Cybersecurity Best Practices Guide
As a college student, you’re navigating a digital landscape filled with online classes, social media, and personal activities. This guide provides essential cybersecurity practices to protect your personal information, academic work, and digital identity throughout your college journey.
Topics Covered
Use Strong Passwords
- Use unique passwords for each account (email, student portal, banking, social media)
- Create complex passwords with at least 12 characters including uppercase, lowercase, numbers, and symbols
- Use passphrases when possible: “Coffee!Helps2Study#Late” is stronger than “P@ssw0rd1”
- Avoid personal information like birthdays, names, or addresses in passwords
Password Management
- Use a password manager (free options: Bitwarden, LastPass free tier)
- Never share passwords with friends or family members
- Change passwords immediately if you suspect an account has been compromised
- Use two-factor authentication to add an extra layer of security beyond just your password
Pitt Community College requires two-factor authentication to access the PCC Portal. It requires two different types of verification:
What You Know (your password) + What You Have (your phone or authentication app) = Stronger Security
Best Practices
- Use authentication apps instead of SMS when possible
- Keep backup codes secure – store them separately from your devices
- Don’t approve suspicious login notifications – if you didn’t try to log in, deny the request
- Have multiple two-factor methods set up in case you lose your phone
Recognizing Phishing Attempts
- Be skeptical of urgent emails requesting personal information or immediate action
- Check sender addresses carefully – legitimate emails from your college will come from official domains
- Hover over links before clicking to see the actual destination
- Look for poor grammar and spelling errors in official-looking emails
Safe Email Practices
- Use your student email for academic purposes and a separate personal email for other activities
- Don’t click suspicious links or download unexpected attachments
- Report phishing attempts to your college’s IT department
- Keep your email software updated to benefit from security patches
Social Media Privacy
- Review privacy settings regularly on all social media platforms
- Limit personal information visible to strangers (phone numbers, addresses, class schedules)
- Be cautious about location sharing – avoid posting real-time locations
- Think before posting – future employers and schools may review your online presence
Safe Social Networking
- Be selective with friend requests from unknown individuals
- Avoid oversharing personal or financial information
- Use privacy-focused messaging apps for sensitive conversations
- Report and block suspicious or harassing accounts
Public Wi-Fi Safety
- Avoid sensitive activities (banking, shopping) on public Wi-Fi
- Use your phone’s hotspot instead of unsecured public networks when possible
- Enable automatic locking on devices when not in use
Computer Protection
- Install antivirus software and keep it updated (many free options available)
- Enable automatic updates for your operating system
- Use a firewall (usually built into Windows and macOS)
- Lock your computer when stepping away, even briefly
Mobile Device Security
- Use screen locks (PIN, password, fingerprint, or face recognition)
- Install apps only from official stores (App Store, Google Play)
- Review app permissions before installing
- Enable remote wipe capabilities in case your device is lost or stolen
Protecting Academic Work
- Back up important files using cloud storage or external drives
- Protect against plagiarism by properly citing sources and using plagiarism detection tools
- Keep digital copies of important academic documents
Red Flags and Warning Signs
- Unexpected password reset emails – someone may be trying to access your accounts
- Unknown charges on bank or credit card statements
- Friends receiving spam from your email or social media accounts
- Slow computer performance or unusual pop-ups (possible malware)