#1 Cybersecurity Expert Reveals: 5 Ways to Protect Yourself Online (Starting Tonight)

23:01One is it depends on your browser, right? If you have Google and you use Google Chrome and you're saving it on your browser, and if anyone is able to access your Google Chrome on another computer because you reuse your password, they might be able to get your password from that. But most of the time, browsers is actually stored locally. So the only time there really could be a real issue is if they actually physically steal your computer, which is not necessarily likely. So the browsers aren't as bad, in my opinion, as like an unlocked note app. As a cybersecurity expert, you say never use your mom's maiden name for security questions.

23:39Yeah. Why? You'd be so surprised at how much data is out there on us. It is very easy now to find your like parents' full name and parents' address, your kids, your friends. Like you can see, and if you Google me or if you used to Google me, you'd be able to see like my brother, my sister, my grandparents, where each of them lived, even IP addresses. So it's all public knowledge. Again, OSINT is open source intelligence. And a lot of times people are like, oh, I'm going to get hacked. And it's not a complicated hacker. It's literally someone that's like doing their research on you and finding out the answers to your security questions.

24:14So think about all the security questions, right? Like your high school, that can easily be found out. Like your mother's maiden name also easily found out. And it just, the more information that you put out there online, the more information you're giving these people that it's easy for them to hack. And I wanna give you a little story. So there is a company that I have been like partnering with and they really specialize in OSINT, which is open source intelligence. and they have been able to generate emails and try to find like basically everything about you within 20 seconds using AI. They like scrape all of anything open, which is if you've ever created a wedding registry, all of your social media posts, anything that you've ever said online.

24:54And they've been able to piece together who people are in like 30 seconds from that. They even found the name of someone's dog because on their wedding registry, they had a dog bow and it said like for Archie And it was like, their dog's name is Archie. AI is so crazy and it's so easy to be able to pull information out from anything that's open. So again, Facebook posts, social media posts, TikTok, blogs, news articles, wedding registries, anything that you've ever like sent to someone that's about you that they can read, that's not like locked down, can all be scanned in a matter of seconds. And so I don't need to give my mom's maiden name as a security question because it's pretty easily accessible at this point.

25:39What, like, do you just pick a different one? Yeah, separate persona. Okay. Like, again, my persona has, like, the same, I create a persona and I have, like, the same four or five security questions and I have, like, a whole, like, monologue in my head about, like, who this person is. I need to do this. And it's not, it seems a little difficult, but it's actually, like, it gets fun. It's like a fun game you can play. Like, I can be a completely different person online. So you, as a cyber security expert, you always do the automatic software updates. Why? Yes, without a doubt. The way that software updates work is usually the software has a hole in it, like a flaw, a vulnerability that hackers have been able to find.

26:18And the reason why a lot of software updates happen is to patch that hole. Say like, hey, we just found out that someone got in doing this, so we're going to patch that. And so they can't do that anymore. Really? I thought that they were updates because the software is getting better. It could be both. But you can now find out what the software updates about. So I just when they say fix bugs, I mean, holes that hackers. That's exactly what it is. I'll be damned. And most of them, I was I don't know. I don't have the statistic, but I honestly think that like 90 percent of software updates are to fix some type of bug or vulnerability because hackers are getting so much better.

26:49And like you're only as strong as your weakest link. There are always so many holes when you're building softwares. And so it just better. I mean, what's what's the harm in having an auto update? Again, another thing takes two seconds. Every time you download an app, just have it on auto update. not not a big deal. Once you have that on, then you're good to go. I'm the weakest link. That's what I'm realizing. Everyone is the weakest link. People are the problem, but they're also the solution. OK, and you're I know we're going to get to the solution as you're listening. If you're not panicking as much as I am, don't worry, I'm panicking for both of us because I've made every single mistake.

27:24It's true. And we're all alive right now. So it's good. Now we learn from it. That's true. And I consider myself to be somebody who is pretty savvy around tech, but I am not savvy around cybersecurity is what I'm understanding. Here's one that I found fascinating. As a cybersecurity expert, you never plug your phone into a random charger. Yes. So there's a thing called juice jacking. So if you have like, you know, the USB plugs at the hotel where you can plug it in to charge your phone. Yeah, of course. And every time you say trust this device, right? Because you're like, I need it to charge my phone.

27:55Yes. When you trust it, it can do multiple things. It's not just charging. You can like send and receive things from that port. And so a lot of times in cyber warfare and cyber espionage, like spies would literally manipulate that in certain areas to get information out of your phone and plug. So as a spy, they never plug that in. And it's, to be fair, two second fix. You don't have to plug it in the USB. Just plug it into a wall. It can't happen in a wall. But the USB, there's a way to actually like manipulate it where you can download and receive files from and off phones or even install like bugs onto your phone so they can start seeing.

28:30Is it likely going to happen to people? No. But as a cyber professional, I don't it's not that hard for me to plug it into a wall versus plug it into a USB. You also refuse to think, oh, hackers aren't interested in me. That is like everyone's going to be biggest downfall because it doesn't matter who you are. They just want money. Like, if you are an easy target, you're an easy target. And everyone is going to be an easy target because we were never taught how to protect ourselves. So we're reusing the same passwords, and they're going to be very easy passwords. And it's not that hard for hackers to, like, find one account and then get into another.

29:04It's very easy. And so, again, if you're an easy target, they're going to go after you because they want money. My jaw is already on the floor, and I certainly didn't know a lot of what you've already shared, Caitlin, and there's so much more that we're going to get into. And as you're listening and watching this, I'm guessing you probably didn't know a lot of this either. Do me a favor. Do not keep this information to yourself. Please share this episode with the people you love who you also want to protect. I'm talking your partner, your parents, your kids, your coworkers. This conversation might be just the thing that protects them from making a mistake they can't undo.

29:41And don't go anywhere. After a short break and a few words from our amazing sponsors, Caitlin has so much more to teach you about how to protect yourself online. And I promise you, you do not want to miss the number one scam on Venmo because you and I will fall for this if you don't know about it. So stay with me.

30:08Welcome back. It's your buddy, Mel Robbins. you and I are learning how to protect yourself online, how to stay safe from award-winning cybersecurity expert, Caitlin Sarian. So Caitlin, what's the number one way that people are getting hacked right now? There's two ways, right? There's reusing passwords. So they're getting into their accounts that way, because what people don't realize is they have a lot, a strong base password, I like to call it. So for example, let's just say your base password is let them. It's not, by the way. So I'm not trying to tell you. I'm not that dumb. So you say it's let them and or let them theory.

30:44And then your next password, you're like, oh, I have to update this password again. Let them one. Let them one, two, three. Let them one exclamation point. A lot of people use that same base password and they've had that same base password for God knows how many years. And what hackers can do is in seconds, they can run an algorithm that runs 10 ,000 variations of that base password that was leaked and in the public. Oh my God. And get into your accounts. And then once they're in your accounts, they'll use it to scam other people or use it to scam you. And so there's a lot of issues with reuse passwords.

31:18The main other issue that I see is like actual scams, like call scams or phishing scams on emails. So we're going to go through a lot of them. But one of the call scams that I've heard a lot is the FBI or like some police agency calling. And again, it's not them, but it's really, really obvious. They know a lot of information about you because, again, your information is out there for the public. It's you can buy your information for pennies. Like you can probably buy Social Security number for like two dollars. So it's not that difficult to find. And people get calls and they're mortified. And the way that these calls work, scammers literally know exactly like the psychology behind getting you to react.

31:58What is a scam? They call and they say, oh, my gosh, you missed either like a court hearing or you got a ticket and you never paid. or you miss jury duty. Oh. You have to pay us or we're going to come and arrest you. What? Yeah, it's a whole thing. And they know exactly where you live. They're like, we know that your, you know, parents' address is here. You're here. You've lived at this address for how many years? Like, they go through the whole thing and people are mortified. They're going to get arrested and they're like, we need you to go send crypto. First of all, if anyone needs you to send crypto, let's just be red flag.

32:28But again, you're in the situation. Now, if somebody's asking you to send or wire crypto, it's a scam. It's a scam. But like you're when you're in the situation, it really feels real. Like they're calling your personal phone. They know exactly who you are. They know who you're like married to. They know they know everything. And so these scammers are so, so good at just getting you to react. And so a lot of it is like phone calls or even like just regular phishing scams that we've seen, but they've gotten so much more in hands. Wow. How do you know if you've been hacked? So this is, I mean, it just depends on like what, like if you're talking about your phone or your computer.

33:06Let's go through each one. How do you know if your phone's been hacked? How do you know if your bank account's been hacked? How do you know, like, how do you know if your Amazon account's been hacked? So a lot of times with pretty much any account, you can see who's logged in. Like if you go on WhatsApp, you can see like the last session that it was on. Oh, really? And where it's, yeah, even on your phone right now. If you pull out your phone, you can see who's logged into your iPhone and where they're located. Okay, I gotta go do that. Yeah, it's not that hard to do, but I always kind of look every couple months, I'm like, who has been logged in on my account or on my WhatsApp or on my iPhone or on my Gmail?

33:41You can see, you can go to your Gmail account history, you can go to my activity, and you can see all of the logged in sessions and where they're located. And you can do that with Instagram and you can do that with social media. For me, that's the easiest way to tell if someone's in there because there's a history of who is there and where they're logged in from. And what about like banking? Like I've heard like if you get a weird like hit on your account for like a dollar or two dollars, that's somebody now penetrating a charge before they're going to hit you big. It's harder to do banking because there's so many banking frauds out there.

34:15Like I don't want to tell you to do one thing when like, you know, they do another thing. So, for example, I don't want to say, hey, you're never going to get a text from the bank because a lot of people get text messages. So if you're getting a weird message that you didn't anticipate, every single time I've ever gotten that, which hasn't happened a lot, it's happened once, I immediately call my bank. I, like, go to my bank card, look at the back on the phone number, and get the phone number from my bank. And I call them immediately and say, hey, I don't know what's going on. I just want to make sure.

34:41Because even the fake text messages, right? Right, that you then click through into something. Look real. They look real. So anytime, first of all, this is a separate thing. I never answer phone calls from people I don't know. and my voicemail does not have my name, it does not have a greeting. Because if people are calling me, they know it's me. Hackers use that same thing and they say, one, okay, we're confirming that that's her number now. And two, they're getting your voice to potentially use for voice scams or getting your voice to potentially use to authenticate you into banks. So they can record your greeting saying yes or no, right?

35:15A lot of times if you answer the phone and you're like, they say, hey, is this Caitlin? And I say, yes, that yes can be used to authenticate into a banking phone. So these sound scary, again, but if you don't answer the phone for people that you don't know, and if you don't have a voicemail, you're avoiding it. It's so true. There's so many of us, I'll speak for myself, and I'm sure as you're listening or you're watching this on YouTube right now, that you're doing nothing to protect yourself online. Like you think you are. Right. But as I'm listening to this, I'm just thinking of the huge digital footprint of all the information and the fact that they can then probably spider it to my son's information and my daughter's information and my husband's information and my parents' information.

36:01And just like one giant family tree, it's now one giant digital footprint. What do you say to someone like me and the person who's listening right now who feels so overwhelmed by the idea of needing to protect themselves online. I would just say, again, if you start implementing these simple routines, you'll feel so much more empowered in the future. It seems very difficult, but like I said, okay, so don't answer the phone and don't have a voicemail. That solves your problem right there. Done. Do that for the one thing for the week, and then next week you can do something else. but it's just simple little things that you now know that you're empowered with, like that information to go out and do it for yourself or if you want to keep your voicemail, that's totally fine.

36:49Is it likely that like a hacker is really going to use your name? I don't know, but I'm just trying to tell you what it is and tell you how you can protect yourself. I hear a lot about voice cloning scams and as a family, we have a password, which I am not going to say what it is, Four, the inevitable moment when there is a voice cloning scam that happens so that you can say, what's the password? Yeah. If you feel like something's weird and we have this weird random word. Yeah. That's how you know if it's a family member who's talking about it. Right. So we call it a safe word because you can call it a password too.

37:29A safe word. I like a safe word better. So we call it a safe word. So what happens is these scammers are getting so elaborate and they're literally using our voice from public podcast episodes, TV shows, whatever. Or your social media account. Yeah, social media. It's not that hard to stitch together a few words and try to scam your loved ones. And they pretend to be you and say, oh, my gosh, I'm stranded on the side of a road. Can you please Venmo me a certain amount of money? I just need it to like, I left my wallet. Can you just send it to me? and the only way they can tell, like your family member can tell it's you is if you use that safe word, right?

38:01So let's just say your safe word is green bananas. If my mom gets on a phone with someone that says that they're me, she's gonna be like, okay, if this is really Caitlin, can you please tell me your family safe word? And if I say green banana, she knows it's like, this is a big threat. And so I would rather, it's again, two seconds. The only way you can really tell with these is to have a family safe word or you doesn't have to just be family, but like a loved one safe word. Wow. I know so many people are falling for Venmo scams. And can you explain what they are, why these are so dangerous, and how you can protect yourself?

38:37Yes. So what happens is that scammers literally send you money. Send you money? Yeah, send you money on Venmo, but they're from stolen cards. So they send you money and they say, oh my gosh, I'm so sorry, I sent it to the wrong person. Can you please send the money back? and you're like, okay, well, I mean, that sounds reasonable. Right. Exactly. So all of a sudden, you get a Venmo transfer from somebody. Oh, wow. Okay. And they're like, whoa, who's this? I don't know this person. Then all of a sudden you get a message like, oh my God, I sent it to the wrong person. Can you please, please, please send it back?

39:10Oh my God. Yeah. This is a scam. This is a scam and it's working. And so what happens? So then people send it back because they feel bad. And then what happens is because it's a stolen card, those charges get reversed, but you don't get reversed because you willingly sent them the money. So you're stuck paying these scammers the$200 because the stolen credit card gets reversed. So you actually didn't get the money. Wow. Yeah. So they're advancing you money from a card that's about to get declined. Yeah. And now you're out the$200. That's incredible. Yeah. Wow. I'm sorry. I'm just sitting here like, holy cow.

39:48So is Zelle more secure than Venmo since it's embedded in a lot of banks? I try to avoid Venmo and Zelle at all costs unless I have to. And then I always try to use a credit card wherever possible. Credit card over debit card, because debit cards, it's the same as like Venmo, right? It's like money in, money out. Credit card, they can actually, they're better about reversing charges. Okay, now I have a question. Yeah. So you know how you hear on the news all the time, oh, there was a huge cyber breach at this store, that store, the other store, this one, and all this customer data. I hear that.

40:22I think, oh, I shop there and then I do nothing. Yeah. What should I do if I hear that there's been a big data breach, credit card information at a massive retailer? It seems to be happening every other day now. Yeah. What do you do as a customer? The first thing I would do is update your password immediately. And if it's a really key account, I would turn on multi-factor authentication, which means that you are signing in, not just with a password, but like a code that's sent to your phone or your email or your authenticator app. I'd prefer authenticator app, but we'll get back to that. Okay.

40:53Then if it's like an Experian or type of like, you know, any type of financial bank situation, they're going to be sending you something in the mail to teach you what to do. And they also offer free credit monitoring for you. Sign up for that. It's free. Why not? The main thing I tell people, freeze your credit. Because the issue with those like breaches is identity theft. That's what most people are concerned about is, oh my gosh, I'm going to have identity theft if my social security number and my name and all my information is out there. But they can't commit identity theft if they can't open any accounts in your name.

41:26And they won't be able to open accounts in your name if you freeze your credit. So hold on a second. Yeah. So if you don't need to take out a loan and if you don't need to open a new credit card, then you don't need open credit. You can freeze it. Yeah. And it's very easy. It takes like, and the credit card companies don't ding you if you do that. No, no. Really? No. Oh, I didn't know that was a thing. There's three credit bureaus. It takes maybe five to 10 minutes for each bureau, call them or email them. You can freeze your credit and then you just open it when you need it. And I tell people to do that with their grandparents or parents all the time.

42:00That's a great idea. Because you'll never know if someone is, you know, using your parents' information to create accounts until it's too late. Let's talk about seniors because there's so many listeners that have elderly parents or concerned about their grandparents. And we recently had a very scary issue with scamming related to my mother-in-law and they almost got in. Almost. Yeah. And she would have been all of it gone. All of her savings gone. All of her retirement gone, everything. How can the person listening help protect their parents from online scams? Yeah. So I would first start with freezing their credit.

42:40And I would also start, again, a similar communicating, right? Like there are these scams out there. Like I go to my grandma and I say, grandma, these are the most recent scams, right? Like someone's calling and pretending they're the police. They're going to try to call you. Someone's calling and pretending to be XYZ. if they ever ask you to send money, immediately hang up. And even if they think, if you think, oh, this could be true, I want you to hang up and call this fraud helpline number. So there's actually a fraud helpline number that can walk you through. You could technically have two phones if you want to, and you can be on the phone with the fraud helpline number and they can walk you through what you need to do.

43:18But I think we should go to their house and sit on their laptop and their computer and do the settings that you've talked about. Yeah, multi-factor authentication, make sure their passwords are updated, like specifically banks, you know, 401k, all their like retirement savings, all that, like make sure that is a very strong and unique password. And then turn on multi-factor authentication. And if you're a caretaker, maybe have it go to your phone. Don't have it go to her phone. Because if you're getting an authentication code, you can call your mom and say, why are you trying to get into your bank?

43:51Great. I know that there's a person listening or watching right now who is thinking, I got to protect my kids. So what are the non-negotiable settings? Every single parent, every grandparent, everyone who, if you're listening right now and you have friends who have kids, send this episode to them. What are the non-negotiables that every parent needs to check on their phone and their child's phone tonight. Yes. So for your child's phone, I would make sure that you're on a child account. Like Instagram, YouTube, they all have children's accounts, right? So if you're under a certain age, you can turn on that child's account.

44:32You can also block messages. I would immediately block messages. Okay, so block messages. Yeah, if you're on a child's account, I don't think you can get messages from most of the accounts. Okay. But to me, the thing is open communication and it sounds really, really lame. But if your child knows like, hey, there are a lot of scammers out there and like, don't worry. But if something feels off, just come to me and talk to me because this happens to so many people. Like, they're not going to come to you if you make this seem dark and scary and that they think they did something bad. But they will come to you if you have an open line of communication saying, I'm like, want to protect you.

45:03I want you to have fun online. But I also want you to know that these things are happening. So when you are the parent and you're checking the phone and you're looking at the apps, what are we turning off on the apps? Yeah. Make sure their apps are locked down on private mode. Like no kid should have an open Instagram account. You should only be adding your friends and friends that you have actually physically met in person and that you go to school with or you met at a party or whatever it is. Then I would make sure that you can't message. There's a lot of issues with like Roblox and like kids gaming too, that like people are messaging that are like adults that are like grooming children.

45:40And so I would just make sure that you can't message, you turn on private mode and you turn on kids settings. I personally wouldn't allow kids to have like Snapchat because they think that message disappears. Nothing disappears on the internet. Nothing goes away. Even if it disappears, it doesn't go away and people can screenshot it. don't ever send anything that you wouldn't want like me as your parent to see or your grandparents or whoever else i had a friend who is really into cyber obviously and her nephew was like going to the olympics like world-class athlete in high school like went to the junior olympics met someone online that you know a cute girl that added him on social media she said that she went to a town across.

46:24She like had a mutual friends because she had added his other friends. So he, she thought it was mutual and they just started talking. They never had a call with each other, but they were talking for like three or four months and she sent him a photo of herself. And he then shared a photo because they thought she, he really thought he was, was with her. And it's extortion scams are on the rise and, and it's really, really rampant and, and teenage boys or younger. And they specifically target boys because they know that they're a little bit more willy-nilly when it comes to private photos. But there's two reasons why they do that, right?

47:01The first is they want money. So they were basically extorting him for money saying, I'm going to leak all these photos of you and you're never going to have a career or be an Olympian because I have all these private photos of you and I want money. Or they say, continue to give me more photos because those photos will then be used for another scam. After a little bit of time, he shared it with his aunt who is in cyber and was able to fix it. But there is a really good resource out there. What did she do? Call the police? She knew a lot of people in the FBI. But there is an FBI resource that is free for everyone.

47:36So it's called the Internet Crimes Complaint Center. So ic3.gov. ic3, the number three, dot gov. And it can help anyone. for any internet crime. I just love how clear and practical you are, Caitlin. And I'm willing to admit publicly that I'm making a lot of mistakes here, but I'm also starting to feel very empowered that I can fix this. And I have so many more questions about how you can protect yourself online, but let's take a short break so we can hear a word from our amazing sponsors. And I also want to give you a chance to share this extraordinary information from Caitlin with the people that you care about.

48:18We haven't even covered the five things that she wants you to do as soon as you're done listening or watching this episode. That's coming up a little bit later. We have so many more things to learn from her and to dig into. So don't go anywhere. We'll be right back.

48:41Welcome back. It's your buddy Mel Robbins. First of all, thank you for being here and listening to this and sharing this with the people that you care about. I hope that you're feeling what I'm feeling, which is a little bit like, oh my gosh, I got work to do. I'm taking notes. There's things I'm gonna do as soon as we're done with this conversation to protect myself. I hope you're gonna do it too. Thank you for sharing this information with the people that you care about. And let's jump right back in because I've got so many more questions, Caitlin. What is the first thing you should do the moment your phone is lost or stolen?

49:16So I would actually preface that you should do this before you lose your phone. Okay, what am I doing? So I would turn off the ability to turn on airplane mode when you swipe down. Wait, what? So you know how you can turn on airplane mode and there's like an, you can easily do it if you like swipe down. Oh yeah, you swipe down, you hit airplane. Okay. Because the first thing that like robbers do is they immediately put on airplane mode so you can't track the phone. But if they can't do that because your phone's locked, then the only way they can do anything is to just turn it off and they're going to have to eventually turn it back on so i don't have the airplane mode so easily available on my phone where do you go to do that you can um if you like scroll down to the control center you hold it down and it like starts moving similar to like when you move apps oh yeah you can do the same thing on your control you can yeah and then you can just delete it yeah and now that way you have to go and manually do it then you just go to settings like next time you're on a plane you just go to settings airplane mode and turn it on.

50:09I can do this. Yeah. And I'm going to do this. I personally feel that this is an issue whether somebody has lost their phone, whether somebody has had their phone stolen, whether like they left it somewhere and just feeling like you've got all of this information on your phone. Yeah. You probably have one, two, three, four, five as your unlock screen. I hope they don't, but most likely, you know, that's still like one of the most popular passwords outside of password is one, two, three, four, five. Password? Password is the number one most popular password that is still used to this day. Password?

50:42Yeah. Yeah. Password. I wish I was joking, but I'm not. Wow. So it makes you feel a little better, right? Slightly. What do you, as a cybersecurity expert, what do you think about wearable technology? So this is definitely like everything is a risk, right? Online. Everything that you do is a risk and you have to choose whether you want that risk or not. And I'm going to give you a little bit of an example of how AI is working out right now with all of the data. So we have a ton of data on everyone, right? And by we, I mean like the government, any of the apps that you use, like I used to use a wearable ring that was tracking, you know, my fertility, my sleep patterns, my stress levels.

51:28But can you imagine plugging all that into an AI and how much that would actually know about me? I personally don't feel comfortable giving that information to other people. However, my boyfriend swears by his ring and he doesn't care. So again, this is a risk-based approach. Every company has a privacy policy legally, and that privacy policy states what data they're collecting from you, who they're sharing it with, what they're using it for, and why they're collecting it. So what I usually do is I take that privacy policy. I actually throw it into ChatGBT or Gemini or Perplexity or whatever. And I say, hey, can you please tell me like the high level issues that might come about?

52:10Like, what are they collecting? Because it's a very legal policy. So it's hard to read. It's like made by lawyers. And it's meant, honestly, to confuse you. It is meant to confuse you. They don't want you to know all the stuff that they're doing with your data. So I just throw it in. And then I'm like, okay, they're only collecting this, this, and this. I feel more comfortable. But with wearables, they're really collecting a lot about you as a human being. And sometimes I just don't want that. So if I take a privacy statement, which I think I'm probably like 99.9 % of people, it's like, except all, okay, move on.

52:40I didn't mean to do the thing I was here for. And I were to throw it into Microsoft Copilot. Right. And that's the platform I trust. And it gives me a summary of what this is, what I'm giving permission for this company to do. what are the things I'm looking for? Because I would imagine there's language as a former lawyer. I know. There's language that's like, blah, blah, blah, third party, blah, blah, blah. And then it's just sort of buried in there. What are you looking for that is a red flag as a cybersecurity expert? Yeah, so I'm looking at the types of data that they're collecting. So if they're taking like biometric data or they're taking like really specific, if it's just like a name and an email, go for it, you know?

53:24But if they're taking - Well, because it's fake, the one that you gave them, because you're no dummy like I am. Okay, you're like, you can have my alias, go for it. Exactly. But if they're taking like, you know, my like menstruation data and my sleep data, or like for biometrics or anything like that, I'm like, okay, why are you taking it? And so I ask, what data are you collecting? Why are you taking it? And who are you sharing it with? That is a big thing. So I'm very concerned with who they're sharing it with. Why do they need to share it with these people? I don't know. Maybe it's for like, you know, metrics, statistics.

53:57I have no idea. But some of the like recent like wearables have been sharing with companies that I don't want to be shared with. So if it's really sensitive data, like your health history, nationalities, I would just prefer not to have it. And then if they're sharing it with interesting companies, like why are they sharing it with XYZ? Well, I'm sitting here thinking about the fact that just about everything that I use is now somehow connected to the internet. Yeah. Whether it is the pad that I'm sleeping on and cooling me down at night, whether it's the alarm clock sunrise that I'm waking up to.

54:41I do love that, though. But what I'm wondering is for some of these things, is there an option you can look for that allows you to enjoy the benefit of some of this wearable stuff, but that limits what you're sharing back to their general data pool? Do you see what I'm saying? Yeah. So a lot of times there are options to like look and see like I'm turning this on or this on. Like there are options of saying, hey, don't share my sleep data. Usually those options come at the very beginning. And so a lot of people just blindly accept and say yes, because we're excited. We want to use a product. We want to use a platform, whatever it is.

55:19We want to use the app. And we're like, yes, yes, yes. But I would go back. Usually they have privacy settings or settings in general, like privacy settings. And I would start seeing what they do. And there's some toggles like on LinkedIn. They're starting to use everything that you've posted for their generative AI. So like they're training their AI platform based off the stuff that you post. Well, that's sort of like what happened with Instagram. Instagram did that update where all of a sudden everybody's locations were live and there was a flurry of texting all day long. If you don't know about this, please check your Instagram right now where it just suddenly opted us all in.

55:54And it was crazy because it was every time you opened up Instagram, it was resharing exactly where you were to the precise location. If you had precise location turned on on Instagram, which I would say probably 90 % of the people do. 90 % of people have precise location, Trudon? Well, it's automatic. When you download Instagram, it's automatically on. Wow. Unless you go into the settings, which I made a few videos, like to say like, hey, only like limit access or don't allow at all. So is one of the things that we should do is to take a day and go through every app that we've downloaded and all the settings and look at the privacy and the data settings on those things?

56:34Yes. There's three things that you want to look at. Does it have access to your camera? Does it have access to your microphone? And does it have access to your location? All three of those things, if it doesn't need it, turn it off. Why would it need it? Well, you'd be surprised. If you're using it, yes. But if not, no. So what should the setting be? Only while using the app? Never? Once? It just depends on what your preference is, right? So for example, I ordered Uber Eats last night, And they delivered the wrong thing. And my manager got my phone and was like, don't worry, I'm going to return it for you.

57:06And she went and you have to take a picture of the wrong thing, right? And she's like, oh, you don't have, you didn't give it access. Because I don't need Uber Eats to have access to my camera roll or my pictures or my camera, right? Or my microphone. So she allowed, she limited access to the one photo that she took. And she put that photo on and she took a picture and we went off. But for me, I'm like, I don't think Uber Eats needs to have access to anything ever. And if I need to add a picture randomly, you can allow access to one photo. So are you saying that if you have an app on your phone and like I have where I've given Instagram or whatever access to like my photo library, that it can be in the background scanning my photos?

57:48Oh, it's not can be. It is. Instagram, Facebook, and TikTok have new features in the last like two months where they are scanning the camera roll that you have not posted to give you ideas on how to generate fun reel or post ideas because they're trying to get you on the platform to post more, right? So they're literally, if you gave them access to your whole camera roll, they're scanning it and they're putting together their own version of a potential reel that you might want to post after your trip to Boston. Whoa. Yeah. So we prevent that by saying... Limit access. Limit access. Yeah. So like for social media, I limit access.

58:29I don't say never because obviously I have to post and I have to put photos on and I have to go through the app, but I limit access to the photo that I'm actually uploading onto the app. What about facial recognition software? As a cybersecurity expert, what do we need to know about facial recognition software? Yes. So unfortunately, a lot of facial recognition software is unavoidable nowadays. Like you're walking through the airport and they're scanning your face. I mean, you have to go through TSA pre-check. Oh, that's right. They are. Okay, you're right. Like, where are they scanning? Well, actually, I wonder because like, you know, I'm looking up, I don't have them in here, but I'm looking up and there's security cameras everywhere.

59:07You go. So there's biometric tracking and facial scanning pretty much everywhere. And I have a concern, one, because biometric is like very unique to you, right? Like your eyes are, it's like a fingerprint. Your eyes and fingerprint, your face shape is very, very unique to you and you can't fix it, right? I mean, you might be able to fix face shape with certain things, but you can't change your eyes that much. Definitely can't change your fingerprint. And so my concern is TSA has our biometric ID, right? Global Entry has our biometric ID. Anything is hackable. In my head, anything is hackable.

59:40So what happens when people start getting that information? And then the other thing is our phones from a marketing perspective are going to start tracking our eye placements. So my concern is, you know how smart AI is, right? Like if you've been using AI, if anyone here has used AI, if you type in like, hey, what do you know about me? It gives like a whole summary of exactly who you are to a T. Now, I want you to imagine like someone on the other side of the screen when you're like doom scrolling and late at night and you're watching what you preferably like to watch. It's analyzing every single thing about you.

1:00:16It's analyzing where you're looking, who you're looking at, how long you're staying on this video. It's analyzing the psychology behind what you're watching and understanding who you are as an individual. Hopefully, it's going to start doing better ads. That's what they're saying, right? But who knows what that information can be used for? And so I recently, you know, it sounds a little scary. I recently partnered with a company that has, it kind of shields you from biometric and surveillance. and it it's uva and uvb and blue light blocking but um it really so wait these are blue blocker red like well these kind of have like a pink thing yeah they're like also like it's it's an infrared screen so the way that um surveillance works is usually through infrared technology so because there's like an infrared kind of shielding had these made for my prescription It's pretty cool.

1:01:10Yeah. Okay. Because there's like a kind of shielding on it. Yeah. When you walk through like the airport or sometimes like when I wear mine, my phone doesn't even register that it's me. Like it can't even see because it can't really tell where my eyes are. So it's not like, you know, the end all be all, but it does make me feel a little bit better when I'm like walking through security. You're going to have to take that off through airport security. But when you're walking just in general. Because it wouldn't be able to scan my eyeballs. Yeah. Wow. It prevents it a little bit from scanning your eyeballs.

1:01:41Wow. Yeah. That's really cool. Yeah. So the question that I have about biometric scanning, though, is that if we're using it for global entry or you're using it for clear or you're using it for one purchase with you want to purchase with your fingerprint, do you want to log into your Gmail with your finger? Is that a good thing to use or would you not recommend we use that? So again, risk-based approach, right? For me, I have TSA PreCheck because I travel every week. And if I only traveled twice a year, I would opt out of my biometric tracking because it's not that hard for me to wait an extra five minutes for them to like check who I am, right?

1:02:17Yep. But unfortunately, I travel four or five times a week. And that is just not likely. So my risk, yeah, I do not want it. But is it worth me to spend all that extra time to try to fight it? I don't think so. But some people don't, like my sister, my manager, they opt out every time. Everything is a risk-based approach on surveillance. And I just, again, I do my best wherever I think I can help. I try to fix things. And then if not, I've let it go. Amazing. You have some shocking news about cameras. Cameras on your laptop, doorbell cameras, baby cameras. Yeah. Uh-oh. So this is not to scare you.

1:02:57It's to empower you. So there are two ways that people get into these cameras, right? One is, again, if you're reusing passwords, which everyone does. So don't be a bit embarrassed by it, but take this as a sign to be like, okay, maybe I shouldn't have the same password for my baby monitor as my Facebook account. Because if you're reusing passwords, they just have to get in and they just mess with you and they can like talk through the camera. They can watch the camera. Oh my God. Yeah, they can watch. There's also a site, there's multiple sites actually, that show every single camera that's on an open network.

1:03:30Wait, what does that mean? They can literally log into cameras that are like on open, unsecure Wi-Fis. So if you have a camera and you're on an open Wi-Fi and they like somehow decide to connect to the one, like the IP address that you're sitting on, they will be able to turn on your camera. Whoa. Yeah. Just trying to like... Process. Processes. because you're saying that somebody can hack into my laptop if I'm on an open network and they can turn on my camera on my laptop and be watching me. I had an old boss that literally had he didn't have a camera cover on his camera. This was like five years ago.

1:04:11And someone had taken pictures like he changed in front of his computer and someone had taken pictures of him and like sent him an email being like, we have some really vulgar pictures of you that we're gonna release. And he was like pretty high up in the company that I was working for. And he didn't care. He was like, whatever, release them. But like people can turn it on and off your camera if they want to. I just would be, I just put on a camera cover. What is a camera cover? There's like little covers that you can buy literally$3 on Amazon. And you just like cover it when you're not using it.

1:04:44That prevents it. Obviously they won't be able to see anything. and also just be mindful of where you're connecting. He traveled a lot for work too. And so this can happen to your doorbell, it can happen to your baby monitor, it can happen to any camera you have. Yeah, there was someone that follows me that someone hacked into their baby monitor, but it was because they reused an old password that was leaked. They heard voices in the baby monitor of some random guy talking to the baby. That's terrifying. Yeah, it was awful. But again, passwords. Passwords. Okay, passwords, everybody. I have a stack of emails right here from listeners of the Mel Robbins podcast.

1:05:26These emails have come in from around the world, and they cover all kinds of scams that people have fallen for. One scam is that people buy a copy of the let them theory that is counterfeit. It looks nothing like the cover or it's being sold on Etsy or even Shen, the fast fashion site, or it's spiral bound or it's paperback and there's not a paperback version available in the United States. Like it's just not written by me, misspelled, but they're falling for it. Lots of emails from people who sadly are getting emails from scammers posing as employees of my company. And basically, they're getting more and more sophisticated.

1:06:17The old scam used to be, hey, if you pay$10 ,000, we'd love to book you. We never pay anybody. We also don't require somebody to pay to be on this show. And now they've updated the scam to say, hey, we never ask anybody to pay. So they know that we put language up on our website about scams and they're posing as employees. Can you talk to me about the rise of these kinds of things that are happening? Yeah. So funny story, when we first got a hold of your booker, your booker found us. Yeah. My manager called me and I was like, this is probably a scam. I would love it if it's not a scam, but like you need to get on the phone with this person, and see their face and make sure this is legitimate because I don't trust an email.

1:07:06So the first thing is, if it's not from a verified source, like your Instagram, right? Like if you are not messaging them directly from your verified Instagram, it's not you. Well, one of the things that I've also noticed in a lot of scam emails that I get is that people will ask me to click through to schedule a conversation with somebody. And I never, ever, ever do that. And a lot of these, in terms of the scams that people are receiving, as, you know, because they're very convincing. I'm like, wait a minute. That's the name of a person who actually worked here. Yeah. Wait a minute. They're saying that we don't pay people to come on this show and you don't have, there's never a fee for you to be on this show.

1:07:46Like what? How are, they've changed this already? They're saying everything right. But now they're saying, and they're linking to all the prior experts. So it looks like really legit. And then they're like, but Mel will give you a private strategy session. We'll build you custom stuff. Like we don't do any of this stuff. click here to schedule a call. Right. Yeah. So, so you're basically saying, no, no, no, no. Pick up the phone and call. Yes. Got it. Yeah. I don't, I don't click. My manager knows, do not click on any links. Okay. That is like a blanket statement rule I have. If I need to get ahold of anything, like, again, if I need to click on a link for a bank, I call them and I only am clicking on it when I'm on the phone with the bank.

1:08:27If you have to click on something, call the person and just say, hey, like, what is this about? Or hover over the link and see where it's going because it will show you the URL. Oh. Yeah. So unless it's coming like melrobbins.com slash, you know, in-person interview, I'm not going to trust wherever it's sending me. You mentioned that there are five things that you want us to really focus on. Five things that if we just focus on these five things, even though you may feel overwhelmed right now, these are the five things that really will protect you online. What are those five things? Passwords.

1:09:06We've talked about that a lot. Tonight, go and write down, these are accounts that I don't want anyone getting access to. These are my key accounts. And you'll start thinking about more and more as you move on throughout your day. What apps do you not want people to have access to? what banks, social media, all of that. So identify your key accounts and make sure that you have strong and unique passwords for all of them. No reusing of the same passwords, no reusing of the same base password, have strong passwords. Okay. So for those of you guys that aren't like myself or Mel, because you're traveling all the time, probably too, I would, if you're at home using a desktop for like my parents, right?

1:09:44I'm like, please, mom, I'm going to get you a book. We'll put it in the log cabinet right next to your computer. You just pull it out when you're on the computer and you can use it. That way you can actually remember and write down your strong passwords. For the people that are always on the go, yeah, like have a unique passphrase or whatever you think you need to remember that like longer password. When it says, oh, remember this, usually it's on a phone and that's just remember it's a password manager on the iPhone. Okay. So you can do that. That's still a password manager. I use a password manager myself.

1:10:12I love it. I swear by it or on your notes and just lock it. So that's number one. So once we got the password set, What's the second thing we're doing? Software updates automatically. Right when you download the app, just turn it on. Okay, because software updates, as a cybersecurity expert, you're saying, when it says, ooh, fix bugs, make more optimized, they're actually solving and fixing where the hackers broke in. Yes. So automatic software updates on all apps. I got that. What's the third thing I'm doing? The third thing you are going to do is freeze your credit. Freeze your credit. Super simple.

1:10:47That's like a one and done thing. You can do that tonight. Okay. Yeah. Because then if you've frozen your credit, because you're not taking out any loans, you're not opening up new credits, that means nobody else can either. Right. Oh, I love that. Okay. You can't have identity theft unless you give them like extra passwords and stuff, but it's a separate thing. Okay. So fourth thing I'm doing. The fourth thing you are doing is taking nine seconds before you click on any link. Ooh, nine seconds. Yeah. There's the psychology about the nine seconds. and it's just enough time for you to like take a deep breath, think and realize like where you are.

1:11:22So I didn't do the psychology aspect of it, but that's the nonprofit did. So take nine seconds. And I always just say, just don't click on links. I know that that is not like as easy for most people, but take nine seconds before you click on any link. And if there's an option for you to just call, I would call. Well, and also in those nine seconds, you can look at the email address. Exactly. You can look at a lot of things. What's the final thing that we're going to do to protect ourselves? Limit the amount of data online. There's multiple ways to do this, right? How? There's deletion services out there that like every month go through and manually delete all the information that keeps popping up.

1:11:57Are you kidding me? No. This was what I was going to ask you. Yeah. There's multiple services, but I use this one and I'm obsessed with it. It's called Incogni. That's like the best thing ever. What's it called? It's called Incogni. Like it's supposed to be like incognito, but it's - Incogni? Incogni, yeah. As I was sitting here listening, I was thinking, like, how am I getting my old addresses, my mother's maiden name, and my dogs that have died, and everything else? And how am I going? You can actually scrub your stuff? Yeah. You're kidding me. No. I thought once it was out there, you can't get, like, it's out there.

1:12:29I'm very excited for you to try it. It even tells you, like, within 10 seconds, it'll say, it'll start scanning and saying, hey, we found all this information. We're automatically sending out opt-out requests on your behalf for you. It's, yeah, and it's international. too. So the software is certainly something that if it's within your reach to look at, to potentially, you know, get a subscription to. But if you want to try to do this manually, what are the big websites you go to and how do you do this? Yeah, there's like white pages, true people search, people finder. I have an entire series on how to delete it.

1:13:03So usually you have to go and you have to search your own name. Then you have to like scroll all the way down and they make it hard to opt out. But there's like an opt out page. Usually you can find it on their privacy policy. And then you have to have a separate request on that opt-out page saying, this is me, please remove my data, I want you to remove it. And then this is bonus points, which we talked about. The sixth one is probably going through your apps and your app settings and seeing what they have access to. Again, it seems like it's a lot, but again, the apps, once you've set it, it's one and done.

1:13:31Once you have the auto updates, one and done. Set your password, you don't have to change it for like at least another year unless there was a breach for that account. So all these things, it's just, you're building routines. It's like brushing your teeth, right? Like brushing your teeth, washing your face. Did you like doing it? It took extra time when you were a little kid, you just wanted to sleep, but you learned that that was what's best. It's like any wellness routine to you. Like, do I want to spend an hour at the gym? No, it's annoying, but it's going to be better for me in the long run.

1:13:58This is exactly that. What's the one thing out of everything you've taught us today that you think is the most important thing for the person who is listening to do as soon as they are done listening other than send this to everybody in your family because we all need this information and we all need to be smarter about protecting ourselves and so what's though the one thing to do tonight yeah i would do passwords for sure get your key accounts turn on multi-factor authentication and make sure you have an updated, strong, like long password. Okay. Yeah. I can do that. You can do that. Caitlin, what are your parting words?

1:14:37Cybersecurity is not for experts. It's literally for everyone. We use it every day and it's not supposed to be a scary word. Like I, that's why I don't even like saying cybersecurity because people get so detached from it. They're like, I can't do this. It's way too out of my comfort zone. I have no idea what you're even talking about. Cybersecurity is very simple things that you can do to empower yourself and your family and your loved ones to be safe because we are all online now. Don't be afraid. It's very simple things that you can do and it's not supposed to be scary. It's supposed to be something that you can feel empowered to and then share this with other people.

1:15:10I really appreciate everything that you taught me and the person that's here with us today. I have to admit, as we were starting the conversation, I had this really like heavy feeling. I have completely screwed this up. The cat is already out of the bag. There's no way that I'm getting in control of this. Everything's out there. There's no way to get it deleted. There's no way to protect myself. I've already screwed up, so why even bother on the advice? I feel completely different. I feel the opposite now. I feel very hopeful around both the deletion service and the fact that you can go to the websites and manually get yourself removed.

1:15:57So that does something. And I think all five of these things that you talked about, the password, the software updates, freezing your credit, nine seconds, and really limiting the amount of information that you are giving online. Because why do they need your phone number? Why do they need all that information you're just pouring out online? And so I feel very empowered and excited to do everything that you just explained. And I feel a little bit smarter. Thank you, thank you, thank you for hopping on a plane and being here. Yeah, thanks so much for having me. I appreciate it. Oh, of course. And I also want to thank you.

1:16:35Thank you for spending time listening to this and getting smarter and empowering yourself. And didn't you just love the very specific things that you can do? I have a feeling this is one of those resource pages that everybody's going to be like, link, link, link, tell me what to do. also thank you for sharing this with people that you care about because we all need the facts and we need to know specifically how to solve these issues and protect ourselves and one more thing in case no one else tells you i wanted to be sure to tell you as your friend that i love you and i believe in you and i believe in your ability to create a better life and there's no doubt in my mind after listening to everything that caitlin taught us today about protecting yourself online that feeling safe as you're online, protecting yourself and your family by doing these simple things that she taught us today will help you create and live a better life.

1:17:25All righty, I'll see you in the next episode. I'll be there waiting to welcome you in the moment you hit play.

1:17:34I would like to do it. We're doing it all. Okay, do it all. Enjoy. Hold on a second. Here comes dinner. Not good on the repeat, everybody. Oh my God, okay. That was probably the mashed potatoes bringing up the fish. Whew! Okay. I'm so excited for this. I'm so glad you're here. I'm ecstatic I'm here, so I'm just honored. Awesome. Screwed up. I screwed up. I told him that on the first. I was like, this is a red flag. You are from Ohio. But I have learned that there are a lot of really cool people from Ohio. There's a lot of really cool. Yep, you're all set. Okay, great. Fantastic. Good job. Thanks for having me.

1:18:10This is amazing. Really, really fantastic. job.

1:18:19Oh, and one more thing. And no, this is not a blooper. This is the legal language. You know, what the lawyers write and what I need to read to you. This podcast is presented solely for educational and entertainment purposes. I'm just your friend. I am not a licensed therapist. And this podcast is not intended as a substitute for the advice of a physician, professional coach, psychotherapist, or other qualified professional. Got it? Good. I'll see you in the next episode. Sirius XM Podcasts.