Category: Security Awareness

Password Managers: What are they and should I use one?

For those who are challenged with managing multiple different passwords for different accounts they might consider using a password manager, also known as a password vault.

Password ManagerA password manager is a piece of software that helps someone to organize their own passwords or pin codes. It typically is a local database that encrypts passwords and the database itself uses a master password to open it. Some types of password managers also acts as a Form Filler, where once a particular website is launched, and it prompts for a username and password, the password manager recognizes the request and will automatically fill the user name and password into the form.  This type of password manager can be used as a defense against “phishing” as it is setup to handle automated logins to a particular site, and will not work with an imitation or a look alike website.

Some password managers include a password generator.  In this case, when you define an entry in the database for a password, the password manager can generate a password that can be stored and used as needed.  There are also password managers that are available online.  This type of tool is a web based version similar to a desktop password manager, but allows for more portability.

Password managers have pros and cons.  Some of the pros are listed above, while one of the main cons is that if your computer (or phone if you have a password manager on your smartphone) is lost, so are your passwords.  Even though they may be protected and encrypted inside of the password manager, you no longer have access to that information.

(A few password manager tools are Keepass, Lastpass, Roboform, Kaspersky Password Manager and 1password)

Phishing Exercises Coming Soon.

PhishingNo. It’s not about fish doing Zumba.

Twice per year, SMU conducts a simulated phishing exercise where the University sends a simulated phishing message to employees based on the types of phishing messages we have most recently received.  Last year, over 100 SMU accounts were compromised due to users falling victim to these attacks so we are committed to reducing our click through rate through user education and awareness.  When we started the simulated phishing awareness campaigns in 2013, we saw a 40% click-through rate.  In 2014, we reduced that click-through rate to 20%.  In our first campaign of 2015 that number had dropped to just 10%.

Security Alert: Windows 10 Upgrade Scam

WindowsMicrosoft is in the process of releasing their new Windows 10 Operating System. The software will be available to download free of charge.

Please read carefully!

There are several scams circulating around this new release.  The scammers are pretending to be Microsoft Tech Support and are contacting individuals via phone, email or browser pop-up windows that appear to be legitimate but actually contain malware.

Please do not click on any popup add claiming to be from Microsoft about your Windows 10 upgrade.

OIT is in the process of reviewing the Windows 10 Operating System and ensuring that University applications will continue to function properly with this new OS.  More details regarding the upgrade process will be communicated in the Fall.

Here is the legitimate link on Microsoft’s web site about Windows 10: http://www.microsoft.com/en-us/windows/windows-10-upgrade

Updating Emergency Contacts in my.SMU

If you haven’t recently, it’s a good time to update your emergency contacts in my.SMU.

Faculty & Staff Instructions

  1. From the landing page, select Personal Information located under Employee Self – Service.employee self service
  2. Click on Emergency Contacts.
  3. Click Add Emergency Contact.
  4. Enter the Contact Name.
  5. Indicate the Relationship to Employee. If the employee has the same address or telephone select one of the following options:relationship to employeeIf you indicated that the emergency contact address or phone is the same as yours it will display on the screen and can be edited if needed.
  6. If the contact has a different address select Edit Address to provide address information.
  7. If the contact has a different phone select Add Phone Number and indicate the Phone Type and Phone Number.
  8. Click Save. To view a contact list select the Return to Emergency Contacts link.
  9. For multiple contacts check one to be the Primary Contact.primary contact
  10. Edit or Delete contacts by selecting the appropriate icons.edit or delete
  11. Click Save.

Student Instructions

Visit the Update/Verify Personal Info section of the Student Self-Service tutorial: sites.smu.edu/oit/training/story/studentselfservice/story.html.

IT Connect is published by the Office of Information Technology at Southern Methodist University.


Office of Information Technology
Copyright © Office of Information Technology, SMU
smu.edu/help  | 214.768.HELP |  help@smu.edu