Easy practices for online privacy

Summary

Life Kit Podcast: Easy Practices for Online Privacy

Episode Overview:
In the June 9, 2025 episode of NPR's Life Kit, host Marielle Segarra delves into the pressing issue of online privacy. Titled "Easy Practices for Online Privacy," the episode explores the types of personal data that reside on the internet, identifies who seeks this information and why, and provides actionable steps to safeguard one's digital footprint. Produced by Sam Yellow Horse Kessler, the episode features insights from Rebecca Skeet, COO of Black Girls Hack, and Megan Cox, a staff attorney at the Federal Trade Commission specializing in online privacy and data security.

---

1. The Ubiquity of Personal Data Online

Marielle Segarra opens the discussion by highlighting the pervasive nature of personal data on the internet. She emphasizes that anyone who uses the internet—essentially everyone listening to the podcast—has a wealth of personal information available online, ranging from full names and dates of birth to browsing habits and locations. Recent high-profile data breaches at companies like AT&T, Ticketmaster, Yahoo, Facebook, and National Public Data have compromised millions of private records, underscoring the vulnerability of personal information.

Quote:
“It seems like every day another company's admitting to a data breach.” (00:16)

Sam Yellow Horse Kessler shares his personal anxiety upon discovering the extent of his data exposure. Initially indifferent to his data's use, Sam’s perspective shifts as he becomes aware of how extensively his information can be exploited.

Quote:
“The more I learned about what people are using my data for and how they can access it, the more just like nervous I became like right in the pit of my stomach.” (01:07)

---

2. Who Wants Your Data and Why

Rebecca Skeet provides context on the entities interested in personal data, distinguishing between illegal and legal markets. Megan Cox elucidates the concept of "bad actors," primarily identity thieves and fraudsters, who misuse personal information for malicious purposes.

Quote:
“When we're talking about bad actors, we're talking about identity thieves and fraudsters.” (05:57)

Definition of Identity Theft:
Identity theft involves using someone’s personal or financial information without permission. This can include:

• Stealing names, addresses, credit card details, Social Security numbers, and more.
• Purchasing expensive items using stolen credit information.
• Opening new accounts or credit lines in someone else's name.
• Filing fraudulent tax returns to receive refunds.
• Utilizing health insurance for unauthorized medical services.
• Damaging credit scores, making it difficult to secure future credit.

Rebecca underscores the importance of protecting Personally Identifiable Information (PII) such as Social Security numbers by avoiding carrying them unnecessarily, destroying documents that contain them, and placing locks on SSNs through the Social Security Administration.

Quote:
“Identity thieves might buy expensive tech with your credit cards. They can open up new credit cards or new accounts in your name.” (06:24)

---

3. Takeaway 1: Understand the Risks and Assess Your Personal Risks

Before taking protective actions, it's crucial to understand the specific risks one faces. Megan Cox advises conducting a personal risk assessment to identify valuable assets and potential vulnerabilities.

Quote:
“Risk tolerance for someone who is an influencer, their risk profile is going to be different.” (07:59)

Rebecca emphasizes that anyone, regardless of their online presence, can be susceptible to identity theft. Understanding one’s unique digital footprint is the first step toward effective protection.

---

4. Takeaway 2: Don't Be an Easy Target – Adopt "Polite Paranoia"

Rebecca introduces the concept of "polite paranoia," a strategy of maintaining a healthy skepticism toward online interactions to protect personal information.

Quote:
“Polite paranoia is asking questions about how your data is going to be used, pausing and thinking twice before you hand anyone your PII.” (08:34)

Actionable Steps:

• Use Password Managers: Tools like 1Password, LastPass, or NordPass help create and store strong, unique passwords for each account.

  Quote:
  “Password managers employ strong encryption and other security measures to protect your passwords.” (12:19)

• Enable Multi-Factor Authentication (MFA): Adds an extra layer of security by requiring a second form of verification beyond just a password.

  Quote:
  “The benefit of having that Two Factor Authentication in place is that even if someone were to get your password, they don't have that second factor.” (13:16)

• Take Nine Seconds: Before sharing any personal information online, take at least nine seconds to evaluate the request.

  Quote:
  “Take nine seconds at least to think over any requests for your data online.” (11:24)

---

5. Takeaway 3: Clean Up Your Digital Environment – Digital Spring Cleaning

Regularly decluttering your digital presence is akin to maintaining a clean living space. This involves deleting unused apps, managing browser extensions, reviewing privacy settings, and removing unnecessary accounts.

Actionable Steps:

• Delete Unused Apps and Extensions: Removes potential vulnerabilities and reduces the amount of data accessible to third parties.

  Quote:
  “Delete unused apps, remove extensions, go through your accounts and web browsers and review your data and privacy settings.” (14:29)

• Use Antivirus Software and VPNs: Protect your devices from malware and ensure private browsing. Rebecca recommends ProtonVPN or NordVPN for robust privacy protections.

  Quote:
  “A VPN or a virtual private network is like a tunnel you can use to protect your data from anyone who wants to access it.” (17:08)

• Backup Devices and Dispose of Old Ones Securely: Ensures that personal data isn’t accessible if devices are lost or sold.

  Quote:
  “Back up your devices on an external hard drive and dispose of old devices securely.” (15:15)

• Use Credit Monitoring Services: Services like Deleteme or Incogni can help remove personal information from databases and monitor for suspicious activity.

  Quote:
  “If you are able to, consider a credit freeze. It keeps people from being able to access your credit report for creditors to open new accounts.” (15:58)

---

6. Takeaway 4: Don't Panic if Your Data is Breached – Respond Calmly and Effectively

Data breaches, while alarming, can be managed effectively with the right steps. Megan Cox advises consumers to remain calm and take immediate actions to mitigate potential damage.

Actionable Steps:

• Monitor for Fraudulent Activity: Use resources like haveibeenpwned.com to check if your email has been involved in known breaches.

  Quote:
  “Websites like haveibeenpwned.com where you can enter your email address and see what breach has potentially been involved in.” (21:28)

• Freeze Your Credit: Prevents unauthorized access to your credit report, blocking new credit accounts from being opened in your name.

  Quote:
  “Credit freezes are free. Take only a few minutes and you can thaw them at any time.” (16:26)

• Report Identity Theft: File a report at identitytheft.gov to start a paper trail and receive guidance on mitigating effects.

  Quote:
  “If someone does attempt to use your personal information to impersonate you, you can file a [e-mail] and they will walk you through the next steps.” (21:08)

• Change Compromised Passwords: Immediately update passwords for any accounts that may have been breached.

  Quote:
  “If your information has not been misused yet, you don't necessarily need to make an FTC identity theft report, but you can still go to the website to learn about all those next steps.” (22:18)

---

7. Recap of Key Takeaways

1. Understand the Risks: Conduct a personal risk assessment to identify valuable digital assets and potential vulnerabilities.

2. Don't Be an Easy Target: Employ strategies like using password managers, enabling multi-factor authentication, and practicing polite paranoia to protect your data.

3. Clean Up Your Digital Environment: Regularly declutter your online presence by deleting unused apps, managing privacy settings, and using protective tools like VPNs and antivirus software.

4. Don't Panic if Breached: Respond calmly by monitoring for fraudulent activity, freezing your credit, reporting identity theft, and updating passwords.

Final Words from Sam Yellow Horse Kessler:
“Think of this like your home security. Not everyone needs round the clock guards and watchdogs. For most people, just taking common sense precautions can make you less of a target.” (22:26)

---

Conclusion

This episode of Life Kit serves as a comprehensive guide to navigating online privacy in an increasingly digital world. By understanding the risks, taking proactive measures to protect personal data, maintaining a clean digital environment, and responding effectively to breaches, listeners can significantly enhance their online security and peace of mind.

Transcript

[Advertiser]

This message comes from Progressive Insurance and the name your price tool. It helps you find car insurance options in your budget. Try it [e-mail], progressive Casualty Insurance Company and affiliates. Price and coverage match, limited by state law. Not available in all states.

[Mariel Segarra]

You're listening to Life Kit from npr. Hey, it's Marielle. If you have ever used the Internet, which, given the fact that you're listening to a podcast right now, I think you have, then your data is up for grabs. Things like your full name, your date of birth, what websites you visit, and your location, among many other things. There are people who are very interested in your data. I mean, it seems like every day another company's admitting to a data breach. Just a few examples from the past couple years at and T, Ticketmaster, Yahoo, Facebook and the data broker National Public Data have all experienced breaches that compromised millions of private records. This has been very concerning for Sam Yellow Horse Kessler. He's a producer for the Planet Money podcast.

[Sam Yellow Horse Kessler]

We worked on this episode about the illegal and legal markets for your data and I've previously kind of had this stance of like, well, it's my data, but I'm not really using it. So like, if somebody else wants to take it for a spin, you know, that's all fine with me. But the more I learned about what people are using my data for and how they can access it, the more just like nervous I became like right in the pit of my stomach.

[Mariel Segarra]

On this episode of Life Kit, Sam is going to talk to experts about what kind of data about us lives on the Internet, who wants it, why, and of course, what steps you can take to protect yourself.

[Advertiser]

This message comes from Capital One. Your business requires commercial banking solutions that prioritize your long term success with Capital One. Get a full suite of financial products and services tailored to meet your needs today and goals for tomorrow. Learn [e-mail] Commercial Member FDIC support for this podcast and the following message come from Indeed. You just realized your business needed to hire someone yesterday. Indeed Sponsored Jobs helps you stand out. According to Indeed data, sponsored jobs posted directly on Indeed have 45% more applications than non sponsored Jobs. Speed up your hiring right now with Indeed and get a $75 sponsored job credit to get your jobs more visibility@ Indeed.com LifeKit terms and conditions apply. Hiring Indeed is all you need. This message comes from ServiceNow. People should do the creative work they actually want to do, not boring, busy work. Now, with AI agents built into the ServiceNow platform, you can automate millions of repetitive tasks in every corner of your business, it, HR and more so your people can focus on the work that they want to do. That's putting AI agents to work for people. It's your turn. Get [e-mail] AI-agents support for this podcast.

And the following message come from Mint Mobile this Summer chill to Mint Mobile's premium wireless service on the nation's largest 5G network. Skip breaking a Sweat and Breaking the bank. All plans come with high speed data and unlimited talk and text. Get your summer [e-mail] kit upfront payment of $45 for 3 month 5GB plan required equivalent to $15 a month new customer offer for first 3 months only then full price plan options available, taxes and fees extra. See Mint Mobile for details.

[Sam Yellow Horse Kessler]

So the more I learned about how my data lives online, the more the more anxious I found myself becoming. I wanted someone to help alleviate that. So I went and spoke with Rebecca Skeet, the COO of Black Girls Hack. It's a nonprofit focused on training in technology and cybersecurity.

[Rebecca Skeet]

I've existed on the Internet for most of my life, right?

[Sam Yellow Horse Kessler]

And during that time I've had many accounts.

[Rebecca Skeet]

I've been on Twitter, I've been on Instagram, I've had a Neopets account. Club Penguin probably has my Social Security number at this point.

[Sam Yellow Horse Kessler]

Like, am I already screwed? Like, is everything already out there that could be out there?

[Megan Cox]

Um, I'm not going to say everything. Is there a possibility or likelihood that you have been impacted in some way by some breach at some point? Then? The. The short answer to that is yes, it's possible. Is it likely? Probably.

[Sam Yellow Horse Kessler]

Okay, so Rebecca, not exactly coming in hot with the silver lining, but she did help me understand better that even though the digital genie might already be out of the bottle, I do have some control over the situation.

[Megan Cox]

I think the first thing that you can do is take power in the ways and the opportunities that you have to take power in. I read this quote one time that said that action is the antidote to anxiety. So what action can you take?

[Rebecca Skeet]

What action can you take? How can you do things like protect your Social Security number and credit score? Strategies like these are what we're going to be going through in today's episode. But first, I wanted to understand, before I take any action, what's at stake here. Does my digital footprint really matter all that much? Which brings us to our first takeaway, understanding the risks and understanding your risks. Anyone is susceptible to identity theft and the consequences can be dire, but it's also up to each individual to determine what exactly is at stake for them and what action they can take to best ensure their protection. To better understand my digital risks, I spoke with staff attorney for the Federal Trade Commission, Megan Cox. She's helped prosecute cases relating to online privacy and data security. She helped me define some questions like who should I be worried about getting their hands on my data?

[Sam Yellow Horse Kessler]

When I hear about bad actors, people.

[Rebecca Skeet]

Don'T mean like Nic Cage, right? They mean like something else.

[Sam Yellow Horse Kessler]

Like what is a bad actor online? Like, what do they, what do they do?

[Expert]

When we're talking about bad actors, we're talking about identity thieves and fraudsters.

[Sam Yellow Horse Kessler]

I should say no shade to Nic Cage. He's still my favorite Superman.

[Expert]

So to take a step back, I think defining the term identity theft is helpful. It's when someone's using your personal or financial information without your permission. It can include stealing your name and address, credit card, bank or account or financial information, Social Security number, or even your medical insurance accounts and information.

[Rebecca Skeet]

Identity thieves might buy expensive tech with your credit cards. They can open up new credit cards or new accounts in your name. They can also start utilities, electricity, phone, gas accounts using your identity. They can steal your tax refund if they file a tax return before you get to it. They can use health insurance to get medical care and let you foot the bills. And importantly, in many cases, they can destroy your credit score and leave you unable to get a line of credit in the future. This is all if you lose a hold of your pii, your personally identifiable information. This means things like your Social Security number, your ssn. You can take steps to protect your SSN by not carrying your card with you, destroying documents that have it written down and calling the Social Security Administration and asking them to place a self lock on your ssn, which would make it harder for anyone to access your Social Security records. But it also may make applying for a job harder. So make sure to unlock it before you a job hunt. You should also take care to not share freely information like your full name, your date of birth, your address or your financial information.

[Expert]

But there are other numbers that might not immediately come to mind as ways to perpetuate fraud or create risk of identity theft to you, like a passport number or a lost driver's license. There are ways that those forms of identification can be misused and cause problems. So we urge everybody to try to keep as much as their information and these documents secure and in your possession.

[Sam Yellow Horse Kessler]

While protecting your most essential information like your SSN is crucial for everyone. Our Experts recommend doing a kind of personal risk assessment. What assets do you have? What's at risk for you? Do you have a high or low.

[Megan Cox]

Risk tolerance for someone who is an influencer, their risk profile is going to be different. For me, I don't have to share the level of things that someone whose livelihood is derived from what they do online. They're going to have to share locations and things like that, but they can still be mindful of how they do it.

[Rebecca Skeet]

We're going to discuss the ways to protect yourself and your data. But all of these may not be applicable or useful to every individual. Think of it like a toolkit and you can pick and choose what tools you need. Rebecca with Black Girls Hack does want to make sure everyone understands that even if you think you may not be a target for identity thieves, you may still be at risk.

[Megan Cox]

Because I've heard a lot of people say, ah, well, if they get into my bank account, they're not going to be able to get much or whatever else. But if there are 100 people who have a dollar, you still get $100. If you get those hundred people, you know, and so they're not looking at it, hey, I have. This person only has $1. It's look at all of this low hanging fruit and consider that you may.

[Sam Yellow Horse Kessler]

Not even be the main target. It could be your company or a family member. The data you've shared online can be leveraged to convince someone else of something that isn't true. Like that you're being held for ransom. Say Rebecca says when it comes to theft, you may not have to take every effort. But employing some basic protection can at least make it difficult and expensive for identity thieves to get your information, which may be enough for them to look elsewhere for targets. That brings us to our second takeaway. Don't be an easy target. You can adopt a healthy skepticism to every interaction online. Rebecca calls this polite paranoia. It's a term coined by Rachel Toback with Social Proof Security. This means asking questions about how your data is going to be used, pausing and thinking twice before you hand anyone your pii.

[Megan Cox]

And then be cautious, you know, with what you share online. You mentioned all those different platforms and places where your information may lie. We can still be guarded and cautious with the information that we share.

[Sam Yellow Horse Kessler]

Like before you fill out an online quiz or before you jump on the hot new meme, pause and think twice.

[Megan Cox]

I used to love the things of what's your Bridgerton name? It's the street you live on and it's your dog's first name. While you can do that internally, you can play the game and maybe text it to your friends. Don't post that online because oftentimes those questions and things that folks ask are portals into your personal information that people often leverage for their passwords and things like that.

[Rebecca Skeet]

They had one of those for npr.

[Sam Yellow Horse Kessler]

It was like your favorite pattern of.

[Rebecca Skeet]

Clothing and then what you had for breakfast this morning.

[Megan Cox]

The answer has absolutely nothing to do with anything pertinent to me. But argyle pancakes sounds fantastic.

[Sam Yellow Horse Kessler]

So right there you can hear Rebecca does a quick risk assessment. You know, am I asking her for any personal information that can be leveraged against her? And she says she did the same thing when I first reached out to interview her. She paused, considered if what I was asking from her was suspicious or crossed a line, and then made an informed decision.

[Megan Cox]

Ask questions. If something feels weird, ask questions. And because usually if it feels weird, it kind of is, you know, and it's okay to say you need this information. Why? What are you doing with it? It might not be you, but what if someone is able to leverage you, leverage the connection of being you, acting like you, or saying that they know you to then infiltrate or take advantage of a family member or your work.

[Sam Yellow Horse Kessler]

A method Rebecca champions is called Take nine, meaning take nine seconds at least to think over any requests for your data online. Take 9 is also the name of an initiative between several cyber organizations. They encourage Web users to take basic Internet safety measures to ensure we all experience a safer Internet. Some of the methods they and other experts recommend include updating your software often because companies use updates to fight the latest malware.

[Rebecca Skeet]

You should also restart your devices at least once a week to apply software updates and improve performance. And you should be using unique, strong passwords. You can also consider using a password manager. Some Popular ones are 1Password, LastPass or NordPass. One thing that I just kind of.

[Sam Yellow Horse Kessler]

Have been wondering for a minute now is like, when you use a password.

[Rebecca Skeet]

Manager, you're giving them everything. You're giving them passwords to all of your stuff.

[Sam Yellow Horse Kessler]

And like, is there a risk?

[Megan Cox]

Not a high one. Because password managers employ, you know, they have strong encryption and other security measures to protect your passwords.

[Sam Yellow Horse Kessler]

Rebecca says password managers are often built with zero knowledge architecture, meaning the manager doesn't have access to your passwords, nor do they have the key to your passwords. You're the only one who can access it, even if they get infiltrated. But she says if you're still worried, you can take things one step further. Say your password Manager has an autofill function. You can also add a special character at the end that only you are aware of, like a punctuation mark or a favorite number.

[Megan Cox]

My password is password32 think. Okay, why 32? Because in love and basketball that was the number of Monica, the lead character.

[Rebecca Skeet]

And now you can never use that because you.

[Megan Cox]

Right. No, and I wouldn't.

[Sam Yellow Horse Kessler]

You should also turn on Multi Factor Authentication or Two Factor Authentication. That's where besides entering a password, the site sends you a code via another method to ensure you're really you.

[Megan Cox]

The benefit of having that Two Factor Authentication in place is that even if someone were to get your password, they don't have that second factor and it can at least be a block for a potential intruder.

[Rebecca Skeet]

One of the preferred methods is through an authenticator app like Duo or Google Authenticator. I should note Google is a financial supporter of npr. You can also get a physical passkey which plugs into your computer and enters a code automatically. Those aren't free, though, typically and are susceptible to loss. You can also get a code via SMS text, but experts feel this is less secure because identity thieves can SIM swap or take control of your phone number and intercept your messages.

[Megan Cox]

It is better than nothing because at least there's some secondary step in place. But it would be of them the least protective.

[Sam Yellow Horse Kessler]

So maybe try authenticator apps first. Now you've got Multi Factor Authentication set up. You've got a password manager. You're being politely paranoid. You're taking nine. Congratulations. You are no longer the easiest target out there. And fortunately, after you've taken these steps, you can mostly forget about them. They're passive. Which is why you should also take some time, semi regularly to be active when it comes to your data. Which brings us to our third takeaway. Clean up your digital environment just like you would your living environment.

[Megan Cox]

I do a digital spring cleaning.

[Rebecca Skeet]

So delete unused apps, remove extensions, go through your accounts and web browsers and review your data and privacy settings and delete your browser history, clear your cache, double check your public accounts to make sure they are not sharing any unwanted information. People delete those old tweets.

[Megan Cox]

It's a good opportunity that ideally we should do it more frequently or as frequently as possible. But realistically, it's not something that people can do once a month or once a quarter. So at the very least, if when you're doing your physical spring cleaning, you do a digital spring cleaning and clear out those applications, you know, check to see the different extensions that you have that you don't necessarily use anymore. See what information those things are gathering.

[Sam Yellow Horse Kessler]

Back up your devices on an external hard drive and dispose of old devices securely. This is to make sure they don't fall into the hands of bad actors who can dredge up information from any drives they come into possession of. This would also be the time to change your passwords, but remember to use unique, strong passwords for every account. You may also consider using a data removal service if you can afford it, like Deleteme or Incogni.

[Rebecca Skeet]

They can check for your personal information across different databases and remove them for you. You can also consider a credit freeze. A freeze blocks access to your credit report so no one can open a credit card or get a loan in your name. You can do this with any one of the big credit reporting agencies, like what Megan cox of the FTC calls the big three Equifax, TransUnion and Experian.

[Expert]

If you are able to, you can consider a credit freeze. And this keeps people from being able to access your credit report for creditors to open new accounts. So if somebody wants to check your credit before giving it a new credit card, a new mortgage, they would be checking your credit report. And if it's frozen, they can't see it, and so they're very much less likely going to extend credit. So in that case, a fraudster would be blocked from opening a new credit account or a new mortgage, for example.

[Rebecca Skeet]

Credit freezes are free. Take only a few minutes and you can thaw them at any time. Like if you need to apply for a loan or an apartment, just make.

[Sam Yellow Horse Kessler]

Sure to give it a little bit.

[Rebecca Skeet]

Of a window for the thaw to go into effect. You might also consider using a credit monitoring service. These agencies offer them and so do other companies like Lifelock. Those can detect potential fraudulent activity, track your credit score and give you access to your credit reports, and sometimes offer tools and tips to boost your credit score. Now, I should note that even these big credit reporting agencies experienced data breaches in 2017. Equifax, one of the big three, fell victim to a data breach itself that exposed the personal information of 147 million people. Experian suffered a similar breach in 2015, though not as severe. Also, when you sign up for credit monitoring, a company's terms and conditions may ask you to waive your rights to sue the agency and may ask your permission to use and share the information on the legal data market.

[Expert]

I think it's an individual bargain that every consumer kind of has to determine for themselves. If engaging with a credit monitoring service would be a pro for them and outweigh any of the cons that they might see from data being used. I would urge them to, in that case, read the terms and conditions to understand if they can opt out of any of that.

[Rebecca Skeet]

It's true, you can opt out from the big three selling and sharing your personal information. You just have to follow the steps on the website's privacy page. So that's in regards to the legal sharing and selling of your data. But going back to your personal risk assessment, do you prefer to have credit reporting in case your data gets leaked, knowing that your data might be at risk of a leak? With one of these big three credit reporting agencies, that's ultimately up to you to decide. Another item for your digital spring cleaning Consider using antivirus software or what's known as a vpn. A VPN or a virtual private network is like a tunnel you can use to protect your data from anyone who wants to access it. Like identity thieves or data harvesting companies, many people choose VPNs to provide more private browsing. But you should also be cautious about VPNs since whatever company offers it will have access to that data. And just like all the other strategies we're talking about today, they're not Bulletproof. Experts recommend ProtonVPN or NordVPN for the.

[Sam Yellow Horse Kessler]

Best privacy at low or no cost.

[Rebecca Skeet]

And if you are worried about cost, Rebecca says, you don't always have to shell out on privacy products. A lot of products come native to your device. You can start there and see if it's doing the job you'd like it to.

[Megan Cox]

Just because it's free doesn't mean it's good. But just because it's free also doesn't mean that it's bad.

[Sam Yellow Horse Kessler]

And on that note, one more practice to pick up during your digital spring cleaning. Talk to your friends and family about their digital environments. Encourage them to do their own personal risk assessment. Walk them through the different tools that are available to them. This goes for the less tech literate or, say, children learning how to interact on the Internet for the first time. Megan recommends talking them through the digital best practices and understanding what information they shouldn't share online. She also recommends freezing their credit, at least until they're old enough to begin doing things like taking out a student loan or renting an apartment and then.

[Expert]

Finally locking down their social networks so that they're not sharing information more broadly than they are intended or communicating with individuals that parents might not be aware that they're communicating with when they're you know, starting online as a new digital.

[Sam Yellow Horse Kessler]

Citizen, I should say similar to fighting infectious diseases, if each individual does their part to protect themselves, we all become a lot safer in the digital world. And by the way, not all of this has to get done immediately. Any little bit helps. Maybe today you set up a VPN and a week from now you change five of your passwords. Or maybe you set aside an afternoon to do a total clean sweep, checking off all of the above. Remember, action is the antidote to anxiety. So if you're feeling anxious, combat it with some small action to take charge of your digital security. But what if the worst happens? What if we do end up having our data leaked in a breach? Well, that brings us to our fourth and final takeaway. Don't panic. Megan Cox has been there before.

[Expert]

I have received a lot of letters about different data breaches, exposures of information and some they range in the circumstances they provide about what might have happened or what information is exposed and different offers that you might get as the consumer who's impacted.

[Sam Yellow Horse Kessler]

This would be the time to see what offers the companies are giving you. They may offer you free credit monitoring, credit reports or credit freeze, all of which you can consider with the caveats we mentioned before.

[Expert]

So if you receive a letter in the mail saying your data has been exposed, we would urge you to go to identitytheft.gov and find out what you can do next to learn about steps to take to mitigate any potential harms.

[Rebecca Skeet]

If someone does attempt to use your personal information to impersonate you, you can file a [e-mail] and they will walk you through the next steps there. It is important to begin a paper trail validating the identity theft that may help you in the future, like if.

[Sam Yellow Horse Kessler]

You have to go to court.

[Rebecca Skeet]

Rebecca says you most likely will have to be vigilant after that point about suspicious activity.

[Megan Cox]

If you have been compromised, there are websites like haveibeenpwned.com where you can enter your email address and see what breach has potentially been involved in and it'll also say what information might have been compromised.

[Sam Yellow Horse Kessler]

This would also be the time to go back to our previous takeaways and if you haven't taken action, start now. Do a digital cleaning, lock down your accounts, set up two factor authentication and delete apps and accounts you no longer need.

[Megan Cox]

And then from a financial credit card account standpoint, make sure that you're watching your charges or new accounts open in your name. And if you see something that looks anomalous place you know a fraud alert or credit freeze with major credit bureaus. Don't waste time berating yourself. Pivot okay, if it's something if it's a personal email, you think your email has been your password has been compromised. Change your password.

[Expert]

And if your information has not been misused yet, you don't necessarily need to make an FTC identity theft report, but you can still go to the website to learn about all those next steps.

[Sam Yellow Horse Kessler]

Steps so I know this all can be overwhelming, but it doesn't have to be. Think of this like your home security. Not everyone needs round the clock guards and watchdogs. For most people, just taking common sense precautions can make you less of a target and you can always reassess and pivot. Our experts recommended just a skeptical disposition and to always be aware of your.

[Expert]

Risks, consumers should be vigilant. I think that there's a lot of data that's circulating in our ecosystems, whether it's on social media or your device or on the different WI FI networks you're navigating to. You know there are vulnerabilities in these systems and so understanding that your data is circulating out there and taking steps that make sense for you.

[Sam Yellow Horse Kessler]

On that note, it's time to recap our takeaways. Takeaway 1 Understand the risks and understand your risks. Assess your personal stakes. What assets do you have that are vulnerable and how can you protect them? Do you have family members or company information that bad actors may be interested in? What tools are available to you to help address those takeaway 2 don't be an easy target. Make it slow and expensive for someone to get your data. You can do this by using a password manager, turning on automatic updates and using multi factor authentication for your accounts. And remember, if someone asks for your personal information, be politely paranoid and take nine seconds to pause and evaluate your risks. Takeaway 3 Do your digital spring cleaning, clean out apps, extensions and update your public facing accounts. Consider products like credit reports, VPNs or antivirus software, but understand the risks associated with those and know you can always begin with free software before investing in paid products. And talk to your family about their risks and best practices. If your data gets leaked, don't panic. Change your passwords and stay updated on the situation using either a credit reporting agency or have I been pwned? Or both. To know if your information is out there, you can visit identitytheft.gov to go through your options.

[Mariel Segarra]

That was producer Sam Yellowhorse Kessler for More Life Kit. Check out our other episodes we have one on avoiding scams and another on how to spend less time on your phone. You can find [e-mail] LifeKit and if you love Life Kit and you just cannot get enough, subscribe to our [e-mail] also. We love hearing from you, so if you have episode ideas or feedback you want to share, email [e-mail] this episode of Life Kit was produced and reported by Sam Yellow Horse Kessler. Our visuals editor is Beck Harlan and our digital editor is Malika Garib. Megan Kane is our senior supervising Editor and Beth Donovan is our executive producer. Our production team also includes Andy Tagle, Claire Marie Schneider, Sylvie Douglas and Margaret Serino, who also provided production help for this episode. Engineering support comes from Zoe Vangenhoven. Special thanks to Amanda Aronczyk, Keith Romer and Meg Kramer. I'm Mariel Segarra. Thank you for listening.

[Advertiser]

This message comes from NPR sponsor Shopify. Shopify is the commerce platform behind millions of businesses around the world and 10% of all e commerce in the US from household names like Mattel and Gymshark. Get started with your own design studio. With hundreds of ready to use templates, Shopify helps you build a beautiful online store to match your brand's style. If you're ready to sell, you're ready for Shopify. Sign up for your $1 per month trial and start selling [e-mail] NPR support.

For this podcast and the following message come from Thrive Market. Built for those who value transparency in their food organic first clean label groceries all delivered get 30% off and a $60 [e-mail] podcast. This message comes from Mint Mobile. Mint Mobile took what's wrong with wireless and made it right. They offer premium wireless plans for less and all plans include high speed data, unlimited talk and text and nationwide coverage. See for [e-mail] Switch.