: 网络安全关乎你的钱袋子！保护好你的账号密码，小心钓鱼邮件和诈骗短信，定期检查银行账单，安装靠谱的安全软件，别在公共网络上进行敏感操作。
Okay, here's that cybersecurity advice, re-written in a more conversational tone and streamlined for clarity:
Hey everyone, cybersecurity is super important for your financial health, but it doesn't get talked about enough. I'm not going to pretend there's one perfect way to do this, but here's what I've learned. Keep in mind, this is mostly to keep everyday hackers out, not some super-targeted attack.
Basically, you need to prevent getting hacked in the first place, and monitor things so you know *if* you get hacked. A common way hackers get in is through website data breaches. They steal your info, like passwords or credit card details, and then use it against you. You can check if your email's been compromised. But honestly, assume your info is already out there – that's the safest way to think.
**Passwords:**
The big problem? People reuse the same passwords *everywhere*. You need a unique, strong password for *every* site. Since remembering those is impossible, use a password manager like Lastpass. It'll create and store those passwords for you. The *only* passwords you should memorize are for Lastpass itself, your email(s), and your computer. What if Lastpass gets hacked? Don't worry, your data is generally safe because they don't hold the key to decrypt it, you do (your main password). Experts agree that using a password manager is safer than not using one, *even* with potential risks. Just do it.
**Two-Factor Authentication (2FA):**
2FA makes it way harder for someone to hack your account if they only have your password. But the usual 2FA methods (email, text) can be tricked. Scammers might call pretending to be your bank and get you to read them the code sent to your phone, then use it to steal your money. Or, they could do a "SIM swap," convincing your phone company to switch your number to their phone.
The best solution? Security keys, like Yubikeys or Google's Titan keys. These are physical devices that generate a code. They work with Google, Facebook, Vanguard, Reddit, Lastpass, and tons more. Unfortunately, a lot of banks don't support them yet. Security keys are super secure, as someone needs to physically steal the key. Get two, in case you lose one! If you have Lastpass Premium you can use these security keys for extra security.
**Protecting the "Root":**
"Root" access means access to *everything.* In this case, think of your email as "root" because you can usually reset passwords from there. I suggest using Gmail with their Advanced Protection Program and security keys. This makes your email almost impossible to hack. If you lose *both* keys, you'll have to wait a few days for Google to verify you. The great part about security keys is that even if a hacker gets into your email, they *still* can't bypass the security key 2FA on other accounts.
I also recommend having *two* email addresses: one public, one private. Use the public one for social media, newsletters, job applications, etc. The private one *only* for financial accounts (banks, brokerages, credit cards). Never give it out. This makes it way harder for someone to guess your financial email. Ideally, use a separate, cheap computer only for your financial stuff, but that's getting pretty extreme. Both Gmail accounts should have unique, strong passwords *that you memorize*, not store in a password manager.
**Protecting Everything Else:**
For all other accounts, use your password manager for a strong password and turn on 2FA (security key if possible). You never know which account might leak info that helps a hacker. Even something like your college account might have tax forms with your social security number.
**Financial Information:**
Protecting your SSN is almost impossible today. If you've used credit, it's probably out there. If you don't need to use your credit soon, freeze it with all the major credit bureaus. Also, set up credit monitoring so you know if someone opens an account in your name. It's a shame, but there's not much you can do to prevent your SSN from being compromised.
For credit cards, *always* use credit cards over debit cards. It's easier to dispute fraudulent credit card charges. Apps like Apple/Google Pay are even better because they use a one-time code that can't be reused if stolen. Ignore the hype about RFID-blocking wallets – there's never been a confirmed case of someone stealing card info by scanning it in public.
The most important thing? Monitoring. Set up text alerts for *every* credit card transaction. This helps you spot fraud instantly. Also, see if your bank lets you set up a challenge/response for phone calls. They might have to give you a code to prove they're your bank, or vice versa. This stops social engineers from tricking you or your bank. But be careful with security questions, a lot of them can be easily found on social media.
**General Device Security:**
Lock your phone with a fingerprint, passcode, or pattern. Do the same for your financial apps, so someone can't access them if they steal your unlocked phone. Only install apps from trusted sources.
Chromebooks are the safest computers, period. If you don't need a laptop for gaming or video editing, get a Chromebook. Macs aren't necessarily more secure than Windows, but hackers target them less because they're less common. The sketchier stuff you do online, the more likely you are to get hacked. Regular browsing is usually safe. Adult sites or illegal streaming sites can have malicious pop-ups or ads. Torrenting is more dangerous. The dark web is even worse. If you want to do risky stuff online, use a separate, cheap Chromebook *only* for your finances, and don't access those accounts from any other device. Is saving $20 on a video game worth losing thousands?
If you're not using a Chromebook, Bitdefender is a decent antivirus option. I'd avoid security software (like Kaspersky) or devices (like Huawei) from Russian or Chinese companies. They're known to have security vulnerabilities.
Public Wi-Fi is risky. HTTPS helps, but there are still vulnerabilities. A VPN *might* help, but most free VPNs are terrible.
**Action Plan (Simplified):**
1. Get two security keys (Yubico or similar).
2. Set up a public *and* private Gmail account. Keep the private one secret.
3. Turn on Advanced Protection in both Gmail accounts and link them to your security keys.
4. Get a password manager like Lastpass. If you get Lastpass Premium (recommended), add your security keys for authentication.
5. Generate new passwords using your password manager for all accounts *except* your email, computer, and password manager itself.
6. Associate all financial accounts (credit cards, banks, brokerages) with your *private* email.
7. Turn on 2FA (with security keys where possible) on *all* accounts, plus login alerts.
8. Turn on text/email alerts for any credit card charges or bank transactions, and credit changes.
9. Lock your phone and your financial apps with a password or other method.
10. (Optional) Freeze your credit.
11. (Optional) Get a cheap Chromebook just for financial transactions.
12. (Optional) Encrypt your phone and hard drives.
This might sound like a lot, but using a password manager with security keys, 2FA, and Gmail's Advanced Protection is the best way to stay safe online. Monitor your accounts, SSN, and credit cards so you know if anything happens. The goal isn't to be unhackable, but to be a difficult target that hackers will just ignore. Nothing will ruin your finances faster than a good hacker!
Regarding
As a result, I strongly recommend that if you want to engage in unsafe behavior (i.e. torrenting) on the internet, at least keep a separate $200 Chromebook only for all your finances, and don’t access those accounts from any other device.
I'd argue that with that logic, you shouldn't even be putting that chromebook on the same local network as your other devices. However, VLANs or separate internet pipes aren't exactly simple or cost effective.
One thing you could do though would be to log in to your modem, change the admin password to something strong, disable the wireless features (if it has it), then (if has at least 2 Ethernet ports on it), connect 2 wireless routers, one (can be a super cheap one) for your chromebook with a strong WPA2-AES or better password and its own unique/random SSID (this might be the only time disabling broadcast could be beneficial, interestingly enough), and the other for everything else (still use a strong WPA2+ password, and change the default passwords on both routers to something strong and different from each other, the modem, and anything/everything else). If you only have 1 Ethernet on the back of the modem, a cheap router can easily give you more ports to plug the other two into.
I'll fully admit that it's maybe a bit paranoid, but if you have extra/old routers lying around, could be a nice way to put them to use...
Eng
中文