Everyday Cybersecurity

In an increasingly digital world where our lives are intertwined with technology, securing your online activities is paramount. Cyberattacks, data breaches, and online threats are ever-present, potentially compromising our personal information, financial security, and business operations. This page offers you an overview of baseline security measures along with further resources. From safeguarding personal devices and online accounts to being vigilant against phishing attempts and keeping software up to date, these measures are essential for protecting our digital identities and ensuring a secure online experience.

Use Strong and Unique Passwords

Enable 2FA

Be Cautious with Personal Information

Additional Tips

Use Strong and Unique Passwords

1. Create strong, complex passwords that include a combination of letters (both uppercase and lowercase), numbers, and special characters.
2. Avoid using easily guessable information like personal names, birthdays, or common words.
3. Use a different password for each online account to prevent a single breach from compromising multiple accounts.
4. Consider using a reputable password manager to generate, store, and autofill complex passwords securely.

Passwords

Password Managers

Two-Factor & Multi-Factor Authentication

Enable Two-Factor Authentication (2FA)

1. Whenever possible, enable 2FA for your online accounts. This adds an extra layer of security by requiring you to provide a second authentication factor, such as a one-time code sent to your mobile device or email, in addition to your password.
2. Use app-based 2FA methods (e.g., Google or Microsoft Authenticator) rather than SMS-based methods.
3. SMS-based 2FA can be vulnerable to SIM swapping attacks that can be very challenging to recover from.
4. For your most sensitive accounts (payment services, financial institutions, medical providers, healthcare insurance, etc.), consider using biometric authentication devices.
5. For less sensitive, but important accounts (utilities, telephone services, cable or internet services, etc.) that do not support 2FA, consider asking your service provider to set a security word, a security question & answer, or a passphrase that isn't easy for others to guess.

Two-Factor & Multi-Factor Authentication

Biometric

Captcha

Hard Token Passcode Generators

Security Questions

SMS or Text Messaging to Receive Codes

Software Passcode Generators

Be Cautious with Personal Information

1. Be mindful of the information you share online, especially on social media.
2. Avoid posting sensitive personal details such as your full address, phone number, or financial information.
3. Be skeptical of unsolicited emails, messages, or requests for personal information.
4. Phishing attacks often use social engineering to trick users into revealing sensitive data.
5. Regularly review the privacy settings of your social media accounts and limit the amount of personal information that is publicly visible.

Email & Other Communications

Encryption

Junk Mail

Phishing

Scams

Sensitive Data

Account Authentication Data

Constituent Information

Customer Information

Data Sharing

Donor Information

Employee Information

Encryption Keys

Financial Data

Intellectual Property

Partner Information

Secure File Storage

Supplier Information

Volunteer Information

Encryption

no subcategories

Phishing

no subcategories

Additional tips for online safety

1. Keep your software and devices up-to-date with the latest security patches.
2. Use reputable antivirus and anti-malware software.
3. Be cautious when downloading files or clicking on links from unknown sources.
4. Educate yourself about common online threats and scams to better recognize and avoid them.
5. Consider using reputable Virtual Private Network (VPN) software to keep prying eyes from monitoring your online activities.
6. Be wary of browser extensions or plugins; only use them when provided by reputable organizations; and consider isolating them to a specific browser profile to limit what a malicious browser extension can access.

Anti-virus & Anti-malware Software

no subcategories

Risks & Threats

Security Auditing

Understanding Relevant Threats

Understanding Your Risks

VPN

no subcategories

Phishing

no subcategories