1. Use strong passwords:  10 or more characters; mix of upper and lower characters, numbers, and at least one symbol, e.g., Gr@c3Ep1$c0paL(HuRch

Do NOT use the same password across multiple sites

2. Use a password manager, e.g.:

1password
Dashlane
Bitwarden

3. Use two-factor authentication (2FA) if offered by the provider (e.g., bank, cell phone provider, etc.) If 2FA is enabled, your username, password, AND a code that is sent to your phone or email address are needed to login Do NOT share the code with anyone; not even with someone who claims to be contacting you on behalf of the provider

4. Use anti-virus protection and keep software updated Some anti-virus software includes a built-in password manager

5. Do not click on links (URLs) sent via email if you are not expecting them
even if the email comes from a familiar name

Type the link (URL) into the browser yourself Check suspicious emails for misspelled “From” addresses. e.g.: amazon.com vs armazon.com

6. Program the phone numbers of trusted contacts into your mobile phone
and keep the numbers updated

​If you receive a text message from a scammer, their phone number will not match the number that is programmed in your mobile phone (so your phone will show the sender as a phone number instead of showing the sender as a trusted contact’s name)