Enzoic Navigation
  • PRODUCTS & SOLUTIONS
    • PRODUCTS
      • Enzoic for Active Directory
      • Active Directory Lite
      • Enzoic APIs
      • Breach Monitoring
    • SOLUTIONS
      • ATO Protection
      • NIST Password Compliance
    • INDUSTRIES
      • Hospitals & Healthcare
      • Government
      • Education
      • Financial Service
  • RESOURCES
    • CONTENT
      • Resource Hub
      • Blog
      • FAQ
      • Case Studies
      • Videos
    • DEVELOPERS
      • Support
      • Active Directory Tech Docs
  • COMPANY
    • OVERVIEW
      • About Us
      • Security
      • Threat Intel
      • Newsroom
      • Partners
      • Careers
      • Contact Us
  • PRICING
  • LOGIN
  • SIGN UP
  • PRODUCTS & SOLUTIONS
    • PRODUCTS
      • Enzoic for Active Directory
      • Active Directory Lite
      • Enzoic APIs
      • Breach Monitoring
    • SOLUTIONS
      • ATO Protection
      • NIST Password Compliance
    • INDUSTRIES
      • Hospitals & Healthcare
      • Government
      • Education
      • Financial Service
  • RESOURCES
    • CONTENT
      • Resource Hub
      • Blog
      • FAQ
      • Case Studies
      • Videos
    • DEVELOPERS
      • Support
      • Active Directory Tech Docs
  • COMPANY
    • OVERVIEW
      • About Us
      • Security
      • Threat Intel
      • Newsroom
      • Partners
      • Careers
      • Contact Us
  • PRICING
  • LOGIN
  • SIGN UP
Stay safe shopping this Cyber Monday!

Shop Safely This Cyber Monday

Use Safe Passwords, Avoid Public Wifi and Other Tips for Safe Shopping on Cyber Monday, Dec 2nd, 2019

According to Deloitte’s Annual Holiday Survey of Consumers, shoppers of all age groups are more likely to shop on Cyber Monday than on Black Friday. Given the ubiquitous nature of retail apps and social shopping opportunities, it’s easy to see why people would choose e-commerce over battling the Black Friday lines. However, as holiday shoppers prepare to crack open their laptops or login to their Amazon app on Cyber Monday, December 2nd, it’s critical that they be mindful of online shopping security considerations.

Password Reuse

Chief among these is password reuse. It’s incredibly convenient to use the same passwords across multiple sites, but this is a huge security mistake that can easily lead to credit card and identity theft. With new breach data available on the Dark Web on a daily basis, cybercriminals have a virtually unlimited supply of exposed credentials they can use to try to access consumer accounts. To provide a scope of the problem, some of our retail clients have seen about 4% of their customer’s monitored credentials go bad within one month. To protect those customers, they often prompt those users to reset their password or re-enter sensitive information to ensure that a cybercriminal is not using the account.

This underscores how critical it is that people use unique, strong passwords for all of their online accounts. There are numerous password manager solutions that can help people remember their various credentials, so there really is no excuse for reusing passwords across multiple sites.

As such, your first step in Cyber Monday planning should be logging into each e-commerce site or app and ensuring a strong, unique password is used for each respective account. If you need help, check out Enzoic’s free compromised password tool to determine whether your proposed password is safe.

WiFi Access

Grabbing a hot Cyber Monday deal while in line at Starbucks might be the pinnacle of modern convenience, but it’s a risky security practice. As a general rule, if you’re not at home or at work, you should use a VPN to access WiFi and be very cautious about which accounts you connect to. It’s easy for cybercriminals to set up spoofing WiFi and access your sensitive data without a VPN in place.

Review Your Accounts and Statements

It is important to monitor your online accounts and review your credit card statements throughout the year, but it is especially critical during the holiday season and after Cyber Monday. Review your bank, credit card and financial statements regularly to ensure no one else is using your information. With www.AnnualCreditReport.com, you can get a free credit report to see if there is any unfamiliar activity. You can also sign up for an identity theft monitoring product to get alerts if someone is using your identity.

Additional online shopping best practices

  • Enable multi-factor authentication (MFA) on all accounts—or invest in a third-party authentication solution
  • Sign up for an identity theft protection service to be alerted to changes to your credit card or personal information on the Dark Web
  • Install anti-malware and anti-virus software on your computer

In our heightened identity theft environment, it’s critical that shoppers are aware of the above security considerations and take the necessary steps to address them. After all, what good is snagging a killer deal on a Cyber Monday must-have gift if it results in the headache of disputing credit card charges a criminal made on your account?

Cyber Monday

Search

Assess your cyber vulnerabilities with a free password audit tool
Start Now

Browse blog categories

  • Account Takeover (28)
  • Active Directory (44)
  • all posts (159)
  • Continuous Password Protection (24)
  • COVID-19 (7)
  • Cracking Dictionaries (6)
  • Credential Screening (21)
  • Cybersecurity (66)
  • Data Breaches (31)
  • EdTech (3)
  • Enzoic News (18)
  • Financial Services Cybersecurity (5)
  • GovTech (4)
  • Healthcare Cybersecurity (15)
  • Law Firm Cybersecurity (2)
  • NIST 800-63 (28)
  • Password Security (30)
  • Password Tips (51)
  • Regulation and Compliance (11)

Stay up to date

Research, news, and more right to your inbox

More

  • Learning about strong, but unsafe passwords
  • What is a credential stuffing attack?
  • What is account takeover (ATO) fraud?
  • Eliminating password reuse to prevent ATO fraud
  • Developer Documentation (APIs)

Recent blog posts

  • Back to Basics: IDSA Trends in 2022 are all about Preventable Cyber Incidents
  • Active Directory is an Active Vulnerability 
  • The Biggest Takeaway from the 2022 Verizon DBIR
  • [ Sign Up for a Free Account ]
  • Contact Us
  • 1-720-773-4515

Enzoic ©2022 | Privacy Policy | Acceptable Use

3800 Arapahoe Avenue, Ste 250 l Boulder, CO 80303

Enzoic’s password auditor provides a great baseline for assessing password vulnerability. Get next level of compromised credentials protection and try the full Enzoic for Active Directory at no cost.

Cookies

This website uses cookies to improve your experience. Continue to use the site as normal if you agree to the use of cookies. To find out more about our use of cookies or to opt-out, please see our Privacy Policy.

More Information
This site is for EDUCATIONAL PURPOSES ONLY.
Your password will be sent securely to the Enzoic servers to check if it is compromised. We do not store your password or use it for any other purpose. If you are not comfortable with this, do not enter your real password.
What is this?

Password Check is a free tool that lets you determine not just the strength of a password (how complex it is), but also whether it is known to be compromised. Billions of user passwords have been exposed by hackers on the web and dark web over the years and as a result they are no longer safe to use. So even if your password is very long and complex, and thus very strong, it may still be a bad choice if it appears on this list of compromised passwords. This is what the Password Check tool was designed to tell you and why it is superior to traditional password strength estimators you may find elsewhere on the web.

Why is it needed?

If you are using one of these compromised passwords, it puts you at additional risk, especially if you are using the same password on every site you visit. Cybercriminals rely on the fact that most people reuse the same login credentials on multiple sites.

Why is this secure?

This page, and indeed our entire business, exists to help make passwords more secure, not less. While no Internet-connected system can be guaranteed to be impregnable, we keep the risks to an absolute minimum and firmly believe that the risk of unknowingly using compromised passwords is far greater. Since our database of compromised passwords is far larger than what could be downloaded to the browser, the compromised password check we perform must occur server-side. Thus, it is necessary for us to submit a hashed version of your password to our server. To protect this data from eavesdropping, it is submitted over an SSL connection. The data we pass to our server consists of three unsalted hashes of your password, using the MD5, SHA1, and SHA256 algorithms. While unsalted hashes, especially ones using MD5 and SHA1, are NOT a secure way to store passwords, in this case that isn’t their purpose – SSL is securing the transmitted content, not the hashes. Many of the passwords we find on the web are not plaintext; they are unsalted hashes of the passwords. Since we’re not in the business of cracking password hashes, we need these hashes submitted for more comprehensive lookups. We do not store any of the submitted data. It is not persisted in log files and is kept in memory only long enough to perform the lookup, after which the memory is zeroed out. Our server-side infrastructure is hardened against infiltration using industry standard tools and techniques and is routinely tested and reviewed for soundness.

More…
  • Visit our FAQ to learn more
  • Contact us for press or sales inquiries
  • Add a free password strength meter to your website