Online Safety

You can help protect yourself online by using strong passwords, avoiding dangerous links, backing up your data, and more. Here are our 10 important tips for staying safe online. 

1. Don’t open mail from strangers: it’s a good practice to refrain from opening any emails from addresses you don’t know. 
   1. Email Spoofing: Even if the ‘display name’ is someone you recognize but the request seems suspicious, mouse over the name to revel the real email address. This is particularly harder with cell phone mail apps. You must touch the name to reveal the email address to make sure the email was from that person.  
2. Make sure your devices are up to date: Updates often include critical fixes for any security holes that may have been detected in your programs or devices.  
3. Use strong passwords: There are several ways to protect yourself from identity theft online, and using strong passwords is one of them. Don’t use your dog’s name or your kids’ birthdays. The best password is one that you can remember, but one that will be hard for other people to guess. An abbreviated sentence, or passphrase, is often better than a single word with numbers and symbols inserted. Or you can use a password management app like LastPass to generate and store your passwords for you. A password manager can also help you generate unique passwords for each of your online accounts. For extra security, change your passwords several times per year.  
4. Use two-factor authentication: Two-factor authentication requires you to verify your identity after you’ve logged in using your username and password. In some cases, you’ll be asked to verify your identity by entering a code sent by text to your phone or by email. The most secure way asks you to enter a code generated by an authenticator app in a smart phone. Whenever two-factor authentication is available, opt in. It may take you a couple of extra seconds to log in to your accounts, but it can make it less likely that other people will be able to gain access to your accounts. 
5. Never click on links in emails: Viruses and other forms of malware often spread because you click on a link from someone you know. If you receive a link that looks strange (for instance, it may have typos in it) from a trusted friend or family member, contact them to ask if the link you’ve received was sent on purpose. But remember: Don’t click on the link. 
6. Avoid using unsecured public Wi-Fi: If possible, try to avoid accessing unsecured public Wi-Fi on your devices. Using it can make you vulnerable to predatory practices. And if you must use it, avoid entering compromising information, like your Social Security number or financial information, on any website. Better yet, use a VPN, or virtual private network, to do your browsing when you’re not at home. This will encrypt the data you send and receive, making it much harder to intercept.
7. Back up your data regularly: If you become a victim of malware, such as ransomware, you might not be able to get your data back. That is, unless you’ve backed up your data. When you back up your data, you can make certain kinds of security breaches less problematic. 
8. Be smart with financial information: Be mindful of where you enter information like your credit card number online. Before you purchase anything on a website, ensure that the website’s URL starts with “https://.” The “s” at the end is critical, because it indicates that your connection is encrypted. Don’t purchase anything from a website that doesn’t have this. Also, you should think twice about saving your financial information to websites you buy from, even if you shop with them frequently. Storing your information on their site could make it easier for hackers to access if a company’s website or network suffers a data breach. 
9. Educate your family: You can be taking all the right precautions on your home security network, but if your family and other people using your network aren’t doing their part to keep everything secure, your efforts might not be enough. 
10.  Avoid sharing personal information: It’s easy to get comfortable with sharing a little too much personal information online. But you may be surprised at how much damage cybercriminals can do with just a little bit of information. To keep it safe, never share identifying details, like your full name, address, or financial information with strangers you meet online. You should also be careful about the usernames you create for websites — there’s no need for them to include your real name. And be sparing with the amount of information you share in online surveys or forms. Most of the time, little to no personal information is genuinely needed to complete them. 

Run Updates 

Before browsing the internet, make sure your new device is fully updated. Installing the latest operating system and security updates provides essential protection right from the start.

• Windows 10 (not supported after October 2025) 
• Windows 11 
• MacOS 

Install Software 

Choose a secure web browser for your daily use. Good options include:

• Chrome 
• Firefox 
• Edge 

Antivirus/Antimalware 

Many new devices come with a free trial of antivirus software. It's best to either activate the antivirus or uninstall it to free up storage and avoid unnecessary background processes.

Windows 10 and 11 include Microsoft Defender, a reliable and built-in security tool that offers protection comparable to many third-party options. Microsoft Defender is also available for macOS, iOS, and Android.

Backups 

• Windows 10 (not supported after October 2025) 
• Windows 11 
• MacOS 

Legacy Operating Systems 

• View Microsoft's Instructions for Upgrading 
• Do NOT install a “clean installation” if you do not wish to DELETE ALL DATA on your device. 

Protecting University Data Through Device Encryption

Everyone has a role in safeguarding data stored on University devices from unauthorized access or accidental exposure.

Encrypting SIU-owned computers is a key step in protecting sensitive information. Device encryption significantly reduces the risk of data breaches if a device is lost or stolen. By following this best practice, SIU helps ensure that confidential data remains secure—even if the physical device falls into the wrong hands. If a lost or stolen device is proven to be encrypted, we can be confident that the data it contains has not been accessed.

How to Tell if a Computer is Encrypted

If you are unsure whether your computer is encrypted, follow these steps. 

Windows: BitLocker

1. Navigate to Control Panel.
2. Choose BitLocker Drive Encryption. 
3. If your hard drive's icon includes a lock, your device is fully encrypted.

Mac: FileVault2 

1. Navigate to Control Panel.
2. Choose BitLocker Drive Encryption. 
3. If your hard drive's icon includes a lock, your device is fully encrypted.