In an era where smartphones are almost extensions of our very beings, securing them against cyber threats is crucial. The United States National Security Agency has in recent days come out with a set of advisories that are currently aiding smartphone users operating on both Android and iOS to be adequately protected from a plethora of cyber risks, up to and including zero-click exploitations and spear-phishing attacks.
One rather astonishingly simple but effective set of advice I took from NSA was the recommendation to turn your phone off then turn it back on at least one time a week. This simple measure can prevent some types of malware and zero-click exploits thus, those in which no user interaction is required to infect a device. The agency states, “Do not have sensitive conversations in the vicinity of mobile devices not configured to handle secure voice.” Rebooting will erase the memory of your device temporarily, which makes it terribly persistent for some classes of malware.
Rebooting is one of many practices recommended by the NSA that many would not think of taking for granted. They also say that you should not use public USB charging stations. They say you should only plug your device into its proprietary charging cords. Both of those practices in some cases might put your device at risk of spyware.
Updating your device’s software is another key pillar of mobile security. Routine updates typically include patches for recently discovered vulnerabilities. “Users of mobile devices desire to take full advantage of the features available on those devices, but many of the features provide convenience and capability but sacrifice security,” says the NSA. Keeping your operating system and apps up-to-date can plug these security holes.
Public WiFi networks are another area of concern. Although it adds convenience to connecting, especially to free WiFi in coffee shops or airports, the connection can expose you to cybersecurity threats. Using such WiFi hotspots, cybercriminals could develop a fake hotspot in order to make you connect to it. The NSA advises using your cellular network for important activities, such as online banking. If you have to, make sure your connections are secure and maybe use a Virtual Private Network for added security if using public WiFi.
Another common feature is Bluetooth. NSA recommends turning off Bluetooth when not is use to minimize risks of unsanctioned access. It may be a minor hassle, but it may redefine your security space.
Where it comes to sensitive conversations, the NSA encourages that personal devices shouldn’t be used. “Don’t have sensitive conversations in the vicinity of mobile devices not configured to handle secure voice,” the agency advises. The guidance seems a little strong, but if you consider just how easily conversations might be overheard, then it’s possibly worth taking heed of.
And one of the other important defenses is provided by passwords. A strong, unique password is paramount to each one of your accounts. The NSA recommends at least a six-digit PIN on your phone’s lock screen and that you configure your device to wipe itself after 10 failed attempts to guess the passcode. As Oliver Page, CEO of cybersecurity firm Cybernut, shares, “generate strong, unique passwords for each account using a password manager,” this greatly reduces the possibility of using common phrases and words from dictionaries and reusing the same passwords for different accounts.
Indeed, the FCC is also joining this chorus of warnings against tampering with security settings in order to release or root your smart phone, stating that it undermines built-in security enhancements. “Tampering with your phone’s factory settings, jailbreaking, or rooting your phone undermines the built-in security features offered by your wireless service and smartphone while making it more susceptible to an attack,” warns the FCC.
Aside from that, be able to understand app permissions. Though modern mobile operating systems have made it much clearer what exactly you’re giving access to, being careful certainly doesn’t hurt. “You should be cautious about granting applications access to personal information on your phone or otherwise letting the application have access to perform functions on your phone,” advises the FCC.
Such a facility can actually be a lifesaver if your phone is unfortunately lost or stolen. You should ensure that this feature is on, and if necessary, you can wipe your data. Apart from this facility, before disposing of or selling your device, all of the data must always be wiped off the device and set to factory settings.
Phishing and spear phishing are still common threats. Attackers may lurk within the fa ç ade of real emails, but they may conceal malevolent links or attachments. NSA cautions that one should be wary even if the sender seems to be a legitimate one. “Falling for social engineering tactics, like responding to unsolicited emails requesting sensitive information, can result in account compromise and identity theft,” says Oliver Page. Sift through the sender address in the emails, check on URLs in websites, and just be generally skeptical of mail content which could have easily been manipulated.
Individual security measures won’t keep you safe, but together, they might reduce your risk. From rebooting your phone once every week or so to updating software and apps, or even understanding app permissions, every little action starts to add up toward a more secure digital life.