7 tips for better cyber hygiene

10 November 2020 by National Bank
Cyber hygiene

Whenever you’re online, whether at home or at work, or when commuting or working from home, you’re exposed to cyberattacks. The key to reducing your risk of fraud is maintaining good cyber hygiene. Follow these simple tips to put the odds in your favour.

Take precautions against identity theft

Get with
Securizone 360TM

What is cyber hygiene?

They’re the things you can do to improve your safety online and protect yourself from fraud. Every year, the number of cases of online fraud goes up. “And they’ve spiked in 2020 with the pandemic,” states Tony Fachaux, cybersecurity awareness expert at National Bank. “Fraudsters always use the same methods. By practicing good cyber hygiene and increasing your vigilance, which tends to slip when you’re online all the time, you can easily avoid fraud.”

A cyberattack can lead to identity theft, data theft, or financial theft, which can tarnish your credit report and even land you in court. Practicing good cyber hygiene is the best way to stop cybercriminals. “The fact that there are cyberattacks means that people and companies don’t have a grasp on basic safety practices,” the expert insists.

Best practices for better cyber hygiene

1. Protect your devices

Get an antivirus that scans websites, downloads, attachments and external hard drives. “Antivirus software has evolved; it doesn’t just scan for viruses anymore,” Tony Fachaux explains. “It includes other safeguards, like behavioural analysis that detects suspicious activity on a device.”

A good protection tool also offers firewalls, among other things, which analyze the computer network’s incoming and outgoing connections to block fraudulent activity. “A virus that gets installed steals information and will try to communicate with the hacker to send it to them,” he continues. “A firewall could block this kind of flow of information.” Also, check regularly to make sure these protection measures are enabled.

2. Choose a secure Wi-Fi network

Avoid connecting your devices (phone, tablet, computer) to unknown or unsecure Wi-Fi networks. If you’re connected to a public Wi-Fi network, a fraudster could get their hands on your personal information. “High-end hotels are a favourite for fraudsters, for example,” Tony Fachaux points out. “They know that clients could possess important company information. We recommend avoiding any sort of confidential activity on a public network, like logging into your bank account or using your email.” To secure your Wi-Fi at home, change the default passwords for your network and your router.

3. Use strong passwords

A strong password allows you to protect the accounts on your personal and professional devices. It should be as long as possible, only make sense to you, and be unique. Never write down or share your passwords. You can also enable two-factor authentication, which is a two-step identity verification process, to reduce your risk of fraud considerably.

4. Update your software regularly

Download the most recent versions of security software, operating systems, web browsers and third-party apps. These updates correct new known security vulnerabilities. You can actually enable automatic updates on your devices.

5. Make sure you have backups

Always make sure you have a safe copy of your documents. On top of ensuring you can find them in case you lose your devices or they get stolen, this could help you retrieve your information if you’re a victim of phishing. Make sure you have an offline backup, like on a cloud app, for example. If your updates are made to an external hard drive that’s connected to an infected device, the data could be compromised.

6. Look before you click

Be vigilant at all times when it comes to unsolicited communication, whether via email, social media chats, or even text message. Never click on a link or attachment unless you’re sure it’s safe.

7. Avoid sharing personal information on social media

Some of the information that you post online could allow a fraudster to hack into your accounts or create a convincing enough fake account for phishing purposes. Don’t reveal too much about your work life, either. A user who indicates on their profile that they’re a financial systems administrator could be targeted by a fraudster who’s interested in their employer.

Do you work from home?

Your employer’s best practices for Internet security should be followed even when you’re working from home. Here are other cybersecurity measures specific to remote work:

  • Use a virtual private network (VPN), which allows a secure, direct link between remote devices. “Like a tunnel, it connects you to the company’s network,” the expert explains. “That way, even if you’re connected through an unsecured Wi-Fi network, you’ll be protected because the connection generated within the network is secure.”

  • Don’t share any work-related information using your personal devices. A work computer is often equipped with proven tools that provide better security than personal devices.

  • Use the devices provided by your employer for work purposes only. Personal activity increases the risk of fraud online and could expose confidential information contained on your work device.

  • Don’t share your work tools with family members or friends. Make sure they don’t have access to them, especially if you have special permissions for work platforms or apps.

  • Disable the voice assistants on your devices. “When you speak to an enabled voice assistant, it answers. That means it’s always listening,” Tony Fachaux says. “While there’s no proof that this can cause security breaches, better safe than sorry, especially when you’re having confidential conversations.”

When you understand them, the rules for better cyber hygiene are simple. Once they’re part of your behaviour, they will help protect you from common fraud schemes.

For more advice, read our ABCs of security.  

Legal disclaimer


Any reproduction, in whole or in part, is strictly prohibited without the prior written consent of National Bank of Canada.

The articles and information on this website are protected by the copyright laws in effect in Canada or other countries, as applicable. The copyrights on the articles and information belong to the National Bank of Canada or other persons. Any reproduction, redistribution, electronic communication, including indirectly via a hyperlink, in whole or in part, of these articles and information and any other use thereof that is not explicitly authorized is prohibited without the prior written consent of the copyright owner.

The contents of this website must not be interpreted, considered or used as if it were financial, legal, fiscal, or other advice. National Bank and its partners in contents will not be liable for any damages that you may incur from such use.

This article is provided by National Bank, its subsidiaries and group entities for information purposes only, and creates no legal or contractual obligation for National Bank, its subsidiaries and group entities. The details of this service offering and the conditions herein are subject to change.

The hyperlinks in this article may redirect to external websites not administered by National Bank. The Bank cannot be held liable for the content of external websites or any damages caused by their use.

Views expressed in this article are those of the person being interviewed. They do not necessarily reflect the opinions of National Bank or its subsidiaries. For financial or business advice, please consult your National Bank advisor, financial planner or an industry professional (e.g., accountant, tax specialist or lawyer).

The hyperlinks in this article may redirect to external websites not administered by National Bank. The Bank cannot be held liable for the content of external websites or any damages caused by their use.

Tags :



Take precautions against identity theft

Get with
Securizone 360TM