Is Your Password Helping Hackers?

We use passwords for almost everything these days.

Email. Banking. Shopping. Social media. Business systems. Online accounts, and with so many passwords to remember, it can be tempting to use the same one everywhere or choose something simple that you know you'll remember. Unfortunately, that's exactly what cyber criminals are hoping for. The good news is there are some simple things you can do to make it much harder for them.

Use a Password Manager

Here's something that can make life much easier.

A password manager can securely store your passwords for you, making it easier to use different passwords for your different accounts without having to remember every single one.

You generally only need to remember one strong master password to access your password manager. A password manager can also help you create stronger passwords, rather than relying on the same few passwords you've been using for years. Your internet browser may already be saving your passwords for you, which is certainly convenient. Many password managers can provide additional features to help you create, store and manage your passwords securely and also has a way to do a password checkup and can report to you on: Compromised passwords: passwords that may have been exposed in a data breach Reused passwords: the same password being used across multiple accounts Weak passwords.: passwords that may be easier to guess or crack.

                                        If you're not sure where to start, talk to us.

At Connelly's, we can help you with password-manager software, including the software we use ourselves.

Don't use the same password everywhere

We know it's convenient. You find a password you like, remember it, and then use it everywhere.

The problem is that if one account is compromised, any other account using that same password could potentially be at risk too. Where possible, use different passwords for different accounts, particularly important accounts such as your: Email, Banking, Business systems, Cloud services, Other accounts containing important information

Your email account is especially important because it can often be used to reset passwords for other accounts.

Make your passwords longer and harder to guess

When it comes to passwords, longer is generally better.

A longer passphrase made up of several words can be easier for you to remember while being harder to guess than a short, simple password.

And please don't make it: Password123 Try using a combination of: Uppercase + lowercase + numbers + other characters

Avoid obvious information such as your business name, children's names, pet names, birthdays or anything else that could be easily connected to you.  A password that is easy for you to remember isn't necessarily easy for someone else to guess but the more predictable the information, the more useful it can be to a criminal trying to work out your password.

Turn on Multi-Factor Authentication

If an account offers Multi-Factor Authentication (MFA), turn it on.

MFA adds another layer of protection when you sign in. Instead of relying on your password alone, you'll usually have another step to confirm that it's really you — such as a code, authentication app or another approved method. That means a stolen password isn't necessarily enough for someone to get into your account. One extra step can provide another important layer of protection.

Think before you click

We think scammers get off light being referred to as scammers, when in fact they are criminals. They are no different to a burglar breaking into your house, in fact they are worse because they appear to you as someone you trust.

These criminals put a lot of effort into making emails, text messages and websites look genuine. They may appear to come from your bank, the ATO, MYOB, a supplier, a delivery company — or even someone you know. We've seen scams involving things such as fake MYOB and ATO messages, fake invoices, fake suppliers and fake cryptocurrency investment opportunities.  Before clicking a link or opening an attachment, stop for a moment and ask yourself:

Was I expecting this? Do I know who sent it? Does something look unusual? Is it asking me to do something urgently?

And don't assume that because the email looks professional, it must be genuine. If you're unsure,                                               DON’T CLICK – CHECK ANOTHER WAY

For example, if you receive an email that appears to be from your bank, don't use the link in the email. Go directly to the bank's normal website or use an official phone number.

The same applies to suppliers.

If a supplier suddenly asks you to change bank details, make a payment or provide sensitive information, verify it with them using a contact method you already know.

Cyber security is everyone's responsibility

Cyber security isn't just an IT issue. Everyone in your business has a part to play. One person clicking the wrong link, opening the wrong attachment or paying the wrong invoice can potentially create a problem for the whole business. That's why awareness is so important.

Where can you learn more?

Scamwatch is a great place to start.

It provides information about scams affecting Australians and has a huge range of resources to help you recognise scams, understand how they work and know what to do if you encounter one. There are resources specifically for small businesses, along with information about different types of scams and practical ways to improve your scam awareness.

It's worth having a look — and sharing the resources with your team.

Australian Signals Directorate also provides cyber security information and resources to help businesses understand and improve their cyber security. A little bit of knowledge can go a long way when it comes to protecting your business.

But what about the things you don't see?

Good passwords, MFA and a cyber-aware team are all important pieces of the puzzle, but

there are also things happening behind the scenes that you might not see until there's a problem.

That's where our 360 Protection Plans come in.

Our Tech Team can monitor your systems 24/7, helping identify potential issues early and working proactively to help prevent problems before they become problems for your business.

The aim is simple: Keep your systems safe. Keep your systems healthy. Keep your business running.

Rather than waiting for something to go wrong and then trying to fix it, our 360 Protection Plans provide ongoing monitoring and support to help keep an eye on your technology.

Because when it comes to your business, Prevention is better than a panic at 4:55pm.

 A few simple things you can do today

☐ Check your important passwords Are you reusing the same password across multiple accounts? ☐ Use a password manager Make using unique passwords easier. ☐ Turn on MFA Especially for your email, business and other important accounts. ☐ Think before you click If something doesn't look right, stop and check. ☐ Get your team scam aware Make sure everyone knows what to look for and where to find reliable information. ☐ Check out Scamwatch and cyber.gov.au There are plenty of free resources available to help improve your awareness. ☐ If you want someone watching the bigger picture Talk to us about our 360 Protection Plans.

Don't wait for a cyber problem to teach you about cyber security.

A few simple changes today can make a real difference to the security of your business tomorrow. If you'd like to talk to our Tech Team about protecting your business, we're here to help.    02 6382 4099

Connelly's Office National

Local Know How