Messengers 101: safety and privacy advice

[harlan4096]

A dozen short and simple tips on how to use WhatsApp, Telegram, Signal, iMessage, WeChat, and other messaging apps safely and hassle-free.
 
How do you keep your chats private and protect your messaging account from being stolen or hacked? Here are 12 simple rules with brief explanations of why each one is important.

Enable two-factor authentication

Why this is important. It keeps your account from being hacked or hijacked through SIM swapping or some other technique. Turning on this setting requires entering your secret password in addition to the SMS verification code when signing in to the messaging app with your account on a new device.

What to do. Open the security and privacy settings of your messaging app, enter a secret password, and memorize it. You’ll only need to enter it when linking a new device to your account. To make things easier, you can generate and store it in a secure password manager, or test the strength of your password using our free Kaspersky Password Checker.

Don’t share one-time passwords

Why this is important. If scammers want to steal your account, they’ll try to trick you into giving them the verification code after you receive it in your messaging app.

What to do. Don’t forward or dictate one-time passwords for signing in to chat apps to anyone. Your friends, support agents, companies, or banks will never need these codes. If someone is asking for a code, it’s a scammer.

Never scan QR codes outside of the messaging app

Why this is important. Some account hijacking schemes masquerade as invitations to join a group or chat. You scan a QR code in an ad, but instead of joining a neighborhood or class chat, you allow a scammer to link their device to your account.

What to do. If someone is asking you to scan a QR code, find the scanner in the messaging app — typically in the Settings. Don’t use your camera or some other QR-code scanning app. Carefully read the prompts displayed by the messaging app: it’ll tell you whether you’re joining a group or channel, or linking a new device to your account.

Carefully check new contact requests

Why this is important. Scammers typically imitate people you know: “Hi! Me again. I’ve a new phone number”. They may even know who your boss is. Many scams that result in major financial losses start with requests from “friends” or “colleagues”. Another type of attack is a “misdialed call” scam. “Is this Hannah? It’s not? Oh, sorry! I misdialed. Anyway, how are things?”

What to do. If you see a new chat, but there’s no history, stay alert! If this is supposedly an acquaintance, ask them about something only they would know. If your boss is texting you, it’s best to confirm it with them directly through a different channel, such as their office phone, work email, or in person, before proceeding. If you get a message from someone claiming it was sent in error, ignore any enticing offers, especially if accompanied by links or files.

Continue Reading...