CHAPTER-VI
BUILDING GOOD DIGITAL HABITS (CYBER HYGIENE)
Creating strong passwords and using multi-factor authentication,
Keeping software updated and avoiding unsafe downloads,
Spotting fake news and online hoaxes.
Creating Strong Passwords and Using Multi-Factor Authentication
Aspect Explanation Example / Case Study
Weak passwords like “12345” or
In 2021, Colonial Pipeline (U.S.)
“password” are easily guessed. A
Importance of was hacked due to a reused weak
strong password is at least 12+
Strong Passwords password. The ransomware attack
characters with a mix of letters,
disrupted fuel supplies.
numbers, and symbols.
Case: A Delhi student used the
Using the same password across
Avoid Reusing same password for Gmail and
multiple accounts increases risk—if
Passwords Instagram. After a leak, hackers
one leaks, all accounts are exposed.
accessed both accounts.
Example: A Hyderabad IT
Tools like Last Pass, Bitwarden, and
Use Password employee used Last Pass to
1Password generate and store strong
Managers manage 100+ unique passwords,
passwords securely.
reducing chances of reuse.
Multi-Factor Adds an extra layer (OTP, In 2022, Microsoft reported that
Authentication Authenticator app, biometric, security MFA blocks 99.9% of automated
(MFA/2FA) key) beyond the password. account attacks.
Apple’s Face ID prevented
Biometric Fingerprint, facial recognition, or iris
unauthorized access to stolen
Authentication scans provide additional security.
iPhones in Mumbai.
Hackers in Chennai guessed a
Should not be obvious (avoid user’s recovery question (“What
Security Questions “mother’s maiden name” or pet’s is your pet’s name?”) from
name). Choose hard-to-guess answers. Facebook posts and reset his bank
login.
Keeping Software Updated and Avoiding Unsafe Downloads
Aspect Explanation Example / Case Study
Updates patch security The WannaCry ransomware (2017)
Importance of vulnerabilities exploited by spread globally, affecting banks and
Updates hackers. Delaying updates leaves hospitals. Victims were mostly those with
devices open to attack. unpatched Windows.
Enable auto-updates for OS, A Chennai hospital prevented
Automatic
browsers, and apps to reduce ransomware because IT staff had enabled
Updates
risks. automatic security patching.
Avoid Unsafe Download software/apps only Case: Fake “Covid-19 Tracker” app
Downloads from trusted sources (official (2020) secretly installed spyware. Users
websites, App Store, Google who downloaded from Play Store were
Play). safe, while third-party downloaders were
Aspect Explanation Example / Case Study
hacked.
Beware of A Bengaluru startup lost client data when
Cracked/pirated apps often
Pirated a pirated Photoshop installation carried
contain malware or ransomware.
Software ransomware.
Don’t allow unnecessary access Example: A flashlight app requested
Check
(camera, contacts, location) to contact and microphone access—it was
Permissions
apps. later found to be spyware.
Software A Pune company blocked a Trojan
Provide early warnings and block
Firewalls & download via firewall alerts, preventing a
suspicious downloads.
Antivirus major breach.
Spotting Fake News and Online Hoaxes
Aspect Explanation Example / Case Study
During the COVID-19 pandemic, fake
Why Fake Spreads misinformation, fuels panic,
WhatsApp forwards about “garlic
News is manipulates elections, and harms
curing coronavirus” misled millions in
Dangerous reputations.
India.
Always check if news comes from Case: In 2019, a fake news post
reliable outlets (BBC, The Hindu, claimed Chennai floods were caused by
Verify Source
and NDTV). Cross-check with dam sabotage, causing panic until
multiple sources. authorities clarified.
Example: “Breaking: Actor Dead!”
Watch for Fake news often uses sensational
hoaxes frequently spread on Facebook
Clickbait Titles headlines to grab attention.
to get clicks.
Students in Delhi used Alt News to
Fact-Checking Use Alt News, Boom Live, Snopes,
debunk a viral fake WhatsApp message
Tools [Link].
about “free government scholarships”.
Many fake stories use old/misused Example: A 2017 WhatsApp forward
Reverse Image
images. Google Images or TinEye about violence in Assam used a 2010
Search
can verify. Nepal earthquake photo.
Case: A 2015 Chennai flood photo
Check Dates & Old news/events are often reshared
resurfaced in 2021 during heavy rains,
Context as current.
creating false panic.
Example: In 2020, Twitter users spread
Hoaxes spread fast through shares,
Social Media a false claim about a “lockdown
likes, and retweets. Be skeptical
Hoaxes extension” in India. Government had to
before sharing.
issue official clarification.
Meanings and Explanations of Key Cyber Hygiene
Concept Meaning Explanation
Password A password is a secret Acts as the first line of defense in cybersecurity.
word, phrase, or string of Strong passwords (12+ characters, with a mix of
Concept Meaning Explanation
characters used to verify uppercase/lowercase letters, numbers, and
a user’s identity and symbols) are harder to guess or crack.
allow access to a device, Weak/reused passwords make accounts highly
system, or account. vulnerable to hacking.
The factors include: something you know
MFA is a security process (password), something you have (OTP, security
Multi-Factor that requires users to token), and something you are (fingerprint/face
Authentication provide two or more recognition). MFA adds a strong extra barrier, so
(MFA) types of verification even if a hacker steals your password, they
before gaining access. usually can’t access the account without the
second factor.
A software update is a Updates are critical for closing vulnerabilities
patch or newer version that hackers exploit. They may also add new
released by developers to features and boost performance. Delaying
Software Update
improve performance, fix updates increases the risk of malware and
bugs, and strengthen ransomware attacks (e.g., WannaCry exploited
security. outdated Windows systems).
An online hoax is a false Hoaxes can cause panic, misinformation, scams,
story, rumor, or or political manipulation. They often spread
misleading claim through WhatsApp forwards, fake news sites, or
Online Hoaxes
deliberately spread on the clickbait headlines. Checking sources, fact-
internet or social media to checking tools, and reverse image searches are
deceive people. essential to avoid falling for them.