Cybersecurity is no joke — even on April Fools’ Day. 

According to a 2024-25 National Cybersecurity Alliance report, 61% of participants felt worried about becoming a victim of cybercrime. However, 30% said there was no point in protecting themselves, as their information is already online.

While fighting to protect yourself online may often feel like a fool’s game, there are small steps you can take to make a big difference.

Here are some ways to outsmart the cybercriminals in their own game:

Passwords

• Make them unique: Every account should be protected with a different password. Reusing passwords puts all of your accounts and data at risk of being compromised.
• Make them long: Opting for passphrases — a long series of words or a sentence — is a great way to create secure passwords. They’re also easier to remember than a complex string of random characters. Here’s an example of a passphrase — T@lley is my 2nd h0me.
• Manage them: Use a password manager, such as LastPass, to securely keep track of all your unique account credentials. The tool takes away the stress of juggling multiple passwords and can even generate strong passwords for you.

Multifactor Authentication (MFA)

• Use MFA: Set up MFA for every account. MFA requires you to verify your identity when logging in. In the event your password is stolen, MFA is a critical part of protecting your accounts.
• Use Duo Mobile app: Download the Duo Mobile app to verify your identity for NC State accounts. The app is the university’s most secure, convenient and reliable MFA option.
• Watch for unexpected requests: Only approve MFA requests you initiated. Before approving a Duo Mobile push notification, check that all elements of the request are accurate, such as the device location.

Software Updates

• Install ASAP: Pay attention to notifications about updating your devices’ operating systems and apps. Installing updates as soon as possible protects your tech against bugs and vulnerabilities.
• Install automatically: If you want to take a hands-off approach, set up your devices to automatically install updates.

Phishing

• Be suspicious: Don’t trust anyone asking for your contact, financial or login information. Always verify the email sender’s address, even if it seems familiar.
• Take your time: Think before you open an attachment, click a link, or provide your username and password. Carefully examine all URLs before clicking them. 
• Ask for help: If you think you’re being targeted by a scam, contact the NC State Help Desk via the NC State IT Service Portal or call 919.515.HELP (4357). You can also send suspicious emails to [email protected].