How To Keep Your Password Secure

Password security graphic for protecting online accounts

How To Keep Your Password Secure

  • Make sure your password is long and strong. That means at least 12 characters. Making a password longer is generally the easiest way to make it stronger. Consider using a passphrase of random words so that your password is more memorable, but avoid using common words or phrases. If the service you are using does not allow long passwords, you can make your password stronger by mixing uppercase and lowercase letters, numbers, and symbols.
  • Don’t reuse passwords you’ve used on other accounts. Use different passwords for different accounts. That way, if a hacker gets your password for one account, they can’t use it to get into your other accounts.
  • Use multi-factor authentication when it’s an option. Some accounts offer extra security by requiring something in addition to a password to log in to your account. This is called multi-factor authentication. The “something extra” you need to log in to your account fall into two categories:
    • Something you have — like a passcode you get via an authentication app or a security key.
    • Something you are — like a scan of your fingerprint, your retina, or your face.
  • Consider a password manager. Most people have trouble keeping track of all of their passwords. The longer and more complicated a password is, the stronger it is, but a longer password can also be more difficult to remember. Consider storing your passwords and security questions in a reputable password manager. To find a reputable password manager, search independent review sites, and talk to friends and family for ones that they use. Make sure to use a strong password to secure the information in your password manager. KeeperSecurity & LastPass are just a couple options.
  • Pick security questions only you know the answer to. If a site asks you to answer security questions, avoid providing answers that are available in public records or easily found online, like your zip code, birthplace, or your mother’s maiden name. And don’t use questions with a limited number of responses that attackers can easily guess — like the color of your first car. You can even use nonsense answers to make guessing more difficult — but if you do, make sure you can remember what you use.
  • Change passwords quickly if there’s a breach. If a company tells you there was a data breach where a hacker could have gotten your password, change the password you use with that company right away, and on any account that uses a similar password.

Why businesses need DNS protection

DNS Protection

What is DNS protection?

Before we talk about DNS security, you need to understand the DNS. The domain name system (DNS) works like a phone book for the internet. When a user enters text into a browser, DNS servers take that input and translate it into the unique internet protocol (IP) addresses that let the browser open the desired site. But DNS protocols were never designed with security in mind, and are highly vulnerable to cyberattacks, such as cache poisoning, DDoS, DNS hijacking, botnets, C&C, man-in-the-middle, and more.

By redirecting users’ web traffic through a cloud-based, DNS security solution, businesses can finely tune and enforce web access policies, ensure regulatory compliance, and stop 88% of threats at the network’s edge—before they ever hit the network or endpoints.  If your business is like many others that have embraced remote workforce DNS Protection should absolutely be part of your network security plans.  DNS Protection can also secure your mobile workforce without interfering with the VPNs, firewalls, and other security tools you already use.

Why businesses need DNS protection

Uncontrolled internet access is a high-risk activity for any business, regardless of size.  DNS Protection helps protect you from wasted bandwidth, malware from sophisticated attacks such as ransomware and other cybercrime.

Per a report from EfficientIP, the average cost of a single attack was $715,000 USD. When you do the math, it’s clear how DNS Protection for servers, endpoints, and other networked devices could make all the difference to a business’ success (and survival).

What DNS Solution is best for my business?

Choosing a DNS protection solution doesn’t need to be hard.  There are several reputable options we can work with including Webroot DNS Protection & Cisco Umbrella.  These are 2 great solutions that offer up a DNS layered security to protect your workforce.  Don’t wait call us today. (561) 404-9251

Why use two-factor authentication (2FA) or Multifactor (MFA) with your VPN connection?

Two-factor authentication and account security illustration

What is a VPN?

Virtual private networks (VPNs) have been a popular way for companies to provide their employees remote access to their private servers and network resources. VPNs create secure connections between remote machines and your servers allowing your users to stay productive when out of the office. VPNs reduce the risk that hackers can find and enter your servers while your employees securely work from home or anywhere for that matter.

While VPNs are great, they are far from a perfect solution and are subject to security threats, such as phishing attacks. For example, an attacker will often send a legitimate looking email to one of your employees and invite them to log into their account via a link in the email to update their information, pay a bill, or other…. The hacker only has to wait for the unsuspecting employee to enter their username and password. Once in possession of valid credentials, the attacker will be able to connect to your VPN as a legitimate user, gain access to your network, steal information or cause other types of damage such as deploying ransomware.

Two-factor authentication and account security illustration

How 2FA two-factor authentication secures your VPN network

Two-factor authentication (2FA) reduces the risk that hackers can access your network using these stolen or compromised credentials. 2FA requires users to validate their identity by presenting a second security factor in addition to their password. When connecting to a corporate network, users must first enter their computer or VPN credentials, followed by a time-based one-time password (TOTP). This TOTP (usually a 6 digit numeric code) is displayed on users mobile phone in an application called an authenticator. Google Authenticator and Microsoft Authenticator are 2 popular and free apps compatible with both iPhone and Android devices.

2FA makes it extremely difficult to impersonate a user without having access to this second factor. This means that even if hackers were to steal all of your employees’ usernames and passwords, they still wouldn’t be able to access your VPN because they don’t have the 2FA code generated in the authenticator app.

How can I enable 2FA for my company’s VPN?

Every firewall and network is a little different and thus the configuration can vary dramatically. If you are interested in securing your network with 2FA please reach out to TMD Technology Services to assist you in determining the best path forward.

Aside from your VPN we highly recommend using 2FA on all your important accounts including email, banking, website and social media.

Stay safe while video conferencing

Video conferencing and remote meeting technology

If you are one of the millions of people that has been video conferencing during the COVID19 social distancing efforts it’s important for you to use some basic safety rules as you continue. I know it’s nice to see your team and/or family as if everyone was in the same room but we want to make sure it’s friendly faces and not strangers in our meetings.  Let’s review some basic video conferencing safety tips:

Use passwords and/or unique ID numbers for each meeting. If the conferencing service gives you these features, enable them for each meeting you host. If you’re not the host, ask whoever it is to do it. Other tools may be available to limit access to your video conference, like the ability to approve each participant before joining. Consider enabling those, too.

Keep your video conferencing software up to date. Many video conferencing companies are updating their software as they learn about vulnerabilities, so it’s important to have those patches and fixes. But, you should only accept updates directly from the service’s website. This is true, too, if you need to download a video conferencing app. You should only download it directly from the service’s website or a platform’s app store. Other basic security precautions should also be considered while working from home. Ensure your systems are up-to-date and protected at minimum with a reputable Antivirus.

Don’t open unexpected video conference invitations. Hackers are sending emails mimicking video conferencing invitations. Those emails may have links that download malware on your computer or device. If you’re not expecting a video conference invitation, check first with the host separately. If you’re the host, tell the participants in advance that you’ll be sending the link. Keep your eyes open and learn how to spot a phishy email.

Protect your privacy. Your camera and microphone may be on by default when you join a video conference, so check the settings in advance to learn how to mute yourself or turn off your camera if you need to. Also, keep in mind that your video conference may be recorded, so it’s best to avoid sharing private information via video conference. It’s also a good idea to review the service’s privacy policies to understand how your information will be handled.

Are you using telehealth conferencing? If you’re conferencing remotely with a health care provider, ask about dedicated telehealth conferencing services that can include more safeguards to keep information private.  If you are a healthcare provider and have questions on setting up a secure compliant option, we can help.

Do you need help using video conferencing services as part of your business operations? Call us today. (561) 404-9251

Call Today

How To Make Your Business Hurricane Ready

hurricane prep for business

Employers and business owners should consider the impact a hurricane could have on their facilities and their relationships with customers, their own employees and their bottom line.

Through continuity planning, businesses can assess how the company functions, both internally and externally, to determine which staff, materials, procedures and equipment are absolutely necessary to keep the business operating. Taking small steps now could help ensure business continuity and employee preparedness.

General Business Preparedness Tips

  • Anticipate water, electricity, telecommunications and other utility disruptions. Speak with service providers and identify backup options.
  •  Make sure your facilities are in working order and meet local hurricane building code specifications.
  • Develop a preparedness program to help identify ways to protect facilities, physical assets and electronic information. Be sure to engage people with disabilities and access and functional needs in your emergency planning.
  • Create a communications plan to keep in contact with customers, suppliers and employees during and after a storm. Be prepared to provide employees with information on when, if and how to report to work following an emergency. Consider those instances where telecommuting would be an option.
  • Determine what parts of your business need to be operational as soon as possible and plan how to resume those operations.
  • Check insurance policies to ensure you have enough damage coverage. Additional business disruption insurance could help cover loss of income after a storm.
  • Go to FEMA’s Map Service Center, enter your address and choose “Interactive Map” to see your flood zone. Speak to your insurance agent about how to protect your home and/or business with flood insurance.
  • Keep copies of important records such as building plans, insurance policies, employee contact information, bank account, computer backups and other priority documents in a waterproof container. Store a second set of records at an off-site location.
  • Develop professional relationships with more than one company in case your primary contractor cannot service your needs.
  • Identify and prepare for any support your employees, clients and communities may need.
  • Businesses interested in joining the National Business Emergency Operations Center to share information and situational awareness during hurricane response activities should contact fema-privatesector-4339-pr@fema.dhs.gov for additional information.
  • Stay informed by listening to local officials.
  • Download the FEMA App at fema.gov/mobile-app to receive severe weather alerts, safety tips and much more. Stay updated with weather-related alerts from the U.S. National Weather Service.
  • Business continuity planning can help your business keep moving forward and recover faster from any disruption. Businesses interested in participating in FEMA’s Continuity of Operations workshops (COOP), may email their request to fema-privatesector-4339-pr@fema.dhs.gov. COOP is a United States federal government initiative that ensures state/federal agencies are able to continue performance of essential functions under a broad range of circumstances. For more information on Puerto Rico’s recovery and hurricane business preparedness, visit www.ready.gov/business