Post by Anđela Milenković 
March 29, 2024 | 
The internet may be a dangerous place where various security threats hide, waiting to infect your phone or computer. Our daily activities often require us to search the internet for information essential to our work or for valuable advice for our personal lives. We are aware that, in addition to the numerous possibilities the internet offers, it also brings many negative aspects. These include online dangers lurking from all sides, such as social engineering attacks that can lead to the interception or theft of our private data.
Disclosing our data can be highly risky, especially in online shopping, where a malicious user may intercept transaction data. However, for all these risks, there exist solutions, such as tips that we can follow to minimize the likelihood of becoming a victim of an attack. We must familiarize ourselves with the best practices and tricks for online safety, and this blog aims to assist us in that regard by discussing safe browsing practices.
Password management
One of the best ways to protect yourself and stay safe online is by strengthening your passwords and securely storing them across all your devices. Attackers are aware that human error is easily exploitable, which is why they attempt to crack account passwords. Always protect your accounts with a password, and use a strong password to safeguard personal data and prevent account hacking.
To improve your online safety there are some recommendations for creating a strong password include:
- Opt for a minimum of 12 characters, with 14 or more being preferable.
- Use a combination of uppercase letters, lowercase letters, numbers, and symbols.
- Avoid using dictionary words or names of individuals, characters, products, or organizations.
- Ensure the password is substantially different from all previous ones. Using a unique password for each account is essential, as fraudsters often attempt to use stolen credentials across multiple platforms.
- When crafting a strong password, it’s crucial to keep it protected and refrain from sharing it with anyone for any account.
Managing numerous strong and secure passwords can be challenging, which is why utilizing a password manager is recommended. A password manager encrypts passwords and typically requires multi-factor authentication for access. Additionally, it generates strong passwords on behalf of users, simplifying the process while ensuring security. Remembering the master password for the password manager is paramount for accessing stored passwords.
Two-Factor Authentication (2FA)
Using Two-Factor Authentication (2FA) whenever available is very important because it requires more than one type of credential to log into an account, such as requiring both a password and a one-time code generated by an app. This extra level of security adds protection in case someone guesses or steals the password.
Most often, 2FA works by the user first logging into the website with their username and password.
After confirming the password, the authentication server requires the user to provide another factor. The authentication server sends a unique code to the user’s second-factor device. The user confirms their identity by accepting an additional notification from the device.
Secure Connection for Online Safety
A secure connection utilizes encryption protocols to protect data transferred through the network. There are several types of secure connections, including:
- SSL (Secure Socket Layer) and TLS (Transport Layer Security), are cryptographic protocols tasked with protecting communication over the Internet.
- VPN (Virtual Private Network), which encrypts the user’s internet connection and routes it through one of its servers.
- SSH (Secure Shell), is used by administrators and developers to ensure secure connections between devices on the network. It is often used for remote device access.
- HTTPS (Hypertext Transfer Protocol Secure), enables encrypted communication between the web server and the client. It safeguards the user’s connection to the visited website.
- SFTP (Secure File Transfer Protocol), is a network protocol used for securely transferring sensitive and large files over the internet.
- IPSec (Internet Protocol Security) is a group of protocols facilitating secure connections between devices and securely sending data over public networks.
Phishing Awareness
Phishing awareness entails being knowledgeable about phishing attacks. This has emerged as the most prevalent form of social engineering attacks, posing a significant threat today. Attackers strategically employ emails crafted to instill a sense of urgency, curiosity, or fear. They aim to coerce victims into disclosing sensitive information visiting malicious sites, or clicking on email attachments containing malware.
The more convincing the email appears, the more likely the recipient will click to download the attachment, resulting in the download of malware such as ransomware. Hence, it is crucial to understand phishing as a common attack and adhere to the advice to avoid falling victim to it.
It is always essential to verify the sender’s identity before clicking on any attachments in emails. Employing multiple authentication methods adds an extra layer of security. Paying attention to requests for personal data is also crucial. However, it is paramount to educate oneself about the latest phishing threats and other forms of social engineering and exercise caution when receiving emails.
Conclusion
We’ve covered some of the basic strategies for improving online security. The focus is on emphasizing the importance of strong passwords and their safekeeping, the benefits of two-factor authentication, securing online connections, and recognizing phishing attempts.
Stay tuned for Part 2, where we’ll explore additional measures to protect your online presence and further strengthen your defenses against cyber threats. Remember, staying informed and proactive is key to maintaining a safe online experience.
