There is nothing cybercriminals would enjoy more than taking the happy out of your holidays.

As many online shoppers gear up for the main event—Cyber Monday—scammers already have plans to make their holidays merry and bright at someone else’s expense.

If you are one of the 72.3 million people who will be participating in Cyber Monday shopping, it is essential to take precautions and stay mindful during the process.

Adobe has estimated that shoppers will spend about $13.2 billion on Cyber Monday, making it one of the biggest shopping days during the season, which runs from November 1 to December 31. Consumers are expected to spend about $240.8 billion during the season with $40.6 billion spent during Cyber Week.

With that kind of money being spent, shoppers are encouraged to practice what the Cybersecurity & Infrastructure Security Agency (CISA) calls ‘cyber hygiene’ to stay safe. It means using basic safety practices including multi-factor authentication, software updates on devices, and having strong passwords on all accounts.

Pro tip: If you have trouble coming up with strong passwords use a password manager to generate and store passwords. Or consider using passphrases, a series of words that may contain up to 20 characters, which can be harder to guess than passwords because they are more complex but easier for you to remember.

Here are some other tips to keep in mind when shopping online:

• Use multi-factor authentication (MFA) or Two-Factor Authentication (2FA) on all accounts where available. An account is less likely to get hacked when the user’s identity has to be authenticated. Be sure to never share the authentication code. In some cases, hackers will get your username and password and ask for a verification code to access your account.
• Use the automatic software update feature on all devices. When updates are automatic, security patches are immediately installed and known vulnerabilities are addressed to protect users from cyberattacks and malicious software.
• Think before clicking on links in emails, especially unsolicited emails, which are usually phishing. Most cyberattacks begin with a phishing email. Be wary of downloads and attachments in emails—it could be a virus or malware—that will be used to infect devices, compromise computers, or steal information.
• Ensure you are using websites that are reputable and legitimate. A website that has ‘https’ in the URL means the connection is secure and your information is encrypted.
• Share only the information needed for the purchase. Providing payment and shipping Information, an email address and phone number are expected. However, you should never provide bank account information, your social security number, or driver’s license number. That information can be used to steal your identity.

Following safe shopping practices during the holiday—or any season—can help keep your information out of the hands of hackers and keep the joy in your holiday.

For additional holiday tips:

https://www.cisa.gov/holiday-online-shopping

https://staysafeonline.org/resources/safe-online-holiday-shopping/