3 Steps To Protect Your Digital World

Kenny Wolf
Geek Talk
Published in
5 min readAug 28, 2023
Cover image — hacker trying to steal password.

Data breaches, hacks on organizations and other criminal activities can turn your digital as well as your real world upside down.

In this article, I’ll show you three measures you can take to protect yourself online.

Use a password manager

Passwords, a necessity for computer and smart device users, can pose challenges in memory and security.

While some focus on fortifying passwords, others struggle to recall them. Despite being a fundamental IT security measure, passwords are merely a basic layer of data safeguarding. In situations where data might end up in unauthorized hands, these combinations of characters offer initial protection.

Nonetheless, as businesses increasingly employ usernames and credentials to bolster their online platforms, crafting and maintaining potent passwords for all accounts becomes a complex task.

Alarming research reveals that many individuals, particularly those below 34 years of age, exhibit recklessness regarding their passwords.

Astonishingly, nearly 35 percent of individuals employ the same password across the majority of their online logins. More concerning, 42 percent of technology users admit to experiencing at least one instance of their account being compromised.

For this reason, password managers are very helpful.

Use always different and strong passwords

In a perfect world and to make it as hard as possible for criminals out there, you should use a different password for each access.

Not only there, but also a strong password for each.

Example for weak password: ilovemydog89
Example for strong password: 76&DnX#oNQQX$o?f

A password manager helps you to create, store and retrieve credentials for each of your accesses. A good password manager also has the functionality to create a strong password using a random password generator (like the strong password above).

One password to rule them all

Does that mean you don’t have to remember passwords anymore?

For the most part. The only password you need to remember is the one to access the password manager. This password should be strong and random.

One can set up additional security measures such as bio metrics (fingerprint, facial recognition).

Cross-device auto fill

A good password manager is also designed for multi-platform.

Mostly there is a mobile app and a browser extension of the password manager. So you have access to your credentials on all devices.

Share passwords securely and easily

Most password managers offer a team or family subscription.

This allows you to share passwords within your group or with individuals. You can also edit the permissions. For example, your kids could have access to the YouTube Kids account, but not be able to view or edit the password.

While your life partner has editing rights for the login to the joint insurance. And since it syncs, you always have the new login as soon as it is changed.

This approach is much more secure than sharing credentials via WhatsApp or other platforms (no data for Zuck).

So many managers

There are several providers out there for a secure and reliable password manager.

Among them would be Bitwarden, 1Password, ProtonPass or NordPass. Personally, I am a fan and long-time user of Dashlane.

Dashlane offers all the features we discussed and more. One useful feature is the Darknet monitoring. If your email address is published and sold in a data leak or hack on the Darknet, you will receive a message and further steps.

Try Dashlane and get 6 months premium for free.

Recognize phishing attacks

Are you sure that email is actually from Amazon?

Or from Zalando, Netflix, or the countless unsolicited emails you receive every day? Businesses and individuals are often targeted by cyber criminals with emails that look like they come from a legitimate bank, government agency, or organization.

In these emails, the sender asks recipients to click on a link that takes them to a page where they must confirm personal information, account information, etc.

This technique is called phishing, and it’s a way hackers con you into providing your personal information or account data. Once your info is obtained, hackers create new user credentials or install malware (such as back doors) into your system to steal sensitive data.

Hover and don’t click

The following trick is very simple and yet effective: do not click on the link.

I know this sounds trivial, and yet there are many innocent people who have fallen victim to a phishing attack. I am also aware that in everyday life it can sometimes go fast. And coupled with fatigue, one is then no longer as attentive as at the beginning.

For this reason, I have made the following a habit: I just hover over the link and look at the alt text.

And what does that mean?

Whenever you “hover” with a mouse over a link but don’t click, it’s called “hovering”. You will always see a preview of the link (where it will take you) at the bottom left of the window.

A screenshot of me hovering over the “OWASP Top 10” link and at the bottom left you can see the full link (https://owasp.org/www-project-top-ten/)
A screenshot of me hovering over the “OWASP Top 10” link and at the bottom left you can see the full link (https://owasp.org/www-project-top-ten/)

Check for sender and name

Email addresses and domain names can be easily spoofed. Therefore, be sure to check the domain name for spelling changes in suspicious emails. Even if they seem to come from a trustworthy sender, you should always check them.

Stay safe on social media

Check for scams and phishing on DMs and links

You’re not immune to attacks on social media either.

There are hundreds of ads with scams and fake accounts with phishing attempts in your DMs. I know it sounds tempting when sugar daddy just wants to transfer you $2000 every week.

But if he needs your passport and bank details, I would still refuse.

Be careful about what you share.

Don’t reveal sensitive personal information for example: home address, financial information, phone number. The more you post the easier it is to have your identity stolen.

Identity theft is a very underrated endeavor. But when it happens, it can be very dangerous and most importantly, it is scary. There is even more information about this at usa.gov about identity theft (did you hover over the link?).

Conclusion

The Internet can be a dangerous and cruel place.

It is tedious to be constantly on guard against criminals on the internet. However, it doesn’t have to be. With the right tools, habits and a little mindfulness, you can surf the internet in a more relaxed way. Of course, you are never 100% protected from an attack (that’s why it’s an advantage to have a contingency plan in case).

Nevertheless, you can minimize the risk of an attack with the right tools and techniques.

--

--

Kenny Wolf
Geek Talk

I write about tech, software development and hacking for non-techies and geeks 🤓 | Software Developer 👾 | Interested in pentesting 👹