In light of the recent National Public Data breach, we caught up with our friends Jay Longley and Todd Knapp at Envision Technology Advisors to hear their thoughts on the most effective ways to protect yourself and your loved ones from a data breach.

Q&A with Jay and Todd

Q: Jay and Todd, in light of the National Public Data breach, many people are worried about their friends and family, especially those who are not tech friendly. What’s the number one piece of advice you share with loved ones?

Jay: You want to make sure your credit is locked and frozen amid a data breach. I have found it to be very helpful to sign up for text alerts so that I’m notified of every transaction on my credit card, even as little as a $1 charge. This allows me to see any suspicious charges right away so I can act accordingly.

Q: With so many accounts across a wide range of websites and applications, how can you ensure that your passwords are strong, but easy to remember and keep track of?

Todd: It can be tempting to use the same usernames and passwords across the board for ease and simplicity, but if a hacker gains access to one of your accounts, they could easily breach others if you use the same credentials. It’s wise to use a password manager to keep track of all your usernames and passwords.

Q: What should you look for in a password manager?

Jay: When it comes to password managers, there are quite a few options out there. I personally like to look for certain features in a password manager. I want to make sure that I own my data no matter where it is. I don’t want the company to own my data. Also, I look for password managers that work cross platform, no matter what device I’m using (iPhone, Android, laptop, etc.) I also look for password managers that monitor the dark web. If they find one of the passwords that I’m using in a breach, I will be alerted to it so I can act on it before it becomes a problem for me.

Todd: Yes, I agree Jay. To your point about owning your own data, I also think that’s a big deal. I want my identity under my control. A credential manager should ask you for a unique encryption key or provide a randomly generated encryption key when you set it up. I want to know that my information in their database is secured, it’s encrypted—even the developers at that company should not be able to gain access to my credentials. This helps ensure that if they get hacked, I don’t go along for the ride.

Q: What do I do if I get notified that I’m impacted by a breach?

Todd: Change your credentials right away! Or, cancel the service and go to a service provider that supports passkeys or centralized identity.

Q: What is centralized identity?

Jay: Centralized identity is a system that stores user identity data in a single location. I personally use Microsoft Identity Management. The platform knows who I am as a person, what devices I use, sites I go to. It understands me and my fingerprint.

Q: Do passkeys have similar benefits?

Todd: I always look for the passkey feature. Passkeys connect your identity to the security chip on your device so nobody has the ability to log in without biometrically signing into your local device. Examples of this include facial recognition, fingerprint ID, Windows Hello for Business, etc. If every time I need a password my identity tool has to be biometrically accessed, I know that somebody can’t just access the identity tool and be able to steal my identity.

The National Public Data breach serves as a stark reminder of how vulnerable we can be when our data falls into the wrong hands. Consider the benefits of password managers, centralized identity and passkeys to strengthen your defenses.

Confused, overwhelmed or in need of advice? We’re here to help you become future ready. Connect with Jay or Todd.

About Jay:

Jay is a seasoned tech professional with over 25 years of experience in the industry. His accomplishments have garnered him prestigious national and state-level awards, notably earning the title of Businessman of the Year in the State of Rhode Island. Jay's expertise in cybersecurity is particularly noteworthy as he plays a role in the Joint Cyber Task Force and serves on Envision's CxO team. His proficiency in deploying zero trust and designing cybersecurity solutions has been instrumental in safeguarding the operations of governments, non-profits, schools, publicly traded companies, and many more

About Todd:

Todd has been providing IT services nationally for over 25 years and draws inspiration and insight from participation in a wide range of executive boards and industry associations. He has an extensive background in strategic planning and implementation of business technology solutions, and founded his firm Envision Technology Advisors. As a presenter, Todd speaks throughout the country on a variety of technology and business topics including: Modern Workplace, Digital Transformation, Cybersecurity, and Evolving Digital Culture to fit the Modern Workforce.