- Download and install software updates. Turn on automatic updating such as the Windows automatic update feature. Carefully read all disclosures, including the license agreement and privacy statement, before installing anything on your computer.
- Install anti-virus software, and download the most updated virus definitions, engines and software to ensure your virus program remains effective. UBC faculty, staff and students can get a free version of Sophos Anti-Virus software from UBC Software Downloads. Always scan files downloaded for viruses before using them.
- Install a firewall such as the Windows Firewall which comes with Windows XP SP 2, or the built-in firewalls in MacOS X and Linux.
- Do not use illegal or "pirated" software, and avoid disreputable web sites.
- Only open email attachments from someone you know and trust.
- Keep your user IDs and passwords confidential--do not share them with anyone. In addition, do not allow anyone to use your computer or leave it unattended for any period of time while logged on.
- Create strong passwords. Use 8 characters or more and create different passwords for each system. Change your passwords every three months for maximum security. Check out the password security section for tips on how to create an effective password. Memorize your passwords --do not write them down or store them where others might gain access to them. Consider installing a password management application such as KeePass (http://keepass.info/) to create unique passwords for all of your needs and secure that list of passwords with a common password.
- Keep your web browser current with vendor supplied patches and updates, and enable strong security and privacy settings including the use of a pop-up blocker.
- Set up your email filters to delete or file spam messages. You should delete spam messages unopened (Do not respond to spam, or follow any of the instructions in the email to "unsubscribe or to call a phone number). Visit the email security section for more details on spam and how to avoid it.
- Back up your data on a regular basis. If you are the victim of a security incident, the only guaranteed way to repair your computer is to erase and re-install your whole machine.
