5 ways to stay ‘cyber safe’ through the holidays

Passwords have long been the gold standard of security; however, they have significant security limitations. They're easy to reuse, easy to steal and hard to track, which can lead to accounts being compromised. Instead of juggling dozens of passwords, consider switching to passkeys — which let you sign in with your face, fingerprint or device — when given the option.

Passkeys take the guesswork out of staying safe. They can’t be phished, guessed or forgotten. Making the switch is simple: When a website offers “Sign in with a passkey,” choose it. It’s faster, safer and one of the easiest security steps you can take. While some websites do not yet support passkeys, adoption is steadily increasing. We encourage you to take advantage of this feature wherever it is available.

Multifactor authentication (MFA), or two-factor authentication, adds an extra layer of security to your online accounts. Basically, it means you need to use a second method to prove it's really you.

For instance, if you call your bank to ask about your account, they may send a code to your cellphone or use another verification method to confirm your identity. Your bank would never give you information without going through several steps to verify your identity.

Enroll in multifactor authentication wherever it's offered, Franzen says. It’s simple and extremely effective.

When you see an update alert on your device, it's tempting to choose "Remind me later." But did you know that many software updates are designed to fix security risks?

To make it convenient and avoid missing safety opportunities, you can turn on automatic updates in your device's security settings. That way, you won't have to worry about doing manual updates as needed.

In addition to your phone, make sure you are updating your smart TV, other smart devices, and your home internet modem and router.

When it comes to electronic communication, such as emails, texts or phone calls, it's important to have a skeptical mindset. Scammers often try to make you feel rushed, worried or scared, so you'll act without thinking.

Watch for text messages or emails about an incoming package or that urge you to click a link to confirm. Even if you recently ordered something, double-check that the tracking number in the message matches the one from your order before clicking anything. Similarly, be cautious of phone calls from individuals who claim to be from your bank or other financial institutions and ask for your personal information.

Scammers follow seasonal trends. During tax season, they may try to trick you with fake tax-related schemes. During the holidays, they might try to tug at your heartstrings and take advantage of your gift-buying or donation excitement. So, verify the legitimacy of donation websites before you show generosity in the season of giving.