Extra layers of online security

So the Equifax story keeps developing. We recently learned more when the credit bureau's former CEO testified before a House panel.  We found out that the data breach could have potentially been stopped had they acted quickly enough. And we learned that the result impacted more Americans than originally believed.

I talk to an online security expert about taking our personal security up a notch.

Let's note that we also learned recently that Equifax's own team for a short while was sending customers to the wrong link for help.  It wasn't even theirs. It belonged to someone who spoofed the company's link. People were confused.

Because of the continued bungling, it means you - and me - all of us - have to be more vigilant about protecting our good name and identifying information.

So this is not about freezing your credit. You know that. This is about adding extra layers and for that, we talked to Chris Sanders a cybersecurity expert who teaches businesses how to be cyber safe.

First, he says re-work that password.  Don't make it a twist on a word. Make a phrase.

Here's an example. Say your dog's name is Daisy.  You might do this:  D@I$).  You mix up your caps, lowercase, numbers, and symbols.

Instead, he says you should creatively write a phrase. Here's one: D@I$)!Ov#sPE@nu*bu**Er

This says nothing to you, but to me, it reads, "Daisy loves peanut butter."

That's a great first move, but don't make this the password for everything. Chris Sanders says it's not reasonable to think that you'll have a hundred different passwords, but you can divide it into zones of trust. A password for one group of sites, another for others.

"Having different passwords for your banking stuff versus your social networks and things of that nature," says the CEO of Applied Network Defense.

Let's keep layering by adding in two-factor authentication. This is when you put in your password then get sent a code. After that, you type it into your website you're trying to log into.

"I want to be practical. I don't want to tell people they need to two-factor everything. That wouldn't make sense for everyone. You probably don't need to two factor your social media account. But your bank, things like that will actually hurt you if someone gets into them, that's the stuff you want to two factor," he added.

So let's say you've done both of these - the quirky phrase and two-factor authentication, why then are you letting friends come over and get into your network? Create a guest WIFI network in your house. It'll cost money, but it may well be worth it.