Archives - Security Best Practice


A quick guide to banking Trojans

Online banking is supposed to be convenient and secure,  and most of the time, it is. Consumers have come to regard apps from their banks as trustworthy alternatives to visiting a branch. According to multiple surveys compiled by the U.S. Federal Reserve, adoption of online banking including mobile apps has been climbing steadily for years, […]

Set your web browsers security settings to the highest level

Your web browser is your principal connection to the Internet, and multiple applications may rely on your browser, or parts within your browser, to function. Many web applications try to improve your browsing experience by enabling different types of functionality, but this functionality might be needless and may leave you vulnerable to being attacked. The […]

Only visit HTTPS websites if possible

HTTPS encrypts the data you exchange for websites that use it. On the other hand, HTTP sends that same information in plain text. Look out for a padlock in the URL bar of your browser to verify HTTPS. It’s best not to perform financial transactions such as e-commerce purchases over HTTP. You can use the […]

Be sure to install and update antivirus software

All of your computers and mobile devices should be equipped with antivirus software, firewalls, web filters, and antispyware. Your software should be updated regularly; out-of-date security software offers no defense against the latest threats. Set up automatic updates or at minimum manually apply each upgrade. Be sure this security software is operational when you download […]

Don’t trust an account that claims it can recover your password

An account should not be able to recover your password for you. Your password is encrypted and known only to you. If you lose the password, the service associated with the account should reset it and send you a new password that you can then change. If the service says it can recover your password […]

Only use well-known password managers

Scammers may invent fake password managers to trick people into giving them their passwords to sensitive accounts. To avoid this, only use password managers that have an established reputation and have numerous customer reviews, like Dashlane, Keeper or LastPass.