Plain-English guides to health, Medicare and money after 60

Bonivitas
Home & Safety

Online Safety Basics: Passwords, Updates and Suspicious Emails

Strong passwords, software updates and a healthy suspicion of unexpected emails and texts protect your money and personal information online. Here are the basics.

Older man in glasses using a laptop at a desk with a lamp and plants behind him
A few simple habits go a long way toward keeping accounts safe online. Photo: Pexels

Key takeaways

  • Use a long, unique password or passphrase for each important account, and consider a password manager.
  • Turn on two-step verification, and never share the codes you receive.
  • Keep your devices and apps updated.
  • Be suspicious of urgent emails, texts and pop-ups; forward scam texts to 7726.

The internet makes it easy to stay in touch, shop, bank and manage health care from home. It also gives scammers and hackers new ways to reach you. You do not need to be a technology expert to stay safe. A few habits protect most people from most threats.

1. Use strong, unique passwords

  • Make passwords long. A passphrase of four or more random words, such as "maple-river-teacup-lantern," is easier to remember and harder to crack than a short, complex password.
  • Use a different password for each important account, especially email, banking and shopping. If one site is hacked, your other accounts stay safe.
  • Consider a password manager, an app that creates and stores strong passwords for you. You only need to remember one main password.
  • If you prefer to write passwords down, keep the list in a safe place at home, not on your computer or next to it.

2. Turn on two-step verification

Two-step verification, also called multi-factor authentication, asks for a second proof that it is really you, such as a code sent by text or an app, when you sign in. Even if someone steals your password, they cannot get in without the code.

Never share these codes with anyone who calls, texts or emails you. Your bank, Medicare and Social Security will not ask for them.

3. Keep everything updated

Updates fix security holes. Turn on automatic updates for your phone, computer, tablet, web browser and apps. Restart your devices when they ask.

4. Spot phishing emails and texts

Phishing messages try to trick you into clicking a link, opening an attachment or giving personal information. Warning signs include:

  • Urgent warnings that your account will be closed or that there is a problem with a payment or delivery.
  • Offers that seem too good to be true.
  • Requests to confirm personal or financial information.
  • A sender address or link that does not quite match the real company.
  • Spelling mistakes or a generic greeting such as "Dear customer."

If you are unsure, do not click. Go to the company's website by typing the address yourself, or call a number you know is real.

5. Watch out for tech support scams

A pop-up may say your computer is infected and tell you to call a number. Real companies do not do this. Close the browser, and if it will not close, restart your computer. Never let a stranger take remote control of your computer or pay for "support" with gift cards or wire transfers.

6. Shop and bank safely

  • Shop with companies you know, and type their web address yourself.
  • Look for "https" and a padlock symbol in the address bar before entering payment information.
  • Use a credit card rather than a debit card for online purchases, since credit cards usually offer stronger fraud protection.
  • Set up alerts on your bank and card accounts.
  • Avoid banking on public Wi-Fi.

7. Protect your privacy

  • Be careful what you share on social media, such as your full birth date, address, travel plans or your pet's name if it is a security answer.
  • Review privacy settings so only friends and family see your posts.
  • Be wary of new online "friends" who quickly ask for money. See phone scams targeting older adults.

8. Back up what matters

Back up photos and important files to an external drive or a secure cloud service, so you do not lose them if your device breaks or is hacked.

Get help

Many libraries and senior centers offer free technology classes and one-on-one help. If you think you have been hacked, change your passwords from a secure device, contact your bank and visit IdentityTheft.gov for a recovery plan.

Sources

We checked this guide against these sources. Figures change, so confirm current amounts with the source before you act.

Email this guide