You can’t control what others do with your personal information, but protecting it will help lower your risk of identity theft.
- Create strong passwords. Making a password longer is the easiest way to make it stronger — aim for at least 12 characters long. Consider using a passphrase of random words to make it more memorable, but avoid using common phrases, song lyrics, or movie quotes that are easy for hackers to guess. Mix uppercase and lowercase letters, numbers, and symbols. Use different passwords for different accounts: don’t reuse passwords. That way, if a hacker gets your password for one account, they can’t use it to get into your other accounts. A great way to keep track of all your different passwords is by using password manager.
- Use two-factor authentication when it’s available. You get added protection by combining something you know (like a password), with something you have (like a one-time passcode you get by text) or something you are (like a fingerprint).
- Pick security questions only you know the answer to. If a site asks you to answer security questions, don’t give answers that are easily found online, like your zip code, birthplace, or mother’s maiden name. And don’t use questions with a limited number of responses that attackers can easily guess — like the color of your first car. You can even use nonsense answers to make guessing more difficult — but if you do, make sure you can remember what you use.
- Don’t share personal information with anyone who gets in touch to ask for it. Keep info like your Social Security, credit card, or bank and utility account numbers to yourself — whether someone reaches out online or in an email, a text, or a call. Think about whether you can really trust the request. And never share this information with anyone on social media.
- Check out that call or email. Not sure whether someone who called or emailed is an impersonator or the real deal? Hang up, don’t reply, and check them out. Type the company name into your browser, go to their site, and contact them through customer service to see if they really contacted you.
- Lock up documents that show any financial account numbers and shred them before you toss them in the trash.
