Security

Type passwords using regular words interspersed with left-arrow key presses to create a unique sequence.

It is harder to observe when typing and helps memory.

• This does not work well on smartphones.

one person who lived it

Do not enter fake credentials into suspicious sites to test them.

You may install malware or confirm your account is active for attackers.

one person who lived it

Place the printed QR code where it is not visible from outside windows to prevent unauthorized access by passersby or neighbors.

Anyone with line-of-sight to the code, including technicians or malicious acquaintances, could gain access to your Wi-Fi.

2 people, independently

Avoid using personal or shameful content as passwords on work computers.

You may eventually be required to share the password with a supervisor.

• Some professional environments strictly prohibit sharing passwords under any circumstances.

one person who lived it

Download open-source software only from sites that provide the actual source code to avoid bundleware.

A lot of OSS has been repackaged inside bundleware.

one person who lived it

Avoid installing multiple antivirus programs on the same computer.

Multiple programs can conflict with each other and may themselves be detected as viruses.

one person who lived it

• Use built-in antivirus software rather than installing multiple third-party programs.1

Stop changing passwords regularly unless required by a specific policy.

NIST recommends against it since 2019 because forced frequent changes often lead users to create less secure passwords.

one person who lived it

Use DNS filtering like OpenDNS rather than relying solely on switching antivirus software.

DNS filtering would help more than switching AVs.

one person who lived it

Immediately change all company passwords after firing an IT employee or switching support vendors to revoke their access to email and financial accounts.

Former employees often retain access to sensitive systems like email and ad budgets.

one person who lived it

Create unique passwords by combining the first three letters of a site name with a base password and special characters.

This method allows for ease and uniformity while providing the variation and length required for security.

one person who lived it

Manually type the website address into your browser instead of clicking links from emails or notifications, especially for internet banking.

This ensures you are on the right site and avoids potential scams from email links.

2 people, independently

Create a separate Administrator account and use a standard user account for daily tasks.

This prevents your daily account from making changes outside your profile without prompting for an Admin Password.

one person who lived it

When requesting a password reset from IT support, be brief and direct; avoid giving long personal stories or excuses about why you forgot the password.

Support staff want to solve the immediate problem quickly and save time.

one person who lived it

If you forget a phone combination, wait a few hours and try to unlock it without consciously thinking about the code.

This approach has helped some people recall forgotten combinations and avoid hassles.

one person who lived it

Use long, memorable passphrases consisting of meaningful words instead of complex short passwords.

Long meaningful passwords are stronger than random keyboard smashes and easier to remember.

one person who lived it

Avoid connecting to untrusted Wi-Fi networks or use a VPN to prevent data interception.

Intercepting data on insecure networks can be done by people without advanced computer skills.

one person who lived it

Place smart home devices like LED strips on a separate, secured network to prevent public interference.

Open networks allow anyone with compatible apps to control connected devices, as seen in restaurants with open WiFi.

one person who lived it

If you are designing a website, display password requirements clearly on the 'forgot password' screen.

It is useful information that is not a secret.

one person who lived it

Change the default manufacturer password on new routers.

Default passwords can easily be hacked because manufacturers use known algorithms that tools can retrieve.

one person who lived it

Assume the worst-case scenario regarding security breaches when evaluating trust in companies.

Reputable and large companies have been found making mistakes like SQL injection or storing cleartext passwords.

one person who lived it

Write down your passwords in a secure physical location, such as a password book.

3 people, independently

Be wary of notifications claiming account changes or requiring password re-entry, as malicious apps can spoof official-looking alerts.

Random apps can create notifications using official colors and branding.

one person who lived it

Avoid clicking on unknown links or installing unfamiliar software to prevent security breaches.

User behavior is a major factor in infections, often caused by lack of updates or impulsive actions.

one person who lived it

Do not rely on the 'add an extra character to autofill and delete it' trick for security, as this method is now widely known and ineffective against determined attackers.

Posting this idea on large social media networks makes it widely known, rendering it useless for security.

one person who lived it

Encourage aging parents to adopt password managers to simplify future account access.

one person who lived it

Do not use permanent markers on optical discs.

The ink degrades the disc surface.

one person who lived it

Be wary of USB drives found in professional settings like job fairs or conference rooms, as attackers may place them among reputable company swag.

People will trust them because they appear to be from a reputable company, and IT security auditors have used this method to test employee rule adherence.

2 people, independently

Rip self-burnt CDs and DVDs to a hard drive immediately.

Optical media degrades over time and lacks standardized longevity, potentially becoming unreadable after five years.

one person who lived it

Back up SD card contents regularly to prevent total data loss from corruption.

SD cards can become corrupted unexpectedly, resulting in the loss of all stored data.

one person who lived it

Plug suspicious USB drives into an old desktop computer that is disconnected from the network.

This prevents malware from spreading to other connected devices.

one person who lived it

Dedicate a specific machine for running disk wiping utilities like DBAN.

Accidentally nuking the wrong drive results in permanent data loss.

one person who lived it

Encrypt all data on your laptop, including the operating system.

It prevents unauthorized access to data via external recovery disks, which could otherwise be used to view and wipe files before resale.

one person who lived it

Remove magnets or drill hard drives before discarding a computer to ensure data unrecoverability.

To prevent theft of valuable information such as bank accounts and credit cards.

one person who lived it

Create a prominently named file on flash drives containing contact information to help with return if lost.

• People might not realize the filename contains a phone number.
• Do not hide known file extensions; adjust folder options instead.

3 people, independently