Look at what I found!

 Have you ever received a private message on Facebook from a friend that says, "Is this you?"  Or possibly, "Look what I found"?  Unfortunately, it is another technique that scammers use to either gain access to your login information or to install malware on your device.

When/if you click on the link, one of two things usually occur:
1) You are taken to a fake login page for Facebook and if you login the scammers then have access to your login information and can hijack your account to try and solicit money from your friends.
2) Clicking on the link may allow malware to be installed on your device; that malware may then allow the scammers access to your personal information.

This technique continues to be lucrative for scammers or we wouldn't be seeing it.

What should you do if you see this type of message? 
1) Same recommendation as last week's tip:  Don't click. Ignore. If you really think your "friend" may have sent something for you to look at, call them and ask.  I have friends that do send links via Facebook, but I NEVER click on those links.  I'm sure I've missed some good "stuff", but I've never been hacked (famous last words).

2) If you haven't turned on two-factor authentication for Facebook, before today ends make sure you take a few minutes to do that.  This prevents hackers and scammers from being able to access your account and send out malicious messages.  Note:  It doesn't prevent cloning of your account, but it does prevent someone from accessing your actual account. If you are unsure how to turn on two-factor authentication (2FA) for Facebook, you may find one of the links below to be helpful:
https://www.cyber.gov.au/acsc/view-all-content/guidance/turning-two-factor-authentication-facebook 
https://www.facebook.com/help/148233965247823 

Next week, I'll try to move on to something other than "security tips". Unless there is something else that occurs that I feel the need to share with you.  :-)

Have a terrific Tech Tip Tuesday!  I love, love, love spring and today promises to delight with wonderful spring temperatures.  Enjoy!

Facebook and Two Factor Authentication

Have you ever received a Facebook friend request from someone who is already your friend?  Or have you received an inappropriate link from someone who is a friend? Solving the problem can be frustrating and time-consuming if it is your account that is the one sending out these messages. 

Here are several things to know and do to help protect your Facebook account:

1)  When friends begin telling you they received another friend request from you, look for a duplicate Facebook account that someone has created using your information.  Your account has not been hacked but has been cloned using information gleaned from your "real" account.  If you or your friends can locate that account, report it to Facebook. https://www.facebook.com/help/306643639690823/

2)  If you believe your account has been hacked (someone has figured out your username and password) rather than cloned, change your password the minute you become aware of the problem.

3)  Consider turning on two-factor authentication for your Facebook account.  This adds an extra layer of of security; it is not foolproof but does make it more difficult for someone (a hacker) to access your Facebook account,  The process is clearly explained in this video, and although the example is demonstrated on a computer, two-factor authentication can also be set up using your mobile device.  https://www.youtube.com/watch?v=WWcOzk6-VTg

Using online technology requires responsibility on our part to keep our personal information as secure as we can. Learning all we can about ways to stay safe can be time-consuming but are well worth the effort and time.

Navigating the world of passwords

Did you miss celebrating? World Password Day was last Thursday.  It is always "celebrated" the first Thursday in May. :-)

Passwords....ugh!  We (I)  grumble and procrastinate when receiving an alert that a password needs to be changed.  As frustrating and time-consuming as it may be,  though, we shouldn't ignore suggestions to change a password.  Maintaining strong passwords is a responsibility you/I have if we choose to use the internet. If you need a refresher about how to create a strong password, you might take a look at a post I wrote last year.

A reminder:  NEVER start the process to change a password by clinking on a link in an email; always go directly to the account website to make a change to your password.

My 3 recommendations to you this year for World Password Day:
1) Continue to create strong passwords using 14-16 characters and follow my suggestions from last year.  Remember, though, that usernames and passwords will never be secure enough.

2)  If given the opportunity, ALWAYS use two-factor (TFA) or multi-factor (MFA) authentication.  Yes, it requires an extra step (like acknowledging a text sent to your phone or watch and then entering that code) but it really adds a layer of security to your accounts.  A very thorough explanation and how-to article on TFA can be found here: https://www.pcmag.com/how-to/two-factor-authentication-who-has-it-and-how-to-set-it-up

3)  If given the choice, use biometrics (Face ID or fingerprint).  It is much more secure and easier to use!  The world of technology is certainly moving in this direction. 

On this Tech Tip Tuesday, please make or renew your commitment to start following the three tips above for doing your very best to stay safe online!

Has your personal information been involved in a breach?

 Unfortunately data breaches around the world occur periodically.  How can you check to see if your personal information has been involved?  You can use this website: https://haveibeenpwned.com/

Enter your email address or username. Then click the pwned? button. The site will tell you if a breach has occurred including your info.  This site will not ask for passwords; it is "safe" to share your email address/username with it.  Repeat this process for all of your email addresses AND the usernames for any of your online accounts.

What should you do if an email or username has been compromised in a breach?  Log into that website or email account online and change your password.  If two-factor authentication is available for your compromised account, enable it.

Please take a minute to check your personal info today.... maybe while enjoying your morning drink of choice and listening to the rain on the roof?

Happy first-Tuesday-of-spring!

Breach Report

It is your responsibility to keep yourself safe online, and education is your best defense!

Hackers are working 24/7 to "steal" names, addresses, email addresses and passwords.  Why? Profits are to be made by selling this information on the dark web.

What can you do about it?
1) Become informed.  Use Breach Report regularly to check your email address(es).  It is free to use and a service that is regularly monitoring the dark web for compromised data.  It not only shows you when your data was breached but also the company or website and the password that was being used by you at that time.  Breach Report continually monitors the dark web to provide this information. Definitely worth checking out!

2) Have good password management: use unique passwords for each account and consider using a password manager (like Last Pass)

3) Use 2-Factor Authentication whenever possible (in addition to your email and password, an additional piece of information is required for logins).

4) Use a decoy email address (created in Gmail) to use when you're not sure about giving out your "real" address

The internet is such an integral part of our lives that it is imperative we do all that we can to keep ourselves safe online.  Starting today.

Have a terrific Tech Tuesday wherever this may find you - in the sunshine, heat or maybe even where it is cool on this late spring day.

Facebook Two-Factor Authentication

If you are a member of the iPhone Users Group or are in my Computing for Seniors class, I apologize.  You have already received this tip from me today.  But, I feel it is important and want to share with anyone who uses Facebook.  

If you use Facebook, I'd like to encourage you to enable two-factor authentication on your Facebook account for security purposes.  This article will give you more information and step-by-step instructions for doing that both on a laptop or desktop computer and a mobile device:

Enable two-factor authentication on Facebook 

Basically, this almost guarantees that no one will be able to log into your Facebook account unless they have your mobile phone in their possession.

Be safe in 2018!

We've talked about it before....protecting our digital privacy.  But, it seems there are always questions.  So, let's review 5 ways to protect your digital privacy in 2018:

1) Keep all of your devices updated.  Updates often contain "patches" to repair your phone or computer's security vulnerability.

2)  Use two-factor authentication(TFA).  Yes, this means an extra step to login in to accounts, but is well worth your time.  Don't know how to?  This article will give you some tips.

3) Freeze your credit. (remember our conversations after the Equifax debacle?)

4) Install a password manager. (Lyle Hayslett has used one for several years and highly recommends it!)

5) Make privacy a priority; don't just automatically give your computer or your phone "access" to your contacts or to other apps.  Take a look at your settings on Facebook, on your browser, and at your privacy settings on your smartphone.

If you'd like more detail about the 5 items above, check out this great article from Consumer Reports.