Don’t ever think “It won’t happen to me”

Everyone, on every device that is connected to the internet, is at risk of being hacked, succumbing to a virus, being a victim of a phishing scan, malware, ransomware and other attacks are also rife. We are heading in to the time of year where scams are rife!

Your personal and financial well-being through to your professional reputation and everything in between can be at risk, so we all need to continue to take Cyber Security seriously.

At Safe on Social, we believe that learning good Cyber Security practices should underpin everything that we do online.

Password management

Use long passwords 20 characters or more are best. Use a healthy mix of characters, preferably alphanumeric, and never use the same password for multiple

sites because if a hacker can access one of your accounts, it will only be a matter of time before they have your whole online life at their fingertips.

Always use a password/passcode or biometric to lock your mobile device that way if it is lost or stolen, people won’t be just a pin code away from access your bank account, your social media account and many other personal things like photos.

As hard as it may seem, please don’t share your passwords and don’t write them down.

Update your passwords periodically, at least once every six months (90 days is better).

If you are an an Apple user, consider using the free Keychain Access to manage passwords.

Keychain Access is a macOS app that stores your passwords and accounts information and reduces the number of passwords you have to remember and manage.

When you access a website, email account, network server or another password-protected item, you may be given the option to remember or save the password. If you choose to keep the password, it’s saved in your keychain, so you don’t have to remember or type your password every time.

To ensure that passwords and other data stored in your keychain are secure, make sure to set up a login password for your computer. Alternatives to Keychain Access for Windows, Mac, Android, iPhone, Linux and more can be found in this article just released by CNet, The article outlines the best password managers should you want to invest in one. https://www.cnet.com/news/the-best-password-managers-directory/

A password manager can help you to maintain strong, unique passwords for all of your accounts. These programs can generate strong passwords for you, enter credentials automatically, and remind you to update.

Keep all device software up to date

Installing software updates for your operating system, apps and programs when prompted is critical and a great habit to get into.

Always install the latest security updates for your devices as soon as possible after you are notified of them.

This includes app updates on your mobile devices, Playstations, Xbox. These updates always include “Security patches” where they fix any security vulnerabilities. Particularly important when your credit card details are often stored in your account details.

On your computer always make sure you turn on Automatic Updates for your operating system.

Use web browsers such as Chrome or Firefox that receive frequent, automatic security updates.

Make sure to keep browser plug-ins (Flash, Java, etc.) up to date.

Avoid suspicious emails and phone calls

Phishing scams are a constant threat. Cybercriminals may attempt to trick you into divulging personal information such as your login ID and password, banking or credit card information.

Phishing scams can be carried out by phone, text, or through social networking sites - but most commonly by email.

Be suspicious of any official-looking email message or phone call that asks for personal or financial information. Always hover your mouse over the email address to see if it is actually from the organisation it claims to be from if you are even slightly suspicious.

Common Phishing scams at present include people ringing up claiming to be the support division or your telecommunications provider (they never call you unless you have called them and requested a call back) saying there is a problem with your internet etc.

Be careful what you are clicking on. Avoid visiting unknown websites or downloading software from untrusted sources. These sites often host malware that will automatically, and often silently, compromise your device. If attachments or links in the email are unexpected or suspicious for any reason, don’t click on it.

Never leave devices unattended

The physical security of your device is just as important as its technical security.

If you need to leave your laptop, phone, or tablet for any length of time password lock it so no one else can use it.

If you keep sensitive information on a USB Flash Drive or external hard drive, make sure to keep them password locked as well.

For desktop computers shut-down the system when not in use or lock your screen. If you are using a device in a library or hotel foyer etc. – don’t forget to log out!

Install anti-virus protection

Only install an anti-virus program from a known and trusted source. Keep device software up to date to ensure your anti-virus program remains effective.

A list of some of the best Anti-Virus software can be found here:

https://www.top10bestantivirus.com/free-antivirus-software?gclid=EAIaIQobChMIxOX1uJuP4AIVFK6WCh3r

Gwp4EAAYASAAEgKY0fD_BwE

Use a VPN (Virtual Private Network)

A VPN creates a virtual encrypted tunnel between you and a remote server operated by a VPN service. All your internet traffic is routed through this tunnel, so your data is secure. Your device will appear to have the IP address of the VPN server, hiding your identity and location. If you are not using a VPN, it is wise to avoid public Wi-Fi networks, perhaps at a cafe or airport. Typically, you might connect without a second thought. However, do you know who might be watching the traffic on that network? Can you even be sure the Wi-Fi network is legit? It could have easily been set up to steal personal and financial information from people that logon to the “free wi-fi”. Keep in mind that it’s tough to tell whether or not a Wi-Fi network is what it appears to be. Just because it’s called Sydney Airport WiFi doesn’t mean they own it.

If you connect to that same public Wi-Fi network using a VPN you can rest assured that no one on that network will be able to intercept your data not even the operators of the system itself.

There are many other VPN services available, including paid and free options (there is a basic version available within ios12). It’s worth doing your research to work out which is best for your needs, especially if you are a heavy-duty user.