You may think of a stolen password as the main way someone gets into your account.But online criminals have learned that they do not always need to steal the password itself.
They may hijack an active login session, convince you to approve a sign-in, take control of your phone number or use malware to collect information from your device.Passwords are still important.However, they are only one part of the security system protecting your identity.
Here are six ways criminals may try to get around traditional password protection and the practical steps you can take to protect yourself.Join our CyberGuy LIVE class: 5 Ways to Travel Smarter and Save MoneyIn this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season.You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful.
No technical experience is needed.Join us today, Saturday, Oct.31, at 11 a.m.
ET / 8 a.m.PT.
Register for free now at CyberGuyLive.com.Missed this morning’s live class? Register at CyberGuyLive.com to watch the replay.YOUR BANK MAY STOP TEXTING YOU SIX-DIGIT CODESCybercriminals can access online accounts without stealing passwords by hijacking login sessions, exploiting security approvals or abusing connected apps.
(Photo by Felix Zahn/Photothek via Getty Images)When you sign in to a website, the service often creates a session that tells it you have already proved who you are.Your browser or app may keep that session active so you do not have to enter your password every few minutes.
Criminals can sometimes steal the digital tokens or cookies associated with these sessions.If the service accepts the stolen information, an attacker may gain access without entering your password or completing another verification step.How to protect yourself: Review the devices an...