Online Safety Q&A

While there are many threats, some of the most common and impactful include:

• Phishing Scams: Deceptive emails, texts, or calls trying to steal your personal information. Learn more about What is Phishing.
• Malware: Malicious software like viruses, ransomware, spyware, and adware that can damage your device or steal data.
• Weak Passwords: Using easy-to-guess passwords or reusing the same password across multiple accounts.
• Data Breaches: When companies or organizations have their user data stolen by hackers, exposing your personal information.
• Identity Theft: When someone steals your personal information to commit fraud.
• Unsecured Wi-Fi Networks: Public networks that allow hackers to intercept your data.

Use a long, unique password for every account. Current guidance emphasizes length and uniqueness rather than a forced uppercase/number/symbol recipe.

• Length: Aim for 15 or more characters when possible.
• Uniqueness: Never reuse an important password on another site.
• Password manager: Let one generate and store long random passwords for you.
• Passphrases: Several unrelated words can be easier to remember when you must memorize a password.
• Changes: Do not rotate strong passwords on a fixed schedule; change them when they may have been exposed.

Learn more in Creating Strong Passwords.

Public Wi-Fi is usually safer than older advice suggests because most modern websites and apps use HTTPS/TLS encryption. The network is still one you do not control, so a few precautions are sensible.

• Verify the network name with staff when possible.
• Do not bypass certificate warnings. HTTPS protects the connection, but it does not prove a website is legitimate.
• Disable unnecessary file sharing and keep your device updated.
• Use a VPN when you want extra privacy from the hotspot operator or do not trust the network.
• Use mobile data instead if the hotspot seems suspicious.

Yes, absolutely. Antivirus software is a fundamental tool for protecting your devices (computers, smartphones, tablets) from:

• Viruses and worms
• Ransomware (which encrypts your files and demands payment)
• Spyware (which steals your information)
• Trojans and other forms of malware
• Phishing attempts and malicious websites

Ensure your antivirus software is from a reputable provider, always kept updated, and configured to run regular scans. Explore our What is an Antivirus guide for more details.

If you suspect your email account has been compromised, act quickly:

1. Change Your Password Immediately: If you can still access your account, change the password to a strong, unique one.
2. Use Account Recovery: If you can't log in, use the email provider's account recovery options.
3. Enable Multi-Factor Authentication (MFA): This adds a crucial layer of security.
4. Check Account Activity: Look for recent logins from unfamiliar locations or devices, changes to your settings, or sent emails you didn't write.
5. Review Linked Accounts: Change passwords for other accounts that use the same email address or password.
6. Scan for Malware: Run a full scan of your devices with updated antivirus software.
7. Notify Contacts: Inform your contacts that your email may have been compromised and to be wary of suspicious messages from your address.
8. Contact Your Email Provider: Report the compromise to their support team.

Scammers create fake websites to steal login credentials or financial information. Here are signs to watch out for:

• Check the URL: Look for "https://" and a padlock icon (but be aware scammers can also get these). More importantly, scrutinize the domain name for misspellings, extra characters, or unusual extensions (e.g., `yourbank.login-site.com` instead of `yourbank.com`).
• Poor Design and Grammar: Fake sites often have low-quality images, typos, and grammatical errors.
• Too Good to Be True Offers: Unbelievably low prices or amazing prizes can be a lure.
• Lack of Contact Information: Legitimate businesses provide clear contact details and physical addresses.
• Pressure to Act Fast: Fake sites might use countdown timers or urgent warnings to prevent careful consideration.
• Check Security Seals: Hover over trust seals to see if they're clickable and actually verify the site.

For a more detailed guide, see our article on How to Spot a Fake Website.

Multi-Factor Authentication (MFA), also known as Two-Factor Authentication (2FA), is a security process that requires users to provide two or more different verification factors to gain access to an account or application. These factors can be:

• Something you know (like a password or PIN)
• Something you have (like a smartphone app generating a code, or a physical security key)
• Something you are (like a fingerprint or facial recognition)

MFA is crucial because even if a scammer obtains your password, they still won't be able to access your account without the additional verification factor(s). It significantly enhances your security against unauthorized access. Enable MFA on all accounts that offer it, especially for email, banking, and social media.

Protecting children online requires a multifaceted approach:

• Open Communication: Regularly talk to your children about online safety, appropriate behavior, and potential dangers like cyberbullying or interacting with strangers.
• Set Clear Rules: Establish guidelines for screen time, websites they can visit, and information they can share.
• Use Parental Controls: Utilize software and device settings to filter content, monitor activity, and manage screen time.
• Teach Critical Thinking: Help them understand that not everything online is true or safe, and how to identify suspicious requests.
• Privacy Settings: Teach them to use strong privacy settings on social media and games, and to never share personal information.
• Be a Role Model: Demonstrate safe and responsible online behavior yourself.
• Encourage Them to Talk: Ensure they feel comfortable coming to you if they encounter anything online that makes them feel scared or uncomfortable.
• Stay Informed: Keep up with the latest apps and platforms children are using.

For more detailed guidance, refer to our Online Safety Checklist for Seniors & Parents.