keep all software on internet-connected devices—including personal computers, smartphones, and tablets—current to reduce the risk of infection from ransomware and malware. If you want to “set it and forget it,” configure your devices to update automatically or to notify you when an update is available.
Outdated software is vulnerable to hackers looking to steal personal information, like usernames and passwords, bank account numbers, or even your Social Security number. Configure your devices to update automatically or to notify you when an update is available. If you don’t enable automatic updates, it’s recommended to install software updates as soon as they roll out or check monthly.
2. Use long, unique passwords
Length trumps complexity. Strong passwords are at least 12 characters long and include letters, numbers, and symbols. Ideally, your password isn’t recognizable as a word or phrase. And, yes, you should have a unique password for each online account.
Sounds hard to remember? Using a password manager has never been easier—many smartphones and browsers include password managers and even suggest strong passwords. Otherwise, we recommend creating a “passphrase,” a sentence at least 12 characters long. Focus on positive sentences or phrases that are easy to remember, such as ILov3StayingSafeOnl1ne! (but don’t use that one).
3. Use a password manager
It’s time to ditch the notebook if that’s where you keep your passwords—ditto for that Notes app or doc. Instead, the simplest, most secure way to manage unique passwords is through a password manager application. A password manager is software created to manage all your online credentials like usernames and passwords. Many are free, and browsers and device operating systems often include password management programs.
Password managers store your passwords in an encrypted database (think of it as your data vault). These programs also generate new passwords when you need them. It’s never been easier to generate, store, and access your passwords safely.
Bitwarden offers a free personal plan that allows you to store unlimited passwords, use the app on unlimited devices, free sharing for two users, and more. They also offer a family plan for $40 per year that allows up to six users, encrypted file sharing, and emergency contacts who can access your vault in case of an emergency.
4. Enable multi-factor authentication
Multi-factor authentication (MFA), sometimes called two-factor authentication, adds another level of security to your key accounts. MFA includes biometrics (face ID scans or fingerprint access), security keys, or apps that send you unique, one-time codes when you want to log onto a sensitive account. We recommend you use MFA whenever offered.
MFA varies across platforms, but the overall process is generally the same. For example, you log into your bank account with your username and password. If entered correctly, the server will send an authentication code to a secondary device, typically via text or email. Then, you’ll enter the unique code to confirm your identity and gain access. If someone attempts to access your account, they can’t unless they have the authentication code.
5. Think before you click
What’s the most common way for cybercriminals to get your sensitive information? It’s when you click on something you shouldn’t have. Malicious links in emails, tweets, texts, posts, social media messages, and malicious online advertising (known as malvertising) are a direct way for hackers to get your sensitive information. Be wary of clicking on links or downloading anything sent by a stranger or that you weren’t expecting. Whenever you get an email or message, count to five—usually that’s all the time you need to determine if the communication seems authentic or not.
If you accidentally click an unknown link, disconnect your device from the internet and ensure your files are backed up. Next, scan your device for malware, then change your usernames and passwords. Lastly, set up a free fraud alert on your credit report with one of the three major bureaus: Experian, Equifax, or TransUnion.
6. Report phishing
One of the best ways to take down cybercriminals is by reporting phishing attempts, and nowadays it’s easier than ever. If the email came to your work email address, report it to your IT manager or security team as quickly as possible.
If you’re at home and the email was sent to your personal email address, don’t click on any links (even the unsubscribe link) or reply to the email. Most email programs and social media platforms allow you to report phishing attempts. But don’t keep that phishing message around—delete it ASAP. You can further protect yourself by blocking the sender from your email program, social media platform, or phone.
7. Use secure WiFi
Public wireless networks and hotspots are unsecured, which means that anyone could potentially see what you’re doing on your laptop or smartphone while you are connected to them. Limit what you do on public WiFi. Especially avoid logging into key accounts like email and financial services. Consider using a virtual private network (VPN) or a personal/mobile hotspot if you need a more secure connection.
VPNs encrypt your online traffic and anonymize your location, allowing you to browse safely and securely. Even if your traffic is intercepted, hackers can’t view your activity. VPNs are becoming increasingly popular due to the ability to unblock geo-blocked content on streaming platforms, and they’re also user-friendly.
8. Back it up
The best way to protect your valuable work, music, photos, data, and other digital information is to make copies and store them safely. If you have a copy of your data and your device falls victim to ransomware or other cyber threats, you can restore the data from a backup. If you break your computer or it crashes, you won’t lose the data along with the device. Use the 3-2-1 rule as a guide to backing up your data. The rule is: to have at least three (3) copies of your data and store two (2) backup copies on different storage media, with one (1) of them located offsite. One of these storage possibilities can be backing up to the cloud, which are secure computer servers you can access through an account.
9. Check your settings
When you sign up for a new account, download a new app, or get a new device, immediately configure the privacy and security settings to your comfort level for information sharing. Regularly check these settings to ensure they’re still configured to your comfort. Audit your apps, platforms, and games every few months and delete the ones you no longer use.
10. Share with care
Think before posting about yourself and others online. Consider what a post reveals, who might see it, and how it might affect you or others. One popular trend on social media consists of answering a list of personal questions, such as the name of your first pet or the street you grew up on. Many of those are common security questions, and you’re unknowingly distributing those answers for hackers to view—and potentially gain access to your financial information.
Key takeaways:
- Stay updated: Keep your software and devices up to date to protect against vulnerabilities.
- Strong passwords: Use long, unique passwords and consider a password manager for easy management.
- Multi-factor authentication: Enable MFA for added security on key accounts.
Following the above tips will help ensure your data stays protected so you can enjoy our digital world. By sharing this with your friends, family members, and even coworkers, we can work together to make the online landscape a safer place.