Encrypting sensitive information

Along with keeping your information safe by taking steps such as ensuring you have the right anti-virus installed, using a strong password and being careful about what you share on social media, it’s also important that you encrypt sensitive information before you send it via email.

Let’s look at what encryption is, why it’s important, and what kind of information you should consider encrypting.

What is encryption and why is it important?

We lock our homes, restrict access to buildings, and protect our assets with various forms of insurance. So why wouldn’t you also protect the information you share via email or other online methods from falling into the wrong hands?

Data is a big part of our everyday lives; just as you would protect your computer with anti-virus software, protect your data with encryption. Encryption prevents unauthorised access to your information by ‘locking’ your files so they cannot be accessed by anyone other than the intended recipient.

When you encrypt a file, the recipient requires a ‘key’ or password to ‘unlock’ the document or item again. This prevents your information from being intercepted or accessed by people without the password.

What information should I be encrypting?

You should consider encrypting the following kinds of information when sharing it via email or another online method, including:

• personally-identifiable information, including any documents that contain information such as your driver’s licence, tax file number, date of birth and passport information
• financial or bank account details
• business and intellectual property, such as customer information, financial reports, and other sensitive information related to yourself or your business.

How do I encrypt information?

Different programs and file formats will have different steps for encrypting documents.

Read Microsoft’s article on protecting word documents with a password, opens in new window.

When sending the encrypted file to the recipient, ensure you advise them of the password via a different means (such as an SMS or phone call). Never include the password in the email with the encrypted document. If the email gets in the hands of someone who shouldn’t access, you have just provided them with the document and the password!

Follow these 5 simple security tips to protect yourself online:

• Don’t click on links or attachments in suspicious messages
• Report any suspicious phone calls, emails or text messages to phish@nab.com.au
• Use a password manager tool to create and store unique or complex passwords
• Turn on multi-factor authentication for email and banking
• Ensure your devices have anti-virus software installed and automatic updates enabled
• Learn more at nab.com.au/security