Safer internet habits: Essential tips on staying safe when online

This article is co-published with the UK-based website for Filipinos, Tinig-UK.com

Tony (not his real name) was just about to sit down to a quiet dinner at home after a long day at work when he received a message from one of his brothers on the other side of the world: “Kuya (older brother), I got a message from you on Facebook Messenger asking for money. Are you okay?”

Tony was shocked. He had not been on any of his social media accounts the whole day. Subsequently, more of his friends reached out to tell him much the same thing. Tony’s Facebook account had been hacked.

A more interconnected world through the world wide web has gifted us convenience, but also opened us up to new threats.

Cybercrime statistics released by VPN and cybersecurity company SurfShark show that from 2020 and 2021, the UK had the highest number of cybercrimes reported worldwide.

Cyber crimes take on many forms – from online fraud to online harassment. You can be susceptible to phishing – that is, when you are tricked into giving your personal information or installing malicious software – when you click on a link or open an email or visit a shady website. This can compromise the security of your computer or device because cybercriminals can now take on your identity in order to commit fraud like steal your money.

Here are a few ways that you can protect yourself and stay safe online.

Passwords

• Use a strong, unique password that will be difficult to guess – including special characters will help. The UK National Cyber Security Centre’s Cyber Aware suggests you use three random words as your password.
• Change your passwords often.
• Use a different password for each of your accounts.
• Uncheck the box to “remember your password” on shared devices.
• Need help generating a password? Generate a new one via the Diceware website, which creates a set of words through virtual dice rolls, which you can use as passphrases.
• If you feel like you will forget your passwords, write them down in one place and secure the location of your cheat sheet.
• You can also use password managers – just make sure you use a strong master password, as suggested by the National Cyber Security Centre.

Two-step verification

Also known as two-factor verification or two-factor authentication, this technology requires you to not only enter your password whenever you access your account, but to confirm your identity by receiving and entering a code sent to your mobile phone or email (or a similar device, like an authentication key fob or app).

VPN use

By using a VPN or Virtual Private Network, you can increase your security while you are online. A VPN adds a layer of protection, hiding your location and activity from hackers.

There are many different companies that offer VPN services, and prices and quality vary depending on your budget and needs. It is best to do some research on VPNs beforehand before purchasing access to one.

Antivirus and antimalware programs

Install antivirus software on your computer in order to spot and catch any malware or spyware that can enter your system. Microsoft and Apple bundle such software in their systems, so make sure that you keep them updated, so you make the most of the protection they offer. Anti-malware programs, meanwhile, will help keep your device free of malicious software programs that might compromise your security by scanning for them.

Make sure you have up-to-date antivirus and anti-malware software installed on all your devices. Do a periodic scan of all your devices for any viruses and malware.

Backups

Make copies of all your important files, such as documents and photos, in case you lose access to your devices or accounts.

You can use an external hard drive or cloud storage (such as Microsoft OneDrive, Apple iCloud, and Google Drive) for this purpose.

Other things you can do

• Be very careful when transacting online using your bank or credit card account. To avoid fraud, use 3D Secure authentication made available by Verified by Visa and MasterCard SecureCode.
• Think before you click or send! If you receive a video or other file – whether through email or social media channels – make sure that you trust the sender and, even then, ensure that the sender has checked the safety of the file itself.
• Sign out from your accounts if you’re temporarily using public computers. While this tip might be a little inconvenient for email or social media accounts, bank accounts that let you transact online need to be logged off after use.
• Turn on “spam” filters that will alert you to suspicious content. Some messaging apps and email clients provide spam filtering for the purpose of weeding out advertisements.
• Be wary of unsolicited messages. Delete them immediately.

Things to avoid

• Do not open any messages from unknown sources.
• Do not keep your accounts open for prolonged periods of time when not in use.
• Do not click on links sent to you even if they look to be legitimate, not even if they are purportedly from official entities. Go to a company’s official website or call them to double-check.
• Do not click on suspicious-looking attachments.

The best things, like WiFi, aren’t free

Free WiFi means that everyone – including cyber criminals – can get access to it. By using these access points, your online activity and the contents of your device can be used by strangers. These hackers can then impersonate you in various online transactions, including online shopping. They can also get malicious software into your device without you knowing it and passing on your data to the hacker.

Whether on your mobile or computer, you need to be wary of the risks. Read up on public WiFi advice from cybersecurity firm Kaspersky here.

Mobile matters

There are also unique safeguards that you can adopt to make sure that your mobile devices are safe when you go online.

• Use more secure messaging apps like Signal and Telegram.
• Only turn on your Bluetooth when you need it and allow connection to sources that you know and trust.
• Take time to turn off the location data sharing in your phone’s settings.
• Do not install unidentified apps or open suspicious websites.

What to do if your account has been hacked

1. Contact your email, financial services, or social media account company through their website.
2. Check your email account for suspicious activity, like changes in forwarding rules.
3. Change your passwords immediately.
4. Set up 2-Step Verification.
5. Let your contacts know that your account/s has been hacked and not to open or reply to any messages sent from your account.
6. Report the fraud to authorities.

What to do if you’re being harassed, bullied, or sent unsolicited graphic content online

1. Take a screenshot of the message/s and save them.
2. Report them to the social media company.
3. Notify your local police.

Even with the benefits of the internet, there are risks to being online. Putting multiple deterrents can help, but they do not guarantee you will never be a victim of cyber crime. As the old saying goes though, an ounce of prevention is worth a pound of cure. So whenever and wherever you can, please secure your online presence. – Rappler.com

Mari-An Santos is a fellow of the Aries Rufo Journalism Fellowship.