{"id":70749,"date":"2014-08-11T19:57:55","date_gmt":"2014-08-11T17:57:55","guid":{"rendered":"http:\/\/onsoftware.en.softonic.com\/?p=70749"},"modified":"2025-07-02T00:32:55","modified_gmt":"2025-07-02T07:32:55","slug":"how-to-protect-your-online-identity-and-why-you-should-care","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/how-to-protect-your-online-identity-and-why-you-should-care\/","title":{"rendered":"How to protect your online identity and why you should care"},"content":{"rendered":"

The world we live in has moved online and now we rely on the internet for much of what we do. While the internet makes our lives convenient, it can also make it a living hell if your identity gets stolen. Just last week, another new attack was discovered, this time by a group of Russian hackers<\/strong> who obtained over 1 billion<\/a> unique passwords.<\/p>\n

We’ve seen a series of high profile attacks on sites like Target<\/a>, eBay<\/a> and Yahoo!<\/a> since the beginning of this year alone. In 2011, Sony suffered a major security breach on its PlayStation Network, with over 77 million accounts<\/a> compromised, including\u00a0credit card information<\/strong>. Unfortunately, these attacks are becoming increasingly common<\/strong>.<\/p>\n

“Such attacks and breaches are going to happen more often as the criminals are always looking for new targets and monetization schemes. We are unfortunately in the age where we simply don’t have security in our own hands, the age where we have to trust others,” says Ji\u0159\u00ed Sejtko, Director of Viruslab Operatations at AVAST Software.<\/p>\n

The world of online security is a game of cat and mouse. Companies are always trying to stay one step ahead of hackers, but it’s not always possible. Of course, the companies you entrust with your information bear some responsibility for your data, but\u00a0you also have a duty to educate and protect yourself<\/strong>.<\/p>\n

Here’s how you can protect yourself online and why you should care about security.<\/p>\n

Don’t use the same password on multiple sites<\/strong><\/h3>\n

One way to stop hackers in their tracks is by using unique passwords<\/strong> for every site. It’s impossible to memorize hundreds of unique passwords and that’s where password managers<\/a> come in.<\/p>\n

Password managers are programs and services that act as a vault for all of your passwords. You have one master password that lets you into that vault, so make sure you make it a strong one. Password managers like 1Password<\/strong> (Android<\/a> | iOS<\/a> | Mac<\/a> | Windows<\/a>), LastPass<\/strong> (Android<\/a> | iOS<\/a> | Mac<\/a> | Windows<\/a> | Windows Phone<\/a>) and RoboForm<\/strong> (Android<\/a> | iOS<\/a> | Mac<\/a> | Windows<\/a> | Windows Phone<\/a>)\u00a0help you randomly generate passwords with numbers, letters and symbols, making it extremely difficult for hackers to decrypt if found. Make sure your password is long<\/strong>, as it’ll be extremely difficult for hackers to using simple brute force to decrypt it.<\/p>\n

\"IntelIf you use the same password on multiple sites, you’re putting yourself at risk. “Companies storing these passwords aren’t protecting them well, and if you’re reusing them, it’s like reusing the same key for every lock,” says LastPass CEO Joe Siegrist.<\/p>\n

If you need help choosing a password manager, check out our comparison<\/a> between 1Password<\/a>, Dashlane<\/a>, and LastPass<\/a>.<\/p>\n

Enable two-factor authentication<\/h3>\n

If a site supports two-factor authentication<\/a>, you should enable it immediately. This secondary layer of security requires you to input another randomly generated password<\/strong> sent to a device like your phone, or to an email address.<\/p>\n

\"GooglePopular sites like Facebook, Google, Dropbox, Box, Evernote and others already have this feature. Some sites require your phone number<\/strong> to text you a temporary password to use in addition to your standard password. This makes it difficult for hackers to access your accounts since they would need to have control over your phone too.<\/p>\n

Google has an authenticator app<\/strong> that allows you to add multiple sites. The app cycles through randomly generated six digit passwords every minute. Not all sites support authenticator apps like Google Authenticator<\/strong> (Android<\/a> | iOS<\/a>), so expect to give out your phone number instead.<\/p>\n

While it’s nice to see some popular sites implement two-factor authentication, it’s shocking how many sites don’t do it yet. American Express<\/a> has no two-factor authentication, which boggles my mind.<\/p>\n

If you use a site that doesn\u2019t offer two-factor authentication, write to the company and urge them to step up their security<\/strong>. There’s even a great website called twofactorauth.org<\/a> that lists sites that do and don’t support two-factor authentication. Companies that don’t support the feature have an option next to their name to tweet at them, asking them to support it.<\/p>\n

A little inconvenience is worth it<\/strong><\/h3>\n

One thing I hear repeatedly is how annoying it is to make different passwords for different sites, or how it’s easier to save all your passwords in your browser. Yes, it’ll save you a few precious seconds, but you’re also making yourself extremely vulnerable.<\/p>\n

Do not store your passwords in a browser<\/strong>. They are extremely easy to extract if someone gains access to your computer. While Chrome requires your Windows password to access your saved passwords, Firefox won’t ask for a password unless you set a master password in the settings. Again, use a password manager to help you fill in usernames and passwords. Password managers offer mobile apps too so that you can take all your passwords on the go.<\/p>\n

Don’t store your credit card information with online stores<\/strong>. I know it’s a pain to fill in all your payment details each time you want to buy something, but if you store your credit card on every online store you use, you’re putting that info in more places that hackers can get to. Password managers can save your payment details and fill out the shopping form for you, which avoids storing your info on a site’s servers. Since you can’t rely on a site to keep your information safe, you have to do it yourself.<\/p>\n

\"\"<\/p>\n

Many websites don’t prioritize security because there’s no money to be made from it<\/strong>. “[Companies] aren’t spending millions of dollars to make sure they’re not going to get breached. What actually happens is that you need features and content, and that’s the only priority,” says Siegrist (LastPass).<\/p>\n

I can’t tell you how many websites I’ve encountered that send a confirmation email with my password in plain text<\/strong>. If a hacker gains access to my email account, he or she now has access to these sites, all because a site didn’t want to invest in basic security that encrypts passwords.<\/p>\n

“A lot of consumers don\u2019t understand the risk of losing their identity until it happens to them or someone close to them,” says AVG Senior Security Evangelist Tony Anscombe.<\/p>\n

Keeping yourself safe<\/h3>\n

Keep your browser up to date<\/strong><\/h4>\n

Security isn’t something you can just set and forget. You have to be active and vigilant to stay one step ahead of cyber criminals. A browser is your first line of defense<\/strong> online so it’s important to keep it up to date.<\/p>\n

\"Google<\/p>\n

If you’re running an outdated browser, you’re not getting the latest security features and updates. Modern browsers can detect malware and prevent you from going to malicious sites.\u00a0Microsoft is stepping up its browser security by forcing Windows users to use the latest version<\/a> of Internet Explorer. Google takes it a step further and automatically updates<\/strong> its Chrome browser in the background.<\/p>\n

Google also announced that it will prioritize secure websites<\/a> in its search results. Hopefully this will get site administrators to take security more seriously if they want to show up high in Google search.<\/p>\n

Run an antivirus application on every device<\/strong><\/h4>\n

You should run an antivirus product on every device, in addition to creating strong and unique passwords for each site. There are a ton of free antivirus programs<\/strong> out there so that you have no excuse not to run one. avast!<\/a> wins for the most complete free solution on PC. Mac users will want to check out AVG for Mac<\/a> (also free). Be sure to check out our huge antivirus comparison<\/a> for 2014 to help you choose which one is right for you.<\/p>\n

\"avast!<\/p>\n

These programs will catch anything your browser didn’t. If you download an infected file, an AV will block it automatically and will alert you of its dangers. This doesn’t apply only for desktop computers either.<\/p>\n

Today, we live in a mobile world and hackers are now targeting our phones because they contain valuable data. Unlike your computer, your phone holds much more personal information about you. Your phone is also tied to your carrier’s billing system, making it a high value target<\/strong> for hackers.<\/p>\n

“It’s an easier place to monetize,” says Anscombe (AVG). “Viruses [on PCs] were disruptive. The disruption has never been on a mobile device. The disruption is silent because the malware writers have become clever. They\u2019re not doing it for a \u2018badge of honor\u2019 anymore.\u201d<\/p>\n

\"LookoutOn Android, there are plenty of choices for antivirus applications. AVG Antivirus (phone<\/a> | tablet<\/a>) is available for free as well as Android veteran, Lookout<\/a>, my antivirus of choice. avast!<\/strong> also has their Mobile Security & Antivirus<\/a> app for Android.<\/p>\n

Premium plans for antivirus and security apps offer more than just antivirus protection like link scanning, phone recovery, and much more. Weigh which features are important to you<\/strong> before choosing a security solution for your Android phone. If you don’t need features to locate your lost phone<\/a>, then a premium subscription may not be worth it for you.<\/p>\n

On iOS, antivirus apps don’t exist because Apple doesn’t allow developers to access critical parts of the operating system. While both Apple and Google do a good job of checking apps in their stores for malware, Apple doesn’t allow users to install apps found outside the App Store. Android users have more power, but also more responsibility to check that apps installed outside Google Play are safe. Running an antivirus on Android is a must if you have sideloading<\/a> enabled<\/strong>.<\/p>\n

Only install apps from Google Play, the App Store or Windows Phone Store to make sure apps have been checked thoroughly. Windows 8 users may have less luck as there are a ton of scam apps<\/a> in the Windows Store and Microsoft isn’t doing anything about it<\/strong>.<\/p>\n

Malicious apps will also ask you for an inordinate amount of permissions. If a flashlight app requires access to your contacts, there’s something wrong. Before you tap “Install,” double check the permissions list<\/strong> to see if the app is asking for access to something it shouldn’t be.<\/p>\n

And of course, set a password on your mobile device<\/strong> to make sure thieves (or annoying siblings) don’t have access to your phone.<\/p>\n

Use good judgment<\/h3>\n

Nothing’s going to protect you if you don’t use at least some common sense<\/strong>. Use good judgment when visiting sites, reading emails, and sending text messages. No, you didn’t win a free iPad. No, the prince of Nigeria isn’t giving you a million dollars. If it sounds too good to be true, it probably is.<\/p>\n

Beyond attacking websites and your computer, hackers have become increasingly clever. Many will use social engineering<\/strong> to trick you into giving up your information willingly.<\/p>\n

\"EZ<\/p>\n

One of the biggest risk to your online identity are phishing schemes<\/strong>. This is when an attacker puts up a fake site that looks legitimate to trick you into entering your username and password. You can detect a phishing scam by looking for typos<\/strong>, aggressive language<\/strong>, and strange URLs<\/strong>. Some email providers like Gmail block some phishing emails, but it\u2019s possible for some to get through.<\/p>\n

\"GmailThe story is the same with phishing sites. While most browsers will detect these sites, they’re not going to catch all of them. However, you can use a browser to see if a site is secure. Look for a lock in the URL bar to see if a site is using a secure connection and if you’ve visited it in the past.<\/p>\n

Remember, a bank will never ask you to send personal information over email<\/strong>.<\/p>\n

Online security is a mess but we can change it<\/h3>\n

Companies need to take security seriously<\/strong><\/h4>\n

Now that you know some basic steps on how to protect your online identity, it’s time for companies to start taking security as seriously<\/strong> as you are. Security across the web is inconsistent, with no standard implementation across websites. Some offer two-factor authentication, while many don’t. Some use perfect forward secrecy<\/a> to secure their connections, but many don\u2019t do that either.<\/p>\n

We need to urge companies to take security seriously. If a service has a history of lazy security, it’s time to leave them. You shouldn’t have to trust a site with your personal information if they’re not going to take measures to keep it secure.<\/p>\n

While big companies like Apple and Google take security very seriously, they’re not infallible. Both companies do a good job of checking apps in their stores and building security into their operating systems but it’s a constant battle<\/strong>. Android has a bigger malware problem than iOS because of its openness but it also offers more freedom for developers.<\/p>\n

“Apple with iOS 8 is certainly getting better, but they’re still years behind Android. They’re making questionable decisions, like allowing different keyboards to be used but not allowing that keyboard to be used in password fields. It’s frustrating as a developer to not be able to give users more security and convenience,” says Siegrist (LastPass).<\/p>\n

Beyond the password<\/strong><\/h4>\n

Passwords themselves aren’t safe anymore. They’re not inherently weak, but companies are getting breached all the time. So what’s going to happen beyond the traditional password?<\/p>\n

“I think we’re moving toward a federated password,” says Siegrist. Federated passwords<\/strong> are already here in the form of Facebook and Google+ login<\/a>. This means security is handled using these standards instead of relying on a site to implement their own login system.<\/p>\n

\"Spotify<\/p>\n

The only problem with Facebook Connect and Google+ Sign-in are that they require you to hand over your personal information<\/strong> before you can use them. If Google and Facebook really want to become platforms for federated passwords, they need to allow users to sign up without providing personal information. Permissions for these login systems also need to be more transparent<\/strong> about why each site and app needs access to your friends list, email, and other information.<\/p>\n

There needs to be a standard across sites, but no one is spearheading this movement any more. OpenID<\/a> used to be the federated password of choice, but it can’t compete with Facebook or Google. Facebook used to be a sponsor of OpenID but left in 2013 in favor of its own Facebook Connect login.<\/p>\n

No one is 100% safe<\/strong><\/h4>\n

You can be the most careful person online, but you\u2019ll still never be 100% safe. It’s highly likely that a website you use has been hacked and your username and password are already exposed. By the time a company announces a breach, you’ve already been compromised for weeks, if not months. If you use a password manager to create unique passwords for each site, the attack stops there.<\/p>\n

But if attacks are inevitable, why even bother? While we may not be able to control the security of websites we use, we can mitigate the damage<\/strong> in the event of a hack.<\/p>\n

\u201cIt\u2019s like saying if I get in my car tomorrow morning and my brakes fail, it\u2019s all over. But I get in my car every day and I trust my brakes to be working. I think that\u2019s a very defeatist attitude,” says Anscombe (AVG).<\/p>\n

Just as Anscombe expects his car’s brakes to work, you should expect your antivirus and privacy tools to work. While it’s possible to be hacked, you \u00a0can make it much harder for attackers.<\/p>\n

As consumers, we need to let companies know that our information needs to be protected<\/strong>. Let companies know that security matters to you and that you\u2019re willing to stop using their app, site or service if they don\u2019t start taking security seriously. Security needs to be in the limelight instead of being an afterthought. If our collective voices are heard, we\u2019ll have a safer internet for everyone.<\/p>\n

Related Stories<\/h3>\n

App of the Week: DU Speed Booster <\/a><\/p>\n

When a security firm uses fear to make money<\/a><\/p>\n

Software Clinic: \u201cHow do I permanently delete a file?”<\/a><\/p>\n

BitTorrent Bleep secure chat client stops snooping<\/a><\/p>\n

Canvas fingerprinting web tracking tool isn’t the end of privacy<\/a><\/p>\n

Follow Lewis on Twitter: @lewisleong<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

The world we live in has moved online and now we rely on the internet for much of what we do. While the internet makes our lives convenient, it can also make it a living hell if your identity gets stolen. Just last week, another new attack was discovered, this time by a group of … Continue reading “How to protect your online identity and why you should care”<\/span><\/a><\/p>\n","protected":false},"author":2033,"featured_media":70853,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[2441],"tags":[],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-70749","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-how-to"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/70749","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/2033"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=70749"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/70749\/revisions"}],"predecessor-version":[{"id":330361,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/70749\/revisions\/330361"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/70853"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=70749"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=70749"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=70749"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=70749"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=70749"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=70749"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}