18 Common Online Mistakes Unveiled by an Ethical Hacker

As more people rely on online banking and handling financial matters digitally, it's crucial to take steps to safeguard our personal information from potential theft. We interviewed an expert 'ethical' hacker, someone who specializes in testing the security of websites, networks, and mobile apps for a living. They shared their best advice to help you avoid becoming a victim of theft. 

1). Our emotions can get us into trouble

In many recent security breaches, there's often a tactic called 'social engineering' involved. This means that the attacker manipulates people's feelings to trick them into doing something risky. For instance, they might send a fake email that looks urgent or pretend to be a co-worker in trouble. Think of it as online trickery, similar to holding the door open for someone who seems pregnant when you're trying to keep a building secure.

2). Some of us will believe any link in an email is genuine

Do not click on any links in any emails, and always visit a website direct.

3). We're too truthful

Common security questions like 'Where were you born?' or 'What's your mother's maiden name?' are often used on websites to protect your account from unauthorized access. However, these answers may not provide fool proof security. If you've shared this information online before, it can be discovered by potential attackers. It's a good practice to consider using fictitious details for added security.

4). We share unnecessarily...

When using networks or websites, be cautious about sharing your personal details, unless it's absolutely necessary. For instance, when signing up for a public Wi-Fi hotspot, they might request your name, date of birth, and address. Remember, there's no legal obligation to provide accurate information, so feel free to use fictitious details to safeguard your real identity.

5). ...especially on social media

Sharing too much personal information online can make it easier for unauthorized individuals to access your private data. When you're using social media, consider limiting the personal details you post. Your close friends and family likely already have your phone number, birthdate, and email address, so there's no need to publicly disclose these details. To protect your privacy, be cautious about freely sharing your information. Also, refrain from announcing your travel plans online, as it could potentially make your home vulnerable to security risks.

6). Our social media profiles are often open

To enhance the visibility of your content while maintaining privacy on your Facebook account, follow these simple steps:

1. Open Facebook and locate the menu icon in the top-right corner of the screen.
2. Click on 'Settings.'
3. In the new window, click on 'Privacy' from the menu on the left-hand side.
4. Here, you can manage your Facebook profile's privacy by choosing 'Friends' for questions like 'Who can see your profile info?' and 'Who can see your future posts?'
5. This ensures that only your Facebook friends can access the content you share.
6. For Twitter, the process is similarly straightforward:

Go to Twitter and find the settings icon (it looks like a cogwheel).

1. Click on 'Settings.'
2. In the settings window, you can customize various privacy settings, including making your tweets private so that only the people you approve can view them.

7). We give away too much in exchange for ‘free’ apps

Hackers can potentially infiltrate your device using apps to install spyware. To protect yourself, always review app permissions before installation to avoid unnecessary access to your personal data. For instance, a game app doesn't require access to your network or contact list. Prioritize safety by updating your apps regularly as they also address security issues.

8). We don't clear our browser history

If you share a device with someone, like your home computer or a friend's iPad, it's crucial to know this tip. Browsers like Chrome and Firefox save a history of your online searches and visited websites, which can stick around for weeks. Failing to clear your browsing history makes it easier for others who use the device to access your online activity. Stay safe, and remember to clear it!

9). What you need to have installed

Protecting your computer from hackers is crucial, and you can do so by using two essential tools: antivirus software and an ad blocker. Antivirus software regularly scans your computer to keep it safe, while an ad blocker prevents unwanted items from appearing on your screen. Some top-notch antivirus options include Norton Security, McAfee Total Protection, and Kaspersky Total Secure. It's a good idea to explore these options to find the best software for your computer.

10). We use the same password time after time

The key advice here is to avoid using the same password for different accounts. If a hacker gets into one of your accounts, they could potentially access all of them.

11). Use a password manager...

When you use a password manager, you only need to remember one password (with a personal hint), making it possible to store many intricate passwords securely. According to an expert, it can take a hacker up to two years to decipher a complex eight-character password generated by a password manager.

12). ...even for your fake information

Concerned about forgetting your made-up answers? No need to stress. You can use your password manager apps to set up separate 'accounts' just for this purpose.

13). Set up an extra layer of security #1

Boost your online security by enabling two-factor authentication (2FA) for your essential accounts. 2FA adds an additional layer of protection beyond your regular password and username; it includes something unique to you, ensuring only you can access your accounts.

14). Set up an extra layer of security #2

In online security, you have a second layer of protection that can include things like:

1. Something only you know (like a secret code).
2. A physical item (like a keychain or card reader).
3. Biometric features (like your fingerprint, voice, or iris).

When you use a combination of your username and password along with one of these additional factors, it becomes much more difficult for cybercriminals to access your personal information and steal it. Many banks offer this extra security layer for your online accounts, often using hardware tokens in addition to your card and PIN.

15). Keep your security up to date

To keep your devices secure, it's important to have antivirus software installed. However, remember that merely having it isn't enough; you also need to regularly update it. If you don't, your device's security will be at risk. Additionally, make sure you're using the most up-to-date version of your web browser and promptly install any security patches or software updates that become available. The tech world evolves rapidly, so the newer the update, the stronger your online protection will be.

16). Beware of using public Wi-Fi

Have you ever been told it's not safe to do online banking or other sensitive tasks on public Wi-Fi networks? Let's break it down. Public Wi-Fi networks can pose risks for a few reasons. They are often open to anyone, making it easier for unauthorized users to access them. Additionally, these networks might have been previously compromised, potentially putting your data at risk. Even the hotspot you connect to could be a threat.

17). Be sure to check your finances often

Make it a habit to regularly review your bank and credit card statements, ideally on a daily basis. This practice helps you stay vigilant and catch any unexpected or suspicious transactions promptly. Consider setting up email or mobile alerts for any unusual activities on your accounts.

18). See what your bank is doing to protect you

Before you start using online banking, it's essential to understand your bank's fraud protection guarantees. Different banks offer various levels of security. Some provide complete protection for credit and debit card fraud, while others safeguard online banking transactions for free. It's wise to contact your bank and inquire about their protection policies before you begin using online banking or choose a bank. This way, you can ensure your financial safety.