It seems that there are VPN advertisements or commercials everywhere now. Each one of them seems to promise similar things: data security, privacy, safety, and more. They also seem to include unsettling or scary information about data breaches, identify theft, and more. I would guess that you have seen at least one of these ads recently, and they have likely made you wonder if you need a VPN. 

I'm here to tell you that you probably don't need a VPN.

What is a VPN? 
In it's simplest form, a VPN encrypts and re-routes your internet connection through another server (which is hosted by the VPN provider). The purpose of this is to add an extra layer of encryption and privacy as you interact with the internet. 

VPNs are most commonly used by companies to restrict access to resources, connect secure networks between office sites/locations, and segment their networks. However, VPNs have gained popularity for consumers in recent years, as consumer focus on privacy has increased. 

What are the benefits?

Some of the main benefits of a VPN include: 

• Ensuring all internet traffic is encrypted.
• Making it harder to track online activity. 
• Routing traffic through another location or geography.
• Securely connecting remote resources together.

That sounds great, do I need one? 

VPNs undoubtedly provide security and privacy benefits. However, it is important to weigh the benefits against the cost. A good VPN service will cost money. It will also require some setup and configuration to operate properly. 

It's also important to remember that VPNs do not protect you from all cyber risks. Additionally, a VPN will not make you fully anonymous when online. For example, the VPN provider will have access to your website traffic, and sites like Facebook, TikTok, etc. can still monitor and track you if you login to them.

In reality, there are other, more affordable options that can better improve your online security. These include: 

• Enabling multi-factor authentication (read more).
• Only accessing sites using HTTPS. 
• Using anti-virus and anti-malware software.

"Help! My online account was hacked. What should I do?"

We've all experienced that stomach drop feeling when we realize that something is wrong. When your online account has been hacked or compromised, it can feel like the end of the world. However, now that you know something is wrong, you can act on it. Follow the steps below to get back online, and keep in mind that you can always contact FGM Technology Services for questions, guidance, or assistance.

1. Take a deep breath

The first, and most important thing, is to take a deep breath. You're not the first person to experience this problem, and you won't be the last. Panic will probably just make things worse. So take a deep breath, grab a cup of coffee, and let's get to the next step.

2. Assess the scope of the situation

Next, it's important to figure out how much of your account, or accounts, has been impacted. For example, ask yourself the following questions:

• How do I know my account has been hacked? If I received a text or notification, can it be trusted?
  
• How many of my accounts have been impacted? 
• Do I still have access to my account? Or am I locked out?
  

Sometimes a notification that you have been hacked is actually the attackers attempting to access your account. For example, imagine that you get a text or a pop up message stating your account has been hacked and that you should urgently call a number. This could be a scam. Calling that number may route you to someone who asks for your password or asks you to download and install something, thus providing them with access to your account or device.

It's important to take a step back and figure out whether you can trust the source of the notification. When in doubt, look up the actual company phone number and contact them. Or you can always contact FGM Technology Services for assistance.

3. Reset your password (if you can) and delete any downloaded files/programs

If you still have access to your account, then the next step should be to reset your password. This ensures that whoever accessed your account no longer has the correct password. Once this is done, you should be able to move on to the next step. 

If you do not have access to your account, or your locked out, then you should try to use the "forgot my password" option when logging in (if there is one). If that is not available, or it is not working, then you will need to contact the account provider and ask for their assistance. 

After changing your password, it's also a good idea to delete any suspicious files or programs that you may have recently downloaded. This is a precaution to ensure there aren't any malicious files still stored or running on your device. If you still have concerns, please contact FGM Technology Services for a more thorough review and investigation. 

4. Assess the damage and begin cleanup

Once you have changed your password and gained (or regained) access to your account, then the next step is to assess the damage. How much damage was done, or could have been done? Once you have thought about it, it's time to begin reverting or cleaning up after the attackers. 

For example, if your social media account was hacked, then you should review and delete any recent posts or messages that the attackers may have sent. It is also recommended to notify your online friends or connections that your account was recently hacked, so they can be extra cautious of any suspicious messages they may have received (or will receive). 

If your hacked account involved or contained any financial information, then you should contact your financial institutions to notify them of the situation. This will ensure that your financial institutions are aware and can help protect you, as necessary. 

5. Improve your online account security

Finally, now that you have resolved the immediate concern, it is important to think about what happened and how you can better protect yourself in the future. For example, the following actions can all help reduce the chances of having your account hacked or compromised: 

• Enable multi-factor authentication on your accounts (read more).
• Closely review the sender of an email before clicking on any links or attachments.
• Don't navigate to suspicious websites or open suspicious links, attachments, or files.
• Use a different password for each online account.
• Enable security notifications on your accounts, where possible.

When in doubt, please contact FGM Technology Services. Let's get you a customized quote and address your questions, concerns, or issues.

What is the most important change that can be made to secure online accounts? The short answer is multi-factor authentication (MFA). 

Online account security can seem overwhelming, especially when you're not sure who to trust. While security is a complex topic, multi-factor authentication is one change that will have a profound impact on online account security. In fact, Microsoft states that enabling multi-factor authentication will prevent 99.9% of attacks on accounts. 

What is multi-factor authentication? 

Multi-factor authentication, also known as two-factor authentication (2FA), is a process in which two or more verification methods are needed to login to an account. For example, someone using MFA might need to do the following to login to their account: 

1. Type in their password.
2. Type in a code that was sent to their phone number, email, or authenticator app.

Further reading: 

• One simple action you can take to prevent 99.9 percent of attacks on your accounts (microsoft.com)
• What is Multi-Factor Authentication (MFA) and How Does it Work? (onelogin.com)