Crimeware

Best Practices from the NSA to Protect Your Mobile Devices

Can keeping your mobile device safe from hackers be as simple as turning it off then turning it back on? Well, not completely, but that is one of the things the National Security Agency (NSA) suggests to thwart the bad guys. “This is all about imposing cost on these malicious actors,” said Neal Ziring, technical director of the National Security Agency’s cybersecurity directorate.

In addition to rebooting your phone at least weekly, the NSA’s guide to best practices recommends:

Use strong passwords or PINs to lock the screen. Set the device to automatically lock after five minutes and to wipe itself after ten incorrect password attempts.
Consider using biometrics (e.g., facial recognition or fingerprint scan) to protect data.
Maintain physical control of the device at all times.
Disable Bluetooth when you are not using it.
Do not connect to public WiFi networks and disable WiFi when not in use. Delete any unneeded WiFi networks.
Disable location services when not needed and do not take the device to sensitive locations.
Do not jailbreak or root the device.
Install a minimal number of apps and only those from official stores. Be wary of what personal data you enter and what data the app will access. Close apps when they are not in use.
Update the operating system and applications as soon as possible when updates are released.
If an unexpected pop-up appears, forcibly close all applications.
Just as applies to your computer, do not click on unknown links or open unexpected email attachments. Even those from known and trusted sources may be compromised.
Do not have sensitive conversations near any mobile devices not configured for secure voice.
Use a protective case to block room audio and prevent a hot-miking attack. Cover the camera when it is not in use.
Only use trusted accessories, such as original charging cords or accessories purchased from a trusted manufacturer. Do not use public charging stations.