Beginner's Guide to Protecting Yourself Online: Personal Digital Security
January 21, 2023
PouyaSadri
A Guide to Simple and Effective Online Protection: Forgetting multiple complex passwords is a thing of the past. This guide offers easy-to-implement digital security measures, similar to locking your house before leaving. Implementing these steps will keep you safe from hacking.
Online Protection
Tips
Digital Security
The first step in protecting yourself online is to set passwords on all your devices, including laptops, phones, tablets, routers, and any other device that requires a login. Make sure to change any default passwords that may still be enabled on these devices, such as your Wi-Fi router, home camera system, or smart TV.
One of the most important ways to protect yourself online is by not reusing passwords. This can be difficult to manage, but using a password manager can make the process much easier. A password manager allows you to create a single "master password" and securely store unique passwords for each of your accounts. This gives you the added security of different passwords for every account, while still being convenient as you only have to remember one password. Some popular options include 1Password($3/month) and KeePass which is free. Password managers also provide a secure storage solution for other important information such as insurance numbers, bank account data, and more. It serves as a digital version of a fireproof box for all your important documents. Although it may be time-consuming to set up a password manager and input all your accounts and passwords, it is an important step in protecting yourself online. I highly recommend setting it up now, even though it may be a bit of a hassle. It is worth the effort in the long run.
Go back and do step2. Once you have set up a password manager, it is crucial to add your most sensitive and important accounts such as bank and credit card accounts, email accounts, and social media accounts. This will ensure that these accounts are protected with strong, unique passwords.
To maximize the benefits of using a password manager, I recommend spending just five minutes each day adding new accounts to it. Over time, this small investment of time will save you a significant amount of time and stress. The reason being, when passwords are leaked in a data breach, hackers often use a technique called "credential stuffing" to try the leaked password on multiple accounts. If all your accounts have the same password, it could lead to multiple breaches or the need to change all your passwords every time a new breach occurs. A password manager can help you avoid this stress, and it is also a good idea to set up alerts (many of which are free) to be notified when your account data has been leaked.
Update EVERYTHING.
Don’t click postpone or ignore on those pop up updates. Software updates are most often released in response to reported security vulnerabilities. Leaving your devices unpatched can leave them vulnerable to attack.
It is important to regularly back up your data to protect it from being lost or compromised in case of malware infection.
You can use iCloud (but make sure you've used a secure password!), other cloud service, or a physical hard drive.
Use Antivirus Software (and Update it Regularly).
Using antivirus software can be a good idea, especially for the average user, if you can afford it. It is not foolproof, but it does offer some level of protection. You can consider using Malware Bytes as an option. Another way to increase security is to limit the number of internet-connected devices you have. Be mindful when purchasing devices with internet connectivity and consider if the added convenience is worth the potential security vulnerabilities. Internet of Things (IoT) devices are often not updated and lack security features, which makes them vulnerable to attacks. If they are connected to your home Wi-Fi network, it can provide an easy way for hackers to gain access to your network. It's worth noting that more expensive devices tend to have better security features.
Regularly Review Your Social Media Privacy Settings.
It may be surprising to learn how much personal information is shared online. When creating new social media accounts or posts, it is important to be mindful of the information you are sharing. The more information that hackers have about you, the easier it is for them to gain access to your accounts. To reduce the risk of your personal information being compromised, try to avoid posting too much personal information on your social media pages. Also, avoid posting pictures of your credit card or boarding pass. For those who rely on social media as a source of income, it is also a good idea to remove metadata from photos and videos before posting. Metadata can include location and device information, which can be accessed by anyone viewing the photo/video.
Avoid Connecting to Free Wi-Fi Hotspots.
Free Wi-Fi hotspots are often targeted by hackers and can put you at risk of Man-in-the-Middle (MitM) attacks, where a hacker can spy on your internet traffic or even modify it without your knowledge. To protect yourself, consider using a virtual private network (VPN) service, especially when connecting to public Wi-Fi hotspots. A VPN provides online privacy and anonymity, which can protect you even when you're connected to public Wi-Fi. Look for a VPN service that can be installed on multiple devices, has an automatic connection option, and allows you to select the country from which your traffic originates. The TOR browser is a free service that also provides anonymity, but it can be less convenient and slower.
Enable Multi-Factor Authentication on Your Primary Email Account.
Multi-factor authentication (MFA) or 2-Factor authentication (2FA) is a security measure that requires more than one method of authentication to access an account. This means that even if someone has your password, they will not be able to access your account without the second form of authentication. This can include a code sent via SMS, a code generated from an app like Google Authenticator, or a hardware key like YubiKey. A hardware key is considered the most secure option, followed by an app and then SMS. It is recommended to enable MFA on your most important accounts, and if possible, on all your accounts. To find out which websites support MFA, you can refer to a list available online.
Use an End-to-End Encrypted Chat Application.
End-to-end encryption is a method of securing data by encrypting it on the device, so that it cannot be read or altered in transit by anyone, including internet service providers, hackers, or other unauthorized parties. In order for someone to read an end-to-end encrypted message, they would typically need to have access to the device on which the message was created. There are several free options available for end-to-end encryption such as iMessage, WhatsApp, Wickr, and Signal. Facebook Messenger also has a "secret" option for secure messaging. Among these options, Signal is particularly recommended as it is open-source, free, and not owned by any major tech companies.
Check out MySudo and Privacy.
MySudo is an app that provides phone numbers with plans starting at $0.99/month. These numbers can be used on dating apps, food delivery apps, or any other situation where you may not want to give out your personal number. MySudo also offers virtual debit cards, which can provide an added layer of security when making online purchases by using a unique debit card number for each transaction. This can help protect your information in case a vendor suffers a data breach. However, it's worth noting that there are other free options for virtual card options with more features, such as Privacy.
Finally, Be Careful Online.
Be cautious when clicking on links from unknown senders, whether it's in social media requests, texts, or emails. Also, avoid using insecure programs such as Adobe Flash, and be mindful of visiting websites that may contain malware. For example, adult video streaming sites and free streaming or download sites are known to have malicious content. To be safe, if you need to access a link in an email (such as an alert from your bank or social media accounts), it's better to navigate to the app or website directly instead of clicking the link in the email. While it's important to be vigilant about online security, try not to overthink it.