Resources

1. Use strong passwords
• 10 or more characters; mix of upper and lower characters, numbers, and at least
one symbol, e.g., Gr@c3Ep1$c0paL(HuRch
• Do NOT use the same password across multiple sites

2. Use a password manager, e.g.:
• 1password
• Dashlane
• Bitwarden

3. Use two-factor authentication (2FA) if offered by the provider (e.g.,
bank, cell phone provider, etc.)
• If 2FA is enabled, your username, password, AND a code that is sent to your phone
or email address are needed to login
• Do NOT share the code with anyone; not even with someone who claims to be
contacting you on behalf of the provider

4. Use anti-virus protection and keep software updated
• Some anti-virus software includes a built-in password manager

5. Do not click on links (URLs) sent via email if you are not expecting them
even if the email comes from a familiar name
• Type the link (URL) into the browser yourself
• Check suspicious emails for misspelled “From” addresses. E.g.: amazon.com vs
armazon . com

6. Program the phone numbers of trusted contacts into your mobile phone
and keep the numbers updated
• If you receive a text message from a scammer, their phone number will not match
the number that is programmed in your mobile phone (so your phone will show the
sender as a phone number instead of showing the sender as a trusted contact’s
name)