Welcome Clients of Mariner Wealth Advisors Cybersecurity Education Series Password Management & Public Wi-Fi Security Content provided by Presenter: Ray Cool, CEO PBSI Technology Solutions Webinar will begin at 10:00 Page 1
Series Goals Series Goals • Inform and educate on how to protect your electronic valuables • Improve knowledge about electronic security • Provide practical information about what to change and how to do so Topic Summaries • Securing Personal Data - Overview previous webinar – recording available • Email Security Practices & File Encryption previous webinar – recording available • Password Management & Public Wi-Fi Security today’s webinar Page 2
Agenda Password Management & Public Wi-Fi Security Practical Steps toward Protecting Our Identity • Why does password security demand our attention? • Password guidelines • Three Practical options for managing passwords – Why use a Password Manager? • Understanding the dangers of public Wi-Fi – Use a VPN? Page 3
PBSI Technology Solutions IT Security Specialists Who is PBSI? Technology Services provider for hundreds of clients large and small Experienced – 75% of staff have 10+ years experience w/PBSI Proactive IT security for businesses and individuals Not affiliated with Mariner Wealth Advisors Page 4
Why do we need protection? The Internet Today is a Dangerous Place Increasingly, PCs are being infected with malware that steals passwords and copies data New key logging & phishing attacks change constantly – Bad guys are motivated and relentless The victim is NOT notified – Key logging malware may be active on millions of PCs Email Addresses and Passwords Are For Sale • 3.1 Billion emails are available for sale on the Darkweb • 1.2 Billion of them include exposed, cracked passwords • LinkedIn, Yahoo, Gmail, DocuSign, Adobe, Dropbox, Tumblr, MySpace and 30 others • Recent hacks: Marriott, Dell – breaches continue unabated – MUST prepare in advance Secure Dark Web Exposed Password Check. Page 5
Password Guidelines How to make my passwords safe Change your passwords – today would be a good idea… Change all duplicate or “normal” passwords Don’t use “normal” or “easy” passwords (ex: Be yourself; everyone else is taken! – By;eeit!) Idea: Make passwords individual variations of a never-stored “normal 8” password Don’t reuse WORK passwords on personal sites, and vice-versa Use a unique password wherever you store credit card or financial information Enable two-factor authentication for all web accounts where it is offered Yes, it’s a hassle, but it works Find out if your passwords have been compromised PBSI can check organization domains, or individual email addresses – ask us Use a secure password manager Why? Manual password management is inevitably unsafe Page 6
Demonstration 3 Ideas for Protecting and Storing Passwords 1. 1. Use a password manager • LastPass or Dashlane or similar – these provide security password encryption and auto-sharing among devices • Encryption - All passwords are encrypted at a very high level • Auto-synchronization across all PCs, laptops, Macs, Androids, iPhones, iPads • Auto-fill passwords for login to stored websites LastPass Free – auto synchronizes across all devices LastPass Premium $2/mo provides digital contingency – provide secure access with trusted person(s) LastPass Families $6/mo provides 6 separate Premium accounts – Separate accounts w/selected shares 2. Store passwords in an encrypted document - locally or in the cloud – use a long password 3. Microsoft OneNote encrypted tab – Office 365 version - synchronizes across all devices Handwritten passwords? In today’s world, this is simply not practical for most of us Page 7
LastPass Setup Start at lastpass.com - Create Account – Set Long Password Page 8
LastPass Setup Add Browser Extension Page 9
LastPass Setup Import Browser Passwords Page 10
LastPass Setup Account Settings – Set Recovery Phone Page 11
LastPass Setup Your Vault - Add New Sites Page 12
Summary - Password Manager Setup 1. 1. Initial setup - Auto-import passwords from all current browsers • After auto-import – then delete stored passwords on all browsers • Remember my password = NO 2. Never auto-save your master password • Remember me = YES • Remember my password = NO 3. Set key security choices • Set recovery mobile phone number • Set secondary email address 4. Download and login on your other devices – Synchronization is automatic • Vendor website – Download – then login – Do NOT create another account Page 13
Principles for Safe use of Public Wi-Fi Public Wi-Fi is NOT secure - well known W-Fi names do NOT equate to “secure” Wi-Fi • On public Wi-Fi, NEVER visit sites requiring login and password – Unless using a VPN • NOT Secure: Starbucks, Marriott, Delta, airlines, hotels, restaurants, guest Wi-Fi at your attorney, CPA, etc. • Passwords hacks are common on public Wi-Fi – using “presumed trust” of the host – using free hacking tools • Beware Fake Wi-Fi – “Google Starbucks” (“Trump Wi-Fi” scammed 1,000 RNC attendees) What is a VPN (Virtual Private Network? • VPN establishes a point-to-point encrypted “private” channel between you and one other party • VPN software redirects your Internet connection through a remote server run by a VPN provider How to be safe on Public Wi-Fi • Safe: Cellular is safe – always automatically encrypted • Safe: Google searches are fine on public Wi-Fi – but STOP if prompted for a pw (Uber, Yelp, restaurant orders…) • Safe: Use a VPN or a safe app (Bank app) to login PC Mag Best VPNs 2019 Page 14
How do I know if I’m protected by a VPN? VPN No VPN Page 15
Summary of Today’s Webinar – Password Management & Public Wi-Fi Password Management Principles • Change your passwords – today would be a good idea… • Don’t reuse WORK passwords on personal sites, and vice-versa • Use a secure password manager – or an encrypted alternative • Enable two-factor authentication for all web accounts that offer it • Find out if your passwords have been compromised – PBSI can help you at no cost Use Public Wi-Fi Securely • Public Wi-Fi is NOT secure • Safe: Cellular is safe – always automatically encrypted • Safe: Use a VPN or a safe (bank) app if you’re going to enter a password Page 16
Overall Summary – Essentials of Securing Personal Information Secure your Desktops, Laptops & Phones • Antivirus & Malware protection – auto updated without manual intervention, daily vulnerability scanning • Desktop Patch Management - Security issues frequently related to un-updated software patches • Vulnerability Scanning – Every PC should employ a tool that does a vulnerability scan, every night. Understand alerts • No unapproved downloads on PCs – Malware comes from somewhere….. Downloads are a BIG culprit Encrypt sensitive information • Important protection against a successful hacking event Backup on an automated schedule • Don’t let lack of knowledge or attention put you at risk. Use an encrypted backup as a ransom ware protection. Know if your PCs are safe • Online security monitoring – inexpensive and very worthwhile Other Security Issues • Internet of Things – No default passwords – check every device • Phone calls – never give secure information by phone Be an active leaner - Encourage every staff and family member to learn secure behavior • Training is inexpensive. Mistakes are not. Page 17
Webinar Summary Thank you for your attendance – and thank you to our friends at Mariner Wealth Advisors Thank you for your attendance Request a free quote for security services Cost for Mariner clients • Online Security Monitoring - Antivirus, Patch Management, Vulnerability Scans $4 - $7 /mo • Risk Intelligence Scanning – find unencrypted data $2 - $3 /mo • Concierge Security Services – Your own security advisor for a low fixed fee per year included • Online Backup with Ransomware protection • Mariner Wealth Advisors clients receive a 25% discount for individuals and 10% for institutions Contact Information Call or email questions, or free quotation (800) 626-2306 x1 itservices@pbsinet.com Speaker contact Ray Cool, CEO (513) 924-3915 rayc@pbsinet.com Webinar Summary Securing Personal Information previous webinar – recording available Email Security Practices & File Encryption previous webinar – recording available Password Management & Public Wi-Fi Security today’s webinar – recording will be published Page 18
Recommend
More recommend
