Password management is becoming very important because weak passwords or passwords reused at different places is becoming a big risk.  Hackers are breaking into web sites to get passwords because those passwords are reused different places.  Is your bank account password the same as your Facebook or game site password?  It is impossible for anyone to remember complicated passwords that are different for each web site.  The solution is to use a password vault.

A completely free product, KeePass, is very useful for storing passwords.  It has a password generator and a comments section for each entry.  It can run from a USB drive and has a load of features and plugins, such as an automatic web login for web sites and uses a high level of encryption.  It can be used to save all sorts of passwords such as web sites, ATM codes, software licenses, and even a bike lock code.  Of course you will still need to remember a password to open KeePass but that is better than trying to remember many or reusing passwords in different places.

The only problems I came across is using passwords that are too long.  If a web site only accepts a 12 character password and a 20-character password is pasted during registration you may not be aware only 12 characters were accepted and future logins may fail.  Just remove one charachter at a time until it works.  A long password also crashed Quicken when setting up password vault protection.

To “lock” your credit report means putting a fraud alert. A 90-day security alert gives you time to verify if you are a victim of fraud. If you determine you are a fraud victim, you may add a 7-year victim statement to your credit report. 

Experian Fraud Alert 1-888-397-3742

Equifax Fraud Alert 1-800-525-6285

Trans Union Fraud Alert 1-800-680-7289

Correcting errors on credit reports can be difficult task.  Persistance usually pays!

There can be many types of errors or credit reports.  Improper deliquencies can be a serious problem.  Incorrect address or other information can also lead to problems and should be corrected.  On my reports they once had the address of a creditor as one of my previous addresses.  In another case a company that used to have my PO box was associated with me on one of my reports.  Here are some tips to correcting errors:

-Obtain credit report directly from the 3 credit bureaus.  Do not depend on a combine 3-bureau report.  These reports are compiled and you may not be able to tell which bureau has which information.  Each bureau is required to send one report per year free and if any corrections are made they must send another free report each time. 

-File a dispute with the bureau that has incorrect information.   TransUnion Disputes | Equifax Disputes | Experian Disputes.  If the dispute falls into an unuusal category, such as a basd address it may take a few tries before it is fixed.  make sure to check the updated report and keep filing a dispute.

-If the dispute is not properly fixed file a complaint with the Federal Trade Commission and copy the complaint alsong with another dispute sent to the credit bureau via mail.  This often provides the extra imptus for the bureau to take a closer look.

Equifax free credit report request:  http://www.equifax.com/answers/request-free-credit-report/en_cp

Transunion Free Credit Report Request:  http://www.transunion.com/corporate/personal/creditTools/freeCreditReport.page

Experian Free Credit Report Request:  “To confirm your eligibility and request your free or discounted copy delivered by U.S. mail, please call 866 200 6020” (or pay $15 online)  http://www.experian.com/credit-reporting/check-credit-report.html.

E-mail security is a complicated problem.  E-mails can contain malicious attachments or lead you to malicious web sites.  Here are a few tips:

-Do not open attachments unless you are sure it is safe.  Claims that you have a package or need to open some attached invoice are usually false.  These attachments can load software on your computer such as Key Loggers which can track every keystroke and send your passwords to criminals.  Other software can turn your computer into a spam sender or put up a web page advertised by spam (called a network robot or “botnet”).  These malicious attachements can be complicated and can sometimes avoid detection because they change so often.

-If you are sent to a suspicious web site that asks to download a “viewer” to see pictures or claims to be “scanner” for malicious software do not agree to download anything. 

-Use an e-mail system that blocks attachments before they get to you.

-Use an e-mail system that blocks out spam.  These sometimes block legitimate e-mail but systems are getting better.

-Use an e-mail system that uses “SPF” filtering to block forged e-mail.  This works by checking the domain records to make sure the mail is originating from the correct place.

-Get a domain name to use for e-mail and get a service that allows you have multiple e-mail accounts and allows you to change them.  For instance, example.com can have addy1@example.com, addy2@example.com, etc.  These addresses can be created for specific purposes and if it gets too much spam, just change the address. 

The terms entered into a search engine may not always be secret.  A history is saved on the local computer as well as in the search engine company logs.  In a recent case someone hit person and claimed they though it was a dear.  A search of the person’s computer revealed searched such as “hit-and-run” and out-of-state repair shops just after the accident which led to a conviction.

Ways to keep your search terms private on your local computer:

-Software programs can erase your history.  Some work better than others as information can be saved in many different places.

-Encryption programs can scramble all the information on the disk.  Disk manufacturers are developing automatic disk encryption that will perform much better.

-Note that this usually does not protect against “key loggers.”  These systems can be either hardware or software that track every key stroke.  These systems records even more information than simply intercepting information.  This is because every key stroke is recorded, even if backspace or delete keys are used.

 Search engine privacy:

-Use a “proxy” service.  A proxy goes out and gets your Internet pages for you so the web site visited only has a record of the proxy and not your computer.

-Some search engines claim they do not maintain log files of who visits.

Web surfing has become increasingly more complicated to detect things like viruses, botnets, and malware.  In addition to things like firewalls and virus detection, it is prudent to set up a separate account for web surfing, chat programs and games.  This account would have limited rights so it would not have access to other programs where personal data is saved.  That way if a problem does arise there is some added protection.  The best option is a completly separate computer but this is another option when that is not practicle.

The normal account when set up has “adminstrative rights.”  This means that the user can install programs and has access to all the data.  By setting up a separate account that has only “user” or “guest” rights programs cannot be installed and the data of the main user is not accessible.  For instance, malware loaded via a chat program would not have access to financial or other files in the adminsitrator’s account.

Credit reports should be reviewed for accuracy from time to time.  Don’t ignore small errors or unpaid debts no matter how small.  Negative information may result in higher interest rates for credit cards, loans and mortgages.  It could also take months to clear up a mistake.

When requesting the free reports be sure not sign up services by mistake.  For instance, credit monitoring services include a monthly fee.  The 3-credit report services compile the information from the three busreas.  If there is an error you may need to obatin all 3. 

-The three credit reporting bureaus must provide one free credit report per year, whenever corrections are made, or if credit is denied:

Equifax free credit report request:  http://www.equifax.com/answers/request-free-credit-report/en_cp

Transunion Free Credit Report Request:  http://www.transunion.com/corporate/personal/creditTools/freeCreditReport.page

Experian Free Credit Report Request:  “To confirm your eligibility and request your free or discounted copy delivered by U.S. mail, please call 866 200 6020” (or pay $15 online)  http://www.experian.com/credit-reporting/check-credit-report.html.

It is best to shred your personal documents before throwing them away.  Recently I saw papers flying around on trash day.  Looking down I saw a mortgage application and bank statements.  This person’s entire financial history was flying around in the wind.

When purchasing a shredder it is best not to get the least expensive machine.  Low end machines jam and the motor may burn out.  A better machine will last for years.  Do not overload the machine or shred for a long time without stopping.  If the motor gets hot let it cool down.  To lubricate:  use spray lubricant and spray a piece of paper before shredding it.

In the recent presidential campaign one candidate’s personal e-mail account has “hacked.”  Published reports said this was done using the Password Recovery feature of a popular free e-mail service.  The password recovery is done by answering personal questions.  The questions are often things like “Where was you Mother born”, “what was your first pet’s name”, etc. 

How was it done?  Someone just looked up the information about the candidate on the Internet and was able to answer the questions!  Even if you are not a presidential candidate things such a Mother’s maiden name is a public record that anyone can look up.

TIP:  Remember standard “wrong” answers to questions.  Where was your Mother born?  The hospital!