How to Stay Safe Online: Privacy and Security Tips

Staying safe online is a must, with constant threats like malware, hackers and scams it can seem rather hard to keep yourself and your information as secure as possible, or that there is a paywall preventing you from the security you want.

Although a lot of the tools provided by premium security companies can be incredible there are other options and procedures you should be taking to make your online experience as safe as possible.

Use a Secure Web Browser

Long have gone the days of everyone using the default browser that comes with your new computer, now there are many options when it comes to internet browsers, and it is a good idea to use a browser, like Google Chrome, that is secure and has the option to add extensions to enhance your internet security.

Use Security Browser Extensions

Being able to install extensions or add-ons into your browsers can help ensure that the sites you are visiting are legitimate and safe, there are many options for FireFox and Chrome based browsers that can prove helpful and are usually free to use.

The Avast Online Security extension does a good job at protecting your privacy by blocking tracking cookies on websites and scanning each site you visit for potential phishing attempts or sketchy material.

Inside the Avast extension you can rate websites and view how other people using the extension have rated the websites you visit to get a good idea as to how safe each site is and which sites you can be sure to trust.

Trafficlight by Bitdefender is another similar security add-on for your browser that will scan through the sites that you visit to ensure its safe to use, and will even block elements that it deems unsafe or potentially harmful. It does this without blocking an entire site to make sure your ability to use any given site isn’t obstructed by the application.

If you’re a regular user of the internet then I’m sure you have noticed that the start of a website’s URL is either display as “HTTP” or “HTTPS”. In short the difference is that HTTPS websites add an extra layer of security to prevent hackers from getting hold of your information, there is a handy extension called HTTPS Everywhere which will add this to many of the different websites you might visit that don’t have this feature enabled.

Install AntiVirus Software

It’s pretty obvious by now that you need to have some sort of antivirus system on your computer to help you detect, disinfect and even prevent any potential malware threats you might run into. There are plenty of premium options that do a great job at keeping your device clean of viruses, however you can also use the free, less feature rich, options of existing software like Bitdefender, Avast or Kaspersky.

Many people will add some sort of antivirus to their computers but will forget about their other devices, such as their phones or tablets. Your mobiles aren’t invulnerable to malicious attacks so installing a mobile security app like Avast can help ensure that no risk is taken when on the move.

Use a VPN for a Secure Connection

When you’re out and about you might find yourself using public or free WiFi, unfortunately this is a vulnerability that hackers can take advantage of to get access to your information or even infect your device with malware. Because of this you’re best off to make sure that you have disabled network file-sharing on your device before connecting to public WiFi, and making sure to use a VPN when you’re online, especially if you’re entering confidential information like your passwords, address or other personal information. 

A VPN can also be incredibly useful for at home use, when you search the web your ISP will get information about what you’re doing and where you’re going. With a VPN the ISP will no longer receive this information, however your VPN provider will, because of this it is important that when you’re selecting a provider that you look for someone that doesn’t log your data.

Create Strong and Different Passwords

It can be incredibly easy to fall into the trap of creating easy to remember passwords using common words, phrases or names, however even mixing in a few capital letters, symbols or numbers doesn’t mean your password is as strong as it should be.

Not only should you be making your passwords random and difficult to guess, you need to be using different passwords for every account and website you use. This is important because if one account is compromised or there is a database leak then it’s possible that you could wake up one day without access to multiple accounts that you own. 

Below you can find some examples of weak and strong passwords.

You can test your password strength fairly accurately using this handy tool by LastPass, which will even provide you with tips and tricks to help improve your passwords.

If you’re like me and have loads of different accounts then having each one uses a difficult to remember password could be an issue and a reason that you avoid following this guideline, thankfully however there are password manager tools that you can take advantage of to make it quick and easy. 

You can use LastPass or another password manager tool to manage all of your passwords for free, and even use them across multiple devices to make it easy to sign in to your accounts on your phone, laptop or tablet. You can get LastPass for your devices or even just use the browser extension for chrome.

All you will need to do is create a strong and secure password that you can remember for signing into Lastpass and then you will be able to save and enter your passwords for different websites and accounts straight from the program. Built into LastPass is also a very useful password generator that can help you create very strong passwords and save them instantly.

Use Two-Factor Authentication on your Accounts

If you are unsure as to what 2FA is then there’s a good chance that you’re not already using it, put simply it is an extra level of protection added when signing in to one of your accounts, when you sign in there will be another field of verification that you will need to partake in to gain full access. There are a few ways that this can be done;

  1. Through your phone number, you will receive a text message or phone call with a verification code that you must enter to be allowed to log in.
  2. Using an authenticator app or program, usually when setting this up you will be required to use the app to scan a QR code, from then on the app will generate a random number code that you will be prompted for when signing into your accounts.
  3. U2F security keys; these are by far the safest method for keeping your accounts safe, these are physical devices that typically work through USB or Bluetooth and are required to log-in to your account.

Prevent your Devices from Remembering a WiFi Network

An additional way someone can gain access to your information is creating their own WiFi network that will appear to your device as being one it is familiar with, this means as you’re walking past or waiting for a train you could accidentally automatically connect to a WiFi network leading to your information being compromised.

Don’t Overshare your Information

When filling out information to build your online profile it’s recommended that you provide as little information as possible, the details and data you put on display may be more vital to your security then you may think. Another good idea is to change your privacy settings and put them on the highest possible for each social media site and website that you have, the less people that can see your details the safer.

Be Careful of Phishing and Malicious Emails

You need to be careful when opening and clicking links from emails, no matter how legitimate the email may look there’s a chance that the email was sent from a forged sender address, and made to mimic a real email from the company you’ve supposedly received it from.

These types of emails will often suggest that your account may have been compromised, try to get you to download a file or follow some steps once you click on the provided link.

If you click the link you’re likely to be redirected to a phishing website, that again may look like the  legitimate website, and may even have a URL that is similar to the original or look real at first glance appears to be realistic.

To avoid handing over your personal information or getting your accounts hacked the best practice is to open up your browser and visit the site in question, here you can attempt to sign in or even contact the company about your concerns and to check if the email is authentic.

Think before you Post and Share

You’ve probably heard this one before, but when you post something to the internet it is there forever, you need to keep this in mind when you choose to post something as it may affect your potential employment opportunities, give away important information or even be used against you at some point. 

It’s very common when applying for a job to have the respective place of hire look into your social profiles to get an idea on what to expect with who you are and how you act. To avoid this you just need to have a solid screening process and consider the way it may look to someone else.

Avoid unsafe and Unsecured Websites

If you don’t recognise or trust that a website is safe then it’s probably a good idea to stay off the site as a whole, or to not enter any of your information into it. A good habit to get into when purchasing something online is to check to see if the website is using SSL, to make things simple SSL is an added encryption layer provided by a website to make sure hackers can’t get your information.

You can tell if the website you’re on has a SSL certificate by checking the URL; if it reads “https” instead of “http” then it’s secure, depending on your browser you might even see a padlock or the word “secure” to the left of the URL. If you are using chrome you can click on the padlock to ensure the certificate is active, or inspect the site by pressing Ctrl + Shift + I on a web page then navigating to the security heading.

Invest in Premium Security Software

Making the switch from a free antivirus software to a more advanced internet security system is well worth it for the extra level of security and piece of mind that they provide. Most of them provide an advanced firewall that can be useful for sniffing out and preventing threats or attacks, completing advanced scans and providing a list of additional tools to help keep you as safe as possible.

Keep your Programs and AntiVirus software updated

Programs can be updated to add new features, however their updates are often there to remove vulnerabilities in their software and prevent hackers from using them to get access to information they shouldn’t be able to. Most programs will have an auto-update feature that you can enable, if it’s off by default then you can turn it on or search online to learn how to do it. 

It’s not only existing programs on your device you need to be cautious about, when you’re looking at a new piece of software to install to your computer you may want to read up on it first. You want to be checking reviews on the program and making sure that it is still a supported version and receiving regular updates.

Similarly it is just as important to keep your Antivirus software updated at all times, these updates are usually there to improve the existing database and enable them in identifying and removing new potential threats or malicious software that may be circulating.

Be Careful what Links and Attachments you Click or Open

Links and attachments can be deceiving, and not only in emails. It’s possible that you’ve seen a scam like this before, you sign in to your favorite messenger app or social media profile and see a message from a friend sending you a link to a website, usually accompanied by some click bait message. 

The link usually goes to a malicious site that will attempt to gain access to your information and account and further spread the same message to your friends. So even if your best friend is sending you a link you may want to take precautions before clicking it.

Keep a lookout for suspicious activity on your accounts

A good safe practice is to monitor your account activity to make sure they haven’t already been cracked into, a lot of online sites and services will actually have a feature that enables you to check out the previous login activity and devices that have access to the account in question.

Often you can even revoke the access of devices you don’t recognise then take the necessary steps to secure your account. Many companies even send out automatic emails or text messages if they notice any suspicious activity or an unusual login attempt.

Be Careful what you Download

It can be tempting to download new software or files online, especially if they’re free, if you’re choosing to do this it’s recommended that you look for anything that may seem suspicious about it.

For example if you’re getting a free download that you found on a video you may want to read the comments and reference the like to dislike ratio. If there are a lot of comments claiming the file is malicious, an overwhelming amount of dislikes or comments are disabled it’s probably a good idea to not take the risk and avoid any drama by not downloading the file.

Conclusion

  1. Take advantage of the helpful AntiVirus and Security tools available.
  2. Improve your Password Game; long, random and different on each site.
  3. Enable 2FA on all your Accounts
  4. Avoid clicking suspicious links or downloading attachments.
  5. Always navigate to the official website first if you think your account may be compromised.
  6. Check for secure https URLs
  7. Keep all your software updated