Cybersecurity Tips

• Hovering over links in your email and web browser before you click them lets you see exactly where the link takes you without exposing you to fake sites that steal your information.
• Turn on automatic updates for your system and software so you get the latest security patches and software updates. Don’t get left behind! Update your mobile device operating system and apps whenever updates are available.
  • Install apps only from trusted sources, stick to apps on the official app repositories. Using untrusted apps could introduce malicious software to your phone, tablet, or computer.
• Backup your devices and data often!
• Consider turning on full disk encryption services to protect your computer’s data while it is not in use.
• Be suspicious of any email warning you of a problem with an account at a bank or online service that asks you to verify information or log in from the email, these are often scams or phishing attempts.
  • Never open email or attachments from senders you do not know or expect.
  • Even email from your friends and co-workers can be faked, be on the lookout for odd requests or language that doesn’t sound like the person you know… it could be a phishing attack.
  • Reporting phishing is your superpower!!! Report phishing emails to your organization’s security personnel or your email provider… you can save the day from a data breach.
  • When a suspicious email asks you to interact with something in the email (call a number, log in to an account, etc.), it might be wise to verify the information is accurate or access the resource via your typical route (like calling the saved number in your phone or logging in via your saved bookmark).
  • Tired of spam emails? Consider creating a second email address that you use only for non-essential activities, shopping, or other online activities that might result in spam.
  • Beware of unsolicited email that offers an “unsubscribe” button to remove yourself from further emails. This is often just a method for spammers to validate that your email address is working to target you with more spam. Instead, simply block the sender and report it as spam.
• Use strong passwords that are at least 8 characters long and include letters, numbers, and special characters… don’t include names or other easily guessed words.
  • Longer passwords are harder to crack or guess. Think about using passphrases versus simple passwords; these are easy for you to remember but hard for hackers to guess.
  • Never reuse passwords for multiple services or applications, consider using a password management tool to help keep track of all your passwords painlessly.
• Most data breaches involve social engineering, remember that cyber-criminals are targeting YOU as much as your computer.
• Refrain from sending personally identifiable information or sensitive data via SMS (text message) or email, if you must send sensitive data ensure that you use end-to-end encryption.
• Reduce your social media footprint by using the provided privacy tools, ask yourself “Does the whole world need to see this?”
• Always enable Multi-Factor Authentication (MFA) – MFA makes it much harder for a hacker to access your accounts.
• Before interacting with a website, ensure that the address starts with “https://”. This means the site is using an encrypted connection, reducing the risk of interception. The “S” stands for “Secure!”
• Federal agencies will never call or email you asking for personal information. Never give out your personal information without a secondary verification of the caller.
• Read the privacy policies of applications you choose to install, make sure they are not using your personal data in ways you don’t approve.
• Never trust “free” Wi-Fi for sensitive things. If you need to access sensitive data, consider using your cellphone data or hotspot, or even better… a Virtual Private Network (VPN) over Wi-Fi to protect sensitive data when you are away from work or home.
• Secure your home Wi-Fi by using Wi-Fi Protected Access (WPA) with Personal Advanced Encryption Standard (AES) and Temporary Key Integrity Protocol (TKIP) in your home WiFi router setup screen (and disable WPS).
  • Change the default SSIDs, usernames, and passwords for all computers, smart appliances, and other devices; they often ship with weak or well-known passwords from the factory and can allow hackers a foothold to attack your network.

Source: US Dept of Ed's Student Privacy Policy Office’s Privacy Technical Assistance Center