3 Simple Steps to Online Security
September 27, 2011 Leave a comment
Being the tech geek of the family, I’m too often asked to help “clean” computers of viruses or malware. Many of these incidents can be avoided with a couple common-sense tactics.
Recently a friend of mine had her yahoo account compromised. The result: emails sent to all of her friends offering a free iPad and the successful deletion of her contacts and emails. She shared her mishap online and her shout out fetched sympathetic and other less than ideal responses.
So, I decided to share my recommendations for the not-so-technical…and now I’ll share them with you.
1. Password Security is Essential
Simply changing your password isn’t the fix. If you must use the same password across multiple online services as many people do, be sure to change it globally across all of your accounts. Hackers have much bigger things in mind than simply spamming your friends. If they gain access to one account they will in turn try to access other popular online services including email and financial providers.
For those of you with many online services like email, banking, Facebook, etc. If you can’t remember a different password for each service (who can?), can you at least remember three?
Create at least three different passwords. One for each of the following types of online activity:
- email and public services
- banking and financial services
- business/work services
For increased security, try to have more than one password for your banking accounts. This approach will create boundaries and limit your exposure if one of your passwords is compromised.
When selecting a password, try to make it as complex as possible, but still able to be remembered. Don’t use pet names or anniversaries. Try to use a combination of letters, numbers and punctuation. Punctuation makes it exponentially harder for hackers to guess your password since it creates a larger character set. To generate a list of random passwords, check out this tool. If you don’t like the first batch, just refresh your browser.
Note that some sites will not allow you to use punctuation in your password. A helpful alternative is to substitute punctuation with an underscore where needed.
2. Avoid e-Cards
I know it is gratifying to receive those flashy greetings from friends and family. The problem is, interspersed within the legitimate e-cards, are the wolves in sheep’s clothing. These e-cards appear harmless but are one of the biggest points of entry for hackers. The major objective of these is to capture your passwords as you type. Often, your keystrokes are sent to remote servers for inspection and potentially used to extract passwords.
3. Avoid Pop-Up Windows Warning of a Virus
The objective is the same: to get your passwords! This time, they have taken a different approach. First, they are trying to convince you that you have a virus on your computer and then offer a faux anti-virus for free. The issue here is that the so-called anti-virus they’re offering often has a similar keylogger as the e-cards. For prevention, always make sure you have a legitimate anti-virus installed.
Even with the best anti-virus and anti-spyware tools, over time, stuff manages to get through. Here are two good and free tools to scan your computer, if you think it’s infected:
Typically, one individual vendor does not provide the complete gamut of services necessary to complete your project. Success requires 