Lock it down…
Personal email is a big attack vector among bad actors looking for data. From monitoring your internet activity to breaking into accounts, there are several steps you can take to secure your accounts.
Email Service & Tips
Chose an Email Service that offers end to end encryption, moreover, one that does not want to offer you advertisements and monitor your activity. Finally, be sure to read the privacy policy for more info. The best in the industry is ProtonMail.
Generate separate email accounts for various activities. Therefore, if one gets compromised, you wont lose everything. Additionally, you will also limit exposure of your email addresses on the web. For reference, I have 4, one for social media, subscriptions (amazon, Netflix), personal and spam (coupon sign ups, newsletters, etc.)
Public WiFi
Avoid public WiFi, if there is no other option, use a good VPN. See information on VPNs here.
Password Best Practices
Do not use the same password across multiple sites. Once a site has been compromised, a password list can be sold on hacker forums containing the compromised password. The website below can help to see if your password has been compromised in prior breaches: https://haveibeenpwned.com/
Avoid the use of personal details in your password, especially if these details are already online (social media, yellow page, yelp).
Create a complex password that incorporates a base word, upper and lower case, special characters and a number.
Enable Two-Factor Authentication
Attachments & Links
Avoid opening attachments if possible unless you are expecting one from a company, friend or family member. If you do need to open an attachment, ensure there is a good anti-virus installed on the host PC.
Do not click on links unless absolutely necessary. Go to the site directly.
Exposing Your Data
Be careful with what you post on social media – Unless you are a “Social Influencer” keep your profile private. Hackers will frequently look for personal data on these sites to see location and possible password combinations to use (such as your pets name or family member).
Do not give away personal information in emails that could result in identity theft. Also, If a family member (or anyone) is asking for a credit card, social security, etc. call them directly and be cautious about the intent to obtain data. However, it should be noted that the internet is forever!
Updates & Backups
Keep your device and apps up to date and back it up periodically.
Try to frequently remove items that are no longer used or needed (store personal pictures on an external media like a USB and delete from the phone/desktop). However, if an attacker does get access to your device, they will not get a lot of important data.
Note: This page was a group effort from work colleagues. Thank you.