• Use strong passwords that are 12 characters or longer, as well as two factor authentication.
  • Turn off Wi-Fi and Bluetooth when not in use, and set your devices to ask you before connecting to open networks.
  • Watch for suspicious activity that asks you to do something right away, offers something that sounds too good to be true or needs your personal information. Think before you click. This is sometimes called “phishing” or “scam” emails.
  • Limit the personal information you share online. Change privacy settings and do not use location features.
  • Check to make sure the software on all of your systems is up-to-date.
  • Use NYU’s Virtual Private Network (VPN) for secure access to the NYU network when off-campus.


  • Remain vigilant about the physical security of your devices at your hotel or apartment. Securely delete any newly downloaded data on your device prior to leaving your electronics behind.
  • It is not a good idea to use Internet cafes or other public locations to access NYU data and servers, either by using their network or provided computers
  • Use the NYU VPN service to access NYU resources, where permitted. VPN software is prohibited for use in many countries without authorization from an appropriate government agency.


  • Immediately change passwords for all of your online accounts.
  • If a device is taken away from you in another country and given back, it very well may have been compromised; it is probably best to throw it away. Always, first report that information to GOIS and request guidance.
  • Enable two factor authentication if you have not already.
  • Contact additional agencies depending on what information was stolen. This includes government organizations, school, bank, etc.