Passwords

Using Public Wireless Networks (WiFi) Can Put You at Risk For an Attack

Posted on July 16, 2015 by Strong Solutions

Posted in Blog

The signs seem to be everywhere from parking garages to coffee shops: “Free Wireless Hotspot!” The temptation to pull out your phone or laptop and quickly check your work e-mail can be irresistible. However, computer experts warn that free wireless access can end up costing you more than you’d like.

Why Is Using Public WiFi Dangerous?

Wireless at your home or office is usually encrypted (which why you can see your neighbor’s network, but not log on without a password). Public WiFi networks lack encryption, so anyone in range can see webpages you are visiting and, more problematically, information that you’re typing into unencrypted forms. The WiFi hotspot itself can also be compromised by an attacker. Hackers can position themselves as a middle man between you and the network so that when you think you’re sending information to your secure banking website, you’re actually sending it to “look-alike links” created by an attacker. WiFi spots can also be easy places to distribute malware through file sharing and pop-up ads.

How Can I Protect Myself While Using Public WiFi?

In a perfect world, we would never use public WiFi and only connect through the Internet through our secure private connections. If you’re going to use hotspots, go to the “System Preferences” menu in your Mac and uncheck all the boxes under “Sharing.” If you’re simply working on a document, turn off the WiFi to avoid any accidental communication. If you find that you must conduct business through a public network, you would be wise to invest in a virtual private network (VPN) connection to make sure your data remains encrypted.

For questions about wireless solutions, VPNs or for help dealing with potential problems, please contact Strong Solutions.

Why Your Employee’s Mobile Devices Need Security Protection and Proactive Maintenance, Just Like Your Office Network Computers Do

Posted on June 25, 2015 by Strong Solutions

Posted in Blog

Sometimes small business owners and managers don’t realize they need to secure the mobile phones their employees are using and ensure the devices meet certain standards. However, this is essential in 2015, even if you don’t work in an industry like healthcare, finance, the government or the military.

If your employees have already started using their mobile devices for company work and to access the company network, employers have two options to secure these devices:

The somewhat tricky and time-consuming option – You must create a company mobile device compliance policy and require all of your employees to adhere to it. You would then have all your employees turn in their smartphones, personal laptops, tablets, (and any other mobile devices they’re using for work related tasks); and have your IT services team go through all their devices one by one and:

Check the devices for rogue malware,
Install security software,
Install device monitoring software,
Install security software to protect devices while employees are carrying them in public areas,
Authenticate the devices so the company network recognizes them as a safe devices,
Install remote software for automatic file destruction and device shutdown for lost or stolen devices,
Ensure that all apps the employee has installed, (and will install), on the device are compliant with company policy, and

Install software that will separate work use from home use, giving each set of tasks their own secure environment.

There’s still a chance that some employees will have to get new devices if they have secondhand devices that your IT team can’t properly secure. They will also have to agree not to use these insecure devices for any work-related tasks. In some cases, they might have to agree not to use the devices in the office or in the areas surrounding the building at all.

Proactive maintenance – Your IT team will also have to check devices regularly to ensure that employees haven’t downloaded any unapproved apps or malware. Your IT team might also have to update device software regularly and take other security measures.

The quicker, though more expensive option – You would still design a company mobile security compliance policy and require your employees to adhere to it. However, you would also provide your employees with completely secured devices for them to use for work-related tasks. Your IT team would still have to check devices for malware and unapproved apps regularly, and also perform regular device software updates. Part of your policy would entail things like:

Employees not using their personal devices at work or for work related tasks,
Employees not using their personal devices on company WiFi or to access the company network for any reason,
Employees not using personal devices in the office or in the areas surrounding the building, and things like this, etc.

Contact us to learn more! We’re here to help.

1Password for Mac is the One Password Manager For You

Posted on June 18, 2015 by Strong Solutions

Posted in Blog

We know. Keeping all those website passwords straight is a pain. Many avoid that pain by using the same weak and lame password for every website — trustNo1 is 25 on the list of dumb passwords, according to one piece on Cnet.com. Topping the list is 123456 with password coming in a close second.

You know you’re at risk when you use weak or repetitive passwords, but what is the alternative? What about a password like qry86jheYgcfFQ? Also, what if you could have a different and similarly complex password for every website you log on to — AND without keeping a notebook or text file to keep them up to date? Your need a password manager application, and it should work with any web browser.

1Password by AgileBits is your ticket to password tracking Nirvana. Download the Mac version for the App Store and let the software take over the headache of password security and administration. When you load the program you are asked to enter a master password. Hint: Do NOT use 123456. Try using a sentence that is easy for you to remember, but hard for someone else to crack. Write it down and put it in a safe place. Another hint: NOT on a sticky note posted to your computer screen.

That one master password will open the 1Password application. You begin storing passwords after you allow 1Password to attach itself as a browser extension. The Mac default browser is Safari, but you can also use Firefox, Chrome and Opera.

When the 1Password extension is up and running, each time you log into a website, you must enter the current password, whereupon 1Password gives you the opportunity to either keep the existing password or generate a new, more secure string of characters. You copy and paste the new password into the website’s password box, and 1Password does the rest.

As your password inventory accumulates, the 1Password application, which can only be opened with your master password, serves as your inventory list of not only passwords, but also a place to record credit card, drivers license, passport and e-mail account data in one convenient place. It even has a place for storing confidential notes.

So 1Password is the ideal tool for you to securely store your personal information and manage website login credentials using far better passwords on any web browser. You can also synchronize your password list on your iPhone, or iPad by placing the 1Password vault file on iCloud or DropBox.