|
|
 |
We’re all human. We make mistakes. But there are some things we can easily avoid. Here are some tips to ensure that you don’t take the bait and that you stay safe on Web sites and in email.
|
- Change your passwords often. Many Web experts recommend once every three months or even more frequently.
- Avoid using passwords that may be easily guessed, like birthdays, anniversaries, or names of your children or pets.
- Create passwords using a combination of uppercase and lowercase letters, numbers, and special characters like $, @, !, etc.
- Don’t share your passwords with anyone.
- Log in to your personal financial accounts regularly to ensure that all activity is normal.
- Take advantage of sites that offer a two-password approach, where the second password is always changing or is based on information only you know.
|
- If you’re unsure if a Web site is genuine and it displays the VeriSign Check, click it to verify the identity of the site.
- If a Web site seems poorly built or programmed and doesn’t provide any verifiable security information, be on your guard. If you’re still not sure whether it’s legitimate, email or call the company before providing it with any information.
- When on a secure Web page, the address bar should begin with HTTPS not HTTP, The extra “s” stands for “secure.”
- If possible, use a new high-security Web browser that recognizes Web sites using Extended Validation (EV). If you’re using a high-security browser, ensure that the address bar turns green before entering personal information.
- Look closely at a site’s URL in the address bar. A genuine Web site should include the company name immediately before the suffix. For instance, http://www.trust.com is a valid site, presented by VeriSign. However, http://www.trustthecheck.1234.com may be a fraudulent Web site spoofing VeriSign’s site.
- If a Web site has obvious and abundant typographical errors, avoid it. Why? Many phishing and spoofing sites originate in foreign countries and are written and programmed practically overnight.
- Financial Web sites will never tell you that you must provide your username, password, PIN, or other sensitive information. Fraudulent financial Web sites will.
|
- When you’re not online, disconnect from the Internet.
- Consider adding a personal firewall to your computer or network.
- Keep your anti-virus software updated.
- If you’re using a laptop, create a password that’s required to access any information.
|
- Don’t download any attachments unless they’re from someone you trust. Attachments can include destructive viruses.
- Remember that email messages are not secure. Never provide any sensitive information—like usernames, passwords, PINs, date of birth, or credit card or account numbers—in an email.
- If you receive an email from a company requesting any of that information, it’s probably a phishing scam. Delete the email immediately.
- If you’re unsure whether an email came from a real company or a phisher, don’t click any links in the message. Instead, call to verify that the message came from the company, or visit the company’s Web site by typing its URL into your Web browser.
|
- Be sure to set up a password, or Web key, for your home wireless network. Instructions on how to do so are generally included with your wireless router. Only give the password to those you trust.
- Avoid buying things or checking bank and investment Web sites while using a public Wi-Fi network. You may be on an evil twin network and not realize it. If you are, the evil twin network will have access to everything you access.
|
|
|
|
|