A human firewall is the layer of protection that you create by following security protocols. If you are strong human firewall, you can help protect your personal information from cybercriminals.

To be a strong human firewall, follow the tips below:

Create Strong Passwords

• Use a combination of uppercase and lowercase letters, numbers, and special characters.
• Don’t use simple words, family names, or numbers that cybercriminals can easily guess. For example, don’t include zip codes or birthdays in your passwords.
• Make your passwords at least 16 characters long, if possible.
• Use passphrases. These passphrases should be unique and difficult to guess. For example, you could use a passphrase such as 100OrangeFishFlewInTheGreenSky.
• Don't share your passwords with anyone.

Carefully Analyze All Emails You Receive

• Don’t click any links or open any attachments in emails you weren’t expecting. To verify that the email is legitimate, contact the sender via another form of communication.
• If you believe an email could be dangerous and you don’t recognize the sender, delete the email. 
• Before you click a link in the email, hover over the link. When you hover over the link, you’ll be able to see the web address that the link will take you to.
• Check the sender’s email address. Even if the email address appears to be an internal or another legitimate domain, the email could still be dangerous. Cybercriminals can spoof domains to trick you into replying, clicking links, or opening attachments in the email.

Tips to Stay Safe at Work

The best way to handle a suspicious email is to report the email to your organization. If you report the email, your IT team can assess and mitigate the threat.

When you receive a suspicious email at work, follow the tips below to stay safe:

• Be sure to follow your organization's process for reporting suspicious emails. Following cybersecurity protocols will help keep everyone’s information safe.
• If you don’t know how to report the email, leave the email in your inbox and ask a manager or supervisor for help.
• If you’re not sure whether an email is spam or a phishing attack, report the email and your IT team handle the situation.

It's better to be overly-cautious and report / delete anything you may deem questionable!

_{Information provided by: The KnowBe4 Security Team}