{"id":63061,"date":"2020-03-26T00:00:00","date_gmt":"2020-03-26T00:00:00","guid":{"rendered":"http:\/\/blog.mozilla.org\/foxtail\/2020\/03\/26\/stay-safe-in-your-online-life-too\/"},"modified":"2021-02-03T02:21:11","modified_gmt":"2021-02-03T02:21:11","slug":"stay-safe-in-your-online-life-too","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/en\/firefox\/stay-safe-in-your-online-life-too\/","title":{"rendered":"Stay safe in your online life, too"},"content":{"rendered":"\n

During the COVID-19 pandemic, many of us are turning to the internet to connect, learn, work and entertain ourselves from home. We’re setting up new accounts, reading more news, watching more videos and scrolling through social media at an all-time high. These are excellent ways to stay connected while being physically distant, but they do come with a set of concerns worth noting.<\/p>\n\n\n\n

Pick strong passwords for new accounts<\/h2>\n\n\n\n

Streaming movies or ordering takeout or groceries online for the first time? You\u2019ll need an account and password for that. It\u2019s tempting to use groceries123<\/i> as your shopping site password or princess<\/i><\/a> for your streaming site, but it\u2019s smarter to use a strong password.<\/p>\n\n\n\n

Weak passwords can be more easily guessed or cracked through \u201cbrute-force attacks<\/a>\u201d on networks. A strong password is your first line of defense against hacking attempts and unauthorized access to your accounts. Some tips to strengthen your passwords:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n

Do<\/span><\/h2>\n<\/td>\n

\n

Don\u2019t<\/span><\/h2>\n<\/td>\n<\/tr>\n

Do use long passphrases by combining two or more unrelated words. Also use numbers or special characters, but don\u2019t rely on substituting @ for a or 3 for e, which are overly used and well known.<\/td>\nDon\u2019t use the word \u201cpassword,\u201d or any combination of it. \u201cP@ssword!\u201d is just as easy for hackers to guess.<\/td>\n<\/tr>\n
Do make your passwords at least 8 characters long. Aim for a minimum of 12-15 characters.<\/td>\nDon\u2019t use short, one-word passwords, like sunshine, monkey or football.<\/td>\n<\/tr>\n
Do use a combination of upper- and lower-case letters, numbers and symbols.<\/td>\nDon\u2019t place special characters (@, !, 0, etc.) only at the beginning or the end.<\/td>\n<\/tr>\n
Do include unusual words only you would know. It should seem nonsensical to other people.<\/td>\nDon\u2019t include personal information like your birthdate, address or family members\u2019 names.<\/td>\n<\/tr>\n
Do keep your passwords protected and safe, like encrypted in a password manager.<\/td>\nDon\u2019t share your passwords. Also don\u2019t put them on a piece of paper stuck to your computer.<\/td>\n<\/tr>\n
Do spread various numbers and characters throughout your password.<\/td>\nDon\u2019t use common keyboard patterns like asdfjkl; or obvious patterns like 111111, abc123 or 654321.<\/td>\n<\/tr>\n
Do create unique and complex passwords for every site.<\/td>\nDon\u2019t use the same password everywhere.<\/td>\n<\/tr>\n
Do use an extra layer of security with two-factor authentication (2FA), especially for your primary email account<\/td>\nDon\u2019t think a weaker password is safer because you have 2FA.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n

[Read more about how to create strong passwords<\/a>]<\/p>\n\n\n\n

Every account needs a unique password<\/h2>\n\n\n\n

When you\u2019re setting up a new account, you might be tempted to reuse an old password, thinking the likelihood of your grocery store getting hacked is low. The unfortunate truth is that every account is vulnerable, and you need to protect them with unique passwords.<\/p>\n\n\n\n

Here\u2019s why. If you used the same password for your grocery account as you did for an account that was previously breached, a bad actor could gain access to your new account.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Password reuse is an easily avoidable security problem. When setting up new accounts, a good password manager<\/a> can help you select something complex and unique that you never would have thought of on your own, save it securely for you, and make it available when you need it. Firefox can do that for you<\/a> by generating complex, unique passwords, saving them and letting you access them from your different devices. You can also protect them behind a primary Password.<\/a><\/p>\n\n\n\n

Pause if something seems suspicious<\/h2>\n\n\n\n

Malware and phishing are ongoing threats to online safety, and we all may be more susceptible during this vulnerable time. Phishing is a common email scam in which bad actors impersonate a service, person or company you trust. They look like the real thing because they mimic the design of authentic emails, like those from your bank or email provider. \u201cSpear phishing\u201d is more targeted and sophisticated, hence the name, and uses your detailed personal information to trick you.<\/p>\n\n\n\n

These scams are often perpetrated over email, but they also come in the way of phone calls, with callers claiming to be from your bank or credit card<\/a>, the FBI<\/a>, the IRS<\/a>, your student aid provider<\/a>, and so on. They also sometimes show up as text messages with sketchy links. Scammers will concoct stories about how they detected suspicious activity on your account, how your bill is overdue, how you\u2019re owed a refund, how your test results are back, and so on (read more from the FTC<\/a>).<\/p>\n\n\n\n

The typical goal of these criminals is to get you to unknowingly enter your password into a fake website, download a malware program that can infect your device through an attachment like an image or document, or offer up other key personal details they can use to access your account.<\/p>\n\n\n\n

\"Netflix
An example of a phony email designed to scam people. Source: U.S. Federal Trade Commission<\/a><\/figcaption><\/figure><\/div>\n\n\n\n

Think carefully before you fill anything out. Does this email or text seem out of the blue? Does something seem off about it? Are you being asked to log in to an account to update something?<\/p>\n\n\n\n

Don\u2019t click, and don\u2019t enter your password, authentication code or personal information (such as your date of birth, social security number, bank or credit card details) anywhere if you’re suspicious. Open your browser, and type in the address of the company website instead, or give them a call directly.<\/p>\n\n\n\n

\"\"
Here’s a screenshot<\/a> of an email phishing attempt we received this week.<\/figcaption><\/figure><\/div>\n\n\n\n

Know the classic signs of a suspicious email or text:<\/p>\n\n\n\n