October is Cybersecurity Awareness Month, and Villanova is joining the global effort to help you stay safe online. This year’s theme is “Don’t Make it Easy for Them.” Cyber criminals count on shortcuts: short or reused passwords, lack of multi-factor authentication, skipped software updates, and quick clicks on urgent messages. The good news is you don’t have to be tech-savvy to make their jobs tough. You just need to implement a few simple habits.
Make every password at least 15 characters long. An 8-character password can be cracked in seconds, no matter how many symbols you add. A complex 16-character password could take billions of years.
- Create a unique password for every account and never reuse old passwords. If one of your passwords is compromised, the rest of your accounts stay safe.
- Use a password manager to store your credentials. A password manager is a secure vault that can remember and even generate strong passwords for you.
Enable multi-factor authentication (MFA) on every account that offers it. MFA adds an extra layer of security to block cyber criminals from accessing your online accounts, even if they have your password.
- Opt for stronger forms of MFA such as an authenticator app or biometrics when available. Text or email codes can be stolen through social engineering. Options like number matching through Microsoft Authenticator or passkeys are more phishing resistant.
Check regularly that operating systems, browsers, apps, and devices are updated. The latest versions have the latest security fixes, keeping you safer from cyber criminals exploiting technical vulnerabilities.
- Turn on automatic updates whenever available. You can get the latest security fixes without lifting a finger.
- Only download updates from original sources. Software downloads from random sites may contain unknown malware.
Be skeptical of unexpected incoming messages, especially if they seem urgent. Cyber criminals use urgency as a tactic to manipulate you into acting without thinking.
- Pause and verify unexpected requests from people or organizations you know. Don't click or respond right away. Use contact information from an official source, not the suspicious outreach, to confirm whether the message you received is legitimate. Better safer than sorry!
- Report suspicious messages. If you receive a suspicious email to your Villanova account, report it using the Report Phishing button.