How to Stay Safe Online

Introduction:
​With an increasing number of our activities moving online, it's important to be vigilant about maintaining internet safety and privacy. This guide will provide detailed steps to help ensure you stay secure while using various devices and platforms, including Android, iPhone, computers, iPads, tablets, and the internet as a whole. 

1. Creating and Remembering Strong Passwords
Keeping your online accounts safe begins with using strong and unique passwords for each of them. A solid password acts as a first line of defense against any unauthorized access. Let's break this down into easy steps:
Steps for Crafting a Strong Password:

1. Length is Strength: Aim for at least 12 characters. The longer, the better!
2. Mix it Up: Use a combination of:
   1. Uppercase letters (A-Z)
   2. Lowercase letters (a-z)
   3. Numbers (0-9)
   4. Special characters (!, @, #, $, etc.)
3. Avoid the Obvious: Names of family members, pets, or birthdays can be easily guessed. Try to steer clear of these in your passwords.
4. Turn Phrases into Passwords: Think of a favorite quote or song lyric and convert it into a password. For instance, "Life is what you make it" can become "L!f3*Wh@tY0uMak3!".

Remembering Your Passwords:

• Traditional method: Write them down in a dedicated password notebook. Just like you'd store an address book, keep this password book in a safe and secure place at home. And remember, it's essential not to lose it!
• Go Digital: Password managers like LastPass, 1Password, or Bitwarden can securely store and manage your passwords. They'll even generate strong ones for you! All you'd need to remember is one master password.

2. Handling Verification Codes When Logging in on Your Phone
From time to time, websites and apps enhance security by sending a verification code to your mobile number. While this two-step authentication process is excellent for security, it can be a bit tricky if you're logging in directly from your phone. Here's a step-by-step guide to make it easier:
A. Understanding the Process:
Most apps or websites will send a verification code via text to the phone number associated with your account. You need to retrieve this code and enter it on the site or app where you're logging in.
B. Preparing to Retrieve the Code:

• Before you start the login process, close all unnecessary apps. This makes navigating between your messaging app and the app/website requiring verification smoother.
• Ensure you have a stable internet connection. This ensures that there's no delay in receiving the code.

C. Retrieving the Verification Code:

• Once you've requested the code, open your messaging app where you usually receive texts.
• Find and open the message containing the verification code. It's typically a short series of numbers.
• Memorize the code or write it down quickly. If your phone allows, you can also copy the code to paste it later.  

D. Putting in the Verification Code:

• Navigate back to the app or browser window you minimized earlier.
• Enter the verification code in the provided field. 

TIPS AND TRICKS:

• Quick Switching: On most smartphones, you can switch between apps quickly. For instance, on iPhones, you can swipe left or right on the bottom edge. On Android, the 'Recent' button (often a square or two overlapping rectangles) allows quick app switching.
• Copying and Pasting: If your phone allows, try copying the verification code from your messages and then pasting it directly into the verification field. To copy, press your finger on the code. One of the options that will appear is "copy". Tap on that. When you go to enter the code, the option "paste" will appear when you touch the screen. Choose paste. This method is not only quicker but also reduces the chances of making an error. Practice it within Messages or in Notes. 
• Avoid Delays: Enter the code promptly. These codes often have a short expiration time for security reasons.

​
E. What if You Don't Receive the Code?

• Wait for a few minutes. Sometimes there can be short delays in receiving texts.
• Check to ensure you have a good cellular signal.
• If you still haven't received it, look for an option like "Resend code" or "Send code again" and tap on it.

​
3. Secure Browsing Habits
Always ensure that the websites you visit are secure. Secure websites start with "https://" rather than "http://". The "s" stands for secure and means the site encrypts any data you input. This is particularly important when entering sensitive information like credit card details or passwords.
Be cautious about clicking on links from emails or messages, particularly if they're unsolicited. These could be phishing attempts, where scammers try to trick you into providing personal information or downloading malware. Always double-check the sender's details and hover over the link to see the actual URL before clicking. 

FAQs for Safe Browsing Habits

• Q: How can I clear my browsing history?
  • A: This varies by browser, but typically you can find this option in the 'Settings' or 'Options' menu of your browser, under 'Privacy' or 'History'.
• Q: What if a trusted friend sends me a link?
  • A: Even if a trusted friend sends a link, be cautious. Their account might have been compromised. Always verify with them through another method before clicking.

​
4. Recognizing and Avoiding Scams
Be aware of common scams, such as emails or messages claiming you've won a prize, notifications about a problem with your bank account, or requests for help from a stranger. Always be skeptical of unsolicited communication and never provide personal or financial information without confirming the source is legitimate.

Scammers can also mimic phone numbers or email addresses, so even if it appears to be from a trusted contact or institution, remain vigilant. If in doubt, don't respond. Ask a trusted person to review the message or contact the purported sender directly through verified contact methods to confirm.

5. Two-Factor Authentication (2FA)
Understanding Two-Factor Authentication (2FA): Two-factor authentication (2FA) is a method of confirming a user's identity by using two different pieces of evidence (factors). Typically, these factors include:

1. Something you know: This could be a password or a PIN.
2. Something you have: This could be a mobile phone or a hardware token.

So, in essence, even if someone guesses or steals your password (the thing you know), they would also need to have access to your mobile phone or hardware token (the thing you have) to access your account.

Setting Up Two-Factor Authentication (2FA): The process of setting up 2FA can slightly differ depending on the platform (e.g., Google, Apple, Facebook). Still, the overall steps remain similar. Here's a general guide:
Steps:

1. Visit the security settings of your online account. Look for an option like "Two-Factor Authentication," "Two-Step Verification," or "Extra security options."
2. Follow the prompts to turn on 2FA. You'll likely be asked to provide a phone number.
3. You'll receive a text message or a call with a verification code on the provided phone number. Enter this code on the prompted screen.
4. Confirm the setup. Some services will provide you with backup codes. Write these down and keep them in a safe place. They can be used to access your account if you can't use your phone.

Using Two-Factor Authentication (2FA) on Your Phone: Sometimes you might need to verify your identity on the same device (like a phone or tablet) where you received the 2FA code. Here's how to do it:
Steps:

1. When you try to log in to your account, you'll be asked to enter your password first.
2. Then, a text message with the 2FA code will be sent to your phone.
3. To view this code, you need to switch from the login screen to your messaging app. On an iPhone or iPad, you can do this by swiping up from the bottom of the screen. On an Android device, you might need to tap the square or recent apps button
4. Once you're in your messaging app, write down the 2FA code.
5. Switch back to your login screen and enter the 2FA code. ​

Two-Factor Authentication Questions and Answers

• Q: What happens if I lose my phone which receives 2FA codes?
  • A: Most services allow you to add backup methods for 2FA. You can add an alternate phone number or use an app like Google Authenticator that generates codes even if your phone is offline.
• Q: Is 2FA always necessary?
  • A: Not always, but it’s highly recommended for important accounts, like email, bank, or social media accounts.