Skip to main content
U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock () or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Common Cybersecurity Practices

To Protect Yourself Online

  • Ensure that all your electronic devices have the latest software updates and active antivirus protection.
  • Create strong passwords, change them appropriately, and avoid utilizing the same password across multiple apps.
  • Use multi-factor authentication to avoid unauthorized access to your accounts.
  • Regularly back-up data stored on your electronic devices.
  • Don’t use public Wi-Fi services to prevent criminals from monitoring your online activity.
  • Use reputable websites when shopping online and check for TLS/SSL security, by looking for a green lock icon next to the URL in the browser, to protect your credit card information.

Beware of Phishing and Smishing

Phishing (email) and Smishing (text message) are types of fraud schemes, which criminals use to elicit funds, credit card and personally identifiable information (PII), or install malware on electronic devices.

Criminals achieve this by disguising their communications to appear from legitimate and trusted sources, by offering opportunities to earn quick and easy money, and/or receive some other item or service of value.

  • Never respond to an email or text message from an unknown source.
  • Never click on a link or open an attachment from an unknown source.
  • Never respond to an email or text message offering you to earn quick and easy money.
  • Never respond “Stop” or “No” to prevent future text messages, delete the text instead.
  • Never share your financial or PII.
  • Always read the entire email and look out for suspicious indicators, such as poor grammar or email addresses disguised to appear legitimate.
  • Always independently verify where a request for sensitive information originates.
  • Always independently type a website address instead of clicking on a link.
  • Always delete a text message from an unknown source.
  • Always mark an email from unknown source as spam.

Remember: Government agencies or legitimate businesses will never solicit personal information by sending you an email, text message, or calling you.

  • PDF Guide: Common Cybersecurity Practices

    Common Cybersecurity Practices
    basic_cyber_security.pdf_.jpg

    Learn how to stay safe online.

    Download the PDF guide
Return to top of page