Cleveland investigates a cyber incident; what we can learn from it

We don’t know much about the nature of the “cyber incident” that shut down Cleveland City Hall yesterday and today. But it’s a good reminder that the Internet is dark and full of terror. Here are a few tips to help you protect yourself.

Use strong passwords – and change them

NordPass, a developer of password management software, conducts surveys every year to determine the most commonly used passwords. In last year’s survey, “123456” came first. “Admin” was second. “Password” made it into the top 10.

More than 40 years after the movie War Games showed the danger of easily guessed passwords, some people still don’t think about securing their accounts.

Google and other sources recommend using a passphrase – a few words you can remember, such as a favorite song lyric, a movie quote, or a funny thing your child said. Mix any uppercase letters, numbers, and special characters to leave at least 12 characters total.

You also need to use different passwords for different accounts. And change them from time to time. Yes, it’s a hassle, but email account information is stolen all the time in data breaches. Enter your addresses at HaveIBeenPwned.com to see which of your addresses have been affected. (I checked one of my addresses while researching this article and found that it had been involved in a dozen different data breaches.)

If offered, also use two-factor authentication.

Don’t get phished

Phishing is a term used by cybercriminals to trick people into sending money, sharing sensitive information, or downloading malware. Here’s a real-life example: While I was working on this, I received a text message trying to get me to pay a toll I claimed I hadn’t paid in Florida. (Technically, this is “smishing” because the FBI says the text message was sent.)

Such a scam involves a number game: blindly send the SMS to thousands of people and hope that some fall for it. But some phishing scams are more sophisticated: they pretend to be from a real company or government agency and may even use the victim’s name. If an email or SMS asks for personal information or seems even the slightest bit suspicious for any reason, find another way to verify it.

Raise your children well

Bullying and stalking aren’t the only dangers children face online. The National Cybersecurity Alliance offers detailed advice on how to talk to children about safety and privacy.

“The aim should not be for parents to monitor everything,” the NCA explains, “but rather to teach teenagers how to become responsible digital citizens.”