Internet security

Internet-connected devices

From smart speakers to thermostats, TVs to cameras, our household devices have multiplied and many are able to connect to the Internet through your home router. As convenient and handy as these smart devices are, they can pose risks to you, your family and your home network if not properly secured.

Tips to protect yourself:
Before purchasing and installing your devices, do your homework. Make sure the devices you are purchasing allow you to change default usernames and passwords and perform regular and automatic software updates. If it’s unclear whether the device offers these capabilities, contact the seller or manufacturer.  If you are unable to confirm whether the device supports password changes and software updates, or if you are able to confirm that it does not, don’t purchase it--find something more secure.

When installing your smart devices, be sure to do the following:

• Carefully follow the manufacturer’s set-up and security instructions.
  
• Change the default usernames and passwords of the devices, since those credentials may be publicly available. A strong password should consist of at least 8 or more characters and have numbers, letters (uppercase and lowercase) and special characters. The longer the password, the better.
  
• Adjust the default privacy settings to determine which data gets collected and shared. Limit accordingly.
  
• Disable features you don’t need, such as microphone, speaker or remote access administration.  Disable or disallow access to the device from outside of your home network unless you are confident that you have properly secured remote access.  
  
• Enable automatic software updates on devices. Using the latest device software versions can help protect you from vulnerabilities.
  
• Be mindful of where you place your smart devices to ensure your privacy is protected.
  
• Be sure to turn off the device when not in use.
  
• If the device is a video camera, smart home device, or other device that you want to be able to access from outside your home, for example through an app on your smartphone, it is especially important to make sure the device is secured from hackers and other Internet users by following steps above, otherwise anyone can take control of your device and use it for their purposes or to harm you.
  

Viruses, worms and spyware

Computer worms, viruses, spyware and other malicious programs can destroy or steal data and personal information. Without your knowledge, hackers can use viruses to harvest your personal information, steal your money, credit and identity.

Tips to protect yourself:

• Protect your computers from harmful programs by keeping your antivirus software up-to-date
• Install security patches and updates as recommended by your operating system (Windows or MacOS) and other software vendors

Identify theft

Identity theft occurs when someone uses your Social Security number or other confidential information to open new accounts, make purchases or get a tax refund. This can occur by way of a phone call or an email from an allegedly legitimate business or individual. It might even happen when someone searches your trash for mail containing personal information and credit card receipts.

Tips to protect yourself:

• Closely guard all personal information
• If you are not absolutely certain you know the person or business you're talking to, be suspicious, ask questions and request callback information
• Shred all documents, credit cards and applications before placing them in the trash
• Check your credit annually through a reputable credit bureau

Phishing

Phishing emails are made to look as though they are from a legitimate company. The email may tell you that some sort of service normally provided to you is due to expire soon. The email directs you to a phony website and asks you to provide personal information such as a credit card or Social Security number so that your service can be continued.

Tips to protect yourself:

• Check for misspelled words in the email and closely examine the return address
• If you never pre-enrolled with the company to do business via email, be suspicious
• Contact the company you normally do business with and ask them to verify the request