Financial Fitness Challenge, July--Brush Up PC Security

by Susan Tiffany, CCUFC

Introduction

Would you leave you car on a street unlocked? How about unlocked--and with the windows rolled down? When you leave your house, do you lock the door or leave it wide open? Failing to protect your PC is the same as leaving the doors and windows open at home and on your vehicles.

Symantec, a Cupertino, Calif., company that makes Norton security software, estimates that 30% to 40% of PC (personal computer) users don't have current security software. Software giant Microsoft, Seattle, Wash., thinks the numbers are more like 60% to 70%. There's no sugar coating it--if you are one of those folks, you are begging for serious and potentially expensive trouble.

Basic precautions

• Use antivirus and antispyware protection. This software spots infected e-mail attachments and other virus carriers, and spyware or adware, before they have a chance to harm--or hijack--your computer.

• Update antivirus and related software routinely. New viruses emerge every day; the companies that make protective programs let you subscribe to updates to catch the latest versions.

• Download security upgrades from your operating system vendor. Set your computer to do so automatically.

• Create strong passwords. Hackers easily can figure out and steal the information if you create common passwords from your birthday or a pet's name, for example. Hackers also can run programs that will plug in every known word from the dictionary in an effort to crack your passwords. Strong passwords avoid personal information, login names, or adjacent keyboard symbols. Instead, they combine numbers and letters in passwords that contain at least eight characters.
  Some analysts think as many as 60% to 70% of PC users don't have current security software.

• If you have a high-speed connection, install a personal firewall. This blocks hackers who try to locate your computer or access your files. Your internet service provider (ISP) may make a firewall available to you; check your ISP for that and for other security tools.

• Be on your guard with unsolicited e-mail. Viruses often are sent as attachments that you activate by clicking--so just don't click on attachments to e-mail from unknown parties. Identity thieves may try to use e-mail to get personal information by posing as an ISP or another vendor. Always confirm the identity of the e-mail's author before opening attachments, never send sensitive personal information to anyone using e-mail, and always verify that an e-mail request for sensitive material is legit before you share personal information.

• Ignore e-mail requests for personal financial information. For example, if you get a message asking you to verify credit union account information, it did not come from your credit union. The people there never will send you a letter or e-mail, or make a phone call, asking for your account numbers, usernames, passwords, or Social Security number. If you get a message like that--called phishing--don't bite. Instead, call someone at your credit union to report the attempt.

• Use a phishing filter or popup blocker while surfing the Web. Both Internet Explorer and Firefox--the two most popular Internet browsers--have built-in pop-up blockers. The new and improved Internet Explorer--IE7--has a phishing filter as well.

"An ounce of prevention is worth a pound of cure." Benjamin Franklin couldn't have foreseen the computer age, or have any idea how true his adage would be for those of us who rely on our personal computers every day. Use these ideas, and those in the "Useful resources" sidebar, and you may never need a pound of cure.

Oh, and your house and car? Lock 'em up, too.

July basic maintenance

1. Think of a sentence you can remember, such as "My son Aiden is three years old."
2. Check if the computer accepts the phrase as is. If you can use the full pass phrase--My son Aiden is three years old--on your system, with spaces between characters, do so.
3. If that won't fly, convert the pass phrase to a password. Take the first letter of each word of the sentence and create a nonsensical word. For example, based on the sentence above, you'd get "msaityo."
4. Add complexity; mix uppercase and lowercase letters and numbers. There are many possible substitutions, and the longer the sentence, the more complex your password can be. Your pass phrase might become "My SoN Ayd3N is 3 yeeRs old." If the computer or online system will not support a pass phrase, use the same technique on the shorter password. This might produce a password like "MsAy3yo."
5. Finally, substitute some special characters. You can use symbols that look like letters, combine words by removing spaces, and use other ways to make the password more complex. Using these tricks, create a pass phrase of "MySoN 8N i$ 3 yeeR$ old" or a password, using the first letter of each word, "M$8ni3y0."
6. Test your new password with Password Checker on the Microsoft site. Password checker is a non-recording feature that helps determine your password's strength as you type.
   Add complexity to passwords by mixing uppercase and lowercase letters and numbers.

One of the primary goals of the Financial Fitness Challenge is to remove the frightening aspects of managing your money. It won't always be easy, but it is rewarding. If you could use some help along the way, remember that the people at your credit union are among your best financial resources.

ST
Susan Tiffany, CCUFC
askem@cuna.coop

Published July 1, 2007, Reviewed January 14, 2008

  Home & Family Finance® Resource Center
  Copyright © 2008 - Credit Union National Association, Inc.