To strengthen Internet security, it is not an easy task in the midst of threats from all kinds of malware; software vulnerabilities; service violations and data leakage; fakes and disinformation campaigns; a galloping loss of the right to privacy and all kinds of attacks with Ransomware and Phishing as exponents.
And it is that the number of devices connected to the global network has grown exponentially, with everything that has come from mobility, home automation, smart cars or Internet of Things devices. If we add the pandemic and the transfer of millions of employees and students from professional networks to home networks (generally more insecure), we have a scenario that poses a challenge to stay safe from computer threats.
How to Strengthen Internet security
All of the above requires a proactive behavior and a lot of common sense from the user, understanding that virtual life must be protected today just as much as physical life and that domestic tasks have been dangerously mixed with professional ones. Certainly, no matter what we do, guaranteeing 100% security and privacy is not possible in a global network, but we can try it with a series of measures that we are going to remind you of and that include strengthening online accounts, applications, equipment where we use them and the due precautions in the use of the Internet and its services.
1. Protect browsers
All web browsers include advanced security features whose activation we must review and configure because they are the applications we use to access the Internet and its services. In addition to reviewing end-to-end encryption in synchronization or sandboxing, we should pay attention to warnings about insecure sites displayed by browsers.
Also review installed extensions because some are a frequent source of malware introduction. Another interesting possibility is to use a session in “Guest Mode” which is totally detached from the original user profile, including settings or history. Finally, highlight the use of ” Private Mode ” (or incognito mode) to improve privacy, as it prevents tracking through cookies, open user sessions and other systems used for this purpose.
2. Update the operating system and applications
Windows Update provides the latest updates to the Windows operating system, with security patches for known threats that are required to be installed. With automatic updates, there’s no need to check for updates online or worry about critical fixes or device drivers for Windows missing from your computer.
As important -or more- than the above is updating installed applications to the latest versions, since these usually include security patches. When the versions are older, they are at greater risk of being attacked by cybercriminals who find vulnerabilities in the program, with special emphasis on some widely used programs such as Java, Adobe Flash or Reader.
3. Use security solutions
Microsoft offers Windows Defender in its operating systems as a native security solution and its use is mandatory in Windows as basic protection for a consumer, although different specialized providers offer a good number of security solutions, many of them free, that we can use. An advanced or professional user should consider using a comprehensive business security suite that includes other security tools such as a firewall and specialized tools against Ransomware, Phishing, adware or spyware attacks.
4. Manage passwords well
Another of the golden rules to improve Internet security (in addition to using advanced biometric identification techniques if the device you use allows it) is to have a strong and different password for each website. Certainly, passwords are an unattractive method for the user, but they are still the preferred authentication method to access Internet services or log in to operating systems, applications, games and all kinds of machines.
Strong passwords prevent brute force attacks and using a different password for each account prevents having all of them compromised at once when a data breach occurs. You must follow a series of rules for its creation and value the use of password managers that are capable of doing the work for us, reducing human errors in their handling and automating the generation and administration process.
5. Use two-factor authentication
2FA is an access control method that you will know as “two-factor authentication”, “double identification” or “two-step verification”, which has become one of the most important security mechanisms in the technology industry at the time to authenticate users and protect identities. Two-factor authentication (or two-step) provides an additional level of security in the accounts since it is not enough to violate the username and password.
This feature is already available on most major Internet services and should be used whenever possible. Generally, it uses a verification code served through a mobile application or SMS, reinforcing the use of passwords, username and password when logging in.
6. Evaluate the use of encryption
BitLocker Drive Encryption is a data protection feature of the operating system, available in the Professional and Enterprise editions of Windows 10 and 11, among others. BitLocker allows you to encrypt or “scramble” the data on your computer to keep it safe from threats such as data theft or exposure in the event of loss, theft or inappropriate removal of equipment, ultimately improving online security. BitLocker can be enabled on the operating system drive, a fixed data drive, or a removable data drive. There are equal or better third-party solutions whose use should be evaluated.
7. Use a hardware security key for vital accounts
For vital accounts, especially in business and professional environments, it pays to go the extra mile to protect them by using a hardware security mechanism. It is generally a device in pendrive format that connects to a USB port and contains a highly secure encryption engine. The entire process is done within the hardware, greatly increasing overall security compared to software solutions.
8. Avoid free wireless networks
Free access points have spread to multiple areas in towns, restaurant areas, airports, train or metro stations, hotels and in all kinds of businesses. Darkhotel, the Advanced Persistent Threat (APT) discovered by Kaspersky Lab, confirmed the intrinsic insecurity of public wireless networks. It would have been active since 2007 and would have been dedicated to obtaining privileged information from executives and high-level employees staying in high-class hotels. Security researchers have shown that they are easily hackable, so we should only use them for occasional browsing.
9. Use backups
We have already said that 100% security in a connected world simply does not exist and not only because of a virus, since a hardware error can cause the loss of precious personal and/or professional information. Making backup copies (what we know as Backup) is therefore highly recommended for a user or professional who wants to protect personal and corporate information on a computer. besides being a maintenance task that contributes to the health of the hardware. Backups must be stored on a storage device external to our team’s and/or on a cloud storage service.
10. Common sense
As always when we talk about Internet security (and cybersecurity in general), prudence is a preferred barrier against malware and therefore, we must take special care in the section on downloading and installing applications from unsafe sites; in browsing certain Internet pages; opening unsolicited emails or attachments; in those that come from social networks or messaging applications or in the use of out-of-date operating systems and applications, which contain vulnerabilities that can be exploited by cybercriminals for malware campaigns.
