Summer 2022 Security Tips

By DoIT Communications

Security Training and Awareness Working Group

Date Released: 3/17/2022

Cybersecurity Advisory


As summer break rapidly approaches it is easy to get lost in the thought of new places and fun times.  While making the most of the summer, it is important to remember that you must still be vigilant with keeping yourself safe online.  Here is some helpful information to consider when leaving Stony Brook during the summer.


  • A VPN (Virtual Private Network) helps to protect your information when you are accessing Stony Brook resources while you are off campus, and can help protect your information while you are abroad.  You can request access and download it here.  You may also access your campus computer directly using a Remote Desktop Connection and the RD Gateway.  

  • Symantec Antivirus software is available to Faculty and Staff, and can be downloaded through softweb after logging in with your netid and password.  Good antivirus software is imperative to have in order to keep your services secure online.

  • Password Managers are a secure way to keep track of and manage multiple passwords.  Good password practices dictate each account should have a unique, strong password.  In order to assist with managing the separate passwords Stony Brook offers LastPass premium for no additional cost while you are at Stony Brook.  Sign up today! 

  • Wireless and Bluetooth have been great technologies to add convenience to how we use our devices, but they are not without drawbacks.  When traveling it is best practice to have these features disabled.  Close quarters public transit and crowded areas like hotels, sporting events, and conventions can be opportunities for hackers to use those technologies as a pathway into  your device.  


  • Duo Two-Step Login is currently used by Stony Brook as our service for multi-factor authentication to secure your NetID accounts.  Duo provides multiple methods of authentication, including some that can be used without a network connection:

    • Duo push - receive an “allow/deny” notification directly through the mobile app

    • App passcode - Use the Duo app to generate a single use passcode.  This option does not require internet access.  

    • Duo token - This is a physical keychain sized device that generates single use passcodes. This option does not require internet access.  A token may be requested by submitting a ticket through

    • Phone / Text - receive an automated phone call or text message if you are in a pinch, but this method is not recommended and is being phased out because it is not as secure as the other options

    • More than one device should be registered to your account so there is a backup.