Chances are you use at least one device that runs either iOS or Android. To protect your data and identity, set up two-factor authentication so that every login attempt requires an additional credential on top of your username and password. This might be a text message code or an approval from another trusted device.

Default options on certain websites may be chosen for convenience, not for security. For example, avoid allowing a website to remember your password. If your password is stored, your profile and any account information you have provided on that site is readily available if an attacker gains access to your computer. Also, evaluate your settings […]

Some websites and applications allow or even require special characters – like < and ! – in passwords. If you have the option to include them, do so, since their presence makes the password more difficult to guess than if it only contained alphanumerics.

It’s fully possible to create your own strong passwords, i.e. ones based on phrases, but it’s often more trouble than it’s worth. Many password managers, including ones built into OSes like Apple iOS, can take care of password generation, storage, organization and retrieval for you.

If your password is stored, your profile and any account information you have provided on that site are readily available if an attacker gains access to your computer. Also, evaluate your settings on websites used for social networking. The nature of those sites is to share information, but you can restrict access to limit exposure […]

Android has never had the same reputation for security as iOS or desktop operating systems. That doesn’t mean it lacks useful protections, though. On most devices, you can first set up a PIN and then go to Security -> Settings and enable the Encrypt Phone option. Note that initial encryption can take a while and […]