Did someone get your password? Here’s how to prevent it from happening again
Unfortunately, hacking into someone’s web-based email account is easier than most people realize, and hackers go about it in a few different ways. Sometimes, they use a well-known method calling phishing. Some hackers guess passwords outright or use a password reset tool to create a new password without your knowledge and consent. The best way to learn how to protect your password from thieves is to understand how they steal passwords.
How Hackers Steal Passwords
Hackers frequently steal passwords using a technique called phishing — in which the hacker sends an official-looking email that directs a victim to a fake website or form. The victim enters a password on the fake site, which the hacker can then access.
When the user clicks the link and lands on the page, he enters his email address and password, probably without ever suspecting anything is amiss. When he enters the data into the form, the hacker might gets an email that contains the account info and password — along with full access to his bank account. A hacker could then log in as the victim, see his bank transactions, move money around, and maybe even write online checks.
The same concept applies to any website that uses a login, such as an email provider, credit card company, social media website, etc. If a hacker steals someone’s online backup service password, for example, she can now see every file backed up and download them to her own computer, read the victim’s secret documents, view pictures, etc.
A hacker can also gain access to someone’s account by using the website’s password reset tool. This tool is meant to help the user remember his password — but if a hacker knows the answers to the user’s secret questions, he can reset the password and then log in to the account with the new password he created.
Yet another method to hack someone’s account is to simply guess the password. If your password is based on personal details (for example, a birthday, address, or phone number) or other simple phrasing, a hacker can get right in without any hesitation and without you even knowing.
Spotting a Hack Job
What to Do
When you open a link in an email, check that the web browser resolves the link properly. If, say, a “whatever.bank.com” link changes to “somethingelse.org,” exit the page immediately.
Check that the first letters in the URL are “https.” The “s” indicates that it’s a secure site; never enter any financial details at a site that is not secure.
If you get an email with a suspicious link, type the website URL directly into the navigation bar, rather than clicking the link.
Store sensitive information like your credit card or bank details only within online accounts hosted by companies you trust.
Thank you all…