Multi-factor authentication is a type of authentication that requires multiple pieces of evidence to validate a user’s identity. It typically involves up to three factors – something the user knows (like a password or PIN), something the user has (such as a security token or cellphone), and something the user is (a biometric characteristic, like […]

There are quite a few ways to find out if your password may have been compromised by a data breach. Many browsers and security software can tell you, for example. However you go about it, keep yourself informed of any data breaches. If a site you use has been compromised, it’s possible your credentials have, […]

The best way to protect yourself from having your password stolen by bad actors is to understand how they can guess your password — and brute force attacks are one of the most common methods. This is when an automated program attempts to discover your password by entering words often found in a dictionary. If […]

There are no circumstances in which a company will ask for your password via email, text, phone or any other means of communication except for where you normally type it in on the site itself. Similarly, no person who already has access to your account — whether they’re the IT department at your company, a […]

Losing a critical password can be unfortunate, locking you out of a key account like online banking or email. Password managers are great for keeping track of your credentials. As another layer of security, you may think about also writing down passwords and keep them in a secure location. Paper-based backup has the benefit of being […]

Unless you trust a site, don’t give your address, password, or credit card information. Look for indications that the site uses SSL to encrypt your information. Although some sites require you to supply your social security number (e.g., sites associated with financial transactions such as loans or credit cards), be especially wary of offering this […]