Read from Yahoo:
1. No password protection.
Much easier for a thief to steal a smartphone without password than to work on cracking a password-protected smartphone.
2. Shop online with an Internet browser instead of a shopping app.
Unlike browsers, dedicated shopping apps (Amazon, eBay, Overstock, etc) are designed to ward off phishing and other kinds of scams. Just ensure it's their official app before downloading it.
3. Remain logged into banking, Paypal, eBay, and other sensitive apps.
Be sure to log out when done, and never tick the box asking the app to save your user ID and password. It's takes extra effort to log in each time but if a thief gets hold of a phone that is already logged into sensitive accounts and is not password protected, it can spell a financial disaster. Turning off the device every now and then can be a good idea too.
4. Automatically connect to any available WiFi connections.
Switch off the feature that connects to nearby WiFi networks automatically to prevent hacking (they can, using the right software).
5. Leave Bluetooth connections open.
Bluejacking, bluesnarfing, bluebugging... terms used to describe hackers exploiting the open Bluetooth connection. Hackers need to be relatively close to the phone (<30 feet away) but the intrusion can occur undetected in busy areas, e.g. airport, hotel lobby, restaurant, or conference.
6. Fail to properly purge data from old smartphone.
Deleting data before getting rid of smartphone is simple common sense though many fail to remove sensitive, personal data from their smartphone before taking it out of service, donating it or selling it.
7. Download "free apps" that aren't actually free.
They might be thinly-disguised data thieves. Downloading one allows the apps to access your smartphone. Fraudster can steal your bank and credit card info. These apps can also target your phone to be a launch pad for scammers to attack other peoples' phones with sms texts and smishing scams. Download smartly and discreetly. Read reviews and ensure it comes from reputable sources.
8. Storing sensitive data on phones.
On a phone, emails and downloaded documents are easy for thieves to find and steal especially when not password protected. So please delete all documents or emails containing sensitive information from the phone.
9. Failing to clear browsing history.
By retracing your steps, a phone thief can use the history to hijack the accounts, steal money and wreak havoc.
10. No remote wiping software.
There are various apps and services enabling you to locate your phone, and wipe its data clean, if it's lost or stolen. Tech-savvy hackers might be able to disengage these apps, but it's an extra layer of protection to reduce any risks if you lost your phone.
