Jacksonville Cyber Defense
Protect Yourself & Your Business From Cyber Attacks
The S.E.C.U.R.E. Framework
Six principles every person and organization can follow, with no budget required.
Scrutinize
Always carefully review and verify any emails, web links, face-to-face requests, mail, phone calls, or text messages that ask for personal or sensitive information. Be cautious of unexpected requests or messages that create a sense of urgency.
Enable Two-Factor Authentication
Enable two-factor authentication (2FA) wherever possible for your email, web accounts, and other online platforms. This adds an extra layer of security by requiring a second form of verification (such as a fingerprint or a text message code) in addition to your password.
Check Sources
Verify the legitimacy of sources before responding or providing any personal information. Double-check email addresses, website URLs, phone numbers, and text message senders to ensure they are legitimate and not impersonating someone else.
Use Caution
Be cautious about sharing personal information, financial details, or sensitive data, especially with unsolicited requests through email, web, face-to-face, mail, phone call, or text. Avoid providing information unless you are certain of the authenticity of the request.
Report Suspicious Activity
If you suspect any suspicious activity or feel that you are being taken advantage of, report it to the appropriate authorities: your bank, the police, or the relevant online platform. Don't hesitate to seek help and report any potential scams or fraud.
Educate Yourself
Stay informed and educated about common scams and tactics used by bad actors through email, web, face-to-face, mail, phone calls, or text. Keep yourself updated with the latest security measures and best practices to protect your personal information and financial assets.
Resources
Curated tools and services to help you take control of your security and privacy online.
Breach Monitoring
Have I Been Pwned
A free service from security researcher Troy Hunt that shows which known data breaches include your email address, so you know which passwords to change. Sign up for free alerts when your email appears in a future breach.
Cloud Storage
Cryptomator
Free, open-source encryption for the cloud storage you already use, like Dropbox, Google Drive, OneDrive, or iCloud. It locks your files and file names inside an encrypted vault on your device before they sync, so your cloud provider can't read them. Free on desktop; the mobile apps are free to view files, with a one-time purchase to add or edit them.
Proton Drive
End-to-end encrypted cloud storage from the makers of Proton Mail, based in Switzerland. Your files, photos, and even file names are encrypted before they leave your device, so not even Proton can see them. The free plan includes up to 5 GB of storage.
DNS Protection
Control D
A customizable DNS service that blocks malware, phishing, ads, and trackers across every device and network you use. Its free public resolvers filter malware with no account needed, and paid plans add custom rules, per-device profiles, and parental controls.
NextDNS
A customizable DNS firewall that blocks malware, phishing, ads, and trackers before they ever load, on every device and network you use. Set it up once on your phone, computer, or router. Free for up to 300,000 queries per month.
Mailvelope
A browser extension that adds OpenPGP email encryption to webmail providers like Gmail, Yahoo, and Outlook, protecting your messages end-to-end without switching email providers.
Proton Mail
A free, end-to-end encrypted email service based in Switzerland. Your emails are encrypted so that not even Proton can read them. A great first step toward private communication.
Password Managers
KeePassDX
A free, open-source, ad-free password manager for Android that keeps your encrypted password database on your device. It opens the same database files as KeePassXC and supports autofill, fingerprint unlock, passkeys, and two-factor codes.
KeePassium
An open-source password manager for iPhone, iPad, and Mac that opens the same database files as KeePassXC. You choose where your passwords are stored, and you can unlock them with Face ID or Touch ID and fill them in with AutoFill. The free version includes one database.
KeePassXC
A free, open-source password manager that stores all your passwords securely in an encrypted local database. No cloud required; your data stays on your device.
Proton Pass
An open-source, end-to-end encrypted password manager from the makers of Proton Mail. The free plan includes unlimited passwords and devices, passkey support, and hide-my-email aliases that keep your real address private.
Secure Messaging
Signal Messenger
End-to-end encrypted messaging and voice/video calls. Signal is the gold standard for private communications, trusted by journalists, security professionals, and everyday users alike.
Security Training
Cyber101 Security Training
Free online cybersecurity awareness training designed to educate individuals and teams on phishing, social engineering, safe browsing, and best practices. No technical background required.
VPN Services
Mullvad VPN
A no-logs VPN service focused entirely on anonymity. Mullvad doesn't require an email address to sign up and accepts cash payments, making it one of the most privacy-respecting VPNs available.
Proton VPN
A Swiss-based VPN with a strict, independently audited no-logs policy and open-source apps. Its free plan has no data limits and no ads, making it a great way to protect your connection on public Wi-Fi.
Web Browsers
Brave Browser
A fast, privacy-first web browser that blocks ads and trackers by default. Built on Chromium, so it works with most Chrome extensions while protecting your browsing data.
Always growing: We continuously review and vet new resources. Check back regularly as this list grows.
Report an Incident
Not sure who to call? Answer a few quick questions and get a step-by-step plan for what to do now and where to report it.
- Who
- What happened
- Details
- Next steps
Your answers stay in your browser; nothing is sent or stored. This guide is general information, not legal advice. If anyone is in immediate danger, call 911.
Cyber Crime Reporting Directory
Browse official government, law enforcement, and national resources on your own. Report it; don't ignore it.
CISA - Cybersecurity & Infrastructure Security Agency
The U.S. government's lead agency for cybersecurity. Report vulnerabilities, infrastructure threats, and get guidance, alerts, and free resources for organizations of all sizes.
Visit CISA.gov (opens in a new tab)FBI - Tips & Field Offices
Submit a tip directly to the FBI online or at 1-800-CALL-FBI, or contact one of the FBI's 55 field offices about ransomware, extortion, threats, and other serious cyber crimes.
Submit at tips.fbi.gov (opens in a new tab) Find your FBI field office (opens in a new tab)FTC - Federal Trade Commission
The nation's consumer protection agency. Report scams, fraud, and bad business practices; your report helps law enforcement spot patterns and stop scammers.
Report at ReportFraud.ftc.gov (opens in a new tab)IC3 - Internet Crime Complaint Center
The FBI's central hub for reporting all types of internet crime. If you've been a victim of an online scam, fraud, or cyber attack, file a complaint here regardless of dollar amount.
Visit IC3.gov (opens in a new tab)Business Email Compromise (BEC)
Fraud targeting businesses through email, including fake invoices, wire transfer scams, and executive impersonation. Report to the FBI's Internet Crime Complaint Center.
Report at IC3.gov (opens in a new tab)Credit Freeze
Freezing your credit is free and stops anyone from opening new accounts in your name. Place a freeze with all three nationwide credit bureaus; each one is separate.
Freeze at Equifax (opens in a new tab) Freeze at Experian (opens in a new tab) Freeze at TransUnion (opens in a new tab)Data Breaches
Your information was exposed in a company's data breach. The FTC gives step-by-step guidance based on exactly what was exposed, from Social Security numbers to passwords.
Get help at IdentityTheft.gov (opens in a new tab)Elder Fraud
The U.S. Department of Justice's National Elder Fraud Hotline connects victims age 60 and older with case managers who help them report fraud and find resources at 1-833-372-8311. English, Spanish, and other languages.
Call 1-833-FRAUD-11Identity Theft
Someone used your personal information (Social Security number, credit card, or other ID) without your permission. The FTC guides you through recovery step by step.
Report at IdentityTheft.gov (opens in a new tab)Phishing
Deceptive emails, texts, or websites designed to steal your credentials or personal data. Forward phishing emails to the Anti-Phishing Working Group and scam texts to 7726 (SPAM). If you lost money or data, also report it to the FBI's Internet Crime Complaint Center.
Email reportphishing@apwg.org Report at IC3.gov (opens in a new tab)Protecting Children Online
Report online exploitation, child sexual abuse material (CSAM), or enticement of minors to the National Center for Missing & Exploited Children's CyberTipline.
Report at NCMEC CyberTipline (opens in a new tab)Ransomware
Malicious software has encrypted your files and attackers are demanding payment. Report immediately to CISA and the FBI. Do not pay the ransom before consulting authorities. No More Ransom offers free decryption tools for many strains.
Report at CISA.gov (opens in a new tab) Visit NoMoreRansom.org (opens in a new tab)Robocalls & Telemarketing
Unwanted sales calls and robocalls. Add your number to the National Do Not Call Registry for free, and report calls that keep coming after you've registered.
Visit DoNotCall.gov (opens in a new tab)Sextortion & Intimate Images
Someone is threatening to share nude or sexual images, real or fake. Stop responding and don't pay. These free tools remove images from participating platforms without uploading them: Take It Down if the image was taken before age 18, StopNCII if it was taken at 18 or older.
Under 18: Take It Down (opens in a new tab) 18 or older: StopNCII.org (opens in a new tab)Spoofing
Caller ID or email address has been faked to impersonate a trusted entity such as a bank, government agency, or known contact. Report phone spoofing to the FCC.
Report at FCC.gov (opens in a new tab)Not sure which one applies to you? Use the Report an Incident wizard for a personalized plan.
Frequently Asked Questions
Quick answers to common cybersecurity questions from individuals and small businesses.
What is the S.E.C.U.R.E. framework?
S.E.C.U.R.E. is a six-part cybersecurity habit framework from Jacksonville Cyber Defense: Scrutinize requests, Enable two-factor authentication, Check sources, Use caution with personal information, Report suspicious activity, and Educate yourself. It works for individuals and small businesses and requires no budget.
Where do I report a cyber crime in the United States?
Report internet crime to the FBI's Internet Crime Complaint Center at IC3.gov (opens in a new tab) and scams to the FTC at ReportFraud.ftc.gov (opens in a new tab). File a report with your local police or sheriff's non-emergency line, since banks and insurers often ask for a report number, and consider contacting your state attorney general's (opens in a new tab) consumer protection office. Call 911 if anyone is in immediate danger. The Report an Incident wizard builds a step-by-step plan for your specific situation.
What should I do if I clicked a phishing link?
If you entered a password, change it right away (and anywhere you reused it) and turn on two-factor authentication. If you entered card or bank details, call your bank's fraud line. Run a security scan on your device, watch your accounts for unusual activity, and report the message by forwarding phishing emails to reportphishing@apwg.org and scam texts to 7726.
Should I pay a ransomware demand?
The FBI and CISA advise against paying. Payment does not guarantee you will get your files back and it funds further attacks. Disconnect infected devices from the network, report the attack to CISA at cisa.gov/report (opens in a new tab) and to the FBI at IC3.gov (opens in a new tab), and check NoMoreRansom.org (opens in a new tab) for a free decryption tool.
What should I do if someone stole my identity?
Go to IdentityTheft.gov (opens in a new tab) to report it to the FTC and get a personalized recovery plan. Place a free credit freeze with Equifax, Experian, and TransUnion, contact the fraud departments of any affected companies, and file a police report if a creditor asks for one.
What tools do you recommend to improve online security and privacy?
Good starting points are a password manager (KeePassXC or Proton Pass), end-to-end encrypted messaging (Signal), encrypted email (Proton Mail), a privacy-focused browser (Brave), a trustworthy VPN for public Wi-Fi (Mullvad VPN or Proton VPN), filtered DNS (Control D or NextDNS) to block known malicious and tracking domains on every device, and Have I Been Pwned to check whether your email address appeared in a data breach. See them all in our Resources section.
Who is Jacksonville Cyber Defense?
Jacksonville Cyber Defense (Jax Cyber Defense) is a cybersecurity awareness initiative based in Jacksonville, Florida that helps individuals and small businesses across the United States stay secure through the S.E.C.U.R.E. framework, vetted security and privacy resources, cyber crime reporting guidance, and security awareness posters.