Common Best Practices

These items should be performed once:

Configure your operating system to automatically download and install the latest security updates.
  • Browse to Start > Settings > Windows Update.
    • On the Windows Updates tab, select the button next to Get the latest updates as soon as they're available.
  • MacOS users should install security updates when prompted by "software update," or by visiting Apple's Security Release page.
  • Install and use a reputable antivirus.

These items should be performed every day:

  • Run an antivirus scan.

These items should be performed every week:

  • Run a complete/in-depth scan of your computer using your chosen antivirus.
  • Restart your computer
  • Check your browser history.
    • In your browser, click the history button or press ctrl+h.
    • Examine the last few entries. If they are not sites you've visited, an investigation needs to explain how and why these sites were accessed.

These items should be performed every month:

  • Check the website for whichever antivirus software you are using.

These items should be performed every quarter:

  • Change your password every 120 days.
    • Make sure you use well-formed, secure passwords. Visit the User Credentials Standards page for help creating a password that is difficult to guess, yet easy to remember.

These items should always be performed:

  • Open email attachments only if you are expecting them from people you know.
  • Always use strong passwords, and keep them secret.
  • Never click on links in an email, even if they are from someone you know. Type the address in your browser window instead. 
  • Never check your Purdue email account on a "free" or "public" Internet kiosk or Internet Café.
  • When off campus, access Purdue directories only through VPN.
  • Lock your keyboard when you step away from your computer for even a moment. A quick stroll down the hall is plenty of time for someone to slip in and read your information. Or worse. To lock your Windows computer, press and hold the Windows logo key and press "L".
  • If possible, close and lock your office door when leaving your computer.
  • Never store sensitive personal information such as your bank account information or Social Security numbers on your computer.
  • Do not set your computer to automatically log in.

For a more detailed and complete listing of security expectations, read the Security Checklist.