The Student Room Group

Tips to Stay Safe Online!

Hey, I'm Aura and I study Computer Science at University of Staffordshire. With Safer Internet Day coming up this February, here are some practical online safety tips I’ve picked up throughout my degree and general life. There's so many to cover so here's the overall top ones for you to know.

Accounts & passwords
-Use unique passwords for everything; password reuse is one of the biggest risks. The NCSC recommend using three random words with a minimum of 12 characters and consistent password rotation (change it between every 30-90 days!) You can easily check for password leaks online!
-Use a password manager instead of saving passwords in browsers or notes. Research carefully into them and choose which best suits your needs.
-Enable multi-factor authentication (MFA) on all accounts. Yes it takes a tiny bit longer to log in but it can save you stress in the long run! Common hacks targeting students include for platforms such as Discord, Steam, Amazon and similar. If it hosts your data, it needs to be secured.
-Change default passwords on routers, smart devices and admin accounts. Not often thought about but can lead to network and packet sniffing leaving your data and devices exposed!

Email, messages & AI threats
-Treat emails and DMs with urgency or pressure as suspicious.
-Be cautious of AI-generated phishing: spelling and grammar are no longer reliable warning signs. Check email addresses (though can be spoofed), ask whether you are expecting it, check link addresses (not by clicking though) and look for further tell-tale signs. Never click links directly from emails; go to the site manually instead.
-Verify all requests for money, files etc. Are you expecting it? If not, it's probably a scam. A text message will never ask for a reply of your OTP!

Data protection & GDPR awareness
-Check what data apps and websites collect and why, don't blindly accept cookies that track you either. I use an extension to reject all!
-Remove unused accounts to reduce data exposure e.g. got an old Wattpad account lying around?
-Limit permissions (location, contacts, microphone, camera).
-Use different emails for important accounts vs sign-ups. This can also help manage your inbox.
-Know your rights.

Devices & software
-Keep operating systems, browsers and apps updated. Do be cautious of auto-updates. I tend to update a week after a new update is released as by then it is verified if there are any issues!
-Install software only from trusted sources. Don't follow links blindly.
-Use antivirus or built-in security tools and don’t ignore alerts. They can be annoying but an alert is there for a reason.
-Lock devices with strong PINs/biometrics and enable auto-lock. People are privy to snooping. I also recommend taking any electronics with you if you are away. A USB is a mighty thing! Don't plug random ones in either.

Networks & connectivity
-Avoid sensitive logins on public Wi-Fi where possible. Many people snoop the traffic on them. Disable auto-connect to open networks too.
-Use a VPN on public networks if you really need to.
-Secure home Wi-Fi with WPA2/WPA3 and a strong router password. Remember that the default passwords mentioned above are made to be changed!

Social media & personal info
-Keep accounts private and limit what strangers can see. Don't share accounts and think about what others can see about you. A quick google search of your name is easy to do and can reveal a lot. Think about what employers and hackers can see without needing to dig deep. Avoid oversharing personal details that could be used for social engineering. Thus remove old posts that reveal addresses or sensitive info.
-Be cautious with AI image tools and filters that harvest data. If you are using genAI, disable training and memory, do also avoid providing it with personal data.

Backups & recovery
-Back up important files using both cloud and local storage. Test backups occasionally to make sure they actually work. There's nothing more panic ridden than waking up and your assignment is missing!
-Know how to recover accounts and files before something goes wrong.

Cyber security isn’t just for professionals. Most attacks succeed because of small and very avoidable mistakes by individuals. Concepts like the Pyramid of Pain show that attacker behaviour matters so watch for unusual logins, alerts or activity. Regularly review account login history and security notifications. Hopefully some of the tips above help you in your every day life. Would love to hear other tips students have to add on to this!
(edited 3 weeks ago)

Quick Reply

How The Student Room is moderated

To keep The Student Room safe for everyone, we moderate posts that are added to the site.