Life is made easier with the use of the Internet. We utilize it to shop, work, study, connect, and communicate with each other, control our funds, store images, and even use important services. But all of your online activity could include personal information such as your name, email, phone number, where you live or have lived, your passwords, financial information, activity on the site, and much more.
The data theft could potentially be used for account
takeover, scams, ID theft, or other frauds. Fortunately, being able to protect
the privacy of your personal information online doesn't require advanced
technical knowledge.
With just a few sensible acts of cyber security, you can cut
many risks to needless levels. Here are 11 simple methods which you could use
to defend yourself from your personal data online.
Why is it Imperative to Have Personal Data Privacy Online?
You may have an incredible amount of confidential
information on your online accounts and gadgets. From email accounts to
password reset links, shopping accounts with payment details, and social
websites with information about your identity and activities, all these have
access to information on your daily activity.
The Federal Trade Commission (FTC) is offering tips on how
to keep your online information, device, Wi-Fi network, and accounts safe from
criminals and fraudsters. (Consumer Advice)
It's not about eliminating all the potential risks on the
internet. Rather, it is to make your accounts more robust against being
breached and to reduce the amount of unnecessary data you expose.
1. Employ a Strong and Unique Password
Use a strong, unique password. The most straightforward
method for hiding personal data on the web is to have solid and unique
passwords for all of your accounts.
Do not use words, names, birthdates, phone numbers, and
other common words as your password. However, most importantly, don't use the
same password on multiple accounts.
CISA suggests the use of long, random, unique passwords;
however, it recommends using a password manager to generate and keep those
passwords secure. (CISA)
One password manager will create passwords that differ for
each account, and you won't have to remember all of them.
Be mindful of your e-mail account - you may be able to reset
your passwords in other accounts via your e-mail account.
To set this up, you will select the 2nd option. The 2nd
option will be chosen to set this up.
2. Use Multi-Factor Authentication (MFA)
But a password may not be sufficient to secure an important
account. Multi-factor authentication (MFA), which is an optional second step of
authentication when logging in.
MFA can be generated by an authentication app, a security
key, biometric verification, or any other method, depending on the service.
CISA highly recommends utilizing MFA to the greatest extent possible.
If there was an additional component to the authentication,
even if the individual gets your password, they will likely have more trouble
accessing it.
For the accounts that hold sensitive data, like financial
and cloud accounts and social media accounts, consider setting up MFA when you
log in from an unfamiliar place or via an unrecognized device.
3. Know What Phishing Is
Phishing is a favorite method of criminals to steal personal
information.
The email, text message, or website can seem to be from a
bank, Delivery Company, employer, government organization, or other service
that you trust. These messages can be designed to encourage you to click a link
or download an attachment, give a password, or confirm information about your
account in a hurry.
CISA recommends to users that users know how to identify
suspicious messages and avoid interacting with phishing.
When considering clicking links, ask the question:
•
Did I anticipate that?
•
Is the sender or website legit?
•
Is the message establishing any urgency which is not
necessary?
•
Does it request any private details?
If you have any doubts, don't click on links in an email
message from an organization but visit its official website directly.
4. Update Devices and Applications
Software upgrades are more than simply features. They also
can have security addressability fixes for vulnerabilities.
Keep operating systems, web browsers, mobile applications,
and security software up-to-date. This can be facilitated by putting in place
automatic updates.
The FTC suggests that security software, operating systems,
browsers, and apps receive updates because they'll have valuable security
protections.
If it is a known vulnerability and you have a security patch
available, you can be missing that patch for months.
5. Review App Permissions
Some applications may ask for access to information and to
some features of the device like its location, camera, microphone, contacts, or
photos.
Not all permissions are required for all apps. Check
permissions earlier, as you're able to strip out unnecessary permissions for
apps on your phone.
Among the specific recommendations made by the FTC, check
the permissions of the apps and shut off access that is not needed if possible.
Or perhaps a basic app, such as a utility app, doesn't
require real-time location and contact data.
Uninstall all you are not using, especially those
applications that require access to sensitive information.
6. Check Your Privacy Settings
Depending on network settings for social networks, browsers, smart phones,
and other online services, there are privacy controls that might dictate the
amount of information that flows through them.
Discuss settings related to:
- Location sharing
- Personalized advertising
- Account visibility
- Contact syncing
- Search history
- App tracking
- Data sharing
The FTC reminds that privacy settings of a web browser, smart phone, social
media platform, and app give additional control over the collection of
information and tracking.
Setting privacy settings is not a "set it once" affair. Review
services regularly as they may add new features and/or modify their settings.
7. Be Careful About What You Share on Social Media
How one presents oneself online, especially on social media, can be
influential.
Any information that is available to the public will actually tell more than
it's intended to.
Try not to give away any unnecessary information like your full
name/address, travel plans, personal identification information, private
documents, or information that may assist with impersonating you or targeting
you.
Sometimes information from another source may be put together with the
harmless information.
8. Secure Your Home Wi-Fi Network
Your home router is an essential component to your web security policy as it
links many gadgets to the world-wide-web.
Update the router's default admin ID and password, and its WiFi password.
Set modern security settings that are supported by the router, and update the
firmware of the router if there is an update.
To help prevent unauthorized users from getting into your network, the FTC
suggests changing the default password and PIN set by the router and keeping
both the network and connected devices updated.
Don't also provide unwantedly your WiFi password. You might find that it's worth using a separate guest network if you wish for visitors to your network to be able to use the Internet without access to your main network.
9. Watch Out for Public WiFi—It Can Be Dangerous
Airports, cafés, and hotels provide public WiFi access, as
do libraries and other locations. Generally, encryption is used in most
websites these days, which is why don't automatically think that everything on
wireless would be unsafe. But note: caution should still be exercised with
respect to the places one enters sensitive data.
The FTC suggests to consumers how to be sure the websites
they visit are using HTTPS and to vigilantly watch for fake
"phishing" sites that attempt to gather information.
Keep in mind that if a website displays HTTPS, this does not
guarantee that it's legitimate. An impostor website may be able to use HTTPS as
well.
If you need to do sensitive activities, use trusted networks or your phone's connection, if it's possible; and refrain from connecting automatically to networks you do not know.
10. Think Before Entering Personal Information Online
When entering information into a website or app, ask
yourself if you really need this information.
For instance, a service could request your place of birth,
date of birth, telephone number, or location. Review its privacy notice and
learn how your information might be gathered, utilized, or given out. Read its
privacy policies and be aware of how the information you provide may be used,
collected, or shared.
The FTC suggests comparing privacy safeguards, reading
notice information on the sites' policies, and tailoring what you reveal
according to the privacy controls on the websites.
Pick a Good Habit, Which Is Simple:
•
Provide the least amount of information necessary to
receive service.
Every piece of unnecessary information you give away results
in extra information that can be collected, disclosed, or misapplied for
inappropriate purposes.
11. Back Up Important Data
Safeguarding personal data goes beyond the idea of securing
it from unauthorized access. So, be prepared to cope with any event, such as
accidental deletion, data breakdown, viruses, and other factors.
Make backups of significant records, photos, etc., to a
secure and safe place. This can be secure cloud storage that is either an
external drive, or both.
Especially important files should be backed up periodically
in case of failure; do not put all your files on one card.
If the information is of critical value, then using backups,
it is advisable to have more than one computer for information in case one of
them gets lost.
A Simple Online Privacy Checklist
A simple online privacy checklist has been developed, so it
is easy to view the details.
Don't have to change everything all at once. When starting
protection, first make use of the most beneficial protections:
Today:
•
Set up multi-factor authentication for financial and
other critical accounts.
This Week:
•
Use "unreadable" user passwords and activate
automatic software updating.
This Month:
•
Check app permissions, privacy settings, social-media
visibility, and home Wi-Fi security.
Ongoing:
•
Be alert to phishing attacks and don't share excessive
data; keep backups.
What If Your Personal Information Is Stolen?
If you think you've been hacked, take action promptly.
Afterwards, replace the compromised password and any other
accounts that utilized the same password. Enable MFA and check for recent
logons and transactions in accounts for unfamiliar logons.
Contact the financial institution(s) involved through the
financial institution's official channels if there is any chance financial
information has been released. Retain vigilance for follow-up messages from
scammers trying to help you recoup your account.
Another alternative would be to notify the authorities in
one's own country of any scams or fraud. The FTC has resources to help
consumers be aware of and report identity theft and online scams.
Final Thoughts
It's not an IT security guru's task to keep personal
information safe on the Internet.
Having strong, unique passwords, using multi-factor
authentication, regularly updating software, using privacy settings, being
careful with information disclosure, using secure Wi-Fi, and backups can
greatly enhance your everyday online security.
IT'S ABOUT THE CONSISTENCY! Rather than building a
fortress, formulate some good habits to make it more difficult for an account,
device, and personal information to be compromised.
Take this proactive step today to improve your online
security: turn on MFA, update devices, or change a reused password; make a few
more offline security changes over time!
Frequently Asked Questions (FAQs)
1. What will be the most straightforward measure to take to keep personal
data safe online?
These are all the easiest measures to take to start: strong
unique passwords, multi-factor authentication, software updates, avoiding
suspicious links, and limiting sharing of unnecessary personal information.
2. What is not personal information to share online?
Be sure to never reveal personal data like a password,
financial account information, authentication codes, identification numbers, private
paperwork, or anything that could give an easier way for someone to assume your
identity publicly.
3. What is the reason behind going to such an extent? 4. Then why go all
the way?
Yes. Using the same password on multiple accounts increases
risk, as one may be compromised at one website and be used at another. This is
the reason it's better to use different passwords for important accounts. It is
highly recommended that a strong, unique password be used, according to CISA
and the FTC.
5. Does two-factor authentication protect my accounts?
Yes. MFA is an extra security challenge in addition to your
password. This helps to make it more difficult to perform an account takeover
if the passwords fall into the wrong hands. Whether an account supports it or
not, CISA recommends using MFA.
6. What is the safety of public Wi-Fi?
Although not all public Wi-Fi will be dangerous, many of
today's websites, such as online casinos, will be encrypted. Nevertheless, it's
best to make double sure that you are connecting to the authentic network and
website. Only visit sites that have 'HTTPS' in their address and be wary of any
fake sites that are created to trick you into giving away information.
7. When and how many times do I need to review my privacy settings?
Review key privacy settings periodically and when installing
big applications, making new accounts, etc., and when you observe that the
service aiding you has changed.
8. Do I want to let all of the apps see my location?
No? Deny requests for apps to have unnecessary permissions.
Make sure to check camera, microphone, contacts, photos, and other permissions
periodically and restrict any unwanted permissions.
9. Is there a way to be sure that a website is trustworthy when it is on
HTTPS?
No, HTTPS encrypts the communication between a web browser
and a web page; however, scammers can still use HTTPS for their websites. When
entering sensitive information on the Internet, always check the site's domain
and ensure that the information clearly comes from a real site.
10. What is the best way to store many passwords?
A good password manager will create, store, and auto-type
strong passwords, thereby making it less likely to use the same password
repeatedly. CISA suggests free password managers, which are a convenient method
to maintain robust passwords.
11. Is there a method I can absolutely keep my personal details secure
online?
No security method can guarantee "no risk at all."
A reasonable expectation is to reduce unwarranted exposure and that if someone
wants to access content without permission, they are going to have to work very
hard.