Note: Specific topics, like IDENTITY THEFT, can be quickly found by using the SITEMAP page.

1. You must avoid using your Administrator account to browse the internet or open untested shared files on CD, diskettes or thumbsticks. Create a LIMITED USER ACCOUNT (LUA) for regular computer use. Only log in as the Admin to make system changes or run system scans and audits; or to run some essential, non-compliant program that must have administrative permissions to run. See Limited User Account for details

2. Start with an operating system that is very secure. Microsoft Windows is the most widely used and must be up to date because of security vulnerabilities. You should be using Windows XP and then Vista (Jan. 2007 release) with all the latest security patch updates applied. Download the latest security patch updates for your software programs as well.  See os and app updates for details

3. You must have a firewall installed. In fact, you should use two firewalls, a hardware firewall and a software firewall. Windows XP comes with a firewall but it is insufficient as it is only a one-way firewall. (The new Vista will have a two-way firewall.) But for now I recommend ZONE ALARM SECURITY SUITE ($50) for a software firewall with many other security features. I recommend a LINKSYS ROUTER hardware firewall that has no performance impact on your computer resources yet provides a physical protective layer between your home computers - and the internet. It hides your IP address from internet hacker probing. It cannot be brought down like a software firewall possibly can and it can additionally provide a wireless access point for other home computers or printers. See firewalls for details

4. You need protection from malware threats. AntiVirus and AntiSpyware software is essential to shield and scan for known and suspicious threats. I recommend using the AntiVirus and AntiSpyware feature built into ZONE ALARM SECURITY SUITE. I also recommend adding the top AntiSpyware program WEBROOT SPYSWEEPER ($30) - which provides a proactive shield to detect and block spyware and adware threats and also stops unauthorized changes to your browser and HOSTS file and your Windows Start up and registry configuration. See malware threats for details.

5. Your internet browser must be configured securely. This is the doorway from many internet threats into your computer. Don't leave the door unlocked! Upgrade to Microsoft's newest Internet Explorer version 7 with greater security protections. Firefox is also a safe alternative. See internet browser for details.

6. Irresponsible Responses All the security protection tools in the world won't protect you if you or other users of your home computer make naive, uneducated, hasty or irresponsible choices to security questions you may be asked to make. See Irresponsible Responses.

7. Instant Messenger and email are primary avenues of threat introduction. You need to be aware of how threats come in through your emails and instant message communication. I recommend ZONE ALARM INTERNET SECURITY SUITE which provides the feature called MailSafe. This feature blocks unsafe attachments and monitors outbound e-mail for suspicious behavior. It also provides instant message security by encrypting IM conversations, filtering out spam and blocking risky features like file transfer. See details on IM and email.

8. Use long and difficult-to-remember passwords. And don't write them down! I recommend using ROBOFORMS (limited FREE, PRO $30)program on a THUMBSTICK to make managing your multitude of login accounts and passwords a snap! It lets you enter one master password using an encrypted keypad window and then you simply select which web site to open from your list and it pops in your account name and password automatically! Plug your thumbstick with Roboforms in any computer. Print out the entire account-password list and store it in a firesafe. Save the encrypted Roboform files on another back up media. You also should not set a password for your home computer (Windows XP) as this disallows remote access login attempts over the internet. See details about secure passwords.

9. Use common sense and safe practices when using the "wild-wild-west" internet. There are many helpful and safe web sites. There are many dangerous and threatening web sites. File Sharing P2P, Pornography, Music Lyrics, Shareware, Free Hacked Software and License Keys - all are the worst of the web in regards to risky content sites that have a high potential for security threats. I recommend NETCRAFT and SITEADVISOR which are FREE add-ins for your browser that flag and help you identify risky sites and phishing threats. There are safe ways to manage and store your financial, personal and private information on your computing devices. See unsafe practices for details.

10. Wireless connectivity is convenient but poses new security threats to consider.  You need to have a secure configuration for your Laptop or wireless device. You also must realize that a broadcasted wireless access point at Starbucks could be a hacker sitting in the parking lot tempting you to come on in! See details about wireless security. 

11. Audit your event and history logs to discover suspicious activity. Compromise will come and you need to be alert and look for the signs as early as you can. See Auditing for details.

12. Back up your DATA regularly!  I have seen many cases of data loss where no current back ups existed. It still does happen even with the current, reliable hard drives out today. And storage is so cheap. I recommend you purchase an EXTERNAL USB HARD DRIVE that you can use to make regular back ups of important data from one or more computers. A 1GB thumbstick is also a cheap and quick back up device. See data back up details.