October is Cybersecurity Awareness Month.

In today’s digital world, cybersecurity isn’t just an IT concern, it’s everyone’s responsibility. Whether it’s protecting your company’s data, safeguarding customer information, or keeping our personal accounts secure, small actions make a big difference.

Cybersecurity is achievable for everyone, and we’re here to support you in building confidence and awareness around the steps you can take to protect yourself and our organization. In our latest blog, we focus on the Core 4,simple but powerful actions that everyone can take to strengthen our cybersecurity:

1. Use strong passwords and a password manager
2. Turn on multifactor authentication
3. Update your software
4. Recognize and report scams

Cybersecurity is a shared responsibility, together, we can build a stronger, more secure digital environment one small step at a time.

1) Use strong passwords and a password manager

Every password needs to be 16 characters! For top security in 2025, every password should be at least 16 characters long. It takes millions of years for hacker software to crack a 16-character password, even if it is only letters.

RECIPE FOR STRONG PASSWORD:

• Unique to the account – only use a password once!
• 16 characters or longer!
• Random mix of letters, numbers, and symbols.

Complex, random passwords are fantastic, but they need to be long.

How the heck am I supposed to remember all these long passwords? We recommend 1 simple trick: use a password manager!

High-quality password managers are the safest way to store your passwords and ensure that you use strong, unique passwords for each of your many accounts. You have a lot of passwords, but you can start small! Research your password manager options, install one you like, and start adding a few passwords at a time. The program will help you change weaker passwords and create great passwords for new accounts.

Take a few minutes today and get started -- your online safety is worth it!

2) Turn on multifactor authentication 

Not all MFA is the same! You might have noticed that there are many ways to MFA, so we ranked them.

• S (SUPERIOR) Biometrics (FaceID, fingerprint scans): Hard to fake. | Standalone MFA apps (Google Authenticator, Microsoft Authenticator, Duo): Strong encryption.
• A (EXCELLENT) Hardware MFA device: Strong, but could be stolen.
• B (GOOD) Text message codes or links: Vulnerable to SIM swap scams. | Email codes or links: Depends on security of your email account.
• C (AVERAGE) Security questions: Answers can be guessed.
• F (FAIL) No MFA: Any form of MFA is stronger than no MFA.

Enable MFA on all your accounts. It adds a little more time, but it’s worth it. You supercharge your protection when you think beyond the password!

3) Update your software

Don’t click remind me later.

Software updates on your computer, phone, and other devices can seem inconvenient, but they are helpful and keep you safe.

Updates often include:

• Patches to flaws found in their programming.
• Security improvements to fend off new threats.
• New features, including security features (like VPNs and password managers).

IF YOU’RE ALERTED THAT A NEW UPDATE IS AVAILABLE, LET’S UPDATE RIGHT NOW.

• It usually only requires a few minutes.
• Your browser tabs will reload (usually).
• It’s one of the easiest ways to stay safe online.

4) Recognize and report scams

Scammers manipulate your emotions.

Is an email, text, or DM making you feel sudden, urgent emotions?

Examples:

• “You won our sweepstakes!”
• “You’re under arrest!”
• “I’ve been recording you.”

These emotions can be positive:

• "You won an expensive cooler but you have to respond fast to claim it!"
• "An attractive stranger wants to be your friend and strike up a convo!"
• "You’re owed money from a forgotten invoice!"

Messages and emails can also be scary:

• "You owe back taxes and we’re coming to collect unless you call!"
• "I’m your boss and I’m texting you from an unknown number, but I need to know your bank account info ASAP!"
• "You’ve been hacked and you need to pay up."

All of these are symptoms of scams and phishing! Is a message pushing you to click before you think?

• Is it causing strong feelings?
• Is it unexpected?
• Is it requesting you take action, like making a payment?

This goes for emails, texts, DMs, and now even calls because of artificial intelligence platforms.

1. Don’t click, don't even click Unsubscribe.
2. Report emails as phishing if possible.
3. Delete.
4. Block the contact info from scammy phone numbers.

DON’T RESPOND TO WRONG NUMBERS!

Another common scam we see now is a slower burn. It often starts with a “mistaken text” from a number you don’t recognize:

• “Hey how r u.”
• “Do you have any dentist recommendations?”
• “It was wonderful running into you last night.”

These are ways for a scammer to start a conversation that eventually leads to a scam. Don’t respond. Don’t

even text back “wrong number.” Block and report! It’s not rude. If someone really did text you by accident, they’ll figure it out.

For more information on how to protect yourself and loved ones from scammers, visit the National Cybersecurity Alliance.