You probably wouldn’t hand a stranger your wallet, share your Social Security number over the phone, or leave your front door unlocked when you leave for the day. But online, many of us take risks with our personal information that we’d never consider in real life and often without realizing it.
The good news is that protecting your personal information doesn’t require a cybersecurity degree (but it’s great if you have one). It mostly requires awareness and a few simple habits to keep your digital fingerprint protected.
🔑 Guard Your Login Credentials
Your username and password are the keys to your digital life. If a cybercriminal gets hold of them, they can access your accounts, find your personal and financial details, and cause serious damage before you even know something is wrong.
Data breaches aren't always the result of sophisticated hacking. They often happen because of things like weak passwords, reused credentials, or clicking the wrong link. The simplest things you can do to protect yourself are also the most effective:
- Use unique passwords for every account. Reusing the same password across multiple sites means that one breach can unlock everything. A password manager makes this manageable. Pitt provides 1Password to students, faculty, and staff.
- Turn on multifactor authentication (MFA). MFA adds a second layer of security so that even if someone has your password, they still can't get in without that second step. Your Pitt accounts are secured with Duo multifactor authentication, so all you need to do is make sure your apps are up to date.
- Don't enter your login credentials unless you're sure a site is legitimate. Look for “https” in the web address and a padlock icon before entering any personal information. When in doubt, navigate directly to the site rather than clicking a link in an email.
🍪 Be Aware of Data Tracking
Every time you browse the internet, you leave a trail. Websites track your activity through cookies (small pieces of data stored in your browser) and third parties can use that information to build a detailed profile about your habits, preferences, and location over time.
Not all cookies are harmful. Some are necessary for websites to function, and others simply remember your preferences so you don't have to log in every time. But others are designed to track your purchase history, search behavior, and location across the web for advertising purposes. Here's what to keep in mind:
- Pay attention to cookie prompts. Most websites are now required to ask your permission before tracking you. Take a moment to review the options rather than clicking “Accept All” by default. You can often choose to allow only essential cookies while blocking third-party tracking.
- Adjust your browser's privacy settings. Most browsers let you block third-party cookies, enable tracking protection, and control what data gets stored. It takes a few minutes to set up and can make a real difference in how much of your activity is collected.
- Read privacy policies before signing up for services. It's not the most exciting reading but knowing what an organization collects and who they share it with can help you make more informed decisions, especially for services that ask for sensitive details.
📱 Avoid Oversharing on Social Media
Social media is one of the easiest places for cybercriminals to gather information about you. You might not even realize how much information you’re giving away. Your name, workplace, birthday, hometown, and even the names of your pets can all be pieced together to answer security questions, guess passwords, or impersonate you. Next time you check your socials, keep in mind:
- Limit what you share publicly. Check your privacy settings on each platform and make sure your posts, photos, and personal details are only visible to people you trust. If you use your real name — or the same username — across multiple platforms, assume that anything public can be found and connected.
- Be skeptical of quizzes and games that ask for personal details. “Which city should you live in?” and “What's your personality type?” can be fun, but they often ask for details — like your birth year, mother's maiden name, or childhood street — that are commonly used in security questions. More often than not, the information collected isn't just for laughs.
- Think before you post about travel or routines. Sharing that you're away from home, or posting your daily schedule, gives bad actors more information than you might intend.
🛡️ You're Part of the Solution
Every person who uses technology plays a role in keeping personal and institutional information safe. Strong passwords, a second look before clicking a link, and a moment of pause before posting are small habits that add up to meaningful protection.
The threats are real and growing, but so is your ability to defend against them. Stay alert, stay informed, and don't underestimate the value of your own data.
— Pitt Digital
