Cybersecurity awareness series

Create long passwords with upper- and lowercase letters, numbers, and special characters. Phrases made of several unrelated words can be easier to remember. Use a different password for every account — a reused and possibly leaked Netflix password led to extensive identity theft for one Valley resident.

You can also use a password manager, which generates strong passwords and keeps track of them for you. Password managers also won’t autofill your credentials into fake websites.

Multifactor authentication adds an extra step to verify your identity, such as texting you a code after you type in your password. It is especially important for email and other accounts that have your financial and personal information, like banks, online stores and social media.

Passkeys are a newer security feature that stores a digital key on a device you already have, like your phone, laptop or security key dongle. When you log in to a website with a passkey, you sign in with your device’s PIN or biometrics instead of remembering a password. The passkey only works on the specific site or app that created it, so fake phishing pages cannot trick you into providing it.

Software updates protect your devices from the latest known threats, so install them right away. 

If an internet-connected device is older and no longer receiving security updates, consider replacing it or keeping it disconnected from the internet.

Secure backups can help you recover quickly from ransomware, hardware failures or accidental data loss. 

The best practice is the 3-2-1 rule: Keep three copies of important files on two different storage media (such as a hard drive and the cloud), with one copy stored off-site. This can be especially important for business data.

Encryption scrambles sensitive information so unauthorized users cannot read it. Consider using private apps with better encryption techniques to reduce data leaks — particularly when entering or accessing sensitive information, such as private business, health and financial data.

Urgent calls claiming someone you love is in a crisis, threats that you’ll go to prison if you don’t pay a bill right now — scammers prey on emotions like fear to make you act before you think. Your best defense is to pause, then verify. Call your loved one’s phone directly. Go to the official website (not through the link sent to you) to check your billing account.

Scammers also use happy emotions to manipulate you, promising opportunities to make money, get tickets to sold-out events or meet the love of your life — if you act now. Verify the information through another channel, or ask a trusted friend for a gut check. If something seems too good to be true, it probably is.