7 cybersecurity tips to help you shop safely this holiday season

7 cybersecurity tips to help you shop safely this holiday season

If you're surrounded by the warm glimmer of colorful lights, the city covered in fresh white snow, and the smell of excitement and perfectly roasted turkey in the air, it can only mean one thing: the holiday season is here! It's that time of the year when we look forward to spending quality time with our families and search for memorable gifts to give them. 


Over the years, online shopping has made finding and purchasing the perfect gifts so convenient and simple—even at the last moment. Starting with numerous Black Friday and Cyber Monday offers and sales continuing through the end of the year, it's never been a better time to find the perfect gift for your loved ones online. To enhance your experience, we've put together a few cyber tips to make your online shopping secure as well as convenient. 

Cybersecurity tips for Black Friday and Cyber Monday shopping


Purchase from trusted websites
Attackers and con artists often set up temporary sites that resemble genuine shopping websites during the holiday season and try to obtain your vital login and payment information. Try to purchase from trusted and recommended online retailers or make sure to verify the validity of the website to keep your purchases safe and scam-free.

Avoid untrusted networks
Avoid making any online transactions or accessing your sensitive data on untrusted public networks. A potential attacker can steal sensitive data, like bank account and login details, that you transmit via the internet. We recommend using a VPN while browsing and also be sure to set your devices so they don't automatically connect to open networks. 

Be wary of donation scams 
Almost 40% of the charitable donations are said to be made in the last few weeks of the year. Scammers target users through texts, social media, and email for donations to charities that don't really exist. Always verify the legitimacy of the charity before making a donation.  

It can't be too good if it's a trap
Refrain from clicking on offers that seem too good to be true. Scammers often bait unsuspecting shoppers with mouthwatering offers using false advertising and emails impersonating popular retail websites. Validate all URLs carefully before clicking on links, or rather search for the offer directly from the retailer's website. Adopt a password manager to keep your logins safe. Password managers often validate the authenticity of a URL and never fill your passwords on phishing websites.  

Keep your digital identities and devices safe 
It's easy to lose yourself, and your devices, when you're surrounded by people and unbelievable offers. Keep your mobile devices safe while shopping in the rush and protect them with a passcode.

Strong passwords for all your accounts
Secure all your online shopping accounts with a separate unique, strong password for each. This way, in case one of them gets compromised, you can protect all your other accounts from related exposure. Use a password manager like Zoho Vault to generate strong passwords for each of your accounts and help manage them from one secure vault.

Add extra protection for your accounts
Your online shopping accounts usually contain critical payment details. Use two-factor authentication like OTP or voice call, for these accounts to protect them with another layer of security. 

We hope these tips help you have a safe shopping experience. With your constant support and feedback, we have been able to regularly improve your Vault experience and online safety. We want to take this moment to thank everyone for continuing to be a part of our journey, and to wish you all happy holidays. 

Shop responsibly and stay safe with Zoho Vault!

Cheers
The Zoho Vault team


      • Sticky Posts

      • Introducing SecureForms in Zoho Vault

        Hey everyone, Let’s face it—asking someone to send over a password or other sensitive data is rarely straightforward. You wait. You nudge. You follow up once, twice—maybe more. And when the information finally arrives, it shows up in the worst possible
      • Join our World Password and Passkey Day expert Q&A 2025

        Hey everyone! World Password and Passkey Day is almost here, and there's no better time to talk about something we all rely on daily—secure authentication. Did you know that a staggering 60% of hacking-related breaches are tied to weak or stolen passwords?
      • Zoho Vault: A look at what's new for iOS, iPadOS, and macOS

        Hi everyone, At Zoho Vault, we constantly aim to improve your security experience. Based on both internal and external feedback, we have recently rolled out updates across our iOS, iPadOS, and support for macOS platforms. Introducing the desktop app for
      • iOS 12 update: Introducing autofill passwords and Siri Shortcuts in Zoho Vault

        With this iOS 12 release, Zoho Vault users can now autofill usernames and passwords on Safari and other third-party apps. Users can enjoy a seamless login experience to their everyday apps without compromising security and also access passwords stored in Zoho vault with Siri Shortcuts by adding personalized phrases. How to enable autofill password on your iOS device? First, you need to update your device to iOS 12.  Apple recommends you to take a backup before you update your device to the latest

        • Recent Topics

        • Quotes vs Invoices vs Sales Orders

          We have the need to create either quotes, invoices or sales orders for services we provide to clients for our sales team to present to them.  However, we are confused in the purpose of each and which we should choose.  Could someone explain the difference in them? Also, with these, we will have setup costs for our clients and then fixed monthly costs.  For instance, we have services that are one-time services at $997 and then we have others that are monthly only ($250 per month).  In addition, we
        • Tip 14: How to iterate a set of Deluge code a specific number of times.

          Hello folks, As you might already know, recursive functions are used to perform a particular action a specific number of times. We had explained this in detail in our Tip #2. Similarly, there is another way in which you can iterate a set of Deluge code 'n' number of times. All you need to do is to create a List and use the For each index task to iterate it for a specific number of times.    Here are a few use cases where this would be useful to you:  To create 'n' number of duplicate records for
        • Can't set conditional layout rule on lookup field in Zoho CRM

          Namaskaram Zoho CRM team,      Usually any fields of module except mandatory fields can be hide using conditional layout rules.  But that can't be set on lookup fields event that is not a mandatory fields.  Many users are in need of that.   Crafted with
        • Online Calculator

          Created a public shipping volume calculator for my website visitors to use. its pretty cool when you combine the power of zoho sheets and the web experience. I chose zoho because our users dont need to login or created acct like google doc users. this is great because ppl will accept the technology more without resistance. you can see the online calculator here: hxxp://www.dblusa.com/dbl_calculator.php peace! RSA
        • All about Users in Zoho Projects

          To form a functional team, businesses should define different types of users in their team. Businesses can be effectively managed by inviting users to various roles. And, the person who has the administration privileges can invite or add users to various roles in the project. Two types of users Before going into the steps to add users to your portal or project, let's understand the different types of users:  Portal Users - Users who work for the projects in your team.                      ~ Portal
        • Zoho Projects API 100 requests/2 min. Limit

          Hi Requesting clarification on the API documentation. "You can invoke or call an API for 100 times in a span of two minutes. If you invoke more than 100 times, the particular API request will be locked for the next 30 minutes. " Does this limit apply
        • Calendar Connection Enhancement

          Hello everyone, Greetings from the Bookings team. We're here to announce an important Calendar enhancement that will roll out soon. Let's take a look at what's being changed. Improved and more straightforward UI The Calendars UI is undergoing a complete
        • Bookings to CRM - New Events and Contacts

          Hello, I have an issue with appointments taken by clients from a Zoho Bookings page. Previously when an appointment was reserved, if there were no client created in Zoho CRM, it would create it in the CRM through the integration between both platform.
        • Generating Discount Coupons for Zoho Bookings

          Hi, Is there provision to generate Discount Coupons for appointment bookings? I could not see that in the settings and this is very much needed. Please suggest us. Thanks
        • How do I remove mail hosting?

          I have a problem, I can't remove mail hosting. I need to remove them to cancel my domain, but it's imposible to cancel or remove the mail hosting. Please I need help urgently to resolve this problem.   Thanks
        • Notes created in mobile app not syncing with web notebook

          I have created certain notes in a new notebook in mobile app. The new notebook is also created using mobile app and when I logged in through web I am unable to see notebook that I have created using mobile app. there is no trace of notes in which i have created in mobile app on the web even after days of creating in mobile app This is not the case vise-a-versa. the notes and note book created on web are accessible on mobile app on real time.  this is very inconvenient and big demotivating factor
        • Desk - CRM Integration: SPAM Contacts (Auto Delete)

          SPAM contacts is a useful feature, but when the CRM sync is used, it is very frustrating. When a contact is marked as SPAM on Desk, I wish to do the same on CRM. When a SPAM contact is deleted, I would like it deleted from CRM. The feature looks half-baked.
        • No more IMAP/POP/SMTP on free plans even on referrals with NO NOTICE

          Outraged. Just referred a colleague to use her domain (not posting it publicly here) to Zoho, just as I have other colleagues, clients, friends. Expected the exact same free plan features as I have and as everyone else I ever referred got. I was helping
        • Mac Thunderbird zoho e mail account issues

          I have issues with a user account on thunderbird e mail client who suddenly does not receive emails, when you click get messages we get an error "sending of password for user ......did not succeed, mail poppro.zoho.com responded service unavailable" after
        • PASSWORD

          Hello, I'm Joyce, my client used zoho for password sharing, he did share the canva but once I clicked on it it will not automatically log-in, instead I need to log-in again. My question is my boss log-in first to his gmail and use his gmail to log-in
        • Kaizen #195: Frequently Asked Questions on Bulk Read API and Bulk Write API

          🎊 Nearing 200th Kaizen Post – We want to hear from you! Do you have any questions, suggestions, or topics you would like us to cover in future posts? Your insights and suggestions help us shape future content and make this series better for everyone.
        • admin problem

          i can't to reach for the panel that i will create another mail to our company account i have admin access but i can't reach the panel our Company name Scale point my mail asmaa@dcalepointhub.com please can you help me Thanks
        • 554 5.7.1 : Recipient address rejected: user [username] does not exist

          Hi, I mistakenly altered my shopify email settings (where my domain is managed), but immediately reverted them, however now I have a strange email issue. I can send emails just fine, but cannot receive them. I have tried all troubleshooting steps but
        • Legit email address?

          Hello, I received emails from zohoadmin@biznetvigator.com with a password expiry notice. is that a legitimate email?
        • SMTP Authentication Fails with App Password – “535 Authentication Failed” Error

          Hello, I'm trying to send transactional emails from my WordPress website using the WP Mail SMTP plugin with Zoho Mail (smtp.zoho.com on port 465 with SSL). I've created and used a Zoho Mail app-specific password for SMTP, and verified that: The email
        • Deluge script issue : Mismatch of data type expression. Expected BIGINT but found STRING

          I'm building a Zoho Creator form to take inputs for Email, Bootcamp Name, and Tag. If a record with the same Email + Bootcamp exists in a custom module (bootcampattendence), I want to update it by adding a new tag. If it doesn’t exist, I want to create
        • Survey end date extension

          Hi, Is there any way to extend the end date of my survey? I needed more time in finding respondents that is why I need to extend the end date of my survey. Help. Thanks
        • Problem with signature in a forwarded mail

          Dear All, In my email account I created a signature and I unchecked the 'Place signature above the quoted text for relies and forwards' My question is, when I am trying to forward an email, sometimes I need to insert my signature so I select it from the
        • Out of Office not working

          I have set up out of office on zoho mail, however, it does not reply to every mail sent to it. I have tested it by sending several test messages from multiple different email accounts, I will get a response to some of them, but not all of them this is
        • Error message that says only images and no text

          I filled out a template for a weekly newsletter with text and images throughout but when I click save and next an error message comes up that says "Campaign content has only images and no text" which is not true at all. I have no idea how to fix this issue and don't know where the problem is. 
        • Contacts Don't Always Populate

          I've noticed that some contacts can easily be added to an email when I type their name. Other times, a contact doesn't appear even though I KNOW it is in my contact list. It is possible the ones I loaded from a spreadsheet are not an issue and the ones
        • Cannot add zoho email to gmail acc

          I'm trying to set up my zoho mail to connect to my gmail acc but no matter what I try I always get this problem. What should I do now? Password is up-to-date. Authentication failed. Please check your username/password. [Server response: 535 Authentication
        • 553 Relaying disallowed - Invalid Domain

          I have this error "553 Relaying disallowed. Invalid Domain" when sending an email to any email address. But I still receiving email from other emails. I checked MX, DKIM, SPF and it's ok. Could you check and help? Thanks
        • Turn off Organization Contact List

          We need to be able to turn off the Organization Contact list for some of our staff. Once the Organization Contact list is turned off for a user, we would then like to be able to create a list of contacts on per user basis that would not be editable by
        • Unable to send massage Reason 553/ Relaying Disallowed. Invalid Domain

          Cant sed massages from my email. All massages from my domain received the same issue Unable to send massage Reason 553/ Relaying Disallowed. Invalid Domain
        • Kaizen #194 : Trigger Client Script via Custom buttons

          Hello everyone! Welcome back to another interesting and useful Kaizen post. We know that Client Scripts can be triggered with Canvas buttons and we discussed this with a use case in Kaizen#180. Today, let us discuss how to trigger Client Script when a
        • Make record entry more organized with the Sections component in Wizards

          Hello everyone! Wizards in Zoho CRM have always helped you break long record-detail pages or large sets of fields into multiple screens, making data entry smoother and more user-friendly. Now, we’re taking a major step forward with a new Sections component—giving
        • GSTIN Public Search API

          Does zohobooks have an api using which i can search GST numbers and get their details?
        • External @zoho.com mail stopped working today, yesterday no issues

          Hello, Over a sudden mail stopped being delivered to inbox. Domain is standard zoho.com worked no problem yesterday, today nothing in inbox. Sent several test emails from corporate account & from gmail.com, logs show acceptance by zoho mail server, but
        • Suggestion: Smart Purchasing Module for Zoho Inventory and Zoho Books

          Suggestion: Smart Purchasing Module for Zoho Inventory and Zoho Books As an active user of Zoho Inventory and Zoho Books, I’ve noticed that the suite already provides valuable tools for managing inventory, analyzing trends, and processing purchase orders.
        • Adding bank details to the contact through API

          How to add bank-related information to the contact while creating it using API? The account number needs to be encrypted before sending it through API but not sure how to encrypt and get those values. Please guide me in this.
        • average cost display

          Hello there, I'm using the average cost valuation method, and the cost price shown in the Items menu should reflect the latest WAC (Weighted Average Cost). However, it doesn't update automatically. Is there a way to display the current average cost without
        • Apple Mail issues

          Dear Sir or Madam, I am trying to configure my Zoho mail account to Apple Mail. It is not working. It seems to need more information (perhaps a path prefix?) than is shown in your tutorial (<www.zoho.com/mail/help/apple-mac-imap.html>). After plugging
        • Assistance Required for Migrating Data from Odoo Inventory to Zoho Inventory

          Hi Team, I previously used Odoo Inventory to manage my stock and transactions, and I’ve now moved to Zoho Inventory. I’d like to migrate my data from Odoo—including product details, stock, purchase, and vendor information- into Zoho Inventory for continuity
        • I need my entire Zoho Account (mail/organization) deleted!

          Hey! I used zoho for my email aaron@aaronglass.me with domain forwarding/mx all that. I got rid of the mx info on my godaddy account and still Google won't let me sign up with my aaron@aaronglass.me email. (I'm moving to Google for business) SO! I was
        • Next Page