![\"Cybersecurity:](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2018\/07\/Cybersecurity-and-financial-planning.png\")
<\/div>\nWhy is cybersecurity so important?<\/p>\n
The internet is fraught with scammers and rip-offs. And since our entire lives live online, it\u2019s more important than ever to learn how to protect yourself.<\/p>\n
Cybersecurity 101: Use Complex Passwords<\/h2>\nWhen it comes to playing it safe online (read: best cybersecurity practices), one of the best ways to protect yourself is to make sure you avoid using the same password for every website<\/strong>.<\/p>\nAlso, please don\u2019t use \u201cpassword\u201d as your password! Passwords should be a random string of alphanumeric characters and symbols, such as b0R@m3ir or !@$#!@K$223<\/em>.<\/p>\nBasically, your password needs to be something someone could never<\/em> guess.<\/p>\nSince creating and remembering potentially dozens of random passwords is completely impossible for the human brain, you\u2019ll need help to keep track. Fortunately, free password manager widgets are available for your web browser.<\/p>\n
Two common managers are LastPass<\/a>\u00a0and Dashlane<\/a>. Both of these password managers run on the \u201cfreemium\u201d business model \u2013 offering a free base service and an upgraded paid version. For most people, the free version works just fine.<\/p>\nUnfortunately, password managers aren\u2019t foolproof, so you might also consider adding important login credentials to your Letter of Instruction<\/a>.<\/p>\nUse Anti-Virus Software<\/h2>\nThe next best step for managing your cybersecurity game is installing a quality anti-virus program.<\/strong>\u00a0This takes just a few minutes and can be a relatively painless process.<\/p>\nPopular consumer expert Clark Howard suggests a variety of free anti-virus programs on his website<\/a>. Like the password apps, many anti-virus offerings run on the \u201cfreemium model.\u201d<\/p>\nAt Define Financial, we use a combination of BitDefender and Avast on our computers.<\/p>\n
Keep Your Software Updated<\/h2>\nOur next cybersecurity tip comes from\u00a0Bree Fowler of Consumer Reports<\/a>. She recommends updating anything and everything on your personal computer<\/strong>. This means updating your:<\/p>\n\n- Operating System (OS), be it Windows 10 or whatever large predatory cat Apple is now on<\/li>\n
- Web Browser, be it Chrome, Firefox, or Safari. If you\u2019re using Microsoft Internet Explorer, stop to ask yourself why. Seriously, why are you still using Microsoft Internet Explorer?<\/em><\/li>\n
- Your Anti-Virus software<\/li>\n<\/ul>\n
Now that I\u2019ve told you to update your software, you should know many common scams pretend to update your software but, instead, actually infect your computer.<\/p>\n
Here\u2019s how you can spot the difference: When you legitimately update your computer\u2019s existing software<\/strong>, you\u2019ll be doing this from within that very software \u2013 and not from a pop-up or banner ad you see on a website.<\/p>\nFor example, if updating Avast Anti-Virus, open your existing Avast program and select \u201cUpdate.\u201d<\/p>\n
![\"cybersecurity\"](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2017\/11\/update-your-anti-virus-e1510002100997.jpg\"\/)
![\"cybersecurity\"](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2017\/11\/update-your-anti-virus-e1510002100997.jpg\")
<\/p>\nUpdate your software from within that very same software. Don\u2019t click on random messages you come across online to update your software.<\/p>\n<\/div>\n
Here\u2019s what you shouldn\u2019t<\/em> do: You should never<\/em> click on an online link that says any variation of\u2026..<\/p>\n\nURGENT: YOUR SOFTWARE IS DANGEROUSLY OUT OF DATE. CLICK TO INSTANTLY UPDATE MEOW!<\/p>\n<\/blockquote>\n
One red flag of bogus invitations to install nasty stuff on your computer is the severity of any given warning.<\/p>\n
The more urgent and perilous the message, the higher the probability it\u2019s a total scam.<\/p>\n
One virus circulating the internet right now begins with a prompt to update Adobe Flash<\/a>. If you think your Adobe software needs updating, go straight to the source, www.Adobe.com<\/a>. Do not click on anything anywhere else. The same applies to any other software you have that may need updating.<\/p>\nNo matter what, go straight to the source!<\/p>\n
Enable Two-Factor Authentication (2FA) to Improve Cybersecurity<\/h2>\nAs a financial planner, I\u2019ve sat through more than one presentation on cybersecurity. One thing I\u2019ve learned is that enabling two-factor authentication is the best way to stop hackers<\/strong>.<\/p>\nWith two-factor authentication, you are prompted to enter a one-time passcode each time you log on. This passcode can be delivered via email, as an SMS message (text message) to your phone, or be on a physical or software-based token.<\/p>\n
If possible, choose anything except SMS (text message) delivery.<\/p>\n
Tech guru Bill Winterberg warns that SMS is the least secure delivery option available<\/a>. However, 2FA via SMS is better than no 2FA at all.<\/p>\nAlways Use a VPN over Public WiFi<\/h2>\nUsing Public WiFi without a VPN is asking for trouble. (This is such a basic concept that maybe this<\/em> should be moved to cybersecurity 101!)<\/p>\nUsing Public WiFi without a VPN is akin to publicly broadcasting your personal information.<\/p>\n
If you log into any account over public WiFi \u2013 be it Facebook, your bank, or your email \u2013 that information is available for anyone sophisticated enough to see it.<\/p>\n
What\u2019s public WiFi? It\u2019s the WiFi at your local coffee shop, hotel, or the airport. If you think you\u2019re safe using WiFi at a conference that\u2019s only accessible via a password, think again.<\/p>\n
I\u2019ve gone to more conferences than I can count where WiFi login information \u2013 password included \u2013 is displayed on tabletops for everyone to see.<\/p>\n
If everyone can see the password, what\u2019s the point of having a password!?<\/p>\n
Consider this. Would you waltz into a Starbucks and lay out the following for any passer-by to see:<\/p>\n
\n- Bank Account Statement<\/li>\n
- Investment Account Statement<\/li>\n
- Mortgage Statement<\/li>\n
- Home Address<\/li>\n<\/ul>\n
Basic common sense screams, \u201cNo!\u201d<\/p>\n
It\u2019s the same for commonsense cybersecurity. Don\u2019t connect to unsecured WiFi.<\/p>\n
The secure solution is to use a Virtual Private Network (VPN). A VPN is a piece of software that you install on your computer or mobile device that allows you to use a WiFi connection securely.<\/p>\n
Fortunately, password managers like Dashlane now come with a free VPN. You just have to enable it when you want to browse privately.<\/p>\n
Another easy solution is to use your mobile phone\u2019s hotspot as long as it has a complex password. This is a private, secure connection and is much safer than using public WiFi.<\/p>\n
Beware of Suspicious E-mails<\/h2>\nIf I had a nickel for every spammy e-mail I\u2019ve received, I could pay someone good money to write this blog post for me. Unfortunately, it doesn\u2019t pay to get spam.<\/p>\n
In fact, it\u2019s quite the opposite.<\/p>\n
Clicking on spammy e-mails can cost you hard-earned money. So, let\u2019s avoid those spammy e-mails by being familiar with some online spammers \u2013 and the tactics they use to trick us.<\/p>\n
Legal Documents<\/h3>\n
If you ever see a notice, or a bill, or a contract from someone unfamiliar, it\u2019s likely garbage. And if you click on it, you\u2019re in for a world of hurt.<\/p>\n
So don\u2019t click on strange emails!<\/p>\n
![\"\"](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2018\/07\/fake-docusign-email-cybersecurity-1024x573.jpg\"\/)
![\"\"](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2018\/07\/fake-docusign-email-cybersecurity-1024x573.jpg\")
<\/p>\ndocusign@vsimportservices.com? I don\u2019t think so! I\u2019m not clicking on that email!<\/p>\n<\/div>\n
One dead giveaway is an official-sounding<\/em> address from an unrelated URL (or domain).<\/p>\nIn the image above, we have \u201cdocusign@vsimportservices.com.\u201d DocuSign has its own domain (web address). It\u2019s DocuSign.com<\/a>. Whoever has control of vsimportservices.com is trying to pull one over on you.<\/p>\nYou can use this same strategy for anything to sniff out things that don\u2019t make sense.<\/p>\n
Another good example would be PayPal@Garbagecan.com. Obviously, PayPal has its own domain. It\u2019s PayPal.com<\/a>. PayPal wouldn\u2019t be sending you an email from GarbageCan.com or anything.<\/p>\nDitto for eBay@UnrelatedThing.com. That\u2019s not from eBay. Don\u2019t click on it!<\/p>\n
Make sense?<\/p>\n
Courier Messages<\/h3>\n
Even outside of the holiday season, I have received countless spammy e-mail messages about pending or delayed shipments. These have come from \u201cUSPS,\u201d \u201cUPS,\u201d and \u201cFedEx.\u201d<\/p>\n
Don\u2019t fall for it!<\/p>\n
![\"Massive](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2017\/11\/Massive-Virus-Pretending-to-Be-FedEx.jpg\"\/)
![\"Massive](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2017\/11\/Massive-Virus-Pretending-to-Be-FedEx.jpg\")
<\/p>\nMassive Virus Pretending to Be FedEx<\/p>\n<\/div>\n
The United States Post Office (USPS) is not in the habit of using email messages or phone calls to communicate shipping exceptions, warns Anthony Giorgianni of Consumer Reports<\/a>.<\/p>\nInstead, you can expect a notice at your door. If you get a phone call from USPS, it\u2019s likely a scam. The best move is to hang up<\/strong>.<\/p>\nDo not provide these fraudsters with your personal information<\/strong> \u2013 as the fraudsters will attempt to glean your birthdate, Social Security number, or other personal information. Scammers use this information to perpetrate identity theft, as well as other crimes. This is another good reason why everyone should learn how to freeze their credit<\/a>.<\/p>\nAvoid Deals That Sound Too Good to be True<\/h2>\nAs the old saying goes, if it\u2019s too good to be true, it probably is.<\/p>\n
Giorgianni warns of two ways scammers try to separate you from your money. The first warning is for any random website offering a popular product at an insanely low price. When you see this, don\u2019t immediately enter your credit card information.<\/p>\n
Your best bet is to Google the site name and the word \u201cscam\u201d to see what the deal is.<\/p>\n
![\"If](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2017\/11\/Pandorapick.com-is-a-scam.jpg\"\/)
![\"If](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2017\/11\/Pandorapick.com-is-a-scam.jpg\")
<\/p>\nIf you see a deal that\u2019s too good to be true, do your homework!<\/p>\n<\/div>\n
Also, please don\u2019t use \u201cpassword\u201d as your password! Passwords should be a random string of alphanumeric characters and symbols, such as b0R@m3ir or !@$#!@K$223<\/em>.<\/p>\n Basically, your password needs to be something someone could never<\/em> guess.<\/p>\n Since creating and remembering potentially dozens of random passwords is completely impossible for the human brain, you\u2019ll need help to keep track. Fortunately, free password manager widgets are available for your web browser.<\/p>\n Two common managers are LastPass<\/a>\u00a0and Dashlane<\/a>. Both of these password managers run on the \u201cfreemium\u201d business model \u2013 offering a free base service and an upgraded paid version. For most people, the free version works just fine.<\/p>\n Unfortunately, password managers aren\u2019t foolproof, so you might also consider adding important login credentials to your Letter of Instruction<\/a>.<\/p>\n The next best step for managing your cybersecurity game is installing a quality anti-virus program.<\/strong>\u00a0This takes just a few minutes and can be a relatively painless process.<\/p>\n Popular consumer expert Clark Howard suggests a variety of free anti-virus programs on his website<\/a>. Like the password apps, many anti-virus offerings run on the \u201cfreemium model.\u201d<\/p>\n At Define Financial, we use a combination of BitDefender and Avast on our computers.<\/p>\n Our next cybersecurity tip comes from\u00a0Bree Fowler of Consumer Reports<\/a>. She recommends updating anything and everything on your personal computer<\/strong>. This means updating your:<\/p>\n Now that I\u2019ve told you to update your software, you should know many common scams pretend to update your software but, instead, actually infect your computer.<\/p>\n Here\u2019s how you can spot the difference: When you legitimately update your computer\u2019s existing software<\/strong>, you\u2019ll be doing this from within that very software \u2013 and not from a pop-up or banner ad you see on a website.<\/p>\n For example, if updating Avast Anti-Virus, open your existing Avast program and select \u201cUpdate.\u201d<\/p>\n Update your software from within that very same software. Don\u2019t click on random messages you come across online to update your software.<\/p>\n<\/div>\n Here\u2019s what you shouldn\u2019t<\/em> do: You should never<\/em> click on an online link that says any variation of\u2026..<\/p>\n URGENT: YOUR SOFTWARE IS DANGEROUSLY OUT OF DATE. CLICK TO INSTANTLY UPDATE MEOW!<\/p>\n<\/blockquote>\n One red flag of bogus invitations to install nasty stuff on your computer is the severity of any given warning.<\/p>\n The more urgent and perilous the message, the higher the probability it\u2019s a total scam.<\/p>\n One virus circulating the internet right now begins with a prompt to update Adobe Flash<\/a>. If you think your Adobe software needs updating, go straight to the source, www.Adobe.com<\/a>. Do not click on anything anywhere else. The same applies to any other software you have that may need updating.<\/p>\n No matter what, go straight to the source!<\/p>\n As a financial planner, I\u2019ve sat through more than one presentation on cybersecurity. One thing I\u2019ve learned is that enabling two-factor authentication is the best way to stop hackers<\/strong>.<\/p>\n With two-factor authentication, you are prompted to enter a one-time passcode each time you log on. This passcode can be delivered via email, as an SMS message (text message) to your phone, or be on a physical or software-based token.<\/p>\n If possible, choose anything except SMS (text message) delivery.<\/p>\n Tech guru Bill Winterberg warns that SMS is the least secure delivery option available<\/a>. However, 2FA via SMS is better than no 2FA at all.<\/p>\n Using Public WiFi without a VPN is asking for trouble. (This is such a basic concept that maybe this<\/em> should be moved to cybersecurity 101!)<\/p>\n Using Public WiFi without a VPN is akin to publicly broadcasting your personal information.<\/p>\n If you log into any account over public WiFi \u2013 be it Facebook, your bank, or your email \u2013 that information is available for anyone sophisticated enough to see it.<\/p>\n What\u2019s public WiFi? It\u2019s the WiFi at your local coffee shop, hotel, or the airport. If you think you\u2019re safe using WiFi at a conference that\u2019s only accessible via a password, think again.<\/p>\n I\u2019ve gone to more conferences than I can count where WiFi login information \u2013 password included \u2013 is displayed on tabletops for everyone to see.<\/p>\n If everyone can see the password, what\u2019s the point of having a password!?<\/p>\n Consider this. Would you waltz into a Starbucks and lay out the following for any passer-by to see:<\/p>\n Basic common sense screams, \u201cNo!\u201d<\/p>\n It\u2019s the same for commonsense cybersecurity. Don\u2019t connect to unsecured WiFi.<\/p>\n The secure solution is to use a Virtual Private Network (VPN). A VPN is a piece of software that you install on your computer or mobile device that allows you to use a WiFi connection securely.<\/p>\n Fortunately, password managers like Dashlane now come with a free VPN. You just have to enable it when you want to browse privately.<\/p>\n Another easy solution is to use your mobile phone\u2019s hotspot as long as it has a complex password. This is a private, secure connection and is much safer than using public WiFi.<\/p>\n If I had a nickel for every spammy e-mail I\u2019ve received, I could pay someone good money to write this blog post for me. Unfortunately, it doesn\u2019t pay to get spam.<\/p>\n In fact, it\u2019s quite the opposite.<\/p>\n Clicking on spammy e-mails can cost you hard-earned money. So, let\u2019s avoid those spammy e-mails by being familiar with some online spammers \u2013 and the tactics they use to trick us.<\/p>\n If you ever see a notice, or a bill, or a contract from someone unfamiliar, it\u2019s likely garbage. And if you click on it, you\u2019re in for a world of hurt.<\/p>\n So don\u2019t click on strange emails!<\/p>\n docusign@vsimportservices.com? I don\u2019t think so! I\u2019m not clicking on that email!<\/p>\n<\/div>\n One dead giveaway is an official-sounding<\/em> address from an unrelated URL (or domain).<\/p>\n In the image above, we have \u201cdocusign@vsimportservices.com.\u201d DocuSign has its own domain (web address). It\u2019s DocuSign.com<\/a>. Whoever has control of vsimportservices.com is trying to pull one over on you.<\/p>\n You can use this same strategy for anything to sniff out things that don\u2019t make sense.<\/p>\n Another good example would be PayPal@Garbagecan.com. Obviously, PayPal has its own domain. It\u2019s PayPal.com<\/a>. PayPal wouldn\u2019t be sending you an email from GarbageCan.com or anything.<\/p>\n Ditto for eBay@UnrelatedThing.com. That\u2019s not from eBay. Don\u2019t click on it!<\/p>\n Make sense?<\/p>\n Even outside of the holiday season, I have received countless spammy e-mail messages about pending or delayed shipments. These have come from \u201cUSPS,\u201d \u201cUPS,\u201d and \u201cFedEx.\u201d<\/p>\n Don\u2019t fall for it!<\/p>\n Massive Virus Pretending to Be FedEx<\/p>\n<\/div>\n The United States Post Office (USPS) is not in the habit of using email messages or phone calls to communicate shipping exceptions, warns Anthony Giorgianni of Consumer Reports<\/a>.<\/p>\n Instead, you can expect a notice at your door. If you get a phone call from USPS, it\u2019s likely a scam. The best move is to hang up<\/strong>.<\/p>\n Do not provide these fraudsters with your personal information<\/strong> \u2013 as the fraudsters will attempt to glean your birthdate, Social Security number, or other personal information. Scammers use this information to perpetrate identity theft, as well as other crimes. This is another good reason why everyone should learn how to freeze their credit<\/a>.<\/p>\n As the old saying goes, if it\u2019s too good to be true, it probably is.<\/p>\n Giorgianni warns of two ways scammers try to separate you from your money. The first warning is for any random website offering a popular product at an insanely low price. When you see this, don\u2019t immediately enter your credit card information.<\/p>\n Your best bet is to Google the site name and the word \u201cscam\u201d to see what the deal is.<\/p>\n If you see a deal that\u2019s too good to be true, do your homework!<\/p>\n<\/div>\nUse Anti-Virus Software<\/h2>\n
Keep Your Software Updated<\/h2>\n
\n
<\/p>\n\n
Enable Two-Factor Authentication (2FA) to Improve Cybersecurity<\/h2>\n
Always Use a VPN over Public WiFi<\/h2>\n
\n
Beware of Suspicious E-mails<\/h2>\n
Legal Documents<\/h3>\n
<\/p>\nCourier Messages<\/h3>\n
<\/p>\nAvoid Deals That Sound Too Good to be True<\/h2>\n
<\/p>\n
![\"\"](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2018\/04\/call-vanguard-from-the-number-on-their-website-1024x740.png\"\/)
![\"\"](\"https:\/\/www.definefinancial.com\/wp-content\/uploads\/2018\/04\/call-vanguard-from-the-number-on-their-website-1024x740.png\")
<\/p>\n