It used to be that a good deadbolt was likely to keep you safe from all but the most determined bandits. In the Information Age, with your (intellectual) property dispersed over the far-flung reaches of the Internet, it might seem like a difficult task to protect yourself. But it's actually fairly simple. All you really need are a few good "digital deadbolts."
Password Protection
Most people think that identity theft is the result of sophisticated hacking attacks on large databases—and those exploits do make for sensational news stories. But the most common way that "hackers" gain access to your computer files is through good old-fashioned snooping (
click here for a humorous video).
The passwords to your online accounts will protect you, but you need to protect them! Keep your passwords in a secure place, and out of plain sight. Don't share them on the Internet, over email, or on the phone. Your Internet Service Provider (ISP) should never ask for your password.
In addition, hackers may try to figure out your passwords to gain access to your computer. To make it tougher for them:
- Do not use password (or something very close to that) as your password!
- Use passwords that have at least eight characters and include numbers or symbols. The longer the password, the tougher it is to crack.
- Avoid common words. Some hackers use programs that can quickly try every word in the dictionary.
- Don't use your personal information, your login name, or adjacent keys on the keyboard as passwords.
- Change your passwords regularly, and don't use the same password for all of your online accounts.
Avoid Scams
How do criminals get your personal information online? One way is by lying about who they are in order to convince you to share your information with them. This scam is known as
phishing—criminals send emails, text messages (texts), or instant messages (IMs) that appear to come from your bank, a government agency, an online seller, or another organization with which you do business.
To avoid phishing scams:
- Don't reply to an email, text, or IM that asks for personal or financial information, and don't click on links in the message. If you want to go to the website of your bank or a business, type the web address into your browser yourself.
- Don't respond if you get a message—by email, text, IM, or phone—that asks you to call a phone number to update your account or give your personal information to access a refund. If you need to reach an organization with which you do business, call the number on your financial statement or use a telephone directory.
Keep Your Operating System and
Web Browser Updated
Hackers also take advantage of computers running software that doesn't have the latest security updates. Software companies issue security patches for flaws that they find in their systems, so it's important to set your applications to download and install security patches automatically.
In addition, you can increase your online security by changing the built-in security and privacy settings in your operating system or browser. Check the "Tools" or "Options" menus to learn how to upgrade from the default settings. Use your "Help" function for more information about your choices.
If you won't be using your computer for an extended period of time, unplug its Internet connection. When it's disconnected, the computer can't send or receive information from the Internet and isn't vulnerable to hackers.
Consider Security Applications
Keep your security software active and current. At a minimum, your computer should have anti-virus and anti-spyware software, and a firewall (
click here for more details). You can buy stand-alone programs for each element, or a security suite that includes these programs from a variety of sources, including commercial vendors or your ISP. Security software that comes pre-installed on a computer generally works only for a short time unless you pay a subscription fee to keep it updated. It's also critical to set your security software to auto-update regularly.
Some scam artists distribute malicious software (malware) disguised as anti-spyware software. Resist buying software in response to unexpected pop-up messages or emails, especially ads that claim to have scanned your computer and detected malware. That's a tactic scammers have used to spread malware.
GetNetWise, a project of the Internet Education Foundation, provides a list of tools from legitimate security vendors.
Responding to an E-mergency
If you suspect that you've had a digital security breach, OnGuard Online recommends some
recovery resources to help.
(Much of the information contained in this blog post was researched on
OnGuard Online, a website maintained by the Federal Trade Commission, with significant contributions from other government agencies and non-government partners.
Check out the site for more information, educational videos, and fun games.)
