Quick security recommendations for your devices

توسطSecurity in a Box

پست شده2023.10.17

Quick security recommendations for your devices

We are often asked where can one start, what are minimum steps should one consider taking in an effort to better protect their devices. Below we are sharing what we are recommending as the first, often most effective and most important items.

General

  1. Use unique and strong passwords for each account, using a password manager to safely store them.
  2. Use Two-Factor Authentication (2FA) on supported accounts. First consider using hardware tockens (see below), then using time-based one-time password (TOTP) apps/programs. Avoid using SMS for 2FA if you can.
  3. Avoid using biometrics (face ID, fingerprint scan) as an authentication method.
  4. Delete old files, documents, pictures, screenshots and chat history that you do not need on your device. Securely backup as necessary before removal.
  5. If you can, avoid installing social media apps, you can use the website with your browser.
  6. Restart your device frequently, this ensures updates are applied properly and for cases of non persisten malware, that the risk can be reduced.

2FA hardware token recommendations:

2FA TOTP recommendations:

Further reading:

Android

  1. Check that your Android is up to date and your version of Android and the device are still supported (check Samsung, Pixel, Nokia mobiles).
  2. Automatically update your apps.
  3. Enable Play protect.
  4. Review the permissions your apps have access to.
  5. Review installed apps and uninstall any unneeded/unknown ones.
  6. Ensure apps can only be installed from trusted sources.
  7. Set a long password to protect access to your device.

Further reading:

iOS/iPhone

  1. Check that your iOS and device are still supported and up to date.
  2. Automatically update your apps.
  3. Review the permissions your apps have access to.
  4. Review installed apps and uninstall any unneeded ones.
  5. Switch on the lockdown mode, which increases the difficulty in compromising your device.
  6. Set a long password to protect access to your device.

Further reading:

Windows

  1. Ensure you are using a supported version of Windows with Auto-updates enabled and any software installed via the Microsoft store is set to auto update.
  2. Ensure Windows Defender is turned on or a 3rd party Anti-virus solution.
  3. Consider using hardentools to disable some often abused features.
  4. Consider using Simplewall to monitor where you computer is connecting to.
  5. Ensure Bitlocker or Device Encryption is turned on.
  6. Ensure your computer requires a strong password to log in.
  7. Review installed programs and remove any that are no longer needed.

Further reading:

MacOS

  1. Ensure MacOS Auto-updates are enabled and that you use a supported version of MacOS.
  2. Consider using LuLu to monitor where you computer is connecting to.
  3. Ensure Filevault is enabled.
  4. Ensure your computer requires a strong password to log in.
  5. Review installed programs and uninstall any that are not needed.

Further reading:

Ubuntu Linux

  1. Ensure that your version of Ubuntu is still supported and that you are keeping it and the installed software up to date.
  2. Enable the Firewall or consider using OpenSnitch to monitor where you computer is connecting to.
  3. Ensure LUKS encryption is enabled when you install the Operating System.
  4. Ensure automatic login is disabled and your account is set up with a strong password.

Further reading: