4 Incorrect Assumptions You Might Be Making About Your Home Cybersecurity

What you should do to keep your data and personal info safe.

Cybercriminals don’t want you to read this.

They don’t want you to think that they’re not a threat. That they only go after the big fish.

Nothing could be further from the truth.

Not taking cybersecurity seriously at home (or the workplace) can lead to loss of money, unnecessary downtime, fraud, and a lot of needless aggravation.

Here are four misconceptions people have about their personal cybersecurity and what to do in response.

Passwords Alone Are Good Enough

It’s not enough to have a good password. Not if you’re expecting bulletproof security.

Whenever given a choice, use multi-factor authentication for that much-needed extra level of security. Multi-factor authentication will require you to verify your identity while logging in by sending a temporary code to your smartphone or email address.

Those annoying Captcha and picture grid checks are another standard method for multi-factor authentication. Typically, those procedures are meant to make sure you’re not a bot, but they can be helpful if for no other reason than it makes it more difficult for hackers to try to automate their attempts to get into your accounts.

My Data Isn’t Valuable Enough To Steal

I don’t know about you, but I would not consider my data sexy. My credit is only so-so. My bank account could be bigger. I am not involved in any top-secret work nor have access to people’s medical files or a company’s financial records.

That means I’m not at significant risk of cyberattack. Right?

Right?

If only that were true.

Cybercriminals love little fish like me. If they lock me out of my data and demand even a modest ransom, they can be reasonably sure of getting away with it. Law enforcement tends to respond more to large commercial or government data attacks. They could care less about little old me.

While a hacker won’t expect a massive payout from me, these criminals work in volume. If they can get 50 people out of a hundred to pay $500 for ransomed personal data, that’s $25,000. If they use a bot to automate the process, they don’t even have to work that hard.

Even if hackers aren’t looking to ransom my data, they can profit by selling bulk info like bank accounts and credit card numbers on the dark web. This can open you up to identity theft and fraud.

Everyone’s data is a target.

Anti-virus Software Should Be Sufficient

Usually, people install anti-virus software onto their systems and call it a day. They assume that’s all they need to protect their computers.

Unfortunately, there are many ways you can fall victim to a cyberattack. A bad actor may try to use social engineering to trick you into giving out personal information. Or you could get hit with a dedicated-denial-of-service (DDoS) attack that leads to multiple crashes and interferes with your ability to work, game, or watch Netflix.

Remember that virus and malware threats are constantly evolving. If you don’t stay current with the latest profiles for your anti-virus software, then you’ll be leaving yourself wide open to more recently-developed threats.

I Won’t Fall For a Phishing Scam

It would be nice to think we’re too smart to be fooled by a clumsy phishing attack — and so long as they’re just clumsy phishing attacks, you’d likely be correct.

Unfortunately. not all phishing attacks are clumsy. Many, it turns out, are pretty sophisticated.

Common tactics used in phishing attacks can include copying logos, color schemes, and other brand identifiers for trusted institutions. The phrasing used in phishing emails can be surprisingly convincing. A typical phishing approach features a warning regarding an account you use and the need for you to log in immediately to change your password. Of course, this is an example of a scam attempting to skim your login information. They are obvious in hindsight, but if worded well enough and with enough urgency, they can be disappointingly effective.

Avoid clicking on links embedded in unexpected emails. No reputable bank or institution will ask you for your login information via email. And if you receive an attachment claiming to be an invoice or report you didn’t ask for, delete that email immediately without opening any attachments. Those files often include malware that will install itself onto your computer without you realizing it.

It’s unfortunate, but being suspicious should be your default setting when it comes to emails and unsolicited text messages.

You Can’t Afford To Be Complacent

Identity theft, fraud, stolen data, and corrupted computers are all possible outcomes when you get lazy and inattentive about your cybersecurity. No one is exempt from the risk.

You can save yourself a lot of time, money, and aggravation by taking home cybersecurity seriously. Use strong passwords and stay up to date with anti-virus software and online threats. Be suspicious about unexpected emails and text messages.

Cybercriminals hope you’ll ignore this advice. By building solid defenses and developing good online habits, you can have more confidence that your data and personal information are secure.

About John Teehan

John lives in Rhode Island with his wife, son, and dog. He specializes in tech, health, business, parenting, pop culture, and gaming. Visit wordsbyjohn.net for more info and rates. Twitter: @WordsByJohn2