Privacy mistakes: 9 things you should never do online

File photo. (REUTERS/Eduardo Munoz)

We all make silly mistakes. We answer robocalls, click links we should have double-checked first, and open spam email or worse, rogue attachments.

Best case scenario, nothing too bad happens. Arming your tech with the right safeguards can go a long way. Check out this comparison of the most popular antivirus software.

But criminals can break through your defenses and get at the information you didn’t even realize was out there for the taking. Tap or click for steps to check your secret “health credit report” score that determines your eligibility for insurance and coverage for signs of fraud.

That’s why I put together this list of 10 things you should never do online, along with do-it-yourself security tips, as reminders that we have to be vigilant with every click we make.

1. Don’t fall for fake info

If you get an email to participate in a survey or for a money-making opportunity you didn’t sign up for, don’t click the links. The same goes for work-from-home gigs that seem just a little too good to be true. Here are some common job scam red flags to watch for if you’re looking to make some extras cash.

You need to do some digging. Open a browser window and search for the company name plus the word “scam.” Chances are if it is a scam, someone else has reported it.

If the email comes from what seems to be a real person, do a quick Google search (or use one of these alternatives to Google) for the person’s name plus the company name. If you have a LinkedIn account, go there and search for the person and company, too.

That’s a smart way to, at the very least, confirm the person emailing you works for the company they claim to. Check that the person posts regularly and is connected to others; those are signs the profile is real and not just a front.

DIY advice: Subscribe to my free fraud and security alert newsletters, which go out as soon as we learn about a hack, scam or security breach. Bookmark the FTC’s Consumer Alert page. It’s updated regularly.

2. Don’t skip 2-factor authentication

Use two-factor authentication any time a website or app offers it. Yes, it involves a couple of extra steps, but the purpose is to protect you if someone tries to access your accounts from a device the website doesn’t recognize.

Anyone who uses Facebook is already familiar with 2FA. If you use a work, public, friend or family’s computer or new device to sign in, Facebook requires you to verify that it’s really you, using 2FA.

This is a no-brainer for any financial account, and I recommend it for your email and any service that has your payment info, too.

DIY advice: Use a 2FA authenticator app to protect your online accounts and cellphone number.

3. Don’t reuse passwords or password formulas

You’d never use a password like “123456,” “abcd1234,” or “password,” right? If you don’t use a password manager, how do you remember them all? Not by writing them down or storing them on your computer, I hope.

Stay away from password formulas that are easy to hack, like “website+birthdate,” as in google0917, adobe017 or facebook0917. You can see how that’d be easy to crack.

DIY advice: Use a safe and secure password manager. These are worth the few bucks a month you’ll have to pay. You can also try a free password generator, which gives you crazy, impossible-to-hack-or-memorize passwords like p6Us9temWz#B. Or let your browser do the work for you.

YOUR SECRET WEAPON: The tech world changes by the minute. Keep up with The Current, my smart, funny (and ad-free) newsletter. Tap or click here to try it.

4. Don’t use public Wi-Fi

Saying “Don’t use public Wi-Fi” is like saying, “Don’t go out in public.” It’s nearly impossible. But you really should be careful about what you do on a public network. Save the banking for a trusted network, and be extra careful about the sites you visit and the links you click. Your best bet, though, is to use a VPN.

DIY advice: If you have to use public Wi-Fi, practice safe surfing. A VPN (virtual private network), which creates an encrypted connection through a secure server that allows you to browse the internet.

5. Don’t fight on social media

Time and time again, research shows social media makes us depressed, angry and isolated. During the pandemic, we believed social media would bring us together, but really, we got sucked into scrolling through endless timelines, comments and arguments.

DIY advice: If you can’t break up with Facebook, Twitter, Instagram or whatever channel monopolizes your time and incites the scrapper in you, use common sense. Don’t post anything

that you wouldn’t want your grandmother to see or that could come back and haunt you when you look for a job … or that some website would post as an example of what not to do online.

6. Don’t post sensitive photos online

Speaking of not posting anything that could haunt you later, I’m talking about things that may seem innocent, like photos of your kids or grandkids.

In 20 years, will your children thank you for sharing their private lives with the world? One woman even sued her mother (and won) after she refused to take down photos of her grandchild.

Not to mention, child predators set up fake social media profiles and troll pages looking for innocent victims.

DIY advice: Change your privacy settings on Facebook, Twitter and Google so only your closest contacts can see your pictures. If you have kids at home, don’t share full names or specific locations, share only with people you actually know, check with other parents before sharing photos of their kids, and wipe out hidden data from photos.

7. Don’t post vacation photos or updates while you’re gone

Most of us are sticking close to home this summer, but if you do venture out for a road trip or even just a day away, think twice before you post.

It’s so tempting to share in-the-moment updates and pictures while you’re on vacation. Think of these as public announcements that say, “I’m out of town. My house is empty. Go burglarize me.” Wait until you get back home and post your photos after the fact.

DIY advice: If you’ve got a home security system, you can monitor your property and get alerts when you are away. Thieves are less likely to break into homes that are protected by alarms, cameras and motion sensors. Barring that, just wait to post until you get home.

8. Ditch Dr. Google

Let’s say you have a persistent cough. When you searched online, you diagnosed yourself with pneumonia, tuberculosis, lung cancer, heart disease, acid reflux and chronic bronchitis. After all, those conditions share similar symptoms. You’re freaked out.

Sites like WebMD, Mayo Clinic and Cleveland Clinic are packed full of good, reliable information, but that doesn’t mean they should replace your doctors.

It’s even more dangerous to use YouTube to look for medical information. Just like how conspiracy theory videos can dominate political searches on YouTube, health misinformation can climb to the top of your recommended videos and searches.

DIY advice: Leave the diagnosing to medical professionals. Use those medical reference sites to learn more about what your doctors tell you, and always consult with your doctor before beginning any medical treatment. Or consider setting up a virtual appointment. Tap or click for our guide to getting started with telemedicine.

HAVE A TECH ISSUE? Stop searching and get answers from me and other tech pros for 30 days for free. Sign up at GetKim.com, no promo code required.

9. Don’t drunk shop online

Have you ever fired up your browser after a glass of wine or two? Apparently, drunk shopping is a billion-dollar industry on Amazon. A 2019 survey showed 79% of alcohol consumers have made at least one drunk purchase. Clothing and shoes are the most common drunk purchase.

DIY advice: Set up spending alerts with your bank. Most banks will allow you to set a dollar amount and if you go over that amount, you’ll get a text message or email. That way, when you sober up in a few hours and check your messages, you’ll have time to cancel your orders. As a bonus, if someone gets hold of your credit or bank card and makes purchases, you’ll get alerts if they go over your limit.

What digital lifestyle questions do you have? Call Kim’s national radio show and tap or click here to find it on your local radio station. You can listen to or watch The Kim Komando Show on your phone, tablet, television or computer. Or tap or click here for Kim’s free podcasts.

Learn about all the latest technology on The Kim Komando Show, the nation’s largest weekend radio talk show. Kim takes calls and dispenses advice on today’s digital lifestyle, from smartphones and tablets to online privacy and data hacks. For her daily tips, free newsletters and more, visit her website at Komando.com.